@vtxmacro/cli 2026.10.61 → 2026.10.63

package/bin/vtx.js

@@ -122,7 +122,7 @@ var init_routing = __esm({
 var agent_cli_release_default;
 var init_agent_cli_release = __esm({
   "agent-cli-release.json"() {
-    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.61", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
+    agent_cli_release_default = { package_name: "@vtxmacro/cli", package_version: "2026.10.63", codex_package_name: "@openai/codex", codex_version: "0.155.0", copilot_sdk_package_name: "@github/copilot-sdk", copilot_sdk_version: "1.0.0-beta.8", copilot_cli_package_name: "@github/copilot", copilot_cli_version: "1.0.80", deepseek_harness_version: "0.1.1-rc.2", deepseek_harness_packages: ["@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-agent-loop", "@deepseek-ai/dsh-agent-spine-demo", "@deepseek-ai/dsh-anonymous-user-id", "@deepseek-ai/dsh-atomic-write", "@deepseek-ai/dsh-attachment", "@deepseek-ai/dsh-brand", "@deepseek-ai/dsh-code-runtime", "@deepseek-ai/dsh-credentials", "@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-goal", "@deepseek-ai/dsh-goal-round-driver", "@deepseek-ai/dsh-home-paths", "@deepseek-ai/dsh-invariants", "@deepseek-ai/dsh-jobs", "@deepseek-ai/dsh-jobs-local", "@deepseek-ai/dsh-launch-environment", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-llm-deepseek", "@deepseek-ai/dsh-llm-retry", "@deepseek-ai/dsh-output-retention", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-scope", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-session-checkpoint-policy", "@deepseek-ai/dsh-session-persistence", "@deepseek-ai/dsh-session-persistence-jsonl", "@deepseek-ai/dsh-session-projection", "@deepseek-ai/dsh-session-title", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-shell", "@deepseek-ai/dsh-shell-env", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt", "@deepseek-ai/dsh-timeout", "@deepseek-ai/dsh-tool-bash", "@deepseek-ai/dsh-tool-goal", "@deepseek-ai/dsh-tool-jobs", "@deepseek-ai/dsh-tool-skill", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-user-approval"], deepseek_cordis_package_name: "@deepseek-ai/cordis", deepseek_cordis_version: "4.0.1", deepseek_support_packages: { "@deepseek-ai/cordis-plugin-timer": "1.1.3" }, platforms: { "linux-x64": { package_name: "@openai/codex-linux-x64", target: "x86_64-unknown-linux-musl", binary_name: "codex", sha256: "660e159a49e823ac8e5986cb238f73158ce4b957d40d9292f8de90862644b501" }, "win32-x64": { package_name: "@openai/codex-win32-x64", target: "x86_64-pc-windows-msvc", binary_name: "codex.exe", sha256: "e4c11374bd9de8ad5c3b7617fd4654bb7839901edb0863f9930666863c7a021b" } }, pi_coding_agent_package_name: "@earendil-works/pi-coding-agent", pi_ai_package_name: "@earendil-works/pi-ai", pi_version: "0.85.1", pi_support_packages: ["@earendil-works/pi-agent-core", "@earendil-works/pi-telemetry", "@earendil-works/pi-tui", "@earendil-works/chord"], grok_version: "1.0.30", grok_platforms: { "linux-x64": { package_name: "@xai-official/grok-linux-x64", binary_name: "grok", sha256: "504dd6546ab991b75d36698242875ce461489cd1f8cd84285873cb55bd5c7d54" }, "win32-x64": { package_name: "@xai-official/grok-win32-x64", binary_name: "grok.exe", sha256: "48736d1a4342a801ea26d0ecde4c516b653f791399065adaa55973f83abd8867" } } };
   }
 });
 
@@ -917,7 +917,8 @@ var init_runtime_policy_generated = __esm({
             request_bounds: {
               min_agent_instruction_retry_after_ms: 25,
               max_fallback_error_length: 500,
-              max_trade_sync_executions: 64
+              max_trade_sync_executions: 64,
+              max_user_cancel_order_ids: 64
             },
             pending_protection_recovery: {
               retry_exponent_max: 30
@@ -22631,7 +22632,8 @@ var init_runtime_policy_generated2 = __esm({
             request_bounds: {
               min_agent_instruction_retry_after_ms: 25,
               max_fallback_error_length: 500,
-              max_trade_sync_executions: 64
+              max_trade_sync_executions: 64,
+              max_user_cancel_order_ids: 64
             },
             pending_protection_recovery: {
               retry_exponent_max: 30
@@ -26683,6 +26685,9 @@ async function refreshInferenceCredential(options) {
       timeoutMs: options.requestTimeoutMs
     }
   );
+  if (tokens.refreshToken === credential.refresh_token) {
+    return { accessToken: tokens.accessToken, expiresIn: tokens.expiresIn, credential, accountKey: accountKey2 };
+  }
   const rotated = validateInferenceHostCredential({
     ...credential,
     refresh_token: tokens.refreshToken,
@@ -59986,6 +59991,7 @@ var init_client_exchange_mutation_begin = __esm({
       ...payload.protectiveActionId ? { protective_action_id: payload.protectiveActionId } : {},
       ...payload.signedPayload ? { signed_payload: payload.signedPayload } : {},
       ...payload.safetyClose ? { safety_close: payload.safetyClose } : {},
+      ...payload.userCancel != null ? { user_cancel: payload.userCancel } : {},
       attempt_evidence: payload.attemptEvidence ? {
         requested_exchange_size: payload.attemptEvidence.requestedExchangeSize ?? null,
         submitted_limit_price: payload.attemptEvidence.submittedLimitPrice ?? null,
@@ -61190,187 +61196,6 @@ var init_billing = __esm({
   }
 });
 
-// lib/api/market-data.ts
-async function getRecentCandles(limit, exchange = "kraken", symbol2 = "PI_XBTUSD", timeframe = "1m", signal) {
-  return (await readRecentCandles(limit, exchange, symbol2, timeframe, signal, null)).candles;
-}
-async function getRecentCandlesForProfile(profileId, limit, exchange, symbol2, timeframe, signal) {
-  return readRecentCandles(limit, exchange, symbol2, timeframe, signal, profileId);
-}
-async function getLiveTicker(symbol2 = "PI_XBTUSD", exchange = "kraken", signal) {
-  const requestKey = `live-ticker:${symbol2}:${exchange}`;
-  return shareClientGetRequest(requestKey, async (requestSignal) => {
-    const requestUrl2 = `${getApiUrl()}/ticker/live?symbol=${encodeURIComponent(symbol2)}&exchange=${encodeURIComponent(exchange)}`;
-    const trace = startRuntimeNetworkDebugTrace({
-      kind: "runtime",
-      label: "market_data_api:ticker_live",
-      method: "GET",
-      url: requestUrl2,
-      note: `symbol=${symbol2} exchange=${exchange}`
-    });
-    let response = null;
-    try {
-      response = await apiFetch(requestUrl2, { cache: "no-store", signal: requestSignal });
-      if (!response.ok) {
-        const error48 = await buildMarketDataFetchError(response, "live ticker", "/ticker/live");
-        trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
-        trace.completeError(error48, response.status);
-        throw error48;
-      }
-      trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
-      const payload = await response.json();
-      trace.completeSuccess(response.status);
-      return payload;
-    } catch (error48) {
-      if (response && !response.ok) throw error48;
-      if (response && !isAbortLikeError(error48)) {
-        const failure2 = buildMarketDataResponseBodyError(error48, "live ticker", response, "/ticker/live");
-        trace.completeError(failure2, response.status);
-        throw failure2;
-      }
-      trace.completeError(error48, response?.status ?? null);
-      if (isAbortLikeError(error48)) throw error48;
-      throw buildMarketDataNetworkError(error48, "live ticker", "/ticker/live");
-    }
-  }, { signal });
-}
-async function getExecutionAssetMetadata(exchange, symbol2, options) {
-  const params = new URLSearchParams();
-  if (options?.forceCatalogRefresh) params.set("force_catalog_refresh", "true");
-  if (options?.publicRequestPriority) params.set("public_request_priority", options.publicRequestPriority);
-  const query = params.size > 0 ? `?${params.toString()}` : "";
-  const url2 = `${getApiUrl()}/trading/execution-metadata/${encodeURIComponent(exchange)}/${encodeURIComponent(symbol2)}${query}`;
-  const response = await apiFetch(url2, {
-    headers: getProfileHeaders({}, options?.profileId),
-    credentials: "include",
-    cache: "no-store",
-    signal: options?.signal
-  });
-  if (!response.ok) {
-    const summary = `Failed to fetch execution asset metadata: ${response.status} ${response.statusText}`;
-    const code = await response.clone().json().then((body) => typeof body?.detail?.code === "string" ? body.detail.code : null).catch(() => null);
-    const detail = await getErrorMessageFromResponse(response, summary);
-    throw new ExecutionAssetMetadataRequestError(
-      detail === summary ? summary : `${summary}: ${detail}`,
-      response.status,
-      parseRetryAfterMs2(response.headers.get("Retry-After")),
-      code
-    );
-  }
-  return response.json();
-}
-var CANDLES_MISSING_HEADER, CandlesMissingRangeError, parseCandlesMissing, readRecentCandles, ExecutionAssetMetadataRequestError, CLIENT_EXECUTION_METADATA_DEVICE_READ, executionMetadataNeedsDeviceRead;
-var init_market_data = __esm({
-  "lib/api/market-data.ts"() {
-    "use strict";
-    init_define_VTX_CLAUDE_CODE_POLICY();
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    init_abort();
-    init_runtime_redaction();
-    init_network_debug();
-    init_shared();
-    init_constants();
-    CANDLES_MISSING_HEADER = "X-VTX-Candles-Missing";
-    CandlesMissingRangeError = class extends Error {
-    };
-    parseCandlesMissing = (value) => {
-      if (value === null || value.trim() === "") return null;
-      const [startText, endText, ...extra] = value.split(",");
-      const startMs = Number(startText?.trim());
-      const endMs = Number(endText?.trim());
-      if (extra.length > 0 || !Number.isSafeInteger(startMs) || !Number.isSafeInteger(endMs) || startMs > endMs) {
-        throw new CandlesMissingRangeError(`The candle answer named an unreadable missing range: ${sanitizeRuntimeDiagnosticValue(value)}`);
-      }
-      return { startMs, endMs };
-    };
-    readRecentCandles = async (limit, exchange, symbol2, timeframe, signal, profileId) => {
-      const params = new URLSearchParams({ limit: limit.toString(), exchange, symbol: symbol2, timeframe });
-      const requestUrl2 = `${getApiUrl()}/candles/recent?${params.toString()}`;
-      const forProfile = profileId === null ? {} : { credentials: "include", headers: getProfileHeaders({}, profileId) };
-      return shareClientGetRequest(`recent-candles:${profileId ?? "none"}:${params.toString()}`, async (requestSignal) => {
-        const trace = startRuntimeNetworkDebugTrace({
-          kind: "runtime",
-          label: "market_data_api:candles_recent",
-          method: "GET",
-          url: requestUrl2,
-          note: `symbol=${symbol2} exchange=${exchange} timeframe=${timeframe} limit=${limit}`
-        });
-        let response = null;
-        try {
-          response = await apiFetch(requestUrl2, {
-            ...forProfile,
-            cache: "no-store",
-            signal: requestSignal
-          });
-          if (!response.ok) {
-            const error48 = await buildMarketDataFetchError(response, "recent candles", "/candles/recent");
-            trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
-            trace.completeError(error48, response.status);
-            console.error(`[API] ${error48.message} URL: ${response.url}`);
-            throw error48;
-          }
-          trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
-          const missing2 = parseCandlesMissing(response.headers.get(CANDLES_MISSING_HEADER));
-          const payload = await response.json();
-          trace.completeSuccess(response.status);
-          return { candles: payload, missing: missing2 };
-        } catch (error48) {
-          if (response && !response.ok) throw error48;
-          if (response && error48 instanceof CandlesMissingRangeError) {
-            trace.completeError(error48, response.status);
-            throw error48;
-          }
-          if (response && !isAbortLikeError(error48)) {
-            const failure2 = buildMarketDataResponseBodyError(error48, "recent candles", response, "/candles/recent");
-            trace.completeError(failure2, response.status);
-            throw failure2;
-          }
-          trace.completeError(error48, response?.status ?? null);
-          if (isAbortLikeError(error48)) throw error48;
-          throw buildMarketDataNetworkError(error48, "recent candles", "/candles/recent");
-        }
-      }, { signal, shareAbortScoped: true });
-    };
-    ExecutionAssetMetadataRequestError = class extends Error {
-      constructor(message, status, retryAfterMs, code = null) {
-        super(message);
-        this.status = status;
-        this.retryAfterMs = retryAfterMs;
-        this.code = code;
-        this.name = "ExecutionAssetMetadataRequestError";
-      }
-    };
-    CLIENT_EXECUTION_METADATA_DEVICE_READ = "client_execution_metadata_device_read";
-    executionMetadataNeedsDeviceRead = (error48) => error48 instanceof ExecutionAssetMetadataRequestError && error48.code === CLIENT_EXECUTION_METADATA_DEVICE_READ;
-  }
-});
-
-// lib/api/screener.ts
-var init_screener = __esm({
-  "lib/api/screener.ts"() {
-    "use strict";
-    init_define_VTX_CLAUDE_CODE_POLICY();
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    init_shared();
-  }
-});
-
-// lib/api/client-host-commands.ts
-var init_client_host_commands = __esm({
-  "lib/api/client-host-commands.ts"() {
-    "use strict";
-    init_define_VTX_CLAUDE_CODE_POLICY();
-    init_define_VTX_EXO_POLICY();
-    init_define_VTX_GROK_POLICY();
-    init_define_VTX_PI_MODEL_POLICY();
-    init_shared();
-  }
-});
-
 // lib/runtime/server-runtime-lease.ts
 var CLIENT_RUNTIME_SERVER_LEASE_STORAGE_KEY, normalizeProfileId, normalizeLeaseGeneration, parseLeaseRecord, readPersistedLeaseMap, writePersistedLeaseMap, isLeaseExpired, runtimeLeaseHeaders, persistedRuntimeLeaseHeaders, getPersistedClientRuntimeServerLease, persistExistingClientRuntimeServerLease, persistClientRuntimeServerLease, clearPersistedClientRuntimeServerLease;
 var init_server_runtime_lease = __esm({
@@ -61597,6 +61422,223 @@ var init_server_runtime_lease = __esm({
   }
 });
 
+// lib/api/market-data.ts
+async function getRecentCandles(limit, exchange = "kraken", symbol2 = "PI_XBTUSD", timeframe = "1m", signal) {
+  return (await readRecentCandles(limit, exchange, symbol2, timeframe, signal, null)).candles;
+}
+async function getRecentCandlesForProfile(profileId, limit, exchange, symbol2, timeframe, signal) {
+  return readRecentCandles(limit, exchange, symbol2, timeframe, signal, profileId);
+}
+async function getLiveTicker(symbol2 = "PI_XBTUSD", exchange = "kraken", signal) {
+  const requestKey = `live-ticker:${symbol2}:${exchange}`;
+  return shareClientGetRequest(requestKey, async (requestSignal) => {
+    const requestUrl2 = `${getApiUrl()}/ticker/live?symbol=${encodeURIComponent(symbol2)}&exchange=${encodeURIComponent(exchange)}`;
+    const trace = startRuntimeNetworkDebugTrace({
+      kind: "runtime",
+      label: "market_data_api:ticker_live",
+      method: "GET",
+      url: requestUrl2,
+      note: `symbol=${symbol2} exchange=${exchange}`
+    });
+    let response = null;
+    try {
+      response = await apiFetch(requestUrl2, { cache: "no-store", signal: requestSignal });
+      if (!response.ok) {
+        const error48 = await buildMarketDataFetchError(response, "live ticker", "/ticker/live");
+        trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
+        trace.completeError(error48, response.status);
+        throw error48;
+      }
+      trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
+      const payload = await response.json();
+      trace.completeSuccess(response.status);
+      return payload;
+    } catch (error48) {
+      if (response && !response.ok) throw error48;
+      if (response && !isAbortLikeError(error48)) {
+        const failure2 = buildMarketDataResponseBodyError(error48, "live ticker", response, "/ticker/live");
+        trace.completeError(failure2, response.status);
+        throw failure2;
+      }
+      trace.completeError(error48, response?.status ?? null);
+      if (isAbortLikeError(error48)) throw error48;
+      throw buildMarketDataNetworkError(error48, "live ticker", "/ticker/live");
+    }
+  }, { signal });
+}
+async function getExecutionAssetMetadata(exchange, symbol2, options) {
+  const params = new URLSearchParams();
+  if (options?.forceCatalogRefresh) params.set("force_catalog_refresh", "true");
+  if (options?.publicRequestPriority) params.set("public_request_priority", options.publicRequestPriority);
+  const query = params.size > 0 ? `?${params.toString()}` : "";
+  const url2 = `${getApiUrl()}/trading/execution-metadata/${encodeURIComponent(exchange)}/${encodeURIComponent(symbol2)}${query}`;
+  const response = await apiFetch(url2, {
+    // The bot's runtime reads it on its lease once the host's session ended.
+    headers: getProfileHeaders(options?.profileId != null ? persistedRuntimeLeaseHeaders(options.profileId) : {}, options?.profileId),
+    credentials: "include",
+    cache: "no-store",
+    signal: options?.signal
+  });
+  if (!response.ok) {
+    const summary = `Failed to fetch execution asset metadata: ${response.status} ${response.statusText}`;
+    const code = await response.clone().json().then((body) => typeof body?.detail?.code === "string" ? body.detail.code : null).catch(() => null);
+    const detail = await getErrorMessageFromResponse(response, summary);
+    throw new ExecutionAssetMetadataRequestError(
+      detail === summary ? summary : `${summary}: ${detail}`,
+      response.status,
+      parseRetryAfterMs2(response.headers.get("Retry-After")),
+      code
+    );
+  }
+  return response.json();
+}
+var CANDLES_MISSING_HEADER, CandlesMissingRangeError, parseCandlesMissing, readRecentCandles, ExecutionAssetMetadataRequestError, CLIENT_EXECUTION_METADATA_DEVICE_READ, executionMetadataNeedsDeviceRead;
+var init_market_data = __esm({
+  "lib/api/market-data.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_abort();
+    init_runtime_redaction();
+    init_network_debug();
+    init_server_runtime_lease();
+    init_shared();
+    init_constants();
+    CANDLES_MISSING_HEADER = "X-VTX-Candles-Missing";
+    CandlesMissingRangeError = class extends Error {
+    };
+    parseCandlesMissing = (value) => {
+      if (value === null || value.trim() === "") return null;
+      const [startText, endText, ...extra] = value.split(",");
+      const startMs = Number(startText?.trim());
+      const endMs = Number(endText?.trim());
+      if (extra.length > 0 || !Number.isSafeInteger(startMs) || !Number.isSafeInteger(endMs) || startMs > endMs) {
+        throw new CandlesMissingRangeError(`The candle answer named an unreadable missing range: ${sanitizeRuntimeDiagnosticValue(value)}`);
+      }
+      return { startMs, endMs };
+    };
+    readRecentCandles = async (limit, exchange, symbol2, timeframe, signal, profileId) => {
+      const params = new URLSearchParams({ limit: limit.toString(), exchange, symbol: symbol2, timeframe });
+      const requestUrl2 = `${getApiUrl()}/candles/recent?${params.toString()}`;
+      const forProfile = profileId === null ? {} : { credentials: "include", headers: getProfileHeaders(persistedRuntimeLeaseHeaders(profileId), profileId) };
+      return shareClientGetRequest(`recent-candles:${profileId ?? "none"}:${params.toString()}`, async (requestSignal) => {
+        const trace = startRuntimeNetworkDebugTrace({
+          kind: "runtime",
+          label: "market_data_api:candles_recent",
+          method: "GET",
+          url: requestUrl2,
+          note: `symbol=${symbol2} exchange=${exchange} timeframe=${timeframe} limit=${limit}`
+        });
+        let response = null;
+        try {
+          response = await apiFetch(requestUrl2, {
+            ...forProfile,
+            cache: "no-store",
+            signal: requestSignal
+          });
+          if (!response.ok) {
+            const error48 = await buildMarketDataFetchError(response, "recent candles", "/candles/recent");
+            trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
+            trace.completeError(error48, response.status);
+            console.error(`[API] ${error48.message} URL: ${response.url}`);
+            throw error48;
+          }
+          trace.attachResponse({ status: response.status, statusText: response.statusText, url: response.url });
+          const missing2 = parseCandlesMissing(response.headers.get(CANDLES_MISSING_HEADER));
+          const payload = await response.json();
+          trace.completeSuccess(response.status);
+          return { candles: payload, missing: missing2 };
+        } catch (error48) {
+          if (response && !response.ok) throw error48;
+          if (response && error48 instanceof CandlesMissingRangeError) {
+            trace.completeError(error48, response.status);
+            throw error48;
+          }
+          if (response && !isAbortLikeError(error48)) {
+            const failure2 = buildMarketDataResponseBodyError(error48, "recent candles", response, "/candles/recent");
+            trace.completeError(failure2, response.status);
+            throw failure2;
+          }
+          trace.completeError(error48, response?.status ?? null);
+          if (isAbortLikeError(error48)) throw error48;
+          throw buildMarketDataNetworkError(error48, "recent candles", "/candles/recent");
+        }
+      }, { signal, shareAbortScoped: true });
+    };
+    ExecutionAssetMetadataRequestError = class extends Error {
+      constructor(message, status, retryAfterMs, code = null) {
+        super(message);
+        this.status = status;
+        this.retryAfterMs = retryAfterMs;
+        this.code = code;
+        this.name = "ExecutionAssetMetadataRequestError";
+      }
+    };
+    CLIENT_EXECUTION_METADATA_DEVICE_READ = "client_execution_metadata_device_read";
+    executionMetadataNeedsDeviceRead = (error48) => error48 instanceof ExecutionAssetMetadataRequestError && error48.code === CLIENT_EXECUTION_METADATA_DEVICE_READ;
+  }
+});
+
+// lib/api/screener.ts
+var init_screener = __esm({
+  "lib/api/screener.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_shared();
+  }
+});
+
+// lib/api/client-host-commands.ts
+var init_client_host_commands = __esm({
+  "lib/api/client-host-commands.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_shared();
+  }
+});
+
+// lib/api/client-user-cancels.ts
+async function readClientUserCancels(profileId, orderIds, signal) {
+  if (orderIds.length === 0) return /* @__PURE__ */ new Set();
+  const numericProfileId = Number(profileId);
+  const body = { order_ids: [...orderIds] };
+  const response = await apiFetch(`${getApiUrl()}/trading/ai/runtime/protection/user-cancels`, {
+    method: "POST",
+    credentials: "include",
+    headers: getProfileHeaders(
+      { "Content-Type": "application/json" },
+      Number.isSafeInteger(numericProfileId) ? numericProfileId : void 0
+    ),
+    body: JSON.stringify(body),
+    signal
+  });
+  if (!response.ok) {
+    const detail = await response.clone().json().then((answer2) => answer2?.detail, () => null);
+    if (isMissingApiRoute({ status: Number(response.status), detail })) return /* @__PURE__ */ new Set();
+    throw new Error(await getErrorMessageFromResponse(response, "Failed to read the user cancels"));
+  }
+  const answer = await response.json();
+  return new Set(answer.cancels.map((row) => String(row.order_id)));
+}
+var init_client_user_cancels = __esm({
+  "lib/api/client-user-cancels.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_shared();
+  }
+});
+
 // lib/api/logout.ts
 var init_logout = __esm({
   "lib/api/logout.ts"() {
@@ -61617,7 +61659,8 @@ async function getLLMConfig(cookie, profileId, signal) {
   const key = clientGetRequestKey("llm-config", effectiveProfileId);
   return shareClientGetRequest(key, async (requestSignal) => {
     const headers = getProfileHeaders({
-      "Content-Type": "application/json"
+      "Content-Type": "application/json",
+      ...!cookie && profileId != null ? persistedRuntimeLeaseHeaders(profileId) : {}
     }, profileId);
     const held = cookie ? null : heldPayloads.get(key) ?? null;
     if (cookie) headers.Cookie = cookie;
@@ -61659,6 +61702,7 @@ var init_llm_config = __esm({
     init_define_VTX_PI_MODEL_POLICY();
     init_constants();
     init_shared();
+    init_server_runtime_lease();
     REVISION_HEADER = "X-VTX-Config-Revision";
     heldPayloads = /* @__PURE__ */ new Map();
   }
@@ -62006,6 +62050,48 @@ var init_client_protective_evidence = __esm({
   }
 });
 
+// lib/api/provider-relays.ts
+function relayNativeProviderRequest(provider, apiKey, payload, options = {}) {
+  return apiFetch(`${getApiUrl()}/llm/native-provider-relay`, {
+    method: "POST",
+    credentials: "include",
+    headers: relayHeaders(options.profileId),
+    body: JSON.stringify({
+      provider,
+      api_key: apiKey,
+      payload,
+      ...options.planId ? { plan_id: options.planId } : {},
+      ...options.traceId ? { trace_id: options.traceId } : {}
+    }),
+    signal: options.signal
+  });
+}
+function relayGoogleEgressRequest(model, apiKey, payload, options) {
+  return apiFetch(`${getApiUrl()}/llm/google-egress-relay`, {
+    method: "POST",
+    credentials: "include",
+    headers: relayHeaders(options.profileId),
+    body: JSON.stringify({ model, api_key: apiKey, payload, timeout_seconds: options.timeoutSeconds }),
+    signal: options.signal
+  });
+}
+var relayHeaders;
+var init_provider_relays = __esm({
+  "lib/api/provider-relays.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_server_runtime_lease();
+    init_shared();
+    relayHeaders = (profileId) => getProfileHeaders({
+      "Content-Type": "application/json",
+      ...profileId != null ? persistedRuntimeLeaseHeaders(profileId) : {}
+    }, profileId);
+  }
+});
+
 // lib/runtime/hyperliquid-account-mode-contract.ts
 function resolveExactHyperliquidAccountMode(userAbstraction, ...dexEvidence) {
   const mode = extractCanonicalHyperliquidAccountMode(userAbstraction);
@@ -62635,7 +62721,7 @@ var init_hyperliquid_max_leverage = __esm({
 });
 
 // lib/candle-timeframes.ts
-var candleTimeframeSeconds, compareCandleTimeframes, sortCandleTimeframes;
+var candleTimeframeSeconds, compareCandleTimeframes, sortCandleTimeframes, candleClosedInSeries;
 var init_candle_timeframes = __esm({
   "lib/candle-timeframes.ts"() {
     "use strict";
@@ -62647,6 +62733,7 @@ var init_candle_timeframes = __esm({
     candleTimeframeSeconds = (timeframe) => Object.prototype.hasOwnProperty.call(CANDLE_TIMEFRAME_SECONDS, timeframe) ? CANDLE_TIMEFRAME_SECONDS[timeframe] : void 0;
     compareCandleTimeframes = (left, right) => (candleTimeframeSeconds(left) ?? Number.MAX_SAFE_INTEGER) - (candleTimeframeSeconds(right) ?? Number.MAX_SAFE_INTEGER);
     sortCandleTimeframes = (timeframes) => [...timeframes].sort(compareCandleTimeframes);
+    candleClosedInSeries = (openTimestamp, newestOpenTimestamp, timeframeSeconds, asOfTimestamp) => openTimestamp < newestOpenTimestamp || openTimestamp + timeframeSeconds <= asOfTimestamp;
   }
 });
 
@@ -65289,7 +65376,8 @@ var init_write_fence = __esm({
         {
           ...pinnedAuthority ? { pinnedAuthority } : {},
           mutationId: durableMutation.mutationId,
-          ...await fields(pinnedAuthority)
+          ...await fields(pinnedAuthority),
+          ...durableMutation.userCancel != null ? { userCancel: durableMutation.userCancel } : {}
         },
         ...fencedMutationAuthorityArgs(durableMutation)
       );
@@ -98594,30 +98682,6 @@ async function reportServerBackupReadiness(profileId, ready, hostId, signal, pow
   }
   return response.json();
 }
-function relayNativeProviderRequest(provider, apiKey, payload, options = {}) {
-  return apiFetch(`${getApiUrl()}/llm/native-provider-relay`, {
-    method: "POST",
-    credentials: "include",
-    headers: getProfileHeaders({ "Content-Type": "application/json" }, options.profileId),
-    body: JSON.stringify({
-      provider,
-      api_key: apiKey,
-      payload,
-      ...options.planId ? { plan_id: options.planId } : {},
-      ...options.traceId ? { trace_id: options.traceId } : {}
-    }),
-    signal: options.signal
-  });
-}
-function relayGoogleEgressRequest(model, apiKey, payload, options) {
-  return apiFetch(`${getApiUrl()}/llm/google-egress-relay`, {
-    method: "POST",
-    credentials: "include",
-    headers: getProfileHeaders({ "Content-Type": "application/json" }, options.profileId),
-    body: JSON.stringify({ model, api_key: apiKey, payload, timeout_seconds: options.timeoutSeconds }),
-    signal: options.signal
-  });
-}
 async function getClientRuntimeSecrets(profileId, options) {
   const params = new URLSearchParams();
   if (options?.activeProvider) {
@@ -100051,6 +100115,8 @@ var init_api2 = __esm({
     init_market_data();
     init_screener();
     init_client_host_commands();
+    init_client_exchange_mutation_begin();
+    init_client_user_cancels();
     init_logout();
     init_llm_config();
     init_llm_config();
@@ -100069,6 +100135,7 @@ var init_api2 = __esm({
     init_client_exchange_reconciliation();
     init_client_protective_evidence();
     init_server_runtime_lease();
+    init_provider_relays();
     clientRuntimeSecretHeaders = (profileId) => {
       const headers = getProfileHeaders({}, profileId);
       const leaseProfileId = profileId ?? getActiveProfileId();
@@ -102199,6 +102266,7 @@ var init_browser_trading = __esm({
           mutationId: mutation.mutationId,
           operationKind: "cancel",
           symbol: input.symbol,
+          userCancel: input.userCancel === true,
           onExchangeOrderDispatched: input.onExchangeOrderDispatched
         }
       });
@@ -104334,7 +104402,9 @@ async function getClientRuntimeExchangeMutation(profileId, mutationId, signal) {
       method: "GET",
       credentials: "include",
       cache: "no-store",
-      headers: getProfileHeaders({}, Number.isSafeInteger(numericProfileId) ? numericProfileId : void 0),
+      // A host's runtime reads on its bot's lease once the host's session ended; the
+      // Node runtime host keeps this read on its protection route (server-host/live-fetch.ts).
+      headers: Number.isSafeInteger(numericProfileId) ? getProfileHeaders(persistedRuntimeLeaseHeaders(numericProfileId), numericProfileId) : getProfileHeaders({}),
       signal
     }
   );
@@ -104352,6 +104422,7 @@ var init_client_exchange_mutations = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_constants();
+    init_server_runtime_lease();
     init_shared();
   }
 });
@@ -105195,7 +105266,8 @@ var init_writes = __esm({
           mutationId,
           ...context.onSettled ? { onSettled: context.onSettled } : {},
           ...context.signal ? { signal: context.signal } : {},
-          ...context.onExchangeOrderDispatched ? { onExchangeOrderDispatched: context.onExchangeOrderDispatched } : {}
+          ...context.onExchangeOrderDispatched ? { onExchangeOrderDispatched: context.onExchangeOrderDispatched } : {},
+          ...context.userCancel != null ? { userCancel: context.userCancel } : {}
         },
         captureTimeoutMs: deps.captureTimeoutMs,
         begin: {
@@ -105783,7 +105855,12 @@ var init_runtime_writes = __esm({
         },
         cancelOrder: async (input) => {
           const name = await listed(input.symbol, input.signal);
-          return cancelResponse(await answering(operationsFor(input).cancelOrder({ ...writeContext2(input), symbol: name, orderId: input.orderId })));
+          return cancelResponse(await answering(operationsFor(input).cancelOrder({
+            ...writeContext2(input),
+            userCancel: input.userCancel === true,
+            symbol: name,
+            orderId: input.orderId
+          })));
         },
         closePosition: async (input) => {
           const name = await listed(input.symbol, input.signal);
@@ -106899,6 +106976,69 @@ var init_bounded_lock = __esm({
   }
 });
 
+// lib/runtime/protective-user-cancels.ts
+var MAX_USER_CANCEL_ORDER_IDS, passUserCancels, readEachUserCancel;
+var init_protective_user_cancels = __esm({
+  "lib/runtime/protective-user-cancels.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_runtime_policy_generated2();
+    MAX_USER_CANCEL_ORDER_IDS = runtime_policy_generated_default2.trading.engine.client_runtime.request_bounds.max_user_cancel_order_ids;
+    passUserCancels = (read, options = {}) => {
+      const maxPerRead = Math.max(1, Math.floor(options.maxPerRead ?? MAX_USER_CANCEL_ORDER_IDS));
+      const answers = /* @__PURE__ */ new Map();
+      const failures = /* @__PURE__ */ new Map();
+      const exchangeOrderId = (orderId) => {
+        const key = String(orderId).trim();
+        return /^[0-9]+$/.test(key) ? key : null;
+      };
+      const readBatch = async (orderIds) => {
+        try {
+          const { cancelled, unread } = await read(orderIds);
+          for (const orderId of orderIds) {
+            if (unread?.has(orderId)) failures.set(orderId, unread.get(orderId));
+            else answers.set(orderId, cancelled.has(orderId));
+          }
+        } catch (error48) {
+          if (options.signal?.aborted) throw error48;
+          for (const orderId of orderIds) failures.set(orderId, error48);
+        }
+      };
+      return {
+        prefetch: async (orderIds) => {
+          const unknown2 = [...new Set(orderIds.map(exchangeOrderId))].filter((orderId) => orderId != null && !answers.has(orderId) && !failures.has(orderId));
+          for (let start = 0; start < unknown2.length; start += maxPerRead) {
+            await readBatch(unknown2.slice(start, start + maxPerRead));
+          }
+        },
+        cancelled: async (orderId) => {
+          const key = exchangeOrderId(orderId);
+          if (key == null) return false;
+          if (!answers.has(key) && !failures.has(key)) await readBatch([key]);
+          if (failures.has(key)) throw failures.get(key);
+          return answers.get(key) === true;
+        }
+      };
+    };
+    readEachUserCancel = (lookup, signal) => async (orderIds) => {
+      const cancelled = /* @__PURE__ */ new Set();
+      const unread = /* @__PURE__ */ new Map();
+      for (const orderId of orderIds) {
+        try {
+          if (await lookup(orderId)) cancelled.add(orderId);
+        } catch (error48) {
+          if (signal?.aborted) throw error48;
+          unread.set(orderId, error48);
+        }
+      }
+      return { cancelled, unread };
+    };
+  }
+});
+
 // lib/runtime/prompt-number-contract.ts
 var finiteNumber2, roundPromptFixed, roundPromptSignificant, roundPromptRelativeVolume, roundPromptNonnegativeUnits;
 var init_prompt_number_contract = __esm({
@@ -108992,16 +109132,19 @@ var init_protective_entry_cover = __esm({
         claims.set(entry, order);
         claimed.add(order);
       };
-      const byShape = (entry, leg) => orders.find((order) => !claimed.has(order) && protectiveLiveShapeMatches({
+      const ended = (order) => input.ended?.has(String(order.oid)) === true;
+      const byShape = (entry, leg) => orders.find((order) => !claimed.has(order) && !ended(order) && protectiveLiveShapeMatches({
         shape: liveProtectiveOrderShape(order),
         symbol: symbol2,
         isLong: entry.group.isLong,
         leg
       }));
-      for (const entry of entries) claim(entry, pageOrderById(orders, knownId(entry)));
+      const placed = (entry) => input.placed?.has(String(entry.leg.orderId)) === true || input.placed?.has(String(knownId(entry))) === true;
+      const own = entries.filter((entry) => !placed(entry));
+      for (const entry of own) claim(entry, pageOrderById(orders, knownId(entry)));
       const named = new Set(claimed);
-      const leaving = new Set(input.groups.filter((group) => group.cleanupRequired === true || entries.some((entry) => entry.group === group && knownId(entry) != null && !claims.has(entry))));
-      const waiting = entries.filter(unbound);
+      const leaving = new Set(input.groups.filter((group) => group.cleanupRequired === true || own.some((entry) => entry.group === group && knownId(entry) != null && !claims.has(entry))));
+      const waiting = own.filter(unbound);
       const unread = (entry) => input.unresolved?.has(String(entry.leg.orderId)) === true;
       const staying = waiting.filter((entry) => !leaving.has(entry.group));
       for (const entry of [...waiting.filter((entry2) => leaving.has(entry2.group)), ...staying.filter(unread), ...staying.filter((entry2) => !unread(entry2))]) {
@@ -109046,18 +109189,18 @@ var init_protective_entry_cover = __esm({
         },
         /**
          * For a lost stop: the stop losses on the page closing the position, other
-         * than the orders a status proved ended (`lost`) and those this pass placed
-         * (`placed`, counted where they were placed), an order no leg names whole;
-         * and, unseen, what the legs this pass could not read may still cover.
+         * than the orders a status proved ended (`ended`), those this pass placed
+         * and those its placed stops stand for (`beside.standsFor`: counted where
+         * they were placed, protective-placed-stops.ts), an order no leg names
+         * whole; and, unseen, what the legs this pass could not read may still cover.
          */
-        lostStopCover: (positionSize, excluded) => {
+        lostStopCover: (positionSize, beside) => {
           const isLong = positionSize > 0;
           const owners = new Map([...claims].map(([entry, order]) => [order, entry]));
-          const placed = (entry) => excluded.placed.has(String(entry.leg.orderId)) || excluded.placed.has(String(knownId(entry)));
-          const onPage = orders.filter((order) => !excluded.lost.has(String(order.oid)) && !excluded.placed.has(String(order.oid)) && String(order.coin).trim().toUpperCase() === symbol2.trim().toUpperCase() && order.reduce_only && order.is_trigger && order.trigger_kind === "sl" && (isLong ? ["a", "sell"] : ["b", "buy"]).includes(String(order.side).trim().toLowerCase())).reduce((total, order) => {
+          const onPage = orders.filter((order) => !ended(order) && input.placed?.has(String(order.oid)) !== true && beside?.standsFor(order) !== true && String(order.coin).trim().toUpperCase() === symbol2.trim().toUpperCase() && order.reduce_only && order.is_trigger && order.trigger_kind === "sl" && (isLong ? ["a", "sell"] : ["b", "buy"]).includes(String(order.side).trim().toLowerCase())).reduce((total, order) => {
             const owner2 = owners.get(order);
             const size = Number(order.sz);
-            return total + (owner2 != null ? placed(owner2) ? 0 : coverOf(owner2) : size > 0 ? size : 0);
+            return total + (owner2 != null ? coverOf(owner2) : size > 0 ? size : 0);
           }, 0);
           const unseen = entries.filter((entry) => entry.leg.kind === "sl" && entry.group.isLong === isLong && !placed(entry) && input.unresolved?.has(String(entry.leg.orderId)) === true).reduce((total, entry) => total + inFlightOf(entry), 0);
           return { onPage, unseen };
@@ -109068,6 +109211,88 @@ var init_protective_entry_cover = __esm({
   }
 });
 
+// lib/runtime/protective-placed-stops.ts
+var passPlacedStops;
+var init_protective_placed_stops = __esm({
+  "lib/runtime/protective-placed-stops.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_protective_entry_cover();
+    init_protective_leg_evidence();
+    init_protective_market_evidence();
+    passPlacedStops = (symbol2) => {
+      const stops = [];
+      const pages = /* @__PURE__ */ new WeakMap();
+      let pagesSeen = 0;
+      const pageOrder = (market) => {
+        if (!pages.has(market)) {
+          pagesSeen += 1;
+          pages.set(market, pagesSeen);
+        }
+        return pages.get(market);
+      };
+      const ofShape = (stop, order) => protectiveLiveShapeMatches({
+        shape: liveProtectiveOrderShape(order),
+        symbol: symbol2,
+        isLong: stop.isLong,
+        leg: stop.leg,
+        requirePositionTpsl: false
+      });
+      return {
+        /** A stop about to be sent, under its client order id: it counts at its size from now on. */
+        add: (leg, isLong) => {
+          const stop = {
+            ids: [String(leg.orderId)],
+            leg,
+            isLong,
+            sentMs: protectiveReadStampMs(),
+            pagesBefore: pagesSeen,
+            counts: true
+          };
+          stops.push(stop);
+          return stop;
+        },
+        /** A stop never sent, or refused: it never counted. */
+        drop: (stop) => {
+          stops.splice(stops.indexOf(stop), 1);
+        },
+        /** Its answer (extractCanonicalHyperliquidOrderStateAcknowledgement): its exchange order id, and whether it filled. */
+        answered: (stop, answer) => {
+          stop.ids.push(answer.orderId);
+          if (answer.state === "fulfilled") stop.counts = false;
+        },
+        /** Their client and exchange order ids (resolveOwnStops `placed`, which leaves them out). */
+        ids: () => new Set(stops.flatMap((stop) => stop.ids)),
+        /**
+         * What they cover beside a lost stop counted on this market, and the page
+         * orders they stand for there, which count nothing beside them
+         * (resolveOwnStops lostStopCover).
+         */
+        count: (market) => {
+          const read = pageOrder(market);
+          const orders = market.orders ?? [];
+          const after = stops.filter((stop) => stop.counts && market.orders != null && read > stop.pagesBefore);
+          const proven = (stop) => !market.viaNode || nodeAnswerProves(market.position.stateTimeMs, { hostMs: stop.sentMs });
+          const taken = /* @__PURE__ */ new Set();
+          for (const stop of [...after.filter((stop2) => !proven(stop2)), ...after.filter(proven)]) {
+            const order = orders.find((candidate) => !taken.has(candidate) && ofShape(stop, candidate));
+            if (order != null) taken.add(order);
+            else if (proven(stop)) stop.counts = false;
+          }
+          const standing = after.filter((stop) => stop.counts);
+          return {
+            size: stops.reduce((total, stop) => total + (stop.counts ? stop.leg.size : 0), 0),
+            standsFor: (order) => standing.some((stop) => ofShape(stop, order))
+          };
+        }
+      };
+    };
+  }
+});
+
 // lib/runtime/protective-oversized-leg.ts
 var OVERSIZED_LEG_GROUP_PREFIX, splitOversizedProtectiveLeg;
 var init_protective_oversized_leg = __esm({
@@ -109401,7 +109626,7 @@ var init_native_position_protection = __esm({
 });
 
 // lib/runtime/native-protection-device.ts
-var NATIVE_PROTECTION_RECORD_VERSION, MAX_PLACE_ATTEMPTS, FILL_PROOF_DEADLINE_MS, owesMove, owingMove, warningKey, moveMade, pricedFrom, followsPosition, pricedOn, nativeProtectionStorage, resolveStorage, setNativeProtectionStorage, recordKey, listNativeProtectionSymbols, isPricedOrAbsent, isMember, isRetracement, isLot, isStandbyAdd, readNativeProtectionRecord, versioned, writeNativeProtectionRecord, NO_FILLS, nativeFillsPageFromUserFills, readPositionAndPage, fillsReader, flatReadOf, orderFillTimes, namedOrderId, NativeOrderNotSentError, withDispatchBoundary, locallyRefused, attempt, notSentRestores, errorText2, actionOf, positionOrderReport, isOpenInDirection2, coverRows, restingOrderIdAt, definitivelyRefused, TRAILING_LOT_FIRED, TRAILING_LOT_POSITION_ENDED, TRAILING_LOT_OTHER_SIDE, lotFillLeftPosition, uncoveredByLots, lotOfAdd, ORDER_ID_PATTERN, lotFillOrderId, TRAILING_LOT_POSITION_UNDECIDED, lotPositionSince, ownLotOrderIds, lotRetracement, lotReport, sendTrailingLot, planNativeFillLot, planNativeStandbyAdd, nameNativeStandbyAdd, dropNativeStandbyAdd, dropNativePendingLot, planNativePendingLot, planNativeOpen, recordEntryChildren, observeMembers, ridesOnOpen, namedOrderReports, UNKNOWN_ORDER_RESPONSE, resolveUnknownOrderIds, cancellingThroughVtx, moveMember, plannedPair, resolveStandbyAdds, withoutExpiredAdds, settleNativeProtectionAfterFill, reconcileNativeProtection;
+var NATIVE_PROTECTION_RECORD_VERSION, MAX_PLACE_ATTEMPTS, FILL_PROOF_DEADLINE_MS, owesMove, owingMove, warningKey, moveMade, pricedFrom, followsPosition, pricedOn, nativeProtectionStorage, resolveStorage, setNativeProtectionStorage, recordKey, listNativeProtectionSymbols, isPricedOrAbsent, isMember, isRetracement, isLot, isStandbyAdd, readNativeProtectionRecord, withoutStoredUserCancels, versioned, writeNativeProtectionRecord, NO_FILLS, nativeFillsPageFromUserFills, readPositionAndPage, fillsReader, flatReadOf, orderFillTimes, namedOrderId, NativeOrderNotSentError, withDispatchBoundary, locallyRefused, attempt, notSentRestores, errorText2, actionOf, positionOrderReport, isOpenInDirection2, coverRows, restingOrderIdAt, definitivelyRefused, TRAILING_LOT_FIRED, TRAILING_LOT_POSITION_ENDED, TRAILING_LOT_OTHER_SIDE, lotFillLeftPosition, uncoveredByLots, lotOfAdd, ORDER_ID_PATTERN, lotFillOrderId, TRAILING_LOT_POSITION_UNDECIDED, lotPositionSince, ownLotOrderIds, lotRetracement, lotReport, sendTrailingLot, planNativeFillLot, planNativeStandbyAdd, nameNativeStandbyAdd, dropNativeStandbyAdd, dropNativePendingLot, planNativePendingLot, planNativeOpen, recordEntryChildren, observeMembers, ridesOnOpen, namedOrderReports, UNKNOWN_ORDER_RESPONSE, resolveUnknownOrderIds, cancellingThroughVtx, endedByUserCancel, moveMember, plannedPair, resolveStandbyAdds, withoutExpiredAdds, settleNativeProtectionAfterFill, reconcileNativeProtection;
 var init_native_protection_device = __esm({
   "lib/runtime/native-protection-device.ts"() {
     "use strict";
@@ -109445,7 +109670,7 @@ var init_native_protection_device = __esm({
       if (position?.entryPrice == null) return members;
       const priced = pricedFrom({ size: position.size, entryPrice: position.entryPrice });
       const earlier = new Set(startedWith.map((member) => member.clientOrderId));
-      return members.map((member) => member.priced != null || earlier.has(member.clientOrderId) || owesMove(member) || member.pendingModify || member.plannedAfterMs != null || member.retiredReason || member.userCancelledOrderId != null ? member : { ...member, priced });
+      return members.map((member) => member.priced != null || earlier.has(member.clientOrderId) || owesMove(member) || member.pendingModify || member.plannedAfterMs != null || member.retiredReason ? member : { ...member, priced });
     };
     nativeProtectionStorage = null;
     resolveStorage = () => nativeProtectionStorage ?? browserRuntimeStateStorage();
@@ -109495,7 +109720,14 @@ var init_native_protection_device = __esm({
       if (parsed?.version !== NATIVE_PROTECTION_RECORD_VERSION && parsed?.version !== NATIVE_PROTECTION_RECORD_WITH_LOTS_VERSION || parsed.profileId !== profileId || parsed.symbol !== symbol2 || typeof parsed.walletAddress !== "string" || typeof parsed.isLong !== "boolean" || parsed.phase !== "entry_pending" && parsed.phase !== "active" || typeof parsed.entryMutationId !== "string" || typeof parsed.entryClientOrderId !== "string" || typeof parsed.createdAtMs !== "number" || !Array.isArray(parsed.members) || !parsed.members.every(isMember) || parsed.lots !== void 0 && (parsed.version !== NATIVE_PROTECTION_RECORD_WITH_LOTS_VERSION || !Array.isArray(parsed.lots) || !parsed.lots.every(isLot)) || parsed.standby !== void 0 && (!Array.isArray(parsed.standby) || !parsed.standby.every(isStandbyAdd)) || parsed.positionOrderId !== void 0 && typeof parsed.positionOrderId !== "string") {
         throw new Error("Stored native protection record is invalid.");
       }
-      return parsed;
+      return withoutStoredUserCancels(parsed);
+    };
+    withoutStoredUserCancels = (record6) => {
+      const unmarked = (entry) => {
+        const { userCancelledOrderId: _stored, ...rest } = entry;
+        return rest;
+      };
+      return { ...record6, members: record6.members.map(unmarked), ...record6.lots ? { lots: record6.lots.map(unmarked) } : {} };
     };
     versioned = (record6) => {
       const { lots, ...rest } = record6;
@@ -109942,13 +110174,14 @@ var init_native_protection_device = __esm({
       }
       return { ...record6, members };
     };
-    cancellingThroughVtx = async (io, orderId) => {
+    cancellingThroughVtx = async (io, orderId) => await endedByUserCancel(io, orderId) !== false;
+    endedByUserCancel = async (io, orderId) => {
       if (!io.userCancelledOrder) return false;
       try {
         return await io.userCancelledOrder(orderId);
       } catch (error48) {
         if (io.endsPass?.(error48)) throw error48;
-        return true;
+        return null;
       }
     };
     moveMember = async (args) => {
@@ -110155,7 +110388,7 @@ var init_native_protection_device = __esm({
         const afterMs = boundary.addFillMs ?? 0;
         record6 = {
           ...record6,
-          members: record6.members.map((member) => member.retiredReason || member.userCancelledOrderId != null || member.plannedAfterMs != null ? member : owingMove(member, afterMs))
+          members: record6.members.map((member) => member.retiredReason || member.plannedAfterMs != null ? member : owingMove(member, afterMs))
         };
       }
       if (boundary.undecided) {
@@ -110231,7 +110464,7 @@ var init_native_protection_device = __esm({
         if (step.action === "place_trailing") continue;
         const index = members.findIndex((member) => member.kind === step.kind);
         const existing = index >= 0 ? members[index] : null;
-        if (existing?.userCancelledOrderId != null || existing?.retiredReason) continue;
+        if (existing?.retiredReason) continue;
         if (existing?.pendingModify) continue;
         const clientOrderId = clientOrderIdForMutation(io.newMutationId());
         if (step.action === "modify") {
@@ -110403,7 +110636,7 @@ var init_native_protection_device = __esm({
         lotIndex = lots.length - 1;
       }
       const journaledLot = lotIndex >= 0 ? lots[lotIndex] : null;
-      if (journaledLot && journaledLot.mutationId == null && !journaledLot.retiredReason && journaledLot.userCancelledOrderId == null && io.placeTrailingLot) {
+      if (journaledLot && journaledLot.mutationId == null && !journaledLot.retiredReason && io.placeTrailingLot) {
         const size = journaledLot.size || fillLotSize;
         const retracement = lotRetracement(input.settings, size, input.sizeDecimals);
         if (retracement) {
@@ -110502,6 +110735,10 @@ var init_native_protection_device = __esm({
         ...entry,
         member: entry.row ? { ...entry.member, placedAtMs: entry.row.timestamp || entry.member.placedAtMs } : entry.member
       }));
+      await io.prefetchUserCancels?.([
+        ...observations.filter((entry) => entry.row == null && !entry.member.retiredReason && !entry.member.pendingModify).map((entry) => entry.member.orderId),
+        ...(record6.lots ?? []).filter((lot) => !lot.retiredReason && !page.some((order) => order.oid === lot.orderId)).map((lot) => lot.orderId)
+      ].filter((orderId) => orderId != null));
       const members = [];
       let anyResting = false;
       const positionOpen = isOpenInDirection2(position.size, record6.isLong);
@@ -110525,7 +110762,7 @@ var init_native_protection_device = __esm({
       const moveTargets = /* @__PURE__ */ new Map();
       if (movable && position.entryPrice != null && record6.members.some((member) => owesMove(member) || follows(member))) {
         const restingTrigger = (kind) => {
-          const observed = observations.find((entry) => entry.member.kind === kind && entry.row != null && !entry.member.retiredReason && entry.member.userCancelledOrderId == null);
+          const observed = observations.find((entry) => entry.member.kind === kind && entry.row != null && !entry.member.retiredReason);
           return observed?.row?.trigger_px != null ? String(observed.row.trigger_px) : null;
         };
         for (const step of nativeAfterFillActions({
@@ -110713,7 +110950,7 @@ var init_native_protection_device = __esm({
             members.push(moveMade(member));
             continue;
           }
-          if ((owesMove(member) || follows(member)) && movable && !member.retiredReason && member.userCancelledOrderId == null && !member.pendingModify && nativePlacementGate({
+          if ((owesMove(member) || follows(member)) && movable && !member.retiredReason && !member.pendingModify && nativePlacementGate({
             eventMs: Math.max(owesMove(member) ? member.pendingMove?.afterMs ?? 0 : 0, member.placedAtMs ?? 0),
             position: position.size,
             positionStateMs: stateMs,
@@ -110752,11 +110989,11 @@ var init_native_protection_device = __esm({
           }
           anyResting = true;
           members.push(
-            movable && priceNow && member.priced == null && !owesMove(member) && !member.pendingModify && !member.retiredReason && member.userCancelledOrderId == null ? { ...member, priced: priceNow } : member
+            movable && priceNow && member.priced == null && !owesMove(member) && !member.pendingModify && !member.retiredReason ? { ...member, priced: priceNow } : member
           );
           continue;
         }
-        if (member.retiredReason || member.userCancelledOrderId != null) {
+        if (member.retiredReason) {
           members.push(member);
           continue;
         }
@@ -110765,20 +111002,11 @@ var init_native_protection_device = __esm({
           members.push(member);
           continue;
         }
-        if (member.orderId != null && io.userCancelledOrder) {
-          let cancelledByUser;
-          try {
-            cancelledByUser = await io.userCancelledOrder(member.orderId);
-          } catch (error48) {
-            if (io.endsPass?.(error48)) throw error48;
-            anyResting = true;
-            members.push(member);
-            continue;
-          }
-          if (cancelledByUser) {
-            members.push({ ...member, userCancelledOrderId: member.orderId });
-            continue;
-          }
+        const memberUserCancel = member.orderId == null ? false : await endedByUserCancel(io, member.orderId);
+        if (memberUserCancel !== false) {
+          if (memberUserCancel == null) anyResting = true;
+          members.push(memberUserCancel ? { ...member, retiredReason: CANCELLED_BY_USER } : member);
+          continue;
         }
         if (member.plannedAfterMs != null) {
           if (!kindEnabled(member)) continue;
@@ -110971,7 +111199,7 @@ var init_native_protection_device = __esm({
         let lot = prior;
         const restingRow = lot.orderId == null ? null : page.find((order) => order.oid === lot.orderId) ?? null;
         const otherSideUnnamed = lot.retiredReason === TRAILING_LOT_OTHER_SIDE && lot.mutationId != null && lot.orderId == null;
-        if ((lot.retiredReason || lot.userCancelledOrderId != null) && !otherSideUnnamed && !(restingRow && readListedProtectiveRow({ triggerCondition: restingRow.trigger_condition }) === "resting")) {
+        if (lot.retiredReason && !otherSideUnnamed && !(restingRow && readListedProtectiveRow({ triggerCondition: restingRow.trigger_condition }) === "resting")) {
           lots.push(lot);
           continue;
         }
@@ -111111,7 +111339,7 @@ var init_native_protection_device = __esm({
           lots.push(lot);
           continue;
         }
-        if (lot.retiredReason || lot.userCancelledOrderId != null) {
+        if (lot.retiredReason) {
           lots.push(lot);
           continue;
         }
@@ -111135,6 +111363,12 @@ var init_native_protection_device = __esm({
           }
           continue;
         }
+        const lotUserCancel = await endedByUserCancel(io, lotOrderId);
+        if (lotUserCancel !== false) {
+          if (lotUserCancel == null) anyResting = true;
+          lots.push(lotUserCancel ? { ...lot, retiredReason: CANCELLED_BY_USER } : lot);
+          continue;
+        }
         const evidence2 = await io.readOrderStatus(lotOrderId);
         const end = classifyNativeOrderEnd({
           orderStatus: evidence2.responseValid ? String(evidence2.orderStatus ?? "") : "",
@@ -111195,7 +111429,7 @@ var init_native_protection_device = __esm({
 });
 
 // lib/runtime/runtime-execution.ts
-var clientProtectiveMutationAuthority, executionReadPriority, serverEntryLeverageAlreadyHeld, createRuntimeId, _extractFilledSize, firstMemberAcknowledgement, _extractOrderId, _toExecutionMetadata, _extractClientMutationId, _stableMutationIdentity, trailingStopMemory, protectiveGroupMemory, protectiveGroupReadFailures, windowHandoffCleanupAttempts, clientRuntimeProtectionStorage, resolveClientRuntimeProtectionStorage, setClientRuntimeProtectionStorage, trailingStopStorageKey, readTrackedTrailingStops, writeTrackedTrailingStops, rememberTrailingStop, protectiveGroupStorageKey, LOST_LEG_EVIDENCE_MAX_AGE_MS, EPISODE_END_FILL_LOOKBACK_MS, withClientProtectivePlanSetLock, readClientProtectiveGroups, writeClientProtectiveGroups, hasClientProtectiveGroupReadFailure, readFreshClientProtectiveGroups, stableProtectionSnapshot, exactClientProtectiveGroupSnapshot, exactClientProtectiveGroupSetSnapshot, storableClientProtectiveGroup, replaceExactClientProtectiveGroup, replaceExactClientProtectiveGroupSet, isClientRuntimeLeaseOwnershipError, hasClientRuntimeProtectionState, clearClientRuntimeVetoedProtectiveIntent, rethrowWindowHandoffAfterProtectiveReplacementVeto, canPersistClientProtectiveGroups, removeTrackedTrailingStop, replaceTrackedTrailingStop, replacementJournalEntryOrderId, buildProtectiveReplacementJournalGroup, isProtectiveReplacementJournalGroup, reserveProtectiveLegReplacement, ensureProtectiveReplacementJournalCompanion, buildVetoedProtectiveReplacementCleanup, assertExactProtectiveReplacementDispatchAuthority, transitionProtectiveReplacementAcknowledgement, transitionTerminalProtectiveReplacement, isConfiguredProtectionRequested, protectiveAction, isExactClientPositionTpslPair, deviceOwnsClientProtectiveLegKind, isAdoptionNarrowedPositionTpslLeg, hasAmbiguousClientPositionTpslAuthority, protectiveTerminalShapeMatches, cancelClientProtectiveLeg, buildPendingProtectivePlan, persistPendingClientProtectiveGroup, readAttachEvidence, attachClientProtectivePlan, resolveJournaledAttachmentContinuity, protectiveMemberRested, ledgerOrderIdsByClientOrderId, journaledAttachmentNeverLanded, recoverJournaledClientProtectiveAttachments, readClientOrderMutation, readPendingEntryMutation, clientOrderNeverLandsAfterMs, requireClientRuntimeConfigSeconds, replacePendingEntryRecovery, recoverPendingClientProtectiveGroups, recoverPendingProtectiveReplacements, observedStandaloneProtectiveGroup, migrateTrackedTrailingStopsToStandalone, nativeSettingsOf, nativePassEnded, nativeProtectionIo, nativeStorageReport, readNativeRecord, reconcileNativeProtectionForDecision, reconcileClientProtectiveGroups, cancelAllClientProtectiveGroups, modifyClientTrailingLeg, trailingRatchetIo, isDefinitiveEntryRejection, resolveExchangeSizeDecimals, readServerOrderMarkPrice, serverOrderMetadataRetry, resolveCurrentPositionSize, buildPositionSnapshot, runtimeProtectionAuthority, runtimeProtectionListings, runtimeProtectionListing, resolveServerNativeEntry, SERVER_NATIVE_LEGACY_REFUSAL, isServerNativeLegacyRefusal, serverUserCancelLookup, serverModeProtectionOwner, runtimeProtectionOwners, resolveRuntimeProtectionOwner, drainServerProtectionForRuntime, drainServerProtectionIfOwned, verifyNoLiveClientProtectiveTriggers, clientExecutionMutations, CLIENT_EXECUTION_QUEUE_TIMEOUT_MESSAGE, withClientExecutionMutation, withClientProtectivePlanSetMutation, allocateServerExecutionCapacity, withClientProtectiveAdoptionMutation, executeClientRuntimeDecisionLocked, unsentDecisionOrderReport, SERVER_AUDIT_RECORDED_ELSEWHERE, serverExecutionAuditOutcome, decisionLegOf, withExecutionAuditId, executeClientRuntimeDecision, waitForFlipCloseFreshness, nextClientTrailingStopDueAtMs, ratchetClientTrailingStopsBetweenCycles, handedOverPlan, listPendingClientProtectiveSymbols, listStoredClientProtectiveSymbols, hasUnresolvedClientProtectiveIdentity, resolveClientProtectiveIdentitiesForAdoption, exportClientProtectiveGroupsForAdoption, adoptionGroupKey, applyClientProtectiveAdoptionOutcomes, hasStoredClientProtectiveGroupsForWallet, hasPendingClientProtectiveGroups, recoverManualClientProtectiveGroups, listStoredClientProtectionSymbols, clientRuntimeDecisionSizesOrders, COMMITTED_EXECUTION_REPORTS, COMMITTED_DECISION_ORDER, getCommittedExecutionReports, getCommittedDecisionOrder, withCommittedExecutionReports, executeClientRuntimeDecisionUnlocked;
+var clientProtectiveMutationAuthority, executionReadPriority, serverEntryLeverageAlreadyHeld, createRuntimeId, _extractFilledSize, firstMemberAcknowledgement, _extractOrderId, _toExecutionMetadata, _extractClientMutationId, _stableMutationIdentity, trailingStopMemory, protectiveGroupMemory, protectiveGroupReadFailures, windowHandoffCleanupAttempts, clientRuntimeProtectionStorage, resolveClientRuntimeProtectionStorage, setClientRuntimeProtectionStorage, trailingStopStorageKey, readTrackedTrailingStops, writeTrackedTrailingStops, rememberTrailingStop, protectiveGroupStorageKey, LOST_LEG_EVIDENCE_MAX_AGE_MS, EPISODE_END_FILL_LOOKBACK_MS, withClientProtectivePlanSetLock, readClientProtectiveGroups, writeClientProtectiveGroups, hasClientProtectiveGroupReadFailure, readFreshClientProtectiveGroups, stableProtectionSnapshot, exactClientProtectiveGroupSnapshot, exactClientProtectiveGroupSetSnapshot, storableClientProtectiveGroup, replaceExactClientProtectiveGroup, replaceExactClientProtectiveGroupSet, isClientRuntimeLeaseOwnershipError, hasClientRuntimeProtectionState, clearClientRuntimeVetoedProtectiveIntent, rethrowWindowHandoffAfterProtectiveReplacementVeto, canPersistClientProtectiveGroups, removeTrackedTrailingStop, replaceTrackedTrailingStop, replacementJournalEntryOrderId, buildProtectiveReplacementJournalGroup, isProtectiveReplacementJournalGroup, reserveProtectiveLegReplacement, ensureProtectiveReplacementJournalCompanion, buildVetoedProtectiveReplacementCleanup, assertExactProtectiveReplacementDispatchAuthority, transitionProtectiveReplacementAcknowledgement, transitionTerminalProtectiveReplacement, isConfiguredProtectionRequested, protectiveAction, isExactClientPositionTpslPair, deviceOwnsClientProtectiveLegKind, isAdoptionNarrowedPositionTpslLeg, hasAmbiguousClientPositionTpslAuthority, protectiveTerminalShapeMatches, cancelClientProtectiveLeg, buildPendingProtectivePlan, persistPendingClientProtectiveGroup, readAttachEvidence, attachClientProtectivePlan, resolveJournaledAttachmentContinuity, protectiveMemberRested, ledgerOrderIdsByClientOrderId, journaledAttachmentNeverLanded, recoverJournaledClientProtectiveAttachments, readClientOrderMutation, readPendingEntryMutation, clientOrderNeverLandsAfterMs, requireClientRuntimeConfigSeconds, replacePendingEntryRecovery, recoverPendingClientProtectiveGroups, recoverPendingProtectiveReplacements, observedStandaloneProtectiveGroup, migrateTrackedTrailingStopsToStandalone, nativeSettingsOf, nativePassEnded, nativeProtectionIo, nativeStorageReport, readNativeRecord, reconcileNativeProtectionForDecision, reconcileClientProtectiveGroups, cancelAllClientProtectiveGroups, modifyClientTrailingLeg, trailingRatchetIo, isDefinitiveEntryRejection, resolveExchangeSizeDecimals, readServerOrderMarkPrice, serverOrderMetadataRetry, resolveCurrentPositionSize, buildPositionSnapshot, runtimeProtectionAuthority, runtimeProtectionListings, runtimeProtectionListing, resolveServerNativeEntry, SERVER_NATIVE_LEGACY_REFUSAL, isServerNativeLegacyRefusal, serverUserCancelLookup, passUserCancelsFor, serverModeProtectionOwner, runtimeProtectionOwners, resolveRuntimeProtectionOwner, drainServerProtectionForRuntime, drainServerProtectionIfOwned, verifyNoLiveClientProtectiveTriggers, clientExecutionMutations, CLIENT_EXECUTION_QUEUE_TIMEOUT_MESSAGE, withClientExecutionMutation, withClientProtectivePlanSetMutation, allocateServerExecutionCapacity, withClientProtectiveAdoptionMutation, executeClientRuntimeDecisionLocked, unsentDecisionOrderReport, SERVER_AUDIT_RECORDED_ELSEWHERE, serverExecutionAuditOutcome, decisionLegOf, withExecutionAuditId, executeClientRuntimeDecision, waitForFlipCloseFreshness, nextClientTrailingStopDueAtMs, ratchetClientTrailingStopsBetweenCycles, handedOverPlan, listPendingClientProtectiveSymbols, listStoredClientProtectiveSymbols, hasUnresolvedClientProtectiveIdentity, resolveClientProtectiveIdentitiesForAdoption, exportClientProtectiveGroupsForAdoption, adoptionGroupKey, applyClientProtectiveAdoptionOutcomes, hasStoredClientProtectiveGroupsForWallet, hasPendingClientProtectiveGroups, recoverManualClientProtectiveGroups, listStoredClientProtectionSymbols, clientRuntimeDecisionSizesOrders, COMMITTED_EXECUTION_REPORTS, COMMITTED_DECISION_ORDER, getCommittedExecutionReports, getCommittedDecisionOrder, withCommittedExecutionReports, executeClientRuntimeDecisionUnlocked;
 var init_runtime_execution = __esm({
   "lib/runtime/runtime-execution.ts"() {
     "use strict";
@@ -111212,6 +111446,8 @@ var init_runtime_execution = __esm({
     init_client_runtime_ownership_errors();
     init_api2();
     init_client_exchange_mutations();
+    init_client_user_cancels();
+    init_protective_user_cancels();
     init_hyperliquid_order_status();
     init_execution_capacity();
     init_protective_actions();
@@ -111233,6 +111469,7 @@ var init_runtime_execution = __esm({
     init_protective_leg_evidence();
     init_protective_stop_replacement();
     init_protective_entry_cover();
+    init_protective_placed_stops();
     init_protective_oversized_leg();
     init_protective_report_entry();
     init_error_surface_contract();
@@ -111535,7 +111772,6 @@ var init_runtime_execution = __esm({
             return [];
           }
           const replacedOrderId = legRecord.replacedOrderId == null ? void 0 : Number(legRecord.replacedOrderId);
-          const userCancelledOrderId = legRecord.userCancelledOrderId == null ? void 0 : Number(legRecord.userCancelledOrderId);
           const replaceJournalRecord = legRecord.replaceJournal;
           let replaceJournal;
           if (replaceJournalRecord != null) {
@@ -111553,7 +111789,7 @@ var init_runtime_execution = __esm({
               ...journalObservedAtMs !== void 0 ? { unknownOidObservedAtMs: journalObservedAtMs } : {}
             };
           }
-          if (replacedOrderId !== void 0 && (!Number.isSafeInteger(replacedOrderId) || replacedOrderId <= 0) || userCancelledOrderId !== void 0 && (!Number.isSafeInteger(userCancelledOrderId) || userCancelledOrderId <= 0)) {
+          if (replacedOrderId !== void 0 && (!Number.isSafeInteger(replacedOrderId) || replacedOrderId <= 0)) {
             protectiveGroupReadFailures.add(key);
             return [];
           }
@@ -111599,7 +111835,6 @@ var init_runtime_execution = __esm({
             ...evidenceWait,
             ...replacedOrderId !== void 0 ? { replacedOrderId } : {},
             ...replaceJournal ? { replaceJournal } : {},
-            ...userCancelledOrderId !== void 0 ? { userCancelledOrderId } : {},
             ...replacement ? { replacement } : {}
           }];
         });
@@ -114508,6 +114743,7 @@ var init_runtime_execution = __esm({
       const symbol2 = request.executionContext.symbol;
       const walletAddress = String(request.executionContext.walletAddress || "").trim();
       const exitSide = isLong ? "sell" : "buy";
+      const userCancels = passUserCancelsFor(request);
       const common = {
         profileId: request.profileId,
         ...clientProtectiveMutationAuthority(request),
@@ -114620,7 +114856,7 @@ var init_runtime_execution = __esm({
         neverLandsAfterMs: (sentAtMs) => clientOrderNeverLandsAfterMs(request.config, { kind: "absent", ageStartMs: sentAtMs }),
         // A Server bot's writes are VTX's own: its refused places are not bounded as a device's are.
         vtxSigns: request.executionMode === "server",
-        ...serverUserCancelLookup && request.executionMode === "server" ? { userCancelledOrder: (orderId) => serverUserCancelLookup(String(request.profileId).trim(), String(orderId)) } : {},
+        ...userCancels ? { userCancelledOrder: userCancels.cancelled, prefetchUserCancels: userCancels.prefetch } : {},
         newMutationId: () => createRuntimeId().toLowerCase(),
         nowMs: () => Date.now(),
         persist: (record6) => writeNativeProtectionRecord(String(request.profileId).trim(), symbol2, record6),
@@ -115048,8 +115284,7 @@ var init_runtime_execution = __esm({
         tp: exposure
       };
       const retainedGroups = expectedGroupSet.filter((group) => group.pendingEntry != null || isProtectiveReplacementJournalGroup(group));
-      let stopSizePlacedThisPass = 0;
-      const placedThisPass = /* @__PURE__ */ new Set();
+      const placedStops = passPlacedStops(symbol2);
       const unresolvedLegIds = new Set(inspectedGroups.flatMap((candidate) => candidate.legs).filter((entry) => entry.state === "unresolved").map((entry) => String(entry.leg.orderId)));
       const lostOrderIds = new Set(inspectedGroups.flatMap((candidate) => candidate.legs).filter((entry) => entry.state === "terminal").flatMap(({ leg }) => [String(leg.orderId), String(lookedUp.get(String(leg.orderId)) ?? leg.orderId)]));
       const statusOnlyOrders = () => inspectedGroups.flatMap((candidate) => candidate.legs).filter((entry) => entry.openOrder == null).map((entry) => ({ receivedMs: entry.statusReceivedMs ?? legsLiveSinceMs, atMs: entry.terminalStatus?.statusTimestampMs ?? entry.statusAtMs }));
@@ -115145,10 +115380,10 @@ var init_runtime_execution = __esm({
       const resolveLostClientProtectiveLeg = async (group, waitingLeg, botCleanupInFlight, terminalStatus) => {
         const { freshEvidenceSinceMs: _waitedSinceMs, ...leg } = waitingLeg;
         const botCleanup = botCleanupInFlight || leg.replacement != null;
-        let cancelledByUser = leg.userCancelledOrderId != null && String(leg.userCancelledOrderId) === String(leg.orderId);
-        if (!cancelledByUser && serverUserCancelLookup && request.executionMode === "server") {
+        let cancelledByUser = false;
+        if (!botCleanup && userCancels) {
           try {
-            cancelledByUser = await serverUserCancelLookup(profileId, String(leg.orderId));
+            cancelledByUser = await userCancels.cancelled(leg.orderId);
           } catch (error48) {
             if (request.signal?.aborted) throw error48;
             return {
@@ -115178,18 +115413,23 @@ var init_runtime_execution = __esm({
           const market2 = reachable(sizeOf(lost.position)) ? await lost.withPage() : lost;
           const positionSize = sizeOf(market2.position);
           const replaceReachable = reachable(positionSize) && market2.orders != null;
-          const stops = replaceReachable ? resolveOwnStops({
+          const own = replaceReachable ? resolveOwnStops({
             symbol: symbol2,
             groups: expectedGroupSet,
             orders: market2.orders ?? [],
             lookedUp,
-            unresolved: unresolvedLegIds
-          }).lostStopCover(positionSize, { lost: lostOrderIds, placed: placedThisPass }) : null;
+            unresolved: unresolvedLegIds,
+            placed: placedStops.ids(),
+            ended: lostOrderIds
+          }) : null;
+          const placed = placedStops.count(market2);
+          const stops = own?.lostStopCover(positionSize, placed);
           const markPrice = Number(market2.position.markPrice);
           evidence2 = {
             positionSize,
             liveStopSize: stops?.onPage ?? 0,
-            unseenStopSize: stops?.unseen ?? 0,
+            // What the legs this pass could not read may still cover, and its own re-placed stops.
+            inFlightStopSize: (stops?.unseen ?? 0) + placed.size,
             markPrice: replaceReachable && Number.isFinite(markPrice) && markPrice > 0 ? markPrice : null
           };
         } catch (error48) {
@@ -115202,7 +115442,7 @@ var init_runtime_execution = __esm({
           positionSize: evidence2.positionSize,
           legSize: leg.size,
           otherLiveStopSize: evidence2.liveStopSize,
-          inFlightStopSize: evidence2.unseenStopSize + stopSizePlacedThisPass,
+          inFlightStopSize: evidence2.inFlightStopSize,
           sizeDecimals: request.executionContext.sizeDecimals,
           triggerPrice: leg.triggerPrice,
           alreadyReplaced: leg.replacedOrderId != null,
@@ -115310,8 +115550,7 @@ var init_runtime_execution = __esm({
             }]
           };
         }
-        stopSizePlacedThisPass += decision.size;
-        placedThisPass.add(clientOrderId);
+        const placedStop = placedStops.add(provisionalLeg, group.isLong);
         let dispatchMayHaveStarted = false;
         let response;
         try {
@@ -115342,8 +115581,7 @@ var init_runtime_execution = __esm({
         } catch (error48) {
           if (error48 instanceof ExchangeRejectionError) {
             const rejectionProjection = projectExecutionErrorContract({ error: error48, symbol: symbol2 });
-            stopSizePlacedThisPass -= decision.size;
-            placedThisPass.delete(clientOrderId);
+            placedStops.drop(placedStop);
             const rejectedGroup = {
               ...provisionalGroup,
               legs: provisionalGroup.legs.filter((candidate) => candidate.orderId !== clientOrderId)
@@ -115374,8 +115612,7 @@ var init_runtime_execution = __esm({
             };
           }
           if (!dispatchMayHaveStarted) {
-            stopSizePlacedThisPass -= decision.size;
-            placedThisPass.delete(clientOrderId);
+            placedStops.drop(placedStop);
             const restored = transitionExactGroup(provisionalGroup, group);
             if (restored && isClientRuntimeWindowHandoffBeforePlanDispatch(error48)) {
               throw error48;
@@ -115431,7 +115668,7 @@ var init_runtime_execution = __esm({
             }]
           };
         }
-        placedThisPass.add(String(placedOrderId));
+        placedStops.answered(placedStop, acknowledgement);
         const { replaceJournal: _landedJournal, ...landedLeg } = provisionalLeg;
         const placedLeg = { ...landedLeg, orderId: placedOrderId };
         const placedGroup = {
@@ -115486,6 +115723,8 @@ var init_runtime_execution = __esm({
         lookedUp,
         unresolved: unresolvedLegIds
       });
+      const userCancels = passUserCancelsFor(request);
+      await userCancels?.prefetch(inspectedGroups.flatMap((candidate) => candidate.group.cleanupRequired === true || exposure <= 0 || candidate.legs.some((entry) => entry.state === "fulfilled") ? [] : candidate.legs.filter((entry) => entry.state === "terminal" && entry.leg.replacement == null).map((entry) => entry.leg.orderId)));
       groupLoop: for (let groupIndex = 0; groupIndex < inspectedGroups.length; groupIndex += 1) {
         const inspected = inspectedGroups[groupIndex];
         let durableGroup = inspected.group;
@@ -116343,6 +116582,16 @@ var init_runtime_execution = __esm({
     SERVER_NATIVE_LEGACY_REFUSAL = "native_protection_legacy_position";
     isServerNativeLegacyRefusal = (error48) => Boolean(error48 && typeof error48 === "object") && error48.code === SERVER_NATIVE_LEGACY_REFUSAL;
     serverUserCancelLookup = null;
+    passUserCancelsFor = (request) => {
+      const profileId = String(request.profileId).trim();
+      const lookup = serverUserCancelLookup;
+      if (request.executionMode === "server") {
+        return lookup ? passUserCancels(readEachUserCancel((orderId) => lookup(profileId, orderId), request.signal), { signal: request.signal }) : null;
+      }
+      return passUserCancels(async (orderIds) => ({ cancelled: await readClientUserCancels(profileId, orderIds, request.signal) }), {
+        signal: request.signal
+      });
+    };
     serverModeProtectionOwner = "server";
     runtimeProtectionOwners = /* @__PURE__ */ new WeakMap();
     resolveRuntimeProtectionOwner = (request) => {
@@ -116903,8 +117152,7 @@ var init_runtime_execution = __esm({
                 // A trailing stop keeps its own distance under the server (client_protective_adoption.py plan_risk).
                 ...leg.trailingRisk ? { risk_mode: leg.trailingRisk.mode, risk_value: String(leg.trailingRisk.value) } : {},
                 // A stop re-placed once stays re-placed once under the server.
-                ...leg.replacedOrderId != null ? { replaced_order_id: String(leg.replacedOrderId) } : {},
-                ...leg.userCancelledOrderId != null ? { user_cancelled_order_id: String(leg.userCancelledOrderId) } : {}
+                ...leg.replacedOrderId != null ? { replaced_order_id: String(leg.replacedOrderId) } : {}
               })),
               ...group.pendingEntry && group.legs.length === 0 ? [
                 ...group.pendingEntry.stopLoss.enabled ? [{
@@ -119680,7 +119928,7 @@ var init_browser_observability = __esm({
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
     init_runtime_policy_generated2();
-    CLIENT_SOURCE_VERSION = typeof process !== "undefined" && true && "6592b6a35dac46de3849997d4ab04774460859b7".trim() && "6592b6a35dac46de3849997d4ab04774460859b7".trim() !== "unstamped" ? "6592b6a35dac46de3849997d4ab04774460859b7".trim() : null;
+    CLIENT_SOURCE_VERSION = typeof process !== "undefined" && true && "d2a1386883f9001b5d78fa222be70d5248c4700b".trim() && "d2a1386883f9001b5d78fa222be70d5248c4700b".trim() !== "unstamped" ? "d2a1386883f9001b5d78fa222be70d5248c4700b".trim() : null;
     listenersInstalled = false;
     state = {
       loadedAtMs: Date.now(),
@@ -124652,8 +124900,8 @@ var init_candle_prompt_contract = __esm({
           throw new Error("Candle prompt rows must be ordered by timestamp");
         }
       }
-      const effectiveAsOfTimestamp = Math.max(asOfTimestamp, timestamps[timestamps.length - 1]);
-      const openIndexes = timestamps.map((timestamp, index) => timestamp + intervalSeconds > effectiveAsOfTimestamp ? index : -1).filter((index) => index >= 0);
+      const newestOpenTimestamp = timestamps[timestamps.length - 1];
+      const openIndexes = timestamps.map((timestamp, index) => candleClosedInSeries(timestamp, newestOpenTimestamp, intervalSeconds, asOfTimestamp) ? -1 : index).filter((index) => index >= 0);
       if (openIndexes.length === 0) {
         return projected;
       }
@@ -124680,7 +124928,7 @@ var init_candle_prompt_contract = __esm({
       if (intervalSeconds === void 0 || lastOpenTimestamp === void 0) {
         return 0;
       }
-      const lastIsClosed = lastOpenTimestamp + intervalSeconds <= input.asOfTimestamp;
+      const lastIsClosed = candleClosedInSeries(lastOpenTimestamp, lastOpenTimestamp, intervalSeconds, input.asOfTimestamp);
       return lastIsClosed ? input.openTimestamps.length : input.openTimestamps.length - 1;
     };
     calculateRelativeVolumeSeries = (input) => {
@@ -125934,7 +126182,8 @@ var init_market_context = __esm({
           if (timeframeSeconds === void 0) {
             throw new RuntimeReasonError(`Unsupported candle timeframe: ${timeframe}`, "internal_data_error");
           }
-          const lastIsClosed = candles[candles.length - 1].timestamp + timeframeSeconds <= asOf;
+          const newestOpen = candles[candles.length - 1].timestamp;
+          const lastIsClosed = candleClosedInSeries(newestOpen, newestOpen, timeframeSeconds, asOf);
           const statsWindow = lastIsClosed ? candles : candles.slice(0, -1);
           if (statsWindow.length > 0) {
             const features = extractWindowFeatures(statsWindow, input.lookbacks[timeframe]);
@@ -130607,7 +130856,7 @@ var init_provider_client = __esm({
 });
 
 // lib/runtime/runtime-prompt-steps.ts
-var buildRuntimePromptParityContext, readRuntimePromptMarketData, invokeRuntimeReviewModel, resolveRuntimePromptKnobs, buildRuntimePromptCandles, requireRuntimePromptTemplates, resolveRuntimeBehaviorMemoryCutoff, buildRuntimeBehaviorStateArtifacts, buildRuntimePromptContextParts, runtimePromptArtifactInput;
+var buildRuntimePromptParityContext, cycleMarketTicker, readRuntimePromptMarketData, invokeRuntimeReviewModel, resolveRuntimePromptKnobs, buildRuntimePromptCandles, requireRuntimePromptTemplates, resolveRuntimeBehaviorMemoryCutoff, buildRuntimeBehaviorStateArtifacts, buildRuntimePromptContextParts, runtimePromptArtifactInput;
 var init_runtime_prompt_steps = __esm({
   "lib/runtime/runtime-prompt-steps.ts"() {
     "use strict";
@@ -130646,6 +130895,7 @@ var init_runtime_prompt_steps = __esm({
       }
       return parityContext;
     };
+    cycleMarketTicker = (symbol2, candles, loadedTicker) => loadedTicker?.is_fresh === true && toPositiveFinite3(loadedTicker.price) !== null ? loadedTicker : candleCloseTicker(symbol2, candles) ?? loadedTicker;
     readRuntimePromptMarketData = (input) => {
       const marketDataStartedAtMs = Date.now();
       return Promise.all(
@@ -130680,7 +130930,7 @@ var init_runtime_prompt_steps = __esm({
             )
           ]);
           const candles = Object.fromEntries(loadedCandles);
-          const ticker = loadedTicker?.is_fresh === true && toPositiveFinite3(loadedTicker.price) !== null ? loadedTicker : candleCloseTicker(marketSymbol, candles) ?? loadedTicker;
+          const ticker = cycleMarketTicker(marketSymbol, candles, loadedTicker);
           if (ticker === null) throw tickerError;
           if (loadedTicker === null) {
             appendRuntimeDebugEvent({
@@ -132897,9 +133147,9 @@ var init_local_analysis = __esm({
     RUNTIME_SOURCE_DEFINITION_VERSION = "runtime-source-v1";
     DECISION_INPUT_DEFINITION_VERSION = "decision-input-v1";
     CONTEXT_ENVELOPE_DEFINITION_VERSION = "context-envelope-v2.1";
-    CLIENT_RUNTIME_SOURCE_VERSION = typeof process !== "undefined" && true && "6592b6a35dac46de3849997d4ab04774460859b7".trim() && !["unknown", "unstamped", "development"].includes(
-      "6592b6a35dac46de3849997d4ab04774460859b7".trim().toLowerCase()
-    ) ? "6592b6a35dac46de3849997d4ab04774460859b7".trim() : null;
+    CLIENT_RUNTIME_SOURCE_VERSION = typeof process !== "undefined" && true && "d2a1386883f9001b5d78fa222be70d5248c4700b".trim() && !["unknown", "unstamped", "development"].includes(
+      "d2a1386883f9001b5d78fa222be70d5248c4700b".trim().toLowerCase()
+    ) ? "d2a1386883f9001b5d78fa222be70d5248c4700b".trim() : null;
     CLIENT_MAIN_PROMPT_RENDERER = "client_runtime.buildLocalRuntimePromptArtifacts:v1";
     CLIENT_REVIEW_PROMPT_RENDERER = "client_runtime.review_prompt_assembly:v1";
     resolveEffectivePromptRuntimeProvenance = (input) => ({
@@ -138129,128 +138379,76 @@ ${copyReviewPromptContext(proposedTrade, input.templates)}`;
   }
 });
 
-// lib/runtime/copy-review-runtime.ts
-var copy_review_runtime_exports = {};
-__export(copy_review_runtime_exports, {
-  prepareRuntimeCopyReviewPrimary: () => prepareRuntimeCopyReviewPrimary,
-  renderCheckInCopyReviewShadows: () => renderCheckInCopyReviewShadows,
-  renderCopyReviewShadows: () => renderCopyReviewShadows,
-  renderRuntimeCopyReview: () => renderRuntimeCopyReview,
-  shadowBudget: () => shadowBudget,
-  shadowPrompts: () => shadowPrompts
-});
-var prepareRuntimeCopyReviewPrimary, renderRuntimeCopyReview, shadowPrompts, SHADOW_RENDER_TIMEOUT_MS, SHADOW_REPORT_TIMEOUT_MS, shadowBudget, renderCopyReviewShadows, renderCheckInCopyReviewShadows;
-var init_copy_review_runtime = __esm({
-  "lib/runtime/copy-review-runtime.ts"() {
+// lib/runtime/copy-review-render-inputs.ts
+var copyReviewRenderScope, copyReviewAccountSummary, requireCopyReviewAccountEquity, copyReviewWalletAddress, copyReviewParityContext, requireCopyReviewContractReady, copyReviewPrimaryFromInputs, renderCopyReviewFromPrimary, shadowPrompts;
+var init_copy_review_render_inputs = __esm({
+  "lib/runtime/copy-review-render-inputs.ts"() {
     "use strict";
     init_define_VTX_CLAUDE_CODE_POLICY();
     init_define_VTX_EXO_POLICY();
     init_define_VTX_GROK_POLICY();
     init_define_VTX_PI_MODEL_POLICY();
-    init_copy_review();
-    init_constants();
-    init_runtime_policy_generated2();
     init_ai_settings_helpers();
-    init_abort();
     init_client_account_report();
     init_copy_review_prompt();
     init_render();
-    init_hyperliquid_account_state_adapter();
     init_local_analysis();
-    init_network_debug();
-    init_perp_dex_scope();
     init_runtime_error_reason_rules();
     init_runtime_prompt_steps();
-    prepareRuntimeCopyReviewPrimary = async (input) => {
-      const { config: config2, signal } = input;
+    copyReviewRenderScope = (input) => {
       const settings = sortAiSettings(input.settings || {}) || {};
-      const walletAddress = String(settings.hyperliquid_wallet_address || "").trim();
-      if (!walletAddress) {
-        throw new RuntimeReasonError("The active profile wallet is unavailable. Save a wallet for this profile, then try again.", "profile_wallet_unavailable");
-      }
-      const { symbols: botSymbols, timeframes } = resolveRuntimeTradingScope(settings, config2);
-      const sortedTimeframes = sortTradingTimeframes(timeframes);
-      const symbols = input.promptSymbols(botSymbols);
-      const activeIndicators = normalizeAiIndicatorFlags(config2.default_ai_indicators, settings.ai_indicators);
-      const indicatorCandleCount = Number(config2.indicator_candle_count);
+      const { symbols: botSymbols, timeframes } = resolveRuntimeTradingScope(settings, input.config);
+      const indicatorCandleCount = Number(input.config.indicator_candle_count);
       if (!Number.isSafeInteger(indicatorCandleCount) || indicatorCandleCount < 1) {
         throw new RuntimeReasonError("Missing required client runtime config: indicator_candle_count", "runtime_config_missing");
       }
-      const serverBot = input.executionMode === "server";
-      const marketDataPromise = settleRuntimeCyclePromise(readRuntimePromptMarketData({
-        config: config2,
-        symbols,
-        sortedTimeframes,
-        lookbackSettings: settings.analysis_lookback,
-        defaultLookbacks: config2.default_analysis_lookback_fallbacks,
-        indicatorCandleCount,
-        primarySymbol: symbols[0],
-        primaryTimeframe: sortedTimeframes[0],
-        signal,
-        // A Client bot's candles: the stored ones, and the rest read here (the
-        // copied market may be one nothing streams); never a VTX server read of
-        // Hyperliquid for it.
-        ...serverBot ? {} : {
-          candleReadContext: { profileId: input.profileId, deviceConfig: () => config2, priority: input.readPriority }
-        }
-      }));
-      const fillsPromise = settleRuntimeCyclePromise(serverBot ? Promise.resolve(null) : fetchBrowserUserFills({
-        publicRequestPriority: input.readPriority,
-        config: config2,
-        walletAddress,
-        symbols,
-        forceRefresh: false,
-        signal
-      }));
-      const accountState = await fetchBrowserAccountState2({
-        publicRequestPriority: input.readPriority,
-        config: config2,
-        walletAddress,
-        symbol: symbols[0],
-        tickerPrice: 0,
-        leverage: resolveRuntimeLeveragePreference(settings, config2),
-        aggregatePerpDexs: true,
-        perpDexScope: perpDexScopeForSymbols(symbols),
-        feeSymbols: symbols,
-        includeEffectiveTakerRate: true,
-        forceRefresh: serverBot,
-        serverLoopAccountValue: serverBot,
-        sessionId: input.payload.sessionId,
-        signal
-      });
-      const fills = unwrapRuntimeCycleSettledResult(await fillsPromise);
-      const accountSummary = {
-        ...accountState.accountSummary,
-        total_unrealized_pnl: resolveTotalUnrealizedPnl2(
-          accountState.accountSummary,
-          accountState.positions
-        ) ?? accountState.accountSummary.total_unrealized_pnl
+      return {
+        settings,
+        symbols: input.promptSymbols(botSymbols),
+        sortedTimeframes: sortTradingTimeframes(timeframes),
+        indicatorCandleCount
       };
+    };
+    copyReviewAccountSummary = (accountState) => ({
+      ...accountState.accountSummary,
+      total_unrealized_pnl: resolveTotalUnrealizedPnl2(
+        accountState.accountSummary,
+        accountState.positions
+      ) ?? accountState.accountSummary.total_unrealized_pnl
+    });
+    requireCopyReviewAccountEquity = (accountState, serverBot) => {
       const accountEquity = Number(accountState.accountSummary?.account_value) || 0;
       if (accountEquity <= 0 && !serverBot) {
         throw new RuntimeReasonError("Live account equity unavailable for client runtime prompt contract.", "hyperliquid_data_unavailable");
       }
-      const parityContext = buildRuntimePromptParityContext({
+      return accountEquity;
+    };
+    copyReviewWalletAddress = (settings) => {
+      const walletAddress = String(settings.hyperliquid_wallet_address || "").trim();
+      if (!walletAddress) {
+        throw new RuntimeReasonError("The active profile wallet is unavailable. Save a wallet for this profile, then try again.", "profile_wallet_unavailable");
+      }
+      return walletAddress;
+    };
+    copyReviewParityContext = (input) => {
+      const { accountState, scope } = input;
+      const accountSummary = copyReviewAccountSummary(accountState);
+      return buildRuntimePromptParityContext({
         account: {
-          walletAddress,
-          accountEquity,
+          walletAddress: copyReviewWalletAddress(scope.settings),
+          accountEquity: requireCopyReviewAccountEquity(accountState, input.serverBot),
           perpDexAccounts: accountState.accountSummary?.perp_dex_accounts ?? null,
           positions: accountState.positions,
           totalUnrealizedPnl: accountSummary.total_unrealized_pnl ?? null
         },
         deviceCandleSeries: {
-          series: symbols.flatMap((marketSymbol) => sortedTimeframes.map((marketTimeframe) => [marketSymbol, marketTimeframe])),
-          limit: indicatorCandleCount
+          series: scope.symbols.flatMap((symbol2) => scope.sortedTimeframes.map((timeframe) => [symbol2, timeframe])),
+          limit: scope.indicatorCandleCount
         },
-        userFills: fills ? { fills: fills.rawFills, evidence: fills.evidence } : null
+        userFills: input.fills ? { fills: input.fills.rawFills, evidence: input.fills.evidence } : null
       });
-      const derived = await fetchCopyReviewPromptContract(input.profileId, {
-        ...input.payload,
-        isAnalyzing: false,
-        isExecuting: false,
-        promptParityContext: parityContext,
-        copyReviewSymbol: input.copySymbol
-      }, { schedulerInstanceId: input.payload.schedulerInstanceId ?? void 0, signal });
+    };
+    requireCopyReviewContractReady = (derived) => {
       if (String(derived.status || "").trim() !== "derived_context_ready") {
         throw new RuntimeReasonError(`Unexpected prompt derived-context status: ${String(derived.status || "unknown")}`, "internal_data_error");
       }
@@ -138259,7 +138457,14 @@ var init_copy_review_runtime = __esm({
         throw new RuntimeReasonError(`Unexpected prompt metadata status: ${String(promptMetadata?.status || "unknown")}`, "internal_data_error");
       }
       assertPromptContractCompatibility(promptMetadata);
-      const marketData = unwrapRuntimeCycleSettledResult(await marketDataPromise);
+      return promptMetadata;
+    };
+    copyReviewPrimaryFromInputs = (input) => {
+      const { config: config2, contract: derived, marketData, fills, accountState } = input;
+      const { settings, symbols, sortedTimeframes, indicatorCandleCount } = input.scope;
+      const activeIndicators = normalizeAiIndicatorFlags(config2.default_ai_indicators, settings.ai_indicators);
+      const accountSummary = copyReviewAccountSummary(accountState);
+      const promptMetadata = requireCopyReviewContractReady(derived);
       const tickersBySymbol = Object.fromEntries(marketData.map((entry) => [entry.symbol, entry.ticker]));
       const candlesBySymbol = Object.fromEntries(marketData.map((entry) => [entry.symbol, entry.candles]));
       const derivedContext = asRecord(derived.derived_context);
@@ -138297,7 +138502,7 @@ var init_copy_review_runtime = __esm({
       const { cutoffMs } = resolveRuntimeBehaviorMemoryCutoff(derivedContext, derived.derived_context_generated_at);
       const accountMarginNote = requireRuntimeAccountMarginNote(asRecord(promptInstructions.account));
       const behaviorState = buildRuntimeBehaviorStateArtifacts({
-        serverOwnsBehaviorState: serverBot,
+        serverOwnsBehaviorState: input.serverOwnsBehaviorState,
         derivedContext,
         behaviorInstructions: asRecord(promptInstructions.behavior),
         config: config2,
@@ -138362,24 +138567,10 @@ var init_copy_review_runtime = __esm({
         }
       };
     };
-    renderRuntimeCopyReview = async (input) => {
-      const prepared = await prepareRuntimeCopyReviewPrimary({
-        profileId: input.profileId,
-        payload: input.payload,
-        executionMode: input.executionMode,
-        config: input.config,
-        settings: input.settings,
-        copySymbol: input.event.symbol,
-        promptSymbols: (botSymbols) => copyReviewPromptSymbols(input.event.symbol, botSymbols),
-        // A copy without a value of its own (no reference price) reviews at the
-        // bot's trade size, else the configured default, as the lane serves them.
-        promptSize: (sizes) => copyReviewPromptSize(input.event, sizes.profile || null, sizes.default),
-        readPriority: input.readPriority,
-        signal: input.signal
-      });
+    renderCopyReviewFromPrimary = (prepared, copy4) => {
       const prompts = renderCopyReviewPrompts({
-        event: input.event,
-        source: input.source,
+        event: copy4.event,
+        source: copy4.source,
         templates: prepared.templates,
         primary: prepared.primary,
         review: prepared.review
@@ -138396,6 +138587,125 @@ var init_copy_review_runtime = __esm({
       review_system_prompt: prompts.reviewSystemPrompt,
       review_user_prompt: prompts.reviewUserPrompt
     });
+  }
+});
+
+// lib/runtime/copy-review-runtime.ts
+var copy_review_runtime_exports = {};
+__export(copy_review_runtime_exports, {
+  prepareRuntimeCopyReviewPrimary: () => prepareRuntimeCopyReviewPrimary,
+  renderCheckInCopyReviewShadows: () => renderCheckInCopyReviewShadows,
+  renderCopyReviewShadows: () => renderCopyReviewShadows,
+  renderRuntimeCopyReview: () => renderRuntimeCopyReview,
+  shadowBudget: () => shadowBudget,
+  shadowPrompts: () => shadowPrompts
+});
+var prepareRuntimeCopyReviewPrimary, renderRuntimeCopyReview, SHADOW_RENDER_TIMEOUT_MS, SHADOW_REPORT_TIMEOUT_MS, shadowBudget, renderCopyReviewShadows, renderCheckInCopyReviewShadows;
+var init_copy_review_runtime = __esm({
+  "lib/runtime/copy-review-runtime.ts"() {
+    "use strict";
+    init_define_VTX_CLAUDE_CODE_POLICY();
+    init_define_VTX_EXO_POLICY();
+    init_define_VTX_GROK_POLICY();
+    init_define_VTX_PI_MODEL_POLICY();
+    init_copy_review();
+    init_constants();
+    init_runtime_policy_generated2();
+    init_abort();
+    init_copy_review_prompt();
+    init_hyperliquid_account_state_adapter();
+    init_local_analysis();
+    init_network_debug();
+    init_perp_dex_scope();
+    init_runtime_error_reason_rules();
+    init_runtime_prompt_steps();
+    init_copy_review_render_inputs();
+    prepareRuntimeCopyReviewPrimary = async (input) => {
+      const { config: config2, signal } = input;
+      const scope = copyReviewRenderScope({ config: config2, settings: input.settings, promptSymbols: input.promptSymbols });
+      const { settings, symbols, sortedTimeframes, indicatorCandleCount } = scope;
+      const walletAddress = copyReviewWalletAddress(settings);
+      const serverBot = input.executionMode === "server";
+      const marketDataPromise = settleRuntimeCyclePromise(readRuntimePromptMarketData({
+        config: config2,
+        symbols,
+        sortedTimeframes,
+        lookbackSettings: settings.analysis_lookback,
+        defaultLookbacks: config2.default_analysis_lookback_fallbacks,
+        indicatorCandleCount,
+        primarySymbol: symbols[0],
+        primaryTimeframe: sortedTimeframes[0],
+        signal,
+        // A Client bot's candles: the stored ones, and the rest read here (the
+        // copied market may be one nothing streams); never a VTX server read of
+        // Hyperliquid for it.
+        ...serverBot ? {} : {
+          candleReadContext: { profileId: input.profileId, deviceConfig: () => config2, priority: input.readPriority }
+        }
+      }));
+      const fillsPromise = settleRuntimeCyclePromise(serverBot ? Promise.resolve(null) : fetchBrowserUserFills({
+        publicRequestPriority: input.readPriority,
+        config: config2,
+        walletAddress,
+        symbols,
+        forceRefresh: false,
+        signal
+      }));
+      const accountState = await fetchBrowserAccountState2({
+        publicRequestPriority: input.readPriority,
+        config: config2,
+        walletAddress,
+        symbol: symbols[0],
+        tickerPrice: 0,
+        leverage: resolveRuntimeLeveragePreference(settings, config2),
+        aggregatePerpDexs: true,
+        perpDexScope: perpDexScopeForSymbols(symbols),
+        feeSymbols: symbols,
+        includeEffectiveTakerRate: true,
+        forceRefresh: serverBot,
+        serverLoopAccountValue: serverBot,
+        sessionId: input.payload.sessionId,
+        signal
+      });
+      const fills = unwrapRuntimeCycleSettledResult(await fillsPromise);
+      const parityContext = copyReviewParityContext({ accountState, fills, serverBot, scope });
+      const derived = await fetchCopyReviewPromptContract(input.profileId, {
+        ...input.payload,
+        isAnalyzing: false,
+        isExecuting: false,
+        promptParityContext: parityContext,
+        copyReviewSymbol: input.copySymbol
+      }, { schedulerInstanceId: input.payload.schedulerInstanceId ?? void 0, signal });
+      requireCopyReviewContractReady(derived);
+      return copyReviewPrimaryFromInputs({
+        config: config2,
+        settings: input.settings,
+        serverOwnsBehaviorState: serverBot,
+        contract: derived,
+        marketData: unwrapRuntimeCycleSettledResult(await marketDataPromise),
+        fills,
+        accountState,
+        scope,
+        promptSize: input.promptSize
+      });
+    };
+    renderRuntimeCopyReview = async (input) => {
+      const prepared = await prepareRuntimeCopyReviewPrimary({
+        profileId: input.profileId,
+        payload: input.payload,
+        executionMode: input.executionMode,
+        config: input.config,
+        settings: input.settings,
+        copySymbol: input.event.symbol,
+        promptSymbols: (botSymbols) => copyReviewPromptSymbols(input.event.symbol, botSymbols),
+        // A copy without a value of its own (no reference price) reviews at the
+        // bot's trade size, else the configured default, as the lane serves them.
+        promptSize: (sizes) => copyReviewPromptSize(input.event, sizes.profile || null, sizes.default),
+        readPriority: input.readPriority,
+        signal: input.signal
+      });
+      return renderCopyReviewFromPrimary(prepared, { event: input.event, source: input.source });
+    };
     SHADOW_RENDER_TIMEOUT_MS = runtime_policy_generated_default2.copy_trading.review_shadow.render_timeout_seconds * MS_PER_SECOND;
     SHADOW_REPORT_TIMEOUT_MS = runtime_policy_generated_default2.copy_trading.review_shadow.report_timeout_seconds * MS_PER_SECOND;
     shadowBudget = (signal, budgetMs) => {