diff --git a/api/app/clients/BaseClient.js b/api/app/clients/BaseClient.js
index 05d1b7e714f..950efff0026 100644
--- a/api/app/clients/BaseClient.js
+++ b/api/app/clients/BaseClient.js
@@ -16,6 +16,7 @@ const {
   getLangfuseTraceMessageFields,
   isContentFilterError,
   assertModelBoundProviderContent,
+  reportLocatorTraversalFailure,
   collectModelBoundHistoricalFileIdState,
   projectModelBoundSourceFiles,
   isModelBoundAttachmentFile,
@@ -302,6 +303,7 @@ class BaseClient {
       : [{ role: 'user', content: payload, isCreatedByUser: true, isUserSubmitted: true }];
     const fileProjection = this.getModelBoundFileProjection();
     assertModelBoundProviderContent({
+      onTraversalFailure: reportLocatorTraversalFailure,
       filters: this.options.req?.config?.filters,
       legacyPii: this.options.req?.config?.messageFilter?.pii,
       providerMessages: messages,
diff --git a/api/server/controllers/agents/client.js b/api/server/controllers/agents/client.js
index 10f30569d13..58fc1824d77 100644
--- a/api/server/controllers/agents/client.js
+++ b/api/server/controllers/agents/client.js
@@ -145,6 +145,7 @@ const {
   decrementPendingRequest,
   maybePrewarmCodeSandbox,
   assertModelBoundContent,
+  reportLocatorTraversalFailure,
   filterFilesByEndpointRuntimeConfig,
   createModelBoundChatModelCallback: createModelBoundContentCallback,
   createInitialModelBoundAdmissionCallback,
@@ -516,6 +517,7 @@ class AgentClient extends BaseClient {
   admitSteerAttachments(files, steerId) {
     const modelBoundFiles = files.filter(isModelBoundAttachmentFile);
     assertModelBoundContent({
+      onTraversalFailure: reportLocatorTraversalFailure,
       filters: this.options.req?.config?.filters,
       files: modelBoundFiles,
     });
@@ -2047,6 +2049,7 @@ class AgentClient extends BaseClient {
       return;
     }
     assertModelBoundContent({
+      onTraversalFailure: reportLocatorTraversalFailure,
       legacyPii,
       storedMessages: this.modelBoundStoredMessages,
     });
@@ -2063,6 +2066,7 @@ class AgentClient extends BaseClient {
     const persistence = BaseClient.prototype.getModelBoundUserMessagePersistence.call(this);
     return createModelBoundContentCallback(
       {
+        onTraversalFailure: reportLocatorTraversalFailure,
         filters: this.options.req?.config?.filters,
         legacyPii: this.options.req?.config?.messageFilter?.pii,
         storedMessages: this.modelBoundStoredMessages,
@@ -2393,6 +2397,7 @@ class AgentClient extends BaseClient {
     ]);
     void earlySharedContextPromise.catch(() => {});
     assertModelBoundContent({
+      onTraversalFailure: reportLocatorTraversalFailure,
       filters: this.options.req.config?.filters,
       legacyPii: this.options.req.config?.messageFilter?.pii,
       agents: allAgents.map(({ agent }) => agent),
@@ -2473,6 +2478,7 @@ class AgentClient extends BaseClient {
       this.modelBoundCurrentFiles = [...modelBoundRequestAttachments];
 
       assertModelBoundContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         filters: this.options.req.config?.filters,
         files: modelBoundRequestAttachments,
       });
@@ -2720,6 +2726,7 @@ class AgentClient extends BaseClient {
        * user payload so strict file policy cannot be skipped by a late media
        * adapter. */
       assertModelBoundContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         filters: this.options.req.config?.filters,
         legacyPii: this.options.req.config?.messageFilter?.pii,
         submittedMessages: [{ role: 'user', content: latestFormatted.content }],
@@ -3013,6 +3020,7 @@ class AgentClient extends BaseClient {
       });
       if (assertLateBoundContent) {
         assertModelBoundContent({
+          onTraversalFailure: reportLocatorTraversalFailure,
           filters: this.options.req.config?.filters,
           legacyPii: this.options.req.config?.messageFilter?.pii,
           agents: [agent],
@@ -3041,6 +3049,7 @@ class AgentClient extends BaseClient {
     this.modelBoundMemoryContexts = [...modelBoundMemoryContexts];
     this.modelBoundFileContexts = [...modelBoundFileContexts];
     assertModelBoundContent({
+      onTraversalFailure: reportLocatorTraversalFailure,
       filters: this.options.req.config?.filters,
       legacyPii: this.options.req.config?.messageFilter?.pii,
       agents: allAgents.map(({ agent }) => agent),
@@ -4676,6 +4685,7 @@ class AgentClient extends BaseClient {
       }
 
       assertModelBoundContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         filters: appConfig?.filters,
         legacyPii: appConfig?.messageFilter?.pii,
         agents: reachableAgents,
@@ -5346,6 +5356,7 @@ class AgentClient extends BaseClient {
         },
         {
           getAgentCheckpointer,
+          onTraversalFailure: reportLocatorTraversalFailure,
           getMessages: db.getMessages,
           getFiles: db.getFiles,
         },
@@ -5433,6 +5444,7 @@ class AgentClient extends BaseClient {
                 agent === this.options.agent ? this.options.req.body.ephemeralAgent : undefined,
             });
             assertModelBoundContent({
+              onTraversalFailure: reportLocatorTraversalFailure,
               filters: this.options.req.config?.filters,
               legacyPii: this.options.req.config?.messageFilter?.pii,
               agents: [agent],
@@ -5531,6 +5543,7 @@ class AgentClient extends BaseClient {
                   sharedRunContext: scopedContext ?? '',
                 });
                 assertModelBoundContent({
+                  onTraversalFailure: reportLocatorTraversalFailure,
                   filters: this.options.req.config?.filters,
                   legacyPii: this.options.req.config?.messageFilter?.pii,
                   agents: [agent],
diff --git a/api/server/controllers/agents/openai.js b/api/server/controllers/agents/openai.js
index 78f930753f5..1ff29ca8744 100644
--- a/api/server/controllers/agents/openai.js
+++ b/api/server/controllers/agents/openai.js
@@ -50,6 +50,7 @@ const {
   isContentTraversalProtected,
   isContentTraversalLimitError,
   assertModelBoundContent,
+  reportLocatorTraversalFailure,
   hasModelBoundContentProtection,
   isContentFilterError,
   getSafeErrorMetadata,
@@ -750,6 +751,7 @@ const executeOpenAIChatCompletion = async (envelope, { req, res }) => {
       const manualSkillPrimes = primaryConfig.manualSkillPrimes;
       const alwaysApplySkillPrimes = primaryConfig.alwaysApplySkillPrimes;
       assertModelBoundContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         filters: appConfig?.filters,
         legacyPii: appConfig?.messageFilter?.pii,
         submittedMessages: request.messages,
diff --git a/api/server/controllers/agents/responses.js b/api/server/controllers/agents/responses.js
index aa851fbb510..bccf4d3ddec 100644
--- a/api/server/controllers/agents/responses.js
+++ b/api/server/controllers/agents/responses.js
@@ -50,6 +50,7 @@ const {
   isContentTraversalLimitError,
   prependContentTraversalFragments,
   assertModelBoundContent,
+  reportLocatorTraversalFailure,
   hasModelBoundContentProtection,
   isContentFilterError,
   getSafeErrorMetadata,
@@ -710,6 +711,7 @@ const executeResponse = async (envelope, { req, res }) => {
         : [];
       if (request.previous_response_id) {
         assertModelBoundContent({
+          onTraversalFailure: reportLocatorTraversalFailure,
           filters: appConfig?.filters,
           legacyPii: appConfig?.messageFilter?.pii,
           storedMessages: previousMessages,
@@ -1000,6 +1002,7 @@ const executeResponse = async (envelope, { req, res }) => {
       const modelBoundAgents = [...modelBoundAgentsById.values()];
       const mergedMCPAuthMap = discoveredMCPAuthMap ?? primaryConfig.userMCPAuthMap;
       assertModelBoundContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         filters: appConfig?.filters,
         legacyPii: appConfig?.messageFilter?.pii,
         agents: modelBoundAgents,
@@ -1094,6 +1097,7 @@ const executeResponse = async (envelope, { req, res }) => {
       }
 
       assertModelBoundContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         filters: appConfig?.filters,
         legacyPii: appConfig?.messageFilter?.pii,
         submittedMessages: inputMessages,
diff --git a/api/server/controllers/agents/resume.js b/api/server/controllers/agents/resume.js
index 3b55b714abb..793e89568b8 100644
--- a/api/server/controllers/agents/resume.js
+++ b/api/server/controllers/agents/resume.js
@@ -31,6 +31,7 @@ const {
   getAgentCheckpointer,
   isContentFilterError,
   preflightResumeContent,
+  reportLocatorTraversalFailure,
   getResumeProvenance,
   getUserFacingResumeError,
   decrementPendingRequest,
@@ -197,6 +198,7 @@ async function deleteFailedResumeCheckpoint(args, context) {
 const GENERIC_RESUME_ERROR = 'Resume failed';
 
 const resumeContentProtectionDependencies = {
+  onTraversalFailure: reportLocatorTraversalFailure,
   getAgentCheckpointer,
   checkAccess,
   getMessages,
diff --git a/api/server/controllers/agents/v1.js b/api/server/controllers/agents/v1.js
index 2d55ff44cda..f728a5bd4d2 100644
--- a/api/server/controllers/agents/v1.js
+++ b/api/server/controllers/agents/v1.js
@@ -37,6 +37,7 @@ const {
   isContentTraversalProtected,
   isContentTraversalLimitError,
   resolveCanonicalFileReferences,
+  reportLocatorTraversalFailure,
 } = require('@librechat/api');
 const {
   Time,
@@ -176,6 +177,7 @@ const blockFilteredAgentContent = async (req, res, agentData) => {
   if (filePolicyActive) {
     try {
       const fileInspection = await resolveCanonicalFileReferences({
+        onTraversalFailure: reportLocatorTraversalFailure,
         filters,
         input: agentData,
         user: req.user,
diff --git a/api/server/controllers/assistants/chatV1.js b/api/server/controllers/assistants/chatV1.js
index cac475dee6b..5b33daa7950 100644
--- a/api/server/controllers/assistants/chatV1.js
+++ b/api/server/controllers/assistants/chatV1.js
@@ -12,6 +12,7 @@ const {
   isContentFilterError,
   hasActiveFilePolicy,
   preflightAssistantRunContent,
+  reportLocatorTraversalFailure,
   preflightAssistantUserMessageContent,
 } = require('@librechat/api');
 const {
@@ -335,6 +336,7 @@ const chatV1 = async (req, res) => {
     let persistedAssistant;
     try {
       persistedAssistant = await preflightAssistantRunContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         config: req.config,
         openai,
         user: req.user,
@@ -546,6 +548,7 @@ const chatV1 = async (req, res) => {
       await getRequestFileIds();
       try {
         await preflightAssistantUserMessageContent({
+          onTraversalFailure: reportLocatorTraversalFailure,
           config: req.config,
           user: req.user,
           message: userMessage,
@@ -651,6 +654,7 @@ const chatV1 = async (req, res) => {
 
     try {
       await preflightAssistantRunContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         config: req.config,
         openai,
         user: req.user,
diff --git a/api/server/controllers/assistants/chatV2.js b/api/server/controllers/assistants/chatV2.js
index ac451fa1732..b79053ba2ad 100644
--- a/api/server/controllers/assistants/chatV2.js
+++ b/api/server/controllers/assistants/chatV2.js
@@ -12,6 +12,7 @@ const {
   isContentFilterError,
   hasActiveFilePolicy,
   preflightAssistantRunContent,
+  reportLocatorTraversalFailure,
   preflightAssistantUserMessageContent,
 } = require('@librechat/api');
 const {
@@ -206,6 +207,7 @@ const chatV2 = async (req, res) => {
     await validateAuthor({ req, openai });
     try {
       await preflightAssistantRunContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         config: req.config,
         openai,
         user: req.user,
@@ -377,6 +379,7 @@ const chatV2 = async (req, res) => {
       await getRequestFileIds();
       try {
         await preflightAssistantUserMessageContent({
+          onTraversalFailure: reportLocatorTraversalFailure,
           config: req.config,
           user: req.user,
           message: userMessage,
@@ -489,6 +492,7 @@ const chatV2 = async (req, res) => {
 
     try {
       await preflightAssistantRunContent({
+        onTraversalFailure: reportLocatorTraversalFailure,
         config: req.config,
         openai,
         user: req.user,
diff --git a/api/server/routes/agents/chat.js b/api/server/routes/agents/chat.js
index b9a16e560da..16ecf54fd04 100644
--- a/api/server/routes/agents/chat.js
+++ b/api/server/routes/agents/chat.js
@@ -2,6 +2,7 @@ const express = require('express');
 const { logger } = require('@librechat/data-schemas');
 const {
   createMessageFilterPii,
+  reportLocatorTraversalFailure,
   generateCheckAccess,
   skipAgentCheck,
   applyResumeContext,
@@ -72,6 +73,7 @@ const restoreResumeContext = async (req, res, next) => {
 router.use(restoreResumeContext);
 router.use(
   createMessageFilterPii({
+    onTraversalFailure: reportLocatorTraversalFailure,
     getConfig: (req) => req.config?.messageFilter?.pii,
     getFilters: (req) => req.config?.filters,
     getFiles,
diff --git a/api/server/routes/agents/index.js b/api/server/routes/agents/index.js
index 54405414737..afb425e7d80 100644
--- a/api/server/routes/agents/index.js
+++ b/api/server/routes/agents/index.js
@@ -1,5 +1,6 @@
 const express = require('express');
 const {
+  reportLocatorTraversalFailure,
   isEnabled,
   GenerationJobManager,
   TERMINAL_PUBLICATION_RECONNECT_ERROR,
@@ -1054,6 +1055,7 @@ router.post(
   configMiddleware,
   ...steerLimiters,
   createMessageFilterPii({
+    onTraversalFailure: reportLocatorTraversalFailure,
     getConfig: (req) => req.config?.messageFilter?.pii,
     getFilters: (req) => req.config?.filters,
     getFiles,
@@ -1074,6 +1076,7 @@ router.post(
   configMiddleware,
   ...steerLimiters,
   createMessageFilterPii({
+    onTraversalFailure: reportLocatorTraversalFailure,
     getConfig: (req) => req.config?.messageFilter?.pii,
     getFilters: (req) => req.config?.filters,
     getFiles,
@@ -1113,6 +1116,7 @@ router.post(
   configMiddleware,
   ...steerLimiters,
   createMessageFilterPii({
+    onTraversalFailure: reportLocatorTraversalFailure,
     getConfig: (req) => req.config?.messageFilter?.pii,
     getFilters: (req) => req.config?.filters,
     getFiles,
diff --git a/api/server/routes/agents/openai.js b/api/server/routes/agents/openai.js
index cf2cbb6e9ae..bb5bb83478b 100644
--- a/api/server/routes/agents/openai.js
+++ b/api/server/routes/agents/openai.js
@@ -20,6 +20,7 @@
  */
 const express = require('express');
 const {
+  reportLocatorTraversalFailure,
   createAgentEventBindingHandlers,
   createAgentTriggerIngressHandlers,
   createMessageFilterPii,
@@ -82,7 +83,10 @@ router.post(
 router.post(
   '/events',
   agentEventUserLimiter,
-  createMessageFilterPii({ getConfig: (req) => req.config?.messageFilter?.pii }),
+  createMessageFilterPii({
+    onTraversalFailure: reportLocatorTraversalFailure,
+    getConfig: (req) => req.config?.messageFilter?.pii,
+  }),
   eventBindingHandlers.resolve,
   checkAgentTriggerPermission,
   eventHandlers.enqueueEvent,
diff --git a/api/server/routes/agents/tools.js b/api/server/routes/agents/tools.js
index f1d2c7c2703..843e3a56f26 100644
--- a/api/server/routes/agents/tools.js
+++ b/api/server/routes/agents/tools.js
@@ -1,11 +1,16 @@
 const express = require('express');
-const { createContentFilter, extractToolArgumentContent } = require('@librechat/api');
+const {
+  reportLocatorTraversalFailure,
+  createContentFilter,
+  extractToolArgumentContent,
+} = require('@librechat/api');
 const { callTool, verifyToolAuth, getToolCalls } = require('~/server/controllers/tools');
 const { getAvailableTools } = require('~/server/controllers/PluginController');
 const { toolCallLimiter } = require('~/server/middleware');
 
 const router = express.Router();
 const filterToolArguments = createContentFilter({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getFilters: (req) => req.config?.filters,
   extract: (req) => {
     const {
diff --git a/api/server/routes/assistants/chatV1.js b/api/server/routes/assistants/chatV1.js
index 245b61aee8a..46820cde569 100644
--- a/api/server/routes/assistants/chatV1.js
+++ b/api/server/routes/assistants/chatV1.js
@@ -1,5 +1,5 @@
 const express = require('express');
-const { createMessageFilterPii } = require('@librechat/api');
+const { createMessageFilterPii, reportLocatorTraversalFailure } = require('@librechat/api');
 
 const router = express.Router();
 const { handleAbort, validateModel, buildEndpointOption } = require('~/server/middleware');
@@ -12,6 +12,7 @@ const { getFiles } = require('~/models');
 router.post('/abort', handleAbort());
 
 const filterMessageContent = createMessageFilterPii({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getConfig: (req) => req.config?.messageFilter?.pii,
   getFilters: (req) => req.config?.filters,
   getFiles,
diff --git a/api/server/routes/assistants/chatV2.js b/api/server/routes/assistants/chatV2.js
index 2f28dac0c82..6e105539a99 100644
--- a/api/server/routes/assistants/chatV2.js
+++ b/api/server/routes/assistants/chatV2.js
@@ -1,5 +1,5 @@
 const express = require('express');
-const { createMessageFilterPii } = require('@librechat/api');
+const { createMessageFilterPii, reportLocatorTraversalFailure } = require('@librechat/api');
 
 const router = express.Router();
 const { handleAbort, validateModel, buildEndpointOption } = require('~/server/middleware');
@@ -12,6 +12,7 @@ const { getFiles } = require('~/models');
 router.post('/abort', handleAbort());
 
 const filterMessageContent = createMessageFilterPii({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getConfig: (req) => req.config?.messageFilter?.pii,
   getFilters: (req) => req.config?.filters,
   getFiles,
diff --git a/api/server/routes/assistants/v1.js b/api/server/routes/assistants/v1.js
index 63d79a44f2f..d82a2f24314 100644
--- a/api/server/routes/assistants/v1.js
+++ b/api/server/routes/assistants/v1.js
@@ -1,5 +1,9 @@
 const express = require('express');
-const { createContentFilter, extractAssistantContent } = require('@librechat/api');
+const {
+  reportLocatorTraversalFailure,
+  createContentFilter,
+  extractAssistantContent,
+} = require('@librechat/api');
 const controllers = require('~/server/controllers/assistants/v1');
 const { getFiles } = require('~/models');
 const documents = require('./documents');
@@ -9,6 +13,7 @@ const tools = require('./tools');
 const router = express.Router();
 const avatar = express.Router();
 const filterAssistantContent = createContentFilter({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getFilters: (req) => req.config?.filters,
   extract: (req) => extractAssistantContent(req.body),
   getOpaqueFileInput: (req) => req.body,
diff --git a/api/server/routes/assistants/v2.js b/api/server/routes/assistants/v2.js
index 748b123e0a5..4af1dea42af 100644
--- a/api/server/routes/assistants/v2.js
+++ b/api/server/routes/assistants/v2.js
@@ -1,5 +1,9 @@
 const express = require('express');
-const { createContentFilter, extractAssistantContent } = require('@librechat/api');
+const {
+  reportLocatorTraversalFailure,
+  createContentFilter,
+  extractAssistantContent,
+} = require('@librechat/api');
 const { configMiddleware } = require('~/server/middleware');
 const v1 = require('~/server/controllers/assistants/v1');
 const v2 = require('~/server/controllers/assistants/v2');
@@ -11,6 +15,7 @@ const tools = require('./tools');
 const router = express.Router();
 router.use(configMiddleware);
 const filterAssistantContent = createContentFilter({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getFilters: (req) => req.config?.filters,
   extract: (req) => extractAssistantContent(req.body),
   getOpaqueFileInput: (req) => req.body,
diff --git a/api/server/routes/convos.js b/api/server/routes/convos.js
index bdc00fb5f86..04c9ec5d992 100644
--- a/api/server/routes/convos.js
+++ b/api/server/routes/convos.js
@@ -2,6 +2,7 @@ const multer = require('multer');
 const express = require('express');
 const { sleep } = require('@librechat/agents');
 const {
+  reportLocatorTraversalFailure,
   isEnabled,
   normalizeLimit,
   openCheckpointDeletion,
@@ -64,10 +65,12 @@ const parentSubagentIndexHandler = createParentSubagentIndexHandler({
   listSubagentTasksForThreads: db.listSubagentTasksForThreads,
 });
 const filterConversationTitle = createContentFilter({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getFilters: (req) => req.config?.filters,
   extract: (req) => extractConversationTitleContent(req.body),
 });
 const filterSubagentControlMessage = createContentFilter({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getFilters: (req) => req.config?.filters,
   getLegacyPii: (req) => req.config?.messageFilter?.pii,
   extract: (req) =>
diff --git a/api/server/routes/messages.js b/api/server/routes/messages.js
index 24704ba7695..756f8ff8cb1 100644
--- a/api/server/routes/messages.js
+++ b/api/server/routes/messages.js
@@ -22,6 +22,7 @@ const {
   assertStoredMessageMutationAllowed,
   assertChatMutationAllowed,
   assertStoredMessageBranchAllowed,
+  reportLocatorTraversalFailure,
   mergeUserSubmittedPaths,
   mergeUserSubmittedMessageFieldPaths,
   isContentFilterError,
@@ -40,6 +41,8 @@ const db = require('~/models');
 
 const router = express.Router();
 const filterStoredMessageContent = createContentFilter({
+  messageCount: 1,
+  onTraversalFailure: reportLocatorTraversalFailure,
   getFilters: (req) => req.config?.filters,
   getMessageRoles: (req) => [req.body?.role],
   getOpaqueFileInput: (req) => req.body,
@@ -47,6 +50,7 @@ const filterStoredMessageContent = createContentFilter({
   extract: (req) => extractStoredMessageContent(req.body),
 });
 const filterFeedbackContent = createContentFilter({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getFilters: (req) => req.config?.filters,
   extract: (req) => extractFeedbackContent(req.body),
 });
@@ -351,7 +355,7 @@ router.post('/branch', configMiddleware, async (req, res) => {
         message: newMessage,
         user: req.user,
       },
-      { getFiles: db.getFiles },
+      { getFiles: db.getFiles, onTraversalFailure: reportLocatorTraversalFailure },
     );
 
     const savedMessage = await db.saveMessage(
diff --git a/api/server/routes/presets.js b/api/server/routes/presets.js
index 7e3ee1b92e2..35b5e697ab6 100644
--- a/api/server/routes/presets.js
+++ b/api/server/routes/presets.js
@@ -2,6 +2,7 @@ const crypto = require('crypto');
 const express = require('express');
 const { logger } = require('@librechat/data-schemas');
 const {
+  reportLocatorTraversalFailure,
   createContentFilter,
   extractPresetContent,
   projectStoredPresets,
@@ -11,6 +12,7 @@ const { requireJwtAuth, configMiddleware } = require('~/server/middleware');
 
 const router = express.Router();
 const filterPresetContent = createContentFilter({
+  onTraversalFailure: reportLocatorTraversalFailure,
   getFilters: (req) => req.config?.filters,
   extract: (req) => extractPresetContent(req.body),
 });
diff --git a/api/server/routes/share.js b/api/server/routes/share.js
index 2aad568c247..3cd5761cb19 100644
--- a/api/server/routes/share.js
+++ b/api/server/routes/share.js
@@ -3,6 +3,7 @@ const express = require('express');
 const {
   assertModelBoundContent,
   createShareContentPreflight,
+  reportLocatorTraversalFailure,
   isEnabled,
   isContentFilterError,
   isConversationImportError,
@@ -140,6 +141,7 @@ const PREVIEW_LAZY_SWEEP_CUTOFF_MS = 2 * 60 * 1000;
 const enforceSharedFileContentPolicy = (req, res, next) => {
   try {
     assertModelBoundContent({
+      onTraversalFailure: reportLocatorTraversalFailure,
       filters: req.config?.filters,
       files: [req.liveFile],
     });
@@ -367,6 +369,7 @@ if (allowSharedLinks) {
     async (req, res) => {
       try {
         const contentPreflight = createShareContentPreflight(req.config?.filters, {
+          onTraversalFailure: reportLocatorTraversalFailure,
           sharedFileMetadata: true,
           legacyPii: req.config?.messageFilter?.pii,
         });
@@ -429,6 +432,7 @@ if (allowSharedLinks) {
           // the GET share route so disabled file snapshots aren't copied into forks.
           snapshotFiles: !isFileSnapshotKillSwitchActive(),
           sharedContentPreflight: createShareContentPreflight(req.config?.filters, {
+            onTraversalFailure: reportLocatorTraversalFailure,
             sharedFileMetadata: true,
             legacyPii: req.config?.messageFilter?.pii,
           }),
@@ -653,6 +657,7 @@ router.post(
       // did not uncheck "share files" (body flag absent defaults to enabled).
       const snapshotFiles = isFileSnapshotEnabled(req.config) && requestedSnapshotFiles !== false;
       const contentPreflight = createShareContentPreflight(req.config?.filters, {
+        onTraversalFailure: reportLocatorTraversalFailure,
         snapshotFiles,
         user: req.user,
         getFiles,
@@ -723,6 +728,7 @@ router.patch(
 
       const snapshotFiles = isFileSnapshotEnabled(req.config) && requestedSnapshotFiles !== false;
       const contentPreflight = createShareContentPreflight(req.config?.filters, {
+        onTraversalFailure: reportLocatorTraversalFailure,
         snapshotFiles,
         user: req.user,
         getFiles,
diff --git a/api/server/services/ToolService.js b/api/server/services/ToolService.js
index 88dae404c56..bc7693cf34a 100644
--- a/api/server/services/ToolService.js
+++ b/api/server/services/ToolService.js
@@ -32,6 +32,7 @@ const {
   inspectContentWithTraversal,
   ContentFilterError,
   assertModelBoundContent,
+  reportLocatorTraversalFailure,
   extractToolArgumentContent,
   contentFilterModelBoundBlockResponse,
   getSafeErrorMetadata,
@@ -183,6 +184,7 @@ const assertToolResourcesAllowed = ({ req, toolResources, tools }) => {
     Array.isArray(resource?.files) ? resource.files : [],
   );
   assertModelBoundContent({
+    onTraversalFailure: reportLocatorTraversalFailure,
     filters,
     agents: [{ tool_resources: activeResources }],
     files,
@@ -200,6 +202,7 @@ const withoutEncryptedActionSecrets = (action) => {
 const prepareStoredActionsForUse = async ({ actions, filters, decrypt }) => {
   if (filters != null) {
     assertModelBoundContent({
+      onTraversalFailure: reportLocatorTraversalFailure,
       filters,
       actions: actions.map(withoutEncryptedActionSecrets),
     });
@@ -220,7 +223,11 @@ const prepareStoredActionsForUse = async ({ actions, filters, decrypt }) => {
     })),
   );
   if (filters != null) {
-    assertModelBoundContent({ filters, actions: decryptedActions });
+    assertModelBoundContent({
+      onTraversalFailure: reportLocatorTraversalFailure,
+      filters,
+      actions: decryptedActions,
+    });
   }
   return decryptedActions;
 };
diff --git a/api/server/utils/import/importBatchBuilder.js b/api/server/utils/import/importBatchBuilder.js
index ac8da31cfa5..afbd5d3281e 100644
--- a/api/server/utils/import/importBatchBuilder.js
+++ b/api/server/utils/import/importBatchBuilder.js
@@ -3,6 +3,7 @@ const {
   assertConversationImportWriteSize,
   assertModelBoundContent,
   assertConversationImportContentAllowed,
+  reportLocatorTraversalFailure,
   executeConversationImportWrites,
 } = require('@librechat/api');
 const {
@@ -56,6 +57,7 @@ function createImportBatchBuilder(requestUserId, interfaceConfig, filters, legac
 async function assertConversationContentAllowed(filters, snapshot, resolutionContext = {}) {
   return assertConversationImportContentAllowed(filters, snapshot, {
     ...resolutionContext,
+    onTraversalFailure: reportLocatorTraversalFailure,
     assertModelBoundContent,
   });
 }
diff --git a/api/server/utils/import/importBatchBuilder.spec.js b/api/server/utils/import/importBatchBuilder.spec.js
index f14ad5fd498..f7a28f54d03 100644
--- a/api/server/utils/import/importBatchBuilder.spec.js
+++ b/api/server/utils/import/importBatchBuilder.spec.js
@@ -437,8 +437,21 @@ describe('ImportBatchBuilder content filtering', () => {
     const messageCalls = mockAssertModelBoundContent.mock.calls.filter(
       ([input]) => input.storedMessages != null,
     );
-    expect(fileCalls).toEqual([[{ filters, resolvedFiles: [canonicalFile] }]]);
+    expect(fileCalls).toEqual([
+      [
+        {
+          filters,
+          resolvedFiles: [canonicalFile],
+          onTraversalFailure: actualApi.reportLocatorTraversalFailure,
+        },
+      ],
+    ]);
     expect(messageCalls).toHaveLength(2);
+    expect(
+      messageCalls.every(
+        ([input]) => input.onTraversalFailure === actualApi.reportLocatorTraversalFailure,
+      ),
+    ).toBe(true);
     expect(messageCalls.every(([input]) => input.storedMessages.length === 1)).toBe(true);
     expect(messageCalls.every(([input]) => input.resolvedFiles == null)).toBe(true);
   });
@@ -742,8 +755,21 @@ describe('ImportBatchBuilder content filtering', () => {
     const messageCalls = mockAssertModelBoundContent.mock.calls.filter(
       ([input]) => input.storedMessages != null,
     );
-    expect(fileCalls).toEqual([[{ filters, resolvedFiles: [canonicalFile] }]]);
+    expect(fileCalls).toEqual([
+      [
+        {
+          filters,
+          resolvedFiles: [canonicalFile],
+          onTraversalFailure: actualApi.reportLocatorTraversalFailure,
+        },
+      ],
+    ]);
     expect(messageCalls).toHaveLength(2);
+    expect(
+      messageCalls.every(
+        ([input]) => input.onTraversalFailure === actualApi.reportLocatorTraversalFailure,
+      ),
+    ).toBe(true);
     expect(messageCalls.every(([input]) => input.storedMessages.length === 1)).toBe(true);
     expect(messageCalls.every(([input]) => input.resolvedFiles == null)).toBe(true);
     expect(bulkSaveMessages).not.toHaveBeenCalled();
diff --git a/client/package.json b/client/package.json
index 669107f62bc..a8f070957c9 100644
--- a/client/package.json
+++ b/client/package.json
@@ -80,8 +80,8 @@
     "js-cookie": "^3.0.5",
     "librechat-data-provider": "*",
     "lodash": "^4.17.23",
-    "lucide": "^0.525.0",
-    "lucide-react": "^0.525.0",
+    "lucide": "^0.528.0",
+    "lucide-react": "^0.528.0",
     "match-sorter": "^8.1.0",
     "mdast-util-directive": "^3.0.0",
     "mdast-util-from-markdown": "^2.0.1",
diff --git a/client/src/components/Chat/ChatView.tsx b/client/src/components/Chat/ChatView.tsx
index 96b0ad732a8..de800d6eb4d 100644
--- a/client/src/components/Chat/ChatView.tsx
+++ b/client/src/components/Chat/ChatView.tsx
@@ -8,6 +8,7 @@ import { Constants, buildTree } from 'librechat-data-provider';
 import type { TChatProject } from 'librechat-data-provider';
 import type { ChatFormValues } from '~/common';
 import {
+  useScrollbarGutterSeed,
   useAddedResponse,
   useResumeOnLoad,
   useAdaptiveSSE,
@@ -20,13 +21,13 @@ import ApprovalProvider from './Messages/Content/ApprovalContext';
 import ConversationStarters from './Input/ConversationStarters';
 import { pendingApprovalActionFamily } from './approval/state';
 import { useGetMessagesByConvoId } from '~/data-provider';
+import Footer, { useConfiguredFooter } from './Footer';
 import { AskAnswerHostProvider } from './ask/state';
 import MessagesView from './Messages/MessagesView';
 import Presentation from './Presentation';
 import ChatForm from './Input/ChatForm';
 import Landing from './Landing';
 import Header from './Header';
-import Footer from './Footer';
 import { cn } from '~/utils';
 import store from '~/store';
 
@@ -51,6 +52,15 @@ function ChatView({ index = 0, project }: { index?: number; project?: TChatProje
     pendingApprovalActionFamily(conversationId ?? Constants.NEW_CONVO),
   );
 
+  /** The welcome screen reserves the message column's scrollbar band before any
+   *  column exists to measure it (see the column's class list below). */
+  useScrollbarGutterSeed();
+
+  /** A conversation carries a footer only for configured content, and the
+   *  composer's clearance has to account for the bar when it does — including
+   *  while the config is still in flight, so a cold load does not jump. */
+  const configuredFooter = useConfiguredFooter();
+
   const methods = useForm<ChatFormValues>({
     defaultValues: { text: '' },
   });
@@ -101,6 +111,12 @@ function ChatView({ index = 0, project }: { index?: number; project?: TChatProje
   const isLandingPage =
     (!messagesTree || messagesTree.length === 0) &&
     (conversationId === Constants.NEW_CONVO || !conversationId);
+
+  /** A footer bar renders beneath the composer on the welcome screen always, and
+   *  in a conversation when the deployment configured one. `present` already
+   *  carries the remembered answer while the config is in flight, so this is the
+   *  same value before and after it resolves. */
+  const footerBelow = isLandingPage || configuredFooter.present;
   const isNavigating = (!messagesTree || messagesTree.length === 0) && conversationId != null;
   const isProjectLandingPage = isLandingPage && project != null;
 
@@ -151,7 +167,15 @@ function ChatView({ index = 0, project }: { index?: number; project?: TChatProje
                       className={cn(
                         'flex flex-col',
                         isLandingPage
-                          ? 'flex-1 items-center justify-end sm:justify-center'
+                          ? /* The gutter is reserved once per state, wherever the
+                               centring happens. A conversation centres the composer
+                               inside the band below, against a message column that
+                               holds the scrollbar band back; the landing page centres
+                               this whole column instead, greeting and composer
+                               together, so it holds the same band back here. Without
+                               it the composer lands 4px right of where a conversation
+                               puts it and slides sideways on the way in. */
+                            'scrollbar-gutter-spacer flex-1 items-center justify-end sm:justify-center'
                           : 'h-full overflow-y-auto',
                       )}
                     >
@@ -181,9 +205,15 @@ function ChatView({ index = 0, project }: { index?: number; project?: TChatProje
                             index={index}
                             placeholder={chatFormPlaceholder}
                             project={isProjectLandingPage ? project : undefined}
+                            isLandingPage={isLandingPage}
+                            footerBelow={footerBelow}
+                            centerFormOnLanding={centerFormOnLanding}
                           />
                         )}
-                        {!isLandingPage && <Footer />}
+                        {/* The generic disclaimer is the welcome screen's; a
+                            deployment's own footer, privacy policy and terms
+                            stay with the conversation that always showed them. */}
+                        {!isLandingPage && configuredFooter.present && <Footer configuredOnly />}
                       </div>
                     </div>
                     {isLandingPage && <Footer />}
diff --git a/client/src/components/Chat/Footer.tsx b/client/src/components/Chat/Footer.tsx
index 31cc0d48eee..005802b6f80 100644
--- a/client/src/components/Chat/Footer.tsx
+++ b/client/src/components/Chat/Footer.tsx
@@ -1,21 +1,69 @@
 import React, { useEffect, memo } from 'react';
+import { useAtom } from 'jotai';
 import TagManager from 'react-gtm-module';
 import ReactMarkdown from 'react-markdown';
 import { Constants } from 'librechat-data-provider';
 import type { TStartupConfig } from 'librechat-data-provider';
 import { useGetStartupConfig } from '~/data-provider';
+import { configuredFooterAtom } from './footerMemory';
 import { useLocalize } from '~/hooks';
 
 type FooterProps = {
   className?: string;
   startupConfig?: FooterStartupConfig | null;
+  /** A started conversation keeps only what the deployment configured. The
+   *  generic model disclaimer belongs to the welcome screen, where it is first
+   *  read, but a custom footer, a privacy policy and terms of service are the
+   *  operator's own content: scoping the disclaimer out must not take their
+   *  configuration off the screen that used to carry it. With nothing
+   *  configured, this renders nothing at all. */
+  configuredOnly?: boolean;
 };
 
 type FooterStartupConfig = Pick<Partial<TStartupConfig>, 'analyticsGtmId' | 'customFooter'> & {
   interface?: Pick<NonNullable<TStartupConfig['interface']>, 'privacyPolicy' | 'termsOfService'>;
 };
 
-function Footer({ className, startupConfig }: FooterProps) {
+export type ConfiguredFooter = {
+  /** Whether a footer bar belongs under the composer in a conversation: the
+   *  deployment configured a custom footer, a privacy policy or terms of
+   *  service. Before the startup config answers this is the answer the last
+   *  load recorded, which is what keeps a cold load from laying out twice. */
+  present: boolean;
+  /** The startup config has answered on this load. */
+  resolved: boolean;
+};
+
+/**
+ * What a conversation has to render beneath its composer. The conversation
+ * renders the footer only for configured content, and the composer above it
+ * reserves the band that bar needs — the bar is absolutely positioned in a
+ * zero-height wrapper, so a composer that did not reserve it would be painted
+ * over. Both decisions read this one answer so they cannot disagree.
+ *
+ * While `/api/config` is in flight the answer is the one this deployment gave
+ * last (`configuredFooterAtom`), so a cold load lays out once instead of
+ * guessing and correcting. Only a successful response replaces it: a request
+ * that exhausted its retries has answered nothing.
+ */
+export function useConfiguredFooter(): ConfiguredFooter {
+  const { data: config, isSuccess } = useGetStartupConfig();
+  const [remembered, remember] = useAtom(configuredFooterAtom);
+  const configured =
+    typeof config?.customFooter === 'string' ||
+    config?.interface?.privacyPolicy?.externalUrl != null ||
+    config?.interface?.termsOfService?.externalUrl != null;
+
+  useEffect(() => {
+    if (isSuccess && configured !== remembered) {
+      remember(configured);
+    }
+  }, [configured, isSuccess, remembered, remember]);
+
+  return { present: isSuccess ? configured : remembered, resolved: isSuccess };
+}
+
+function Footer({ className, startupConfig, configuredOnly = false }: FooterProps) {
   const shouldFetchConfig = startupConfig === undefined;
   const { data: fetchedConfig } = useGetStartupConfig({ enabled: shouldFetchConfig });
   const config = shouldFetchConfig ? fetchedConfig : startupConfig;
@@ -25,25 +73,27 @@ function Footer({ className, startupConfig }: FooterProps) {
   const termsOfService = config?.interface?.termsOfService;
 
   const privacyPolicyRender = privacyPolicy?.externalUrl != null && (
-    <a className="text-text-secondary underline" href={privacyPolicy.externalUrl} rel="noreferrer">
+    <a className="text-text-muted underline" href={privacyPolicy.externalUrl} rel="noreferrer">
       {localize('com_ui_privacy_policy')}
     </a>
   );
 
   const termsOfServiceRender = termsOfService?.externalUrl != null && (
-    <a className="text-text-secondary underline" href={termsOfService.externalUrl} rel="noreferrer">
+    <a className="text-text-muted underline" href={termsOfService.externalUrl} rel="noreferrer">
       {localize('com_ui_terms_of_service')}
     </a>
   );
 
-  const mainContentParts = (
-    typeof config?.customFooter === 'string'
-      ? config.customFooter
-      : '[LibreChat ' +
-        Constants.VERSION +
-        '](https://librechat.ai) - ' +
-        localize('com_ui_latest_footer')
-  ).split('|');
+  const configuredFooter = typeof config?.customFooter === 'string' ? config.customFooter : null;
+  /** The generic disclaimer is the part a conversation drops; operator content is not. */
+  const genericFooter = configuredOnly
+    ? ''
+    : '[LibreChat ' +
+      Constants.VERSION +
+      '](https://librechat.ai) - ' +
+      localize('com_ui_latest_footer');
+  const mainContent = configuredFooter ?? genericFooter;
+  const mainContentParts = mainContent === '' ? [] : mainContent.split('|');
 
   useEffect(() => {
     if (config?.analyticsGtmId != null && typeof window.google_tag_manager === 'undefined') {
@@ -61,7 +111,7 @@ function Footer({ className, startupConfig }: FooterProps) {
           a: ({ node: _n, href, children, ...otherProps }) => {
             return (
               <a
-                className="text-text-secondary underline"
+                className="text-text-muted underline"
                 href={href}
                 target="_blank"
                 rel="noopener noreferrer"
@@ -84,12 +134,27 @@ function Footer({ className, startupConfig }: FooterProps) {
     Boolean,
   );
 
+  /** A conversation with no configured footer has nothing to place, so it does
+   *  not place an empty bar over the bottom of the thread. */
+  if (footerElements.length === 0) {
+    return null;
+  }
+
   return (
     <div className="relative w-full">
       <div
         className={
           className ??
-          'absolute bottom-0 left-0 right-0 hidden items-center justify-center gap-2 px-2 py-2 text-center text-xs text-text-primary sm:flex md:px-[60px]'
+          /* The disclaimer is the least important text on the landing page and
+             sat in `text-primary`, the same weight as the greeting above it.
+             `text-muted` is the quietest text token that still clears AA for
+             12px copy on `bg-presentation` — 5.11:1 on white, 7.93:1 on the dark
+             canvas — and the contrast modes collapse every text token to pure
+             black or white, so they stay at 21:1. The links keep the same colour
+             rather than the brighter `text-secondary`: the underline carries the
+             affordance, and a link that outshines its own sentence puts the
+             emphasis back where this change takes it from. */
+          'absolute bottom-0 left-0 right-0 hidden items-center justify-center gap-2 px-2 py-2 text-center text-xs text-text-muted sm:flex md:px-[60px]'
         }
       >
         {footerElements.map((contentRender, index) => {
diff --git a/client/src/components/Chat/Input/ChatForm.tsx b/client/src/components/Chat/Input/ChatForm.tsx
index c1e39ccea2d..f7e640a21af 100644
--- a/client/src/components/Chat/Input/ChatForm.tsx
+++ b/client/src/components/Chat/Input/ChatForm.tsx
@@ -74,6 +74,18 @@ interface ChatFormProps {
   index: number;
   placeholder?: string;
   project?: TChatProject;
+  /** Owned by ChatView: which layout the composer sits in — the welcome screen
+   *  floats or bottoms it out, a conversation ends the page with it. */
+  isLandingPage: boolean;
+  /** Owned by the host: the app-level preference for where the welcome-screen
+   *  composer sits. The chat feature only consumes it. */
+  centerFormOnLanding: boolean;
+  /** Owned by ChatView: whether a footer bar renders under this band. It is an
+   *  absolutely positioned bar in a zero-height wrapper, so the clearance here
+   *  is the only thing keeping it off the composer. True on the welcome screen,
+   *  which always carries one, and in a conversation whose deployment
+   *  configured footer content of its own. */
+  footerBelow: boolean;
   /** From ChatContext: individual values so memo can compare them */
   files: Map<string, ExtendedFile>;
   setFiles: FileSetter;
@@ -107,6 +119,9 @@ const ChatForm = memo(function ChatForm({
   index,
   placeholder,
   project,
+  isLandingPage,
+  footerBelow,
+  centerFormOnLanding,
   files,
   setFiles,
   conversation,
@@ -133,7 +148,6 @@ const ChatForm = memo(function ChatForm({
   const chatDirection = useRecoilValue(store.chatDirection);
   const automaticPlayback = useRecoilValue(store.automaticPlayback);
   const maximizeChatSpace = useRecoilValue(store.maximizeChatSpace);
-  const centerFormOnLanding = useRecoilValue(store.centerFormOnLanding);
   const isTemporary = useRecoilValue(store.isTemporary);
 
   const [badges, setBadges] = useRecoilState(store.chatBadges);
@@ -571,6 +585,23 @@ const ChatForm = memo(function ChatForm({
     [isCollapsed, isMoreThanThreeRows],
   );
 
+  /* From `sm` up the band leaves room under itself for the disclaimer, which only
+     the landing page carries — doubled while the centred landing composer floats,
+     and dropped back the moment a submission starts the thread. A started
+     conversation has nothing beneath it, so it keeps only enough to clear the
+     surface's own shadow. Below `sm` the composer runs to the viewport floor in
+     every state. */
+  const landingClearance =
+    centerFormOnLanding && !isSubmitting ? 'transition-all duration-200 sm:mb-28' : 'sm:mb-10';
+  let bottomClearance = 'sm:mb-4';
+  if (isLandingPage) {
+    bottomClearance = landingClearance;
+  } else if (footerBelow) {
+    /* A conversation that carries a configured footer keeps the band that bar
+       needs, exactly as the welcome screen does. */
+    bottomClearance = 'sm:mb-10';
+  }
+
   return (
     <form
       onSubmit={methods.handleSubmit((data) => {
@@ -592,14 +623,16 @@ const ChatForm = memo(function ChatForm({
         return submitMessage(data);
       })}
       className={cn(
-        'mx-auto flex w-full flex-row gap-3 transition-[max-width] duration-300 sm:px-2',
+        /* `margin-bottom` is animated as well as `max-width`: it is what carries
+           the composer between the landing clearance and the conversation one,
+           and the landing page keeps the same form node when a conversation
+           opens, so the band travels instead of jumping. The centred landing
+           composer overrides both with its own `transition-all`, and a reader who
+           asked for less motion gets the new position outright — this one is a
+           slide across the page rather than decoration. */
+        'mx-auto flex w-full flex-row gap-3 transition-[max-width,margin-bottom] duration-300 motion-reduce:transition-none sm:px-2',
         maximizeChatSpace ? 'max-w-full' : 'md:max-w-3xl xl:max-w-4xl',
-        centerFormOnLanding &&
-          (conversationId == null || conversationId === Constants.NEW_CONVO) &&
-          !isSubmitting &&
-          conversation?.messages?.length === 0
-          ? 'transition-all duration-200 sm:mb-28'
-          : 'sm:mb-10',
+        bottomClearance,
       )}
     >
       <div className="relative flex h-full min-w-0 flex-1 items-stretch md:flex-col">
@@ -650,7 +683,11 @@ const ChatForm = memo(function ChatForm({
               data-testid="composer-surface"
               onClick={handleContainerClick}
               className={cn(
-                'relative flex w-full flex-grow flex-col overflow-hidden rounded-t-3xl pb-4 sm:rounded-3xl sm:pb-0',
+                /* The surface runs to the viewport floor below `sm`, where it is
+                   squared off at the bottom (`rounded-t-3xl`) and no disclaimer
+                   follows it — so the action row is the last thing in it, with no
+                   band of padding under the buttons. */
+                'relative flex w-full flex-grow flex-col overflow-hidden rounded-t-3xl sm:rounded-3xl',
                 composerSurfaceClasses(),
                 isTextAreaFocused ? composerSurfaceShadow.focused : composerSurfaceShadow.blurred,
                 /* Temporary-chat accent is a ChatForm-only override, not part of
@@ -885,10 +922,16 @@ function ChatFormWrapper({
   index = 0,
   placeholder,
   project,
+  isLandingPage,
+  footerBelow,
+  centerFormOnLanding,
 }: {
   index?: number;
   placeholder?: string;
   project?: TChatProject;
+  isLandingPage: boolean;
+  footerBelow: boolean;
+  centerFormOnLanding: boolean;
 }) {
   const {
     files,
@@ -953,6 +996,9 @@ function ChatFormWrapper({
       index={index}
       placeholder={placeholder}
       project={project}
+      isLandingPage={isLandingPage}
+      footerBelow={footerBelow}
+      centerFormOnLanding={centerFormOnLanding}
       files={files}
       setFiles={setFiles}
       conversation={stableConversation}
diff --git a/client/src/components/Chat/Input/QuoteButton.tsx b/client/src/components/Chat/Input/QuoteButton.tsx
index 712f84df827..f5d50978063 100644
--- a/client/src/components/Chat/Input/QuoteButton.tsx
+++ b/client/src/components/Chat/Input/QuoteButton.tsx
@@ -1,4 +1,4 @@
-import { memo, useRef, useState, useEffect, useCallback, useLayoutEffect } from 'react';
+import { memo, useRef, useEffect, useCallback, useLayoutEffect } from 'react';
 import { createPortal } from 'react-dom';
 import { TextQuote } from 'lucide-react';
 import { useSetRecoilState } from 'recoil';
@@ -244,7 +244,7 @@ const resolveTop = (anchor: Anchor, height: number, preferBelow: boolean): numbe
  */
 function QuoteButton({ conversationId }: { conversationId: string }) {
   const localize = useLocalize();
-  const [selection, setSelection] = useState<SelectionState | null>(null);
+  const selectionRef = useRef<SelectionState | null>(null);
   const buttonRef = useRef<HTMLButtonElement>(null);
   const rangeRef = useRef<Range | null>(null);
   const clippersRef = useRef<HTMLElement[]>([]);
@@ -255,6 +255,32 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
   const hideRef = useRef<() => void>(() => undefined);
   const setQuotes = useSetRecoilState(store.pendingQuotesByConvoId(conversationId));
 
+  /** Selection and scroll events must not enter React's commit/selection-restoration
+   *  path. Keep the portal mounted and update only its transient presentation. */
+  const presentSelection = useCallback((next: SelectionState | null) => {
+    selectionRef.current = next;
+    const button = buttonRef.current;
+    if (!button) {
+      return;
+    }
+    if (!next) {
+      button.style.display = 'none';
+      return;
+    }
+    const touch = String(next.viaTouch);
+    if (button.dataset.touch !== touch) {
+      button.dataset.touch = touch;
+    }
+    if (button.style.display === 'none') {
+      button.style.display = 'inline-flex';
+    }
+    const { width, height } = button.getBoundingClientRect();
+    const maxLeft = Math.max(EDGE_MARGIN, window.innerWidth - width - EDGE_MARGIN);
+    const left = Math.min(Math.max(anchorCenterX(next.anchor) - width / 2, EDGE_MARGIN), maxLeft);
+    button.style.top = `${resolveTop(next.anchor, height, next.viaTouch)}px`;
+    button.style.left = `${left}px`;
+  }, []);
+
   useEffect(() => {
     let settleTimer: ReturnType<typeof setTimeout> | undefined;
     let frame = 0;
@@ -279,7 +305,7 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
       }
       rangeRef.current = null;
       clippersRef.current = [];
-      setSelection(null);
+      presentSelection(null);
     };
 
     const hide = () => {
@@ -299,18 +325,18 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
         hide();
         return;
       }
-      rangeRef.current = reading.range;
+      /** Native handle drags can mutate the Selection's Range in place. */
+      rangeRef.current = reading.range.cloneRange();
       clippersRef.current = reading.clippers;
-      /** Reuse the previous state object when nothing moved so a redundant
-       *  settle pass costs no render. */
-      setSelection((prev) =>
-        prev &&
-        prev.text === reading.text &&
-        prev.viaTouch === touch &&
-        sameAnchor(prev.anchor, reading.anchor)
-          ? prev
-          : { text: reading.text, anchor: reading.anchor, viaTouch: touch },
-      );
+      const previous = selectionRef.current;
+      if (
+        !previous ||
+        previous.text !== reading.text ||
+        previous.viaTouch !== touch ||
+        !sameAnchor(previous.anchor, reading.anchor)
+      ) {
+        presentSelection({ text: reading.text, anchor: reading.anchor, viaTouch: touch });
+      }
     };
 
     const handlePointerDown = (event: PointerEvent) => {
@@ -382,9 +408,10 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
         hide();
         return;
       }
-      setSelection((prev) =>
-        prev && !sameAnchor(prev.anchor, anchor) ? { ...prev, anchor } : prev,
-      );
+      const previous = selectionRef.current;
+      if (previous && !sameAnchor(previous.anchor, anchor)) {
+        presentSelection({ ...previous, anchor });
+      }
     };
 
     const scheduleReanchor = () => {
@@ -422,29 +449,17 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
       document.removeEventListener('scroll', scheduleReanchor, true);
       window.removeEventListener('resize', scheduleReanchor);
     };
-  }, []);
+  }, [presentSelection]);
 
-  /** Clamp using the button's real size so it never lands off-screen. Apply the
-   *  measured layout directly before paint: feeding it back through state adds
-   *  a synchronous render to every selection update and can exhaust React's
-   *  nested-update limit while the browser is still changing the selection. */
+  /** A parent render (for example a locale change) can change the button size. */
   useLayoutEffect(() => {
-    const button = buttonRef.current;
-    if (!selection || !button) {
-      return;
-    }
-    const { width, height } = button.getBoundingClientRect();
-    const maxLeft = Math.max(EDGE_MARGIN, window.innerWidth - width - EDGE_MARGIN);
-    const left = Math.min(
-      Math.max(anchorCenterX(selection.anchor) - width / 2, EDGE_MARGIN),
-      maxLeft,
-    );
-    const top = resolveTop(selection.anchor, height, selection.viaTouch);
+    presentSelection(selectionRef.current);
+  });
 
-    button.style.top = `${top}px`;
-    button.style.left = `${left}px`;
-    button.style.visibility = 'visible';
-  }, [selection]);
+  useLayoutEffect(() => {
+    pressedTextRef.current = null;
+    hideRef.current();
+  }, [conversationId]);
 
   const commitQuote = useCallback(
     (text: string) => {
@@ -454,18 +469,19 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
       rangeRef.current = null;
       clippersRef.current = [];
       pressedTextRef.current = null;
-      setSelection(null);
+      presentSelection(null);
       window.getSelection()?.removeAllRanges();
       document.getElementById(mainTextareaId)?.focus();
     },
-    [setQuotes],
+    [setQuotes, presentSelection],
   );
 
   const addQuote = useCallback(() => {
+    const selection = selectionRef.current;
     if (selection) {
       commitQuote(selection.text);
     }
-  }, [selection, commitQuote]);
+  }, [commitQuote]);
 
   /**
    * End a touch press that did not commit. While a press is in flight the
@@ -482,16 +498,12 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
     }
   }, []);
 
-  if (!selection) {
-    return null;
-  }
-
   return createPortal(
     <button
       ref={buttonRef}
       type="button"
       /** A tap is also the gesture that dismisses a selection, so `click` can
-       *  never be relied on here: the button is already unmounted by the time it
+       *  never be relied on here: the button can be hidden by the time it
        *  would fire. The excerpt is captured on the press and committed on the
        *  release instead, which keeps a button's normal escape hatches — drag
        *  off the button, or have the gesture stolen by a scroll, and nothing is
@@ -501,7 +513,7 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
           return;
         }
         event.preventDefault();
-        pressedTextRef.current = selection.text;
+        pressedTextRef.current = selectionRef.current?.text ?? null;
         try {
           event.currentTarget.setPointerCapture(event.pointerId);
         } catch {
@@ -539,13 +551,12 @@ function QuoteButton({ conversationId }: { conversationId: string }) {
       style={{
         top: 0,
         left: 0,
-        /** Hidden until measured so it never flashes at an unclamped position. */
-        visibility: 'hidden',
+        display: 'none',
       }}
       className={cn(
         'fixed z-50 inline-flex items-center gap-1.5 rounded-full border border-border-light bg-surface-secondary text-sm font-medium text-text-primary shadow-lg transition-colors hover:bg-surface-tertiary',
         /** Comfortable tap target when the selection came from a finger. */
-        selection.viaTouch ? 'min-h-11 px-4 py-2.5' : 'px-3 py-1.5',
+        'px-3 py-1.5 data-[touch=true]:min-h-11 data-[touch=true]:px-4 data-[touch=true]:py-2.5',
       )}
     >
       <TextQuote className="h-4 w-4" aria-hidden="true" />
diff --git a/client/src/components/Chat/Input/TokenUsage/Breakdown.spec.tsx b/client/src/components/Chat/Input/TokenUsage/Breakdown.spec.tsx
index 6841b51ac47..2b3eb89c2b2 100644
--- a/client/src/components/Chat/Input/TokenUsage/Breakdown.spec.tsx
+++ b/client/src/components/Chat/Input/TokenUsage/Breakdown.spec.tsx
@@ -423,6 +423,10 @@ describe('TokenUsage Breakdown', () => {
        *  the meter. */
       expect(cachedRow.parentElement?.className).toContain('pl-6');
       expect(cachedRow.textContent).toContain('30');
+      /** The share column is keyed to the window, like every row above: without
+       *  it the cached row reads as a bare number beside rows that all carry a
+       *  percentage, with the cell left blank. */
+      expect(cachedRow.textContent).toContain('(2%)');
       const peers = Array.from(breakdown.children).filter(
         (child) => !child.className.includes('pl-6'),
       );
diff --git a/client/src/components/Chat/Input/TokenUsage/Breakdown.tsx b/client/src/components/Chat/Input/TokenUsage/Breakdown.tsx
index 83c69b2657a..6e008bcab44 100644
--- a/client/src/components/Chat/Input/TokenUsage/Breakdown.tsx
+++ b/client/src/components/Chat/Input/TokenUsage/Breakdown.tsx
@@ -410,7 +410,7 @@ export default function Breakdown({
                         aria-expanded={insightsOpen}
                         aria-controls={insightsOpen ? insightsId : undefined}
                         data-testid="context-insights-toggle"
-                        className="size-6"
+                        className="size-6 text-text-secondary"
                         onFocus={() => setInsightsOpen(true)}
                         onBlur={() => setInsightsOpen(false)}
                         onClick={() => setInsightsOpen(true)}
@@ -507,12 +507,14 @@ export default function Breakdown({
                         <Row
                           label={localize('com_ui_context_cached')}
                           value={normalizeTokenCount(view.cacheRead)}
+                          max={maxTokens}
                         />
                       )}
                       {normalizeTokenCount(view.cacheWrite) > 0 && (
                         <Row
                           label={localize('com_ui_context_cache_write')}
                           value={normalizeTokenCount(view.cacheWrite)}
+                          max={maxTokens}
                         />
                       )}
                     </div>
diff --git a/client/src/components/Chat/Input/TokenUsage/index.tsx b/client/src/components/Chat/Input/TokenUsage/index.tsx
index 41b3ad8ce07..f64de3e2011 100644
--- a/client/src/components/Chat/Input/TokenUsage/index.tsx
+++ b/client/src/components/Chat/Input/TokenUsage/index.tsx
@@ -232,7 +232,7 @@ function TokenUsageIndicator({
           }
         }}
         className={cn(
-          'z-[200] rounded-xl border border-border-medium bg-surface-secondary p-3 shadow-lg focus:outline-none',
+          'z-[200] rounded-xl border border-border-medium bg-surface-secondary p-3 text-text-primary shadow-lg focus:outline-none',
           'origin-bottom translate-y-1 scale-95 opacity-0 transition-[opacity,transform] duration-150 ease-out motion-reduce:transition-none',
           'data-[enter]:translate-y-0 data-[enter]:scale-100 data-[enter]:opacity-100',
           'data-[leave]:translate-y-1 data-[leave]:scale-95 data-[leave]:opacity-0',
diff --git a/client/src/components/Chat/Input/__tests__/ChatForm.attachments.spec.tsx b/client/src/components/Chat/Input/__tests__/ChatForm.attachments.spec.tsx
index 201e7d6e234..18442369ad3 100644
--- a/client/src/components/Chat/Input/__tests__/ChatForm.attachments.spec.tsx
+++ b/client/src/components/Chat/Input/__tests__/ChatForm.attachments.spec.tsx
@@ -110,7 +110,12 @@ function Harness() {
     <ChatFormProvider {...methods}>
       <ChatContext.Provider value={chatHelpers}>
         <Profiler id="composer" onRender={() => (commits += 1)}>
-          <ChatForm index={0} />
+          <ChatForm
+            index={0}
+            isLandingPage={false}
+            footerBelow={false}
+            centerFormOnLanding={false}
+          />
         </Profiler>
       </ChatContext.Provider>
     </ChatFormProvider>
diff --git a/client/src/components/Chat/Input/__tests__/ChatForm.pasteUpload.spec.tsx b/client/src/components/Chat/Input/__tests__/ChatForm.pasteUpload.spec.tsx
index 650099a5213..d29222cbda9 100644
--- a/client/src/components/Chat/Input/__tests__/ChatForm.pasteUpload.spec.tsx
+++ b/client/src/components/Chat/Input/__tests__/ChatForm.pasteUpload.spec.tsx
@@ -108,7 +108,12 @@ function Harness() {
     <ChatFormProvider {...methods}>
       <ChatContext.Provider value={chatHelpers}>
         <DragDropWrapper>
-          <ChatForm index={0} />
+          <ChatForm
+            index={0}
+            isLandingPage={false}
+            footerBelow={false}
+            centerFormOnLanding={false}
+          />
         </DragDropWrapper>
       </ChatContext.Provider>
     </ChatFormProvider>
diff --git a/client/src/components/Chat/Input/__tests__/QuoteButton.test.tsx b/client/src/components/Chat/Input/__tests__/QuoteButton.test.tsx
index 1a7fe5b6194..3eabf6fcbd4 100644
--- a/client/src/components/Chat/Input/__tests__/QuoteButton.test.tsx
+++ b/client/src/components/Chat/Input/__tests__/QuoteButton.test.tsx
@@ -1,12 +1,14 @@
 import React, { Profiler } from 'react';
-import { RecoilRoot } from 'recoil';
-import { render, screen, fireEvent } from '@testing-library/react';
+import { RecoilRoot, useRecoilValue } from 'recoil';
+import { act, render, screen, fireEvent } from '@testing-library/react';
 
 jest.mock('~/hooks', () => ({
   useLocalize: () => (key: string) => key,
 }));
 
 import QuoteButton from '../QuoteButton';
+import store from '~/store';
+import { mainTextareaId } from '~/common';
 
 const CONVO_ID = 'convo-1';
 const SELECTED_TEXT = 'Selected assistant text';
@@ -34,13 +36,25 @@ const rect = ({
     toJSON: () => ({}),
   }) as DOMRect;
 
+function Quotes() {
+  const quotes = useRecoilValue(store.pendingQuotesByConvoId(CONVO_ID));
+  return <output data-testid="quotes">{JSON.stringify(quotes)}</output>;
+}
+
+function pointer(target: Document | HTMLElement, type: string) {
+  const event = new MouseEvent(type, { bubbles: true, clientX: 50, clientY: 15 });
+  Object.defineProperty(event, 'pointerType', { value: 'touch' });
+  fireEvent(target, event);
+}
+
 describe('QuoteButton', () => {
   afterEach(() => {
     window.getSelection()?.removeAllRanges();
   });
 
-  it('positions a new selection without scheduling a layout-state render', () => {
-    const rangeRect = rect({ top: 100, bottom: 120, left: 200, right: 260 });
+  it('shows, moves, and dismisses selections without React commits, then commits a touch quote', () => {
+    jest.useFakeTimers();
+    let rangeRect = rect({ top: 100, bottom: 120, left: 200, right: 260 });
     const buttonRect = rect({ top: 0, bottom: 30, left: 0, right: 100 });
     const originalRangeRect = Range.prototype.getBoundingClientRect;
     const elementRect = jest
@@ -60,6 +74,8 @@ describe('QuoteButton', () => {
       render(
         <RecoilRoot>
           <div className="message-render">{SELECTED_TEXT}</div>
+          <textarea id={mainTextareaId} />
+          <Quotes />
           <Profiler id="quote-button" onRender={onRender}>
             <QuoteButton conversationId={CONVO_ID} />
           </Profiler>
@@ -82,10 +98,47 @@ describe('QuoteButton', () => {
       expect(screen.getByTestId('add-to-chat-button')).toHaveStyle({
         top: '62px',
         left: '180px',
-        visibility: 'visible',
       });
-      expect(onRender).toHaveBeenCalledTimes(1);
+      const button = screen.getByTestId('add-to-chat-button');
+      expect(button).toBeVisible();
+      expect(onRender).not.toHaveBeenCalled();
+
+      rangeRect = rect({ top: 200, bottom: 220, left: 200, right: 260 });
+      fireEvent.scroll(document);
+      act(() => jest.advanceTimersByTime(20));
+      expect(button).toHaveStyle({ top: '162px' });
+      expect(onRender).not.toHaveBeenCalled();
+
+      window.getSelection()?.removeAllRanges();
+      fireEvent(document, new Event('selectionchange'));
+      expect(button).not.toBeVisible();
+      expect(onRender).not.toHaveBeenCalled();
+
+      pointer(document, 'pointerdown');
+      window.getSelection()?.addRange(range);
+      fireEvent(document, new Event('selectionchange'));
+      act(() => jest.advanceTimersByTime(300));
+      expect(button).toBeVisible();
+      expect(button).toHaveAttribute('data-touch', 'true');
+      expect(button).toHaveStyle({ top: '228px' });
+
+      range.setEnd(textNode, 8);
+      fireEvent(document, new Event('selectionchange'));
+      expect(button).not.toBeVisible();
+      act(() => jest.advanceTimersByTime(300));
+      expect(button).toBeVisible();
+      expect(onRender).not.toHaveBeenCalled();
+
+      pointer(button, 'pointerdown');
+      window.getSelection()?.removeAllRanges();
+      fireEvent(document, new Event('selectionchange'));
+      expect(button).toBeVisible();
+      pointer(button, 'pointerup');
+      expect(button).not.toBeVisible();
+      expect(screen.getByTestId('quotes')).toHaveTextContent('["Selected"]');
+      expect(screen.getByRole('textbox')).toHaveFocus();
     } finally {
+      jest.useRealTimers();
       elementRect.mockRestore();
       if (originalRangeRect) {
         Object.defineProperty(Range.prototype, 'getBoundingClientRect', {
@@ -98,3 +151,95 @@ describe('QuoteButton', () => {
     }
   });
 });
+
+describe('QuoteButton lifecycle', () => {
+  const originalRangeRect = Range.prototype.getBoundingClientRect;
+
+  beforeEach(() => {
+    jest.useFakeTimers();
+    Object.defineProperty(Range.prototype, 'getBoundingClientRect', {
+      configurable: true,
+      value: () => rect({ top: 100, bottom: 120, left: 200, right: 260 }),
+    });
+  });
+
+  afterEach(() => {
+    window.getSelection()?.removeAllRanges();
+    jest.useRealTimers();
+    if (originalRangeRect) {
+      Object.defineProperty(Range.prototype, 'getBoundingClientRect', {
+        configurable: true,
+        value: originalRangeRect,
+      });
+    } else {
+      delete (Range.prototype as Partial<Range>).getBoundingClientRect;
+    }
+  });
+
+  function setup() {
+    const content = (conversationId: string) => (
+      <RecoilRoot>
+        <div className="message-render">{SELECTED_TEXT}</div>
+        <textarea id={mainTextareaId} />
+        <Quotes />
+        <QuoteButton conversationId={conversationId} />
+      </RecoilRoot>
+    );
+    const view = render(content(CONVO_ID));
+    const range = document.createRange();
+    range.selectNodeContents(screen.getByText(SELECTED_TEXT));
+    window.getSelection()?.removeAllRanges();
+    window.getSelection()?.addRange(range);
+    return {
+      ...view,
+      button: screen.getByTestId('add-to-chat-button'),
+      navigate: () => view.rerender(content('convo-2')),
+    };
+  }
+
+  it('supports keyboard selection and activation', () => {
+    const { button } = setup();
+    fireEvent.keyDown(document, { key: 'Shift' });
+    fireEvent.keyUp(document, { key: 'Shift' });
+    expect(button).toBeVisible();
+    expect(button).toHaveAttribute('data-touch', 'false');
+    fireEvent.click(button, { detail: 0 });
+    expect(screen.getByTestId('quotes')).toHaveTextContent(JSON.stringify([SELECTED_TEXT]));
+    expect(screen.getByRole('textbox')).toHaveFocus();
+    expect(button).not.toBeVisible();
+  });
+
+  it('dismisses a canceled touch press without adding a quote', () => {
+    const { button } = setup();
+    fireEvent.mouseUp(document);
+    pointer(button, 'pointerdown');
+    window.getSelection()?.removeAllRanges();
+    fireEvent(document, new Event('selectionchange'));
+    pointer(button, 'pointercancel');
+    expect(button).not.toBeVisible();
+    expect(screen.getByTestId('quotes')).toHaveTextContent('[]');
+  });
+
+  it('clears visible and pending selections when the conversation changes', () => {
+    const { button, navigate } = setup();
+    fireEvent.mouseUp(document);
+    expect(button).toBeVisible();
+    fireEvent(document, new Event('selectionchange'));
+    navigate();
+    expect(button).not.toBeVisible();
+    act(() => jest.advanceTimersByTime(500));
+    expect(button).not.toBeVisible();
+    expect(screen.getByTestId('quotes')).toHaveTextContent('[]');
+  });
+
+  it('cancels pending selection work and removes the portal on unmount', () => {
+    const { unmount } = setup();
+    fireEvent(document, new Event('selectionchange'));
+    const readSelection = jest.spyOn(window, 'getSelection');
+    unmount();
+    readSelection.mockClear();
+    act(() => jest.advanceTimersByTime(500));
+    expect(readSelection).not.toHaveBeenCalled();
+    expect(screen.queryByTestId('add-to-chat-button')).not.toBeInTheDocument();
+  });
+});
diff --git a/client/src/components/Chat/Landing.tsx b/client/src/components/Chat/Landing.tsx
index 8df1f1e995b..607332f23b8 100644
--- a/client/src/components/Chat/Landing.tsx
+++ b/client/src/components/Chat/Landing.tsx
@@ -1,7 +1,7 @@
 import { useMemo, useCallback, useState, useEffect, useRef } from 'react';
 import { useRecoilValue } from 'recoil';
+import { HatGlasses } from 'lucide-react';
 import { easings } from '@react-spring/web';
-import { MessageCircleDashed } from 'lucide-react';
 import { EModelEndpoint } from 'librechat-data-provider';
 import { BirthdayIcon, TooltipAnchor, SplitText } from '@librechat/client';
 import {
@@ -160,7 +160,7 @@ export default function Landing({ centerFormOnLanding }: { centerFormOnLanding:
           <div className={`relative size-10 justify-center ${textHasMultipleLines ? 'mb-2' : ''}`}>
             {isTemporary ? (
               <div className={containerClassName}>
-                <MessageCircleDashed className="h-2/3 w-2/3 text-text-primary" aria-hidden="true" />
+                <HatGlasses className="h-2/3 w-2/3 text-text-primary" aria-hidden="true" />
               </div>
             ) : (
               <ConvoIcon
diff --git a/client/src/components/Chat/Menus/HeaderMenu.tsx b/client/src/components/Chat/Menus/HeaderMenu.tsx
index 6e7b3248387..f158685f70e 100644
--- a/client/src/components/Chat/Menus/HeaderMenu.tsx
+++ b/client/src/components/Chat/Menus/HeaderMenu.tsx
@@ -1,9 +1,9 @@
 import { useState, useId } from 'react';
 import * as Ariakit from '@ariakit/react';
 import { PermissionTypes, Permissions } from 'librechat-data-provider';
+import { Ellipsis, PlusCircle, HatGlasses, Check } from 'lucide-react';
 import { DropdownPopup, TooltipAnchor, Button } from '@librechat/client';
 import { BookmarkFilledIcon, BookmarkIcon } from '@radix-ui/react-icons';
-import { Ellipsis, PlusCircle, MessageCircleDashed, Check } from 'lucide-react';
 import type { TStartupConfig } from 'librechat-data-provider';
 import type * as t from '~/common';
 import { BookmarkContext } from '~/Providers/BookmarkContext';
@@ -100,7 +100,7 @@ export default function HeaderMenu({
       icon: temporary.isTemporary ? (
         <Check className="size-4 text-text-primary" />
       ) : (
-        <MessageCircleDashed className="size-4 text-text-secondary" />
+        <HatGlasses className="size-4 text-text-secondary" />
       ),
       onClick: temporary.toggle,
     });
diff --git a/client/src/components/Chat/Subagents/SubagentThreadPanel.test.tsx b/client/src/components/Chat/Subagents/SubagentThreadPanel.test.tsx
index be2909f44b1..c835da419a5 100644
--- a/client/src/components/Chat/Subagents/SubagentThreadPanel.test.tsx
+++ b/client/src/components/Chat/Subagents/SubagentThreadPanel.test.tsx
@@ -70,6 +70,9 @@ jest.mock('librechat-data-provider', () => {
 
 jest.mock('~/data-provider', () => ({
   ACTIVE_THREAD_REFRESH_MS: 2000,
+  /** The panel's bottom clearance follows the conversation's configured footer
+   *  (`useConfiguredFooter`), so the panel now reads the startup config. */
+  useGetStartupConfig: () => ({ data: undefined }),
   useSubagentThreadQuery: (...args: unknown[]) => mockUseSubagentThreadQuery(...args),
   subagentThreadHasTaskEvidence: (view: SubagentThreadView | undefined, taskId: string): boolean =>
     view?.messages.some(
diff --git a/client/src/components/Chat/Subagents/SubagentThreadPanel.tsx b/client/src/components/Chat/Subagents/SubagentThreadPanel.tsx
index 7f89f9860aa..c66801c2e8b 100644
--- a/client/src/components/Chat/Subagents/SubagentThreadPanel.tsx
+++ b/client/src/components/Chat/Subagents/SubagentThreadPanel.tsx
@@ -48,13 +48,14 @@ import SubagentActivity, { SubagentActivityScrollSurface } from './SubagentActiv
 import ApprovalProvider from '~/components/Chat/Messages/Content/ApprovalContext';
 import { isMacPlatform, resolveComposerKeyDown } from '~/utils/shortcuts';
 import { useFocusTrap, useLocalize, useNavigateToConvo } from '~/hooks';
+import { useConfiguredFooter } from '~/components/Chat/Footer';
 import { useParentSubagents } from './ParentSubagentsProvider';
 import SubagentConversation from './SubagentConversation';
 import { eventSubagentSelection } from './eventSelection';
 import { resolveSubagentAgentId } from './identity';
 import { useAgentsMapContext } from '~/Providers';
 import { isLiveSubagentStatus } from './status';
-import { renderAgentAvatar } from '~/utils';
+import { cn, renderAgentAvatar } from '~/utils';
 import { useChatSurface } from './surface';
 
 const EVENT_TASK_PAGE_SIZE = 3;
@@ -109,6 +110,9 @@ const failedControlLocaleKey = (reason?: string) => {
 };
 
 export default function SubagentThreadPanel({ selection }: { selection: ActiveSubagentPanel }) {
+  /** `present` carries the remembered answer while the config is in flight, so
+   *  this surface lays out once, like the composer beside it. */
+  const clearsFooter = useConfiguredFooter().present;
   const localize = useLocalize();
   const panelStore = useStore();
   const { showToast } = useToastContext();
@@ -1460,11 +1464,12 @@ export default function SubagentThreadPanel({ selection }: { selection: ActiveSu
         {activityPanel}
       </ApprovalProvider>
       {(showControlFooter || composerMode != null) && (
-        /* The main chat form's own bottom rhythm: its composer clears the
-           viewport floor by the height of the disclaimer beneath it, and this
-           one clears it by the same, so the two surfaces end on one line when
-           the panel is open beside the thread. */
-        <div className="shrink-0 px-3 pb-10 pt-2">
+        /* The main chat form's own bottom rhythm, read from the same answer it
+           reads (`useConfiguredFooter`): a conversation clears the footer bar
+           when the deployment configured one and otherwise keeps only enough to
+           show the composer's shadow, and this surface keeps the same, so the
+           two end on one line when the panel is open beside the thread. */
+        <div className={cn('shrink-0 px-3 pt-2', clearsFooter ? 'pb-10' : 'pb-4')}>
           {transientControl?.status === 'failed' && (
             <Alert variant="error" className="mb-2 flex items-center gap-2">
               <span className="min-w-0 flex-1">
diff --git a/client/src/components/Chat/TemporaryChat.tsx b/client/src/components/Chat/TemporaryChat.tsx
index 1212d2472ae..3c396077ef6 100644
--- a/client/src/components/Chat/TemporaryChat.tsx
+++ b/client/src/components/Chat/TemporaryChat.tsx
@@ -1,4 +1,4 @@
-import { MessageCircleDashed } from 'lucide-react';
+import { HatGlasses } from 'lucide-react';
 import { Chip, TooltipAnchor } from '@librechat/client';
 import { useShortcutAriaKey, useShortcutHint } from '~/hooks/useKeyboardShortcuts';
 import useTemporaryChat from '~/hooks/Chat/useTemporaryChat';
@@ -32,7 +32,7 @@ export function TemporaryChat() {
                 : 'bg-presentation shadow-sm hover:bg-surface-active-alt',
             )}
           >
-            <MessageCircleDashed className="icon-md" aria-hidden="true" />
+            <HatGlasses className="icon-md" aria-hidden="true" />
           </button>
         }
       />
@@ -59,7 +59,7 @@ export function TemporaryChatIndicator() {
       size="theme"
       shape="theme"
       className="flex-shrink-0"
-      leading={<MessageCircleDashed className="size-4 shrink-0" aria-hidden="true" />}
+      leading={<HatGlasses className="size-4 shrink-0" aria-hidden="true" />}
     >
       <span className="max-md:sr-only">{localize('com_ui_temporary')}</span>
     </Chip>
diff --git a/client/src/components/Chat/__tests__/ChatView.spec.tsx b/client/src/components/Chat/__tests__/ChatView.spec.tsx
index f35c7a513eb..f97f4d7e1eb 100644
--- a/client/src/components/Chat/__tests__/ChatView.spec.tsx
+++ b/client/src/components/Chat/__tests__/ChatView.spec.tsx
@@ -33,6 +33,7 @@ jest.mock('~/hooks', () => ({
   useAdaptiveSSE: jest.fn(),
   useResumeOnLoad: jest.fn(),
   useQueueDrain: jest.fn(),
+  useScrollbarGutterSeed: jest.fn(),
 }));
 
 jest.mock('../Presentation', () => ({
@@ -40,7 +41,11 @@ jest.mock('../Presentation', () => ({
   default: ({ children }: { children: React.ReactNode }) => <div>{children}</div>,
 }));
 jest.mock('../Header', () => ({ __esModule: true, default: () => <div /> }));
-jest.mock('../Footer', () => ({ __esModule: true, default: () => <div /> }));
+jest.mock('../Footer', () => ({
+  __esModule: true,
+  default: () => <div />,
+  useConfiguredFooter: () => false,
+}));
 jest.mock('../Landing', () => ({ __esModule: true, default: () => <div /> }));
 jest.mock('../Messages/MessagesView', () => ({ __esModule: true, default: () => <div /> }));
 jest.mock('../Input/ChatForm', () => ({ __esModule: true, default: () => <div /> }));
diff --git a/client/src/components/Chat/__tests__/ChatView.subagent.spec.tsx b/client/src/components/Chat/__tests__/ChatView.subagent.spec.tsx
index 8ebccc4c61a..7f7a5cadfe0 100644
--- a/client/src/components/Chat/__tests__/ChatView.subagent.spec.tsx
+++ b/client/src/components/Chat/__tests__/ChatView.subagent.spec.tsx
@@ -32,6 +32,7 @@ jest.mock('~/hooks', () => ({
   useResumeOnLoad: jest.fn(),
   useAdaptiveSSE: jest.fn(),
   useQueueDrain: jest.fn(),
+  useScrollbarGutterSeed: jest.fn(),
   useLocalize: () => (key: string) => key,
   useChatHelpers: () => ({
     conversation: mockConversation,
@@ -66,7 +67,11 @@ jest.mock('../Presentation', () => ({ children }: { children: React.ReactNode })
 ));
 jest.mock('../Input/ChatForm', () => () => <div data-testid="chat-form" />);
 jest.mock('../Landing', () => () => <div data-testid="landing" />);
-jest.mock('../Footer', () => () => <div data-testid="footer" />);
+jest.mock('../Footer', () => ({
+  __esModule: true,
+  default: () => <div data-testid="footer" />,
+  useConfiguredFooter: () => false,
+}));
 jest.mock('../Header', () => ({ readOnly }: { readOnly?: boolean }) => (
   <div data-read-only={String(readOnly)} data-testid="header" />
 ));
diff --git a/client/src/components/Chat/footerMemory.ts b/client/src/components/Chat/footerMemory.ts
new file mode 100644
index 00000000000..fca2bde0757
--- /dev/null
+++ b/client/src/components/Chat/footerMemory.ts
@@ -0,0 +1,14 @@
+import { createStorageAtom } from '~/store/jotai-utils';
+
+/**
+ * Whether this deployment configured footer content of its own, as of the last
+ * time `/api/config` answered. Feature-owned and persisted: the chat surface
+ * both writes it (when the config resolves) and reads it (while the next load's
+ * config is still in flight), and a deployment's footer configuration is a
+ * deployment-lifetime fact, so remembering it is what lets the composer lay out
+ * once instead of guessing and correcting.
+ *
+ * `getOnInit` gives the stored value on the first render, which is the whole
+ * point — a value that arrived an effect later would be the guess again.
+ */
+export const configuredFooterAtom = createStorageAtom<boolean>('configured-footer', false);
diff --git a/client/src/components/Messages/Content/RunCode.tsx b/client/src/components/Messages/Content/RunCode.tsx
index 68b03e093e0..20c7f04d74a 100644
--- a/client/src/components/Messages/Content/RunCode.tsx
+++ b/client/src/components/Messages/Content/RunCode.tsx
@@ -143,7 +143,7 @@ const RunCode: React.FC<CodeBarProps & { iconOnly?: boolean }> = React.memo(
               isLoading ? 'opacity-100' : 'opacity-0',
             )}
           >
-            <Spinner className="animate-spin" size={18} />
+            {isLoading && <Spinner size={18} />}
           </span>
         </span>
         {!iconOnly && (
diff --git a/client/src/components/Messages/Content/__tests__/RunCode.test.tsx b/client/src/components/Messages/Content/__tests__/RunCode.test.tsx
new file mode 100644
index 00000000000..6c7f0492944
--- /dev/null
+++ b/client/src/components/Messages/Content/__tests__/RunCode.test.tsx
@@ -0,0 +1,87 @@
+import React from 'react';
+import { RecoilRoot } from 'recoil';
+import { ToastProvider } from '@librechat/client';
+import { dataService } from 'librechat-data-provider';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { act, render, screen, fireEvent, waitFor } from '@testing-library/react';
+import type { ToolCallResponse } from 'librechat-data-provider';
+import { MessageContext } from '~/Providers/MessageContext';
+import RunCode from '../RunCode';
+
+jest.mock('librechat-data-provider', () => {
+  const actual = jest.requireActual('librechat-data-provider');
+  return { ...actual, dataService: { ...actual.dataService, callTool: jest.fn() } };
+});
+
+jest.mock('~/hooks', () => ({ useLocalize: () => (key: string) => key }));
+jest.mock('~/Providers', () => jest.requireActual('~/Providers/MessageContext'));
+jest.mock('~/data-provider', () => jest.requireActual('~/data-provider/Tools/mutations'));
+
+describe('RunCode animation lifecycle', () => {
+  beforeEach(() => jest.useFakeTimers());
+  afterEach(() => jest.useRealTimers());
+
+  it.each(['success', 'error'] as const)(
+    'only animates during execution, including %s and retry',
+    async (outcome) => {
+      let settle: (value: ToolCallResponse) => void = () => undefined;
+      let reject: (reason: Error) => void = () => undefined;
+      const callTool = jest.mocked(dataService.callTool).mockImplementation(
+        () =>
+          new Promise<ToolCallResponse>((resolve, fail) => {
+            settle = resolve;
+            reject = fail;
+          }),
+      );
+      const queryClient = new QueryClient({
+        defaultOptions: { mutations: { retry: false } },
+        logger: { log: console.log, warn: console.warn, error: () => undefined },
+      });
+      const code = document.createElement('code');
+      code.textContent = 'print(1)';
+      const { container, unmount } = render(
+        <QueryClientProvider client={queryClient}>
+          <RecoilRoot>
+            <ToastProvider>
+              <MessageContext.Provider
+                value={{ messageId: 'message', conversationId: 'conversation', isExpanded: false }}
+              >
+                <RunCode lang="python" codeRef={{ current: code }} blockIndex={0} />
+              </MessageContext.Provider>
+            </ToastProvider>
+          </RecoilRoot>
+        </QueryClientProvider>,
+      );
+      const button = screen.getByRole('button', { name: 'com_ui_run_code' });
+      expect(container.querySelector('.spinner')).not.toBeInTheDocument();
+      await act(async () => {
+        fireEvent.click(button);
+        await jest.advanceTimersByTimeAsync(0);
+      });
+      await waitFor(() => expect(callTool).toHaveBeenCalledTimes(1));
+      await waitFor(() => expect(button).toBeDisabled());
+      expect(container.querySelector('.spinner')).toBeInTheDocument();
+      await act(async () => {
+        if (outcome === 'success') settle({ result: '1', attachments: [] });
+        else reject(new Error('Execution failed'));
+      });
+      await waitFor(() => expect(button).toBeEnabled());
+      expect(container.querySelector('.spinner')).not.toBeInTheDocument();
+      await act(async () => {
+        jest.advanceTimersByTime(1100);
+      });
+      await act(async () => {
+        fireEvent.click(button);
+        await jest.advanceTimersByTimeAsync(0);
+      });
+      await waitFor(() => expect(callTool).toHaveBeenCalledTimes(2));
+      await waitFor(() => expect(button).toBeDisabled());
+      expect(container.querySelector('.spinner')).toBeInTheDocument();
+      await act(async () => settle({ result: '1', attachments: [] }));
+      await waitFor(() => expect(button).toBeEnabled());
+      expect(container.querySelector('.spinner')).not.toBeInTheDocument();
+      unmount();
+      queryClient.clear();
+    },
+  );
+});
diff --git a/client/src/components/Prompts/lists/List.tsx b/client/src/components/Prompts/lists/List.tsx
index 5b87b189a94..f16ba159d5a 100644
--- a/client/src/components/Prompts/lists/List.tsx
+++ b/client/src/components/Prompts/lists/List.tsx
@@ -1,4 +1,5 @@
 import { FileText } from 'lucide-react';
+import { EmptyState } from '@librechat/client';
 import type { TPromptGroup } from 'librechat-data-provider';
 import ChatGroupItem from './ChatGroupItem';
 import { useLocalize } from '~/hooks';
@@ -15,17 +16,12 @@ export default function List({
   const renderContent = () => {
     if (groups.length === 0) {
       return (
-        <div className="my-2 flex flex-col items-center justify-center rounded-lg border border-border-medium bg-transparent p-6 text-center">
-          <div className="mb-2 flex size-10 items-center justify-center rounded-full bg-surface-tertiary">
-            <FileText className="size-5 text-text-secondary" aria-hidden="true" />
-          </div>
-          <p className="text-sm font-medium text-text-primary">
-            {localize('com_ui_no_prompts_title')}
-          </p>
-          <p className="mt-0.5 text-xs text-text-secondary">
-            {localize('com_ui_add_first_prompt')}
-          </p>
-        </div>
+        <EmptyState
+          icon={FileText}
+          title={localize('com_ui_no_prompts_title')}
+          description={localize('com_ui_add_first_prompt')}
+          className="my-2"
+        />
       );
     }
 
diff --git a/client/src/hooks/Input/useTextarea.spec.tsx b/client/src/hooks/Input/useTextarea.spec.tsx
index cf557f899aa..d5f2fee0631 100644
--- a/client/src/hooks/Input/useTextarea.spec.tsx
+++ b/client/src/hooks/Input/useTextarea.spec.tsx
@@ -281,7 +281,7 @@ describe('useTextarea long-paste fallback', () => {
 
   it('does not restore the paste when the attachment is accepted', async () => {
     mockRouteFiles.mockResolvedValueOnce(true);
-    const { result } = renderTextareaHook();
+    const { result, textArea } = renderTextareaHook();
     const event = createPasteEvent();
 
     act(() =>
@@ -296,7 +296,7 @@ describe('useTextarea long-paste fallback', () => {
       }),
     );
     expect(mockInsertTextAtCursor).not.toHaveBeenCalled();
-    expect(mockForceResize).not.toHaveBeenCalled();
+    expect(textArea.value).toBe('');
   });
 
   it('replaces selected draft text when the attachment is accepted', async () => {
diff --git a/client/src/hooks/Messages/index.ts b/client/src/hooks/Messages/index.ts
index 53e7dc0bfeb..7ec352d2942 100644
--- a/client/src/hooks/Messages/index.ts
+++ b/client/src/hooks/Messages/index.ts
@@ -28,5 +28,5 @@ export { default as useCopyToClipboard } from './useCopyToClipboard';
 export { hasCopyableText, useCopyMessageToClipboard } from './useCopyToClipboard';
 export { default as useContentMetadata } from './useContentMetadata';
 export { default as useMessageScrolling } from './useMessageScrolling';
-export { default as useScrollbarGutter } from './useScrollbarGutter';
+export { default as useScrollbarGutter, useScrollbarGutterSeed } from './useScrollbarGutter';
 export { default as useSmoothStreaming } from './useSmoothStreaming';
diff --git a/client/src/hooks/Messages/useScrollbarGutter.ts b/client/src/hooks/Messages/useScrollbarGutter.ts
index d8a25060ffa..06d35adf8ff 100644
--- a/client/src/hooks/Messages/useScrollbarGutter.ts
+++ b/client/src/hooks/Messages/useScrollbarGutter.ts
@@ -1,4 +1,4 @@
-import { useEffect } from 'react';
+import { useEffect, useLayoutEffect } from 'react';
 
 export const SCROLLBAR_GUTTER_PROPERTY = '--message-scrollbar-gutter';
 
@@ -39,3 +39,66 @@ export default function useScrollbarGutter(
     return () => observer.disconnect();
   }, [scrollableRef]);
 }
+
+/** Publishes the same band before any message column has mounted. The welcome
+ *  screen holds it back too — it centres greeting and composer against where the
+ *  message column will be — and on a fresh load nothing has measured it, so the
+ *  spacer would fall back to the `--scrollbar-size` token: a fixed 8px, right
+ *  only where the app's own `::-webkit-scrollbar` width applies and wrong on
+ *  every overlay-scrollbar platform, which reserves nothing.
+ *
+ *  A detached probe built like the column — `overflow-y: auto` with
+ *  `scrollbar-gutter: stable` — answers the same question the column does, and
+ *  answers it for the platform in front of the user. A mounted column measures
+ *  itself and is authoritative, so this only fills the gap before the first one
+ *  exists and never overwrites a published measurement.
+ *
+ *  It measures in a layout effect, before the browser paints: a passive effect
+ *  would let the first frame reserve the token's 8px and then recentre the
+ *  welcome screen by 4px once the real band is known, which is the same visible
+ *  shift this reservation exists to remove.
+ *
+ *  The band is not a constant of the platform either: the contrast modes widen
+ *  the app's own scrollbar (`--scrollbar-size` goes to 0.75rem under
+ *  `html.high-contrast`), and a reader can turn contrast on — or have the OS
+ *  turn it on — while the welcome screen is the only thing mounted, with no
+ *  message column to republish. `ThemeProvider` carries every contrast and
+ *  scheme decision as a class on the document element, so remeasuring on that
+ *  is remeasuring on the thing that changed the band. */
+export function useScrollbarGutterSeed(): void {
+  useLayoutEffect(() => {
+    const root = document.documentElement;
+
+    const measure = () => {
+      const probe = document.createElement('div');
+      probe.style.position = 'absolute';
+      probe.style.top = '-9999px';
+      probe.style.width = '100px';
+      probe.style.height = '100px';
+      probe.style.overflowY = 'auto';
+      probe.style.scrollbarGutter = 'stable';
+      probe.style.visibility = 'hidden';
+      document.body.appendChild(probe);
+      const gutter = Math.max(0, probe.offsetWidth - probe.clientWidth);
+      probe.remove();
+      root.style.setProperty(SCROLLBAR_GUTTER_PROPERTY, `${gutter}px`);
+    };
+
+    /** Measure on every mount, never trusting what is already there: the value
+     *  outlives this screen on purpose, and the screens it outlives — the auth
+     *  layout among them — carry a theme selector that can change the band while
+     *  nothing is watching. */
+    measure();
+
+    if (typeof MutationObserver === 'undefined') {
+      return;
+    }
+
+    /** A mounted column observes its own box and republishes on the same flip,
+     *  so the two agree; this is what covers the screens that have no column. */
+    const observer = new MutationObserver(measure);
+    observer.observe(root, { attributes: true, attributeFilter: ['class', 'data-theme'] });
+
+    return () => observer.disconnect();
+  }, []);
+}
diff --git a/client/src/hooks/useChatBadges.ts b/client/src/hooks/useChatBadges.ts
index abc23ee3009..3b8d4721d92 100644
--- a/client/src/hooks/useChatBadges.ts
+++ b/client/src/hooks/useChatBadges.ts
@@ -1,7 +1,7 @@
 import { useMemo } from 'react';
-import { useRecoilCallback } from 'recoil';
+import { Box } from 'lucide-react';
 import { useRecoilValue } from 'recoil';
-import { MessageCircleDashed, Box } from 'lucide-react';
+import { useRecoilCallback } from 'recoil';
 import type { BadgeItem } from '~/common';
 import { useLocalize, TranslationKeys } from '~/hooks';
 import store from '~/store';
diff --git a/client/src/mobile.css b/client/src/mobile.css
index f872c03a6af..69b9d7b07e1 100644
--- a/client/src/mobile.css
+++ b/client/src/mobile.css
@@ -91,8 +91,14 @@
    publishes it here. The token is only the fallback for before that first
    measurement: it matches the `::-webkit-scrollbar` width, which Firefox
    ignores and an overlay scrollbar drops to nothing. */
-.scrollbar-gutter-spacer {
-  padding-inline-end: var(--message-scrollbar-gutter, var(--scrollbar-size));
+/* Below `sm` the composer runs edge to edge (it is squared off at the bottom and
+   carries no horizontal padding there), so holding the band back would leave a
+   dead strip down its right side instead of lining anything up. The message
+   column it aligns to only shares a centre from `sm` up. */
+@media (min-width: 640px) {
+  .scrollbar-gutter-spacer {
+    padding-inline-end: var(--message-scrollbar-gutter, var(--scrollbar-size));
+  }
 }
 
 /* Base wrapper for both preview and editor */
diff --git a/e2e/benchmarks-mobile-chat/README.md b/e2e/benchmarks-mobile-chat/README.md
index f1ad2458408..4f6bb8c3c25 100644
--- a/e2e/benchmarks-mobile-chat/README.md
+++ b/e2e/benchmarks-mobile-chat/README.md
@@ -41,3 +41,32 @@ REACT_SCAN_PATH=/tmp/librechat-react-scan/package/dist/auto.global.js \
 
 JSON snapshots are attached to the Playwright results under
 `e2e/benchmarks/.test-results/mobile-chat`.
+
+## Deterministic regression guards
+
+The normal mock E2E suite includes `idle-animations.spec.ts`. It renders six settled
+messages, including three code blocks, in desktop and narrow layouts and asserts
+that the transcript has **no running infinite animations**. The check uses the
+browser's animation API, so it catches opacity-hidden spinners and other perpetual
+CSS animations. It explicitly enables motion, waits for every code control to
+mount, permits finite entrance transitions, and reports the offending animation
+and element when it fails. It needs neither a large transcript nor a CPU/time
+threshold to catch work that would multiply across a long chat.
+
+After preparing the production client, run it with:
+
+```bash
+npx playwright test --config=e2e/playwright.config.mock.ts idle-animations.spec.ts
+```
+
+The component tests cover the complementary invariants: `RunCode.test.tsx`
+checks that the spinner exists only during execution, including success, failure,
+and retry, with fake timers and controlled HTTP completion. `QuoteButton.test.tsx`
+uses a React Profiler to assert zero commits for selection and positioning events.
+
+Keep the browser timing measurements above as diagnostic evidence rather than a
+single-run merge gate. When a benchmark identifies a regression, add a focused
+invariant test at the cause—such as no idle animations, no unrelated renders, or
+bounded request counts—where possible. Timing and memory totals vary with the
+runner, garbage collection, and browser version; these structural checks do not
+require those numbers to stay below an arbitrary threshold.
diff --git a/e2e/specs/mock/idle-animations.spec.ts b/e2e/specs/mock/idle-animations.spec.ts
new file mode 100644
index 00000000000..5521802dc51
--- /dev/null
+++ b/e2e/specs/mock/idle-animations.spec.ts
@@ -0,0 +1,89 @@
+import { randomUUID } from 'node:crypto';
+import { expect, test } from '@playwright/test';
+import {
+  seedConversations,
+  seedMessages,
+  deleteConversations,
+  deleteMessagesByConversation,
+} from './db';
+import { getE2EUser } from '../../setup/user';
+
+/** Exercise real animation CSS even on hosts whose OS prefers reduced motion. */
+test.use({ reducedMotion: 'no-preference' });
+
+for (const viewport of [
+  { width: 1280, height: 720 },
+  { width: 390, height: 664 },
+]) {
+  test(`settled code messages have no continuously running animations (${viewport.width}px)`, async ({
+    page,
+  }) => {
+    await page.setViewportSize(viewport);
+    const conversationId = randomUUID();
+    const userEmail = getE2EUser().email;
+    const messages = [];
+    let parentMessageId = '00000000-0000-0000-0000-000000000000';
+    for (let index = 0; index < 6; index++) {
+      const messageId = `${conversationId}-${index}`;
+      const isCreatedByUser = index % 2 === 0;
+      messages.push({
+        messageId,
+        parentMessageId,
+        isCreatedByUser,
+        sender: isCreatedByUser ? 'User' : 'Assistant',
+        text: isCreatedByUser
+          ? `Show example ${index}`
+          : `Settled example ${index}\n\n\`\`\`python\nprint(${index})\n\`\`\``,
+      });
+      parentMessageId = messageId;
+    }
+
+    try {
+      await seedConversations(userEmail, [
+        { conversationId, title: 'Idle animations', updatedAt: new Date() },
+      ]);
+      await seedMessages(userEmail, conversationId, messages);
+      await page.goto(`/c/${conversationId}`);
+      const rows = page.locator('.message-render');
+      await expect(rows).toHaveCount(messages.length);
+      for (let index = 1; index < messages.length; index += 2) {
+        await expect(
+          rows.nth(index).getByRole('button', { name: 'Run Code', exact: true }).first(),
+        ).toBeAttached();
+      }
+
+      /** Finite entrance transitions are allowed; opacity-hidden infinite loops are not. */
+      await expect
+        .poll(
+          () =>
+            rows.evaluateAll((elements) =>
+              elements.flatMap((element) =>
+                element
+                  .getAnimations({ subtree: true })
+                  .filter(
+                    (animation) =>
+                      animation.playState === 'running' &&
+                      animation.effect?.getTiming().iterations === Infinity,
+                  )
+                  .map((animation) => ({
+                    animation:
+                      animation instanceof CSSAnimation ? animation.animationName : animation.id,
+                    target: (animation.effect as KeyframeEffect | null)?.target?.outerHTML.slice(
+                      0,
+                      250,
+                    ),
+                  })),
+              ),
+            ),
+          {
+            message:
+              'Idle transcript must not continuously animate, including invisible descendants',
+          },
+        )
+        .toEqual([]);
+    } finally {
+      await deleteMessagesByConversation([conversationId]);
+      await deleteConversations([conversationId]);
+    }
+  });
+}
diff --git a/e2e/specs/mock/scenarios/cold-load-clearance.spec.ts b/e2e/specs/mock/scenarios/cold-load-clearance.spec.ts
new file mode 100644
index 00000000000..23d8e08727d
--- /dev/null
+++ b/e2e/specs/mock/scenarios/cold-load-clearance.spec.ts
@@ -0,0 +1,153 @@
+import { randomUUID } from 'crypto';
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+import { getE2EUser } from '../../../setup/user';
+import { deleteConversations, deleteMessagesByConversation, seedConversations } from '../db';
+
+/**
+ * Whether a conversation carries a footer is an answer from the startup config,
+ * and on a cold load of `/c/<id>` that answer arrives after the composer has
+ * already been painted. Guessing "no footer" until then moves the composer twice
+ * — down to the bare clearance, then back up when the footer appears.
+ */
+
+const COMPOSER = '[data-testid="composer-surface"]';
+const CUSTOM_FOOTER = 'Operator policy footer';
+const CONVERSATION_TITLE = 'Cold load clearance';
+
+declare global {
+  interface Window {
+    /** Every composer bottom painted since the document started. */
+    __composerBottomSamples?: number[];
+  }
+}
+
+test.use({ viewport: { width: 1280, height: 800 } });
+
+/** A configured footer whose answer is deliberately slow, plus a sampler that
+ *  runs from the document's first frame. Both are in place before the app's own
+ *  scripts, so nothing about the app's own timing is assumed. */
+async function serveSlowConfiguredFooter(page: Page) {
+  await page.route('**/api/config', async (route) => {
+    const response = await route.fetch();
+    const config = await response.json();
+    const delayed = Promise.withResolvers<void>();
+    setTimeout(() => delayed.resolve(), 700);
+    await delayed.promise;
+    await route.fulfill({ response, json: { ...config, customFooter: CUSTOM_FOOTER } });
+  });
+  await installSampler(page);
+}
+
+/** A sampler that records the composer's bottom from the document's first frame,
+ *  served with the HTML so it is in place before the app's own scripts. */
+async function installSampler(page: Page) {
+  await page.route('**/*', async (route) => {
+    if (route.request().resourceType() !== 'document') {
+      return route.fallback();
+    }
+    const response = await route.fetch();
+    const sampler = `<script>
+  window.__composerBottomSamples = [];
+  (function sample() {
+    var node = document.querySelector('[data-testid="composer-surface"]');
+    if (node) {
+      var bottom = Math.round(node.getBoundingClientRect().bottom * 100) / 100;
+      var samples = window.__composerBottomSamples;
+      if (samples.length === 0 || samples[samples.length - 1] !== bottom) {
+        samples.push(bottom);
+      }
+    }
+    if (window.__composerBottomSamples.length < 200) {
+      requestAnimationFrame(sample);
+    }
+  })();
+</script>`;
+    const body = (await response.text()).replace('<head>', `<head>${sampler}`);
+    await route.fulfill({ response, body });
+  });
+}
+
+test.describe('cold load clearance', () => {
+  test('the composer does not jump when the configured footer arrives @scenario:configured-footer-clearance-survives-a-cold-load', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    const conversationId = randomUUID();
+    await seedConversations(getE2EUser().email, [
+      { conversationId, title: CONVERSATION_TITLE, updatedAt: new Date() },
+    ]);
+
+    try {
+      await serveSlowConfiguredFooter(page);
+      /** The first visit is what records the deployment's answer; the load under
+       *  test is every one after it, where the composer must lay out once. */
+      await page.goto(`/c/${conversationId}`, { timeout: 15000 });
+      await expect(page.getByText(CUSTOM_FOOTER)).toBeVisible({ timeout: 15000 });
+      await page.goto(`/c/${conversationId}`, { timeout: 15000 });
+      await expect(page.locator(COMPOSER)).toBeVisible();
+      /** Past the delayed config answer and any correction it would cause. */
+      await expect(page.getByText(CUSTOM_FOOTER)).toBeVisible({ timeout: 15000 });
+      await page.waitForTimeout(800);
+
+      const samples = await page.evaluate(() => window.__composerBottomSamples ?? []);
+      expect(samples.length).toBeGreaterThan(0);
+      const settled = samples[samples.length - 1];
+      const drift = Math.max(...samples.map((bottom) => Math.abs(bottom - settled)));
+      expect(
+        drift,
+        `the composer moved when the configured footer arrived: ${JSON.stringify(samples)}`,
+      ).toBeLessThanOrEqual(0.5);
+    } finally {
+      await deleteMessagesByConversation([conversationId]);
+      await deleteConversations([conversationId]);
+    }
+  });
+});
+
+/** A deployment that configures nothing is the common one, and its cold load has
+ *  the same right to lay out once: reserving the band "just in case" and dropping
+ *  it when the config answers moves the composer 24px down. */
+async function serveSlowDefaultConfig(page: Page) {
+  await page.route('**/api/config', async (route) => {
+    const response = await route.fetch();
+    const config = await response.json();
+    const delayed = Promise.withResolvers<void>();
+    setTimeout(() => delayed.resolve(), 700);
+    await delayed.promise;
+    await route.fulfill({ response, json: { ...config, customFooter: undefined } });
+  });
+  await installSampler(page);
+}
+
+test.describe('cold load clearance without a footer', () => {
+  test('the composer does not jump when the config confirms no footer @scenario:default-clearance-survives-a-cold-load', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    const conversationId = randomUUID();
+    await seedConversations(getE2EUser().email, [
+      { conversationId, title: 'Default clearance', updatedAt: new Date() },
+    ]);
+
+    try {
+      await serveSlowDefaultConfig(page);
+      await page.goto(`/c/${conversationId}`, { timeout: 15000 });
+      await expect(page.locator(COMPOSER)).toBeVisible();
+      /** Past the delayed answer and any correction it would cause. */
+      await page.waitForTimeout(1800);
+
+      const samples = await page.evaluate(() => window.__composerBottomSamples ?? []);
+      expect(samples.length).toBeGreaterThan(0);
+      const settled = samples[samples.length - 1];
+      const drift = Math.max(...samples.map((bottom) => Math.abs(bottom - settled)));
+      expect(
+        drift,
+        `the composer moved when the config answered: ${JSON.stringify(samples)}`,
+      ).toBeLessThanOrEqual(0.5);
+    } finally {
+      await deleteMessagesByConversation([conversationId]);
+      await deleteConversations([conversationId]);
+    }
+  });
+});
diff --git a/e2e/specs/mock/scenarios/composer-position.spec.ts b/e2e/specs/mock/scenarios/composer-position.spec.ts
new file mode 100644
index 00000000000..35d9c80f76d
--- /dev/null
+++ b/e2e/specs/mock/scenarios/composer-position.spec.ts
@@ -0,0 +1,282 @@
+import { randomUUID } from 'crypto';
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+import { getE2EUser } from '../../../setup/user';
+import {
+  deleteConversations,
+  deleteMessagesByConversation,
+  seedConversations,
+  seedMessages,
+} from '../db';
+
+/**
+ * Opening a conversation from the welcome screen moves the composer down by the
+ * disclaimer's clearance and must not move it sideways at all. The sideways
+ * offset came from the scrollbar band the message column holds back: the
+ * conversation reserved it and the welcome screen did not, so the composer
+ * stepped 4px left on the way in. Where scrollbars overlay, the band is zero and
+ * nothing may be reserved on either side of the navigation.
+ *
+ * The composer is full-bleed below `sm` with no clearance to travel, so these
+ * run on the desktop projects.
+ */
+
+const COMPOSER = '[data-testid="composer-surface"]';
+const CONVERSATION_TITLE = 'Composer position';
+
+type Box = { left: number; right: number; width: number; centre: number };
+
+const skipBelowSm = (page: Page) => {
+  const width = page.viewportSize()?.width ?? 0;
+  test.skip(width < 640, 'the composer is full-bleed below the sm breakpoint');
+};
+
+async function seedThread() {
+  const conversationId = randomUUID();
+  const { email } = getE2EUser();
+  await seedConversations(email, [
+    { conversationId, title: CONVERSATION_TITLE, updatedAt: new Date() },
+  ]);
+  const userMessageId = randomUUID();
+  await seedMessages(email, conversationId, [
+    {
+      messageId: userMessageId,
+      parentMessageId: '00000000-0000-0000-0000-000000000000',
+      text: 'Where does the composer sit?',
+      isCreatedByUser: true,
+      sender: 'User',
+    },
+    {
+      messageId: randomUUID(),
+      parentMessageId: userMessageId,
+      text: 'Exactly where it sat on the welcome screen.',
+      isCreatedByUser: false,
+      sender: 'Mock Provider A',
+    },
+  ]);
+  return conversationId;
+}
+
+async function dropThread(conversationId: string) {
+  await deleteMessagesByConversation([conversationId]);
+  await deleteConversations([conversationId]);
+}
+
+const boxOf = (page: Page, selector: string): Promise<Box> =>
+  page.evaluate((target) => {
+    const node = document.querySelector(target);
+    if (!node) {
+      throw new Error(`${target} is not rendered`);
+    }
+    const rect = node.getBoundingClientRect();
+    return {
+      left: Math.round(rect.left * 100) / 100,
+      right: Math.round(rect.right * 100) / 100,
+      width: Math.round(rect.width * 100) / 100,
+      centre: Math.round((rect.left + rect.width / 2) * 100) / 100,
+    };
+  }, selector);
+
+/** Navigate the way a user does — the sidebar row — so the app keeps the composer
+ *  node it already rendered instead of mounting a new one. */
+async function openSeededConversation(page: Page) {
+  const row = page.getByTestId('convo-item').filter({ hasText: CONVERSATION_TITLE }).first();
+  await expect(row).toBeVisible({ timeout: 20000 });
+  await row.click();
+  await expect(page.locator('.message-render').first()).toBeVisible({ timeout: 20000 });
+}
+
+async function settleComposer(page: Page) {
+  /** The clearance transitions for 300ms; wait for the box to stop moving. */
+  let previous = await boxOf(page, COMPOSER);
+  for (let attempt = 0; attempt < 20; attempt++) {
+    await page.waitForTimeout(200);
+    const next = await boxOf(page, COMPOSER);
+    if (Math.abs(next.left - previous.left) < 0.5 && Math.abs(next.width - previous.width) < 0.5) {
+      return next;
+    }
+    previous = next;
+  }
+  throw new Error(`the composer never settled: ${JSON.stringify(previous)}`);
+}
+
+declare global {
+  interface Window {
+    /** Filled by the in-page sampler below; read back after the navigation. */
+    __composerTransitions?: string[];
+  }
+}
+
+/** Records every CSS transition the composer's own form runs, for the whole
+ *  window, so a navigation that jumps records nothing. */
+async function watchComposerTransitions(page: Page) {
+  await page.evaluate((selector) => {
+    const form = document.querySelector(selector)?.closest('form');
+    if (!form) {
+      throw new Error('the composer form is not rendered');
+    }
+    const seen: string[] = [];
+    window.__composerTransitions = seen;
+    const started = performance.now();
+    const sample = () => {
+      for (const animation of form.getAnimations()) {
+        if (animation instanceof CSSTransition && !seen.includes(animation.transitionProperty)) {
+          seen.push(animation.transitionProperty);
+        }
+      }
+      if (performance.now() - started < 3000) {
+        requestAnimationFrame(sample);
+      }
+    };
+    requestAnimationFrame(sample);
+  }, COMPOSER);
+}
+
+/** A platform whose scrollbars reserve nothing — macOS and iOS by default.
+ *  The rule has to be in the document's own stylesheet before the app's scripts
+ *  run, so it is served with the HTML rather than injected afterwards: a style
+ *  appended from an init script can land after React has already measured. */
+async function serveWithOverlayScrollbars(page: Page) {
+  await page.route('**/*', async (route) => {
+    if (route.request().resourceType() !== 'document') {
+      return route.fallback();
+    }
+    const response = await route.fetch();
+    const body = (await response.text()).replace(
+      '<head>',
+      '<head><style>::-webkit-scrollbar { width: 0 !important; height: 0 !important; } * { scrollbar-width: none !important; }</style>',
+    );
+    await route.fulfill({ response, body });
+  });
+}
+
+/** The band the message column actually holds back, as the app measures it. */
+const measuredGutter = (page: Page): Promise<number> =>
+  page.evaluate(() => {
+    const column = document.querySelector('.scrollbar-gutter-stable');
+    if (!column) {
+      throw new Error('the message column is not rendered');
+    }
+    return Math.max(0, column.getBoundingClientRect().width - column.clientWidth);
+  });
+
+const recordedTransitions = (page: Page): Promise<string[]> =>
+  page.evaluate(() => window.__composerTransitions ?? []);
+
+test.describe('composer position across the welcome screen', () => {
+  test('the composer keeps its horizontal position and width into a conversation @scenario:composer-holds-position-into-conversation', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    skipBelowSm(page);
+    const conversationId = await seedThread();
+
+    try {
+      await page.goto('/c/new', { timeout: 10000 });
+      await expect(page.locator(COMPOSER)).toBeVisible();
+      const onWelcome = await settleComposer(page);
+
+      await openSeededConversation(page);
+      const inConversation = await settleComposer(page);
+
+      expect(inConversation.left).toBeCloseTo(onWelcome.left, 0);
+      expect(inConversation.width).toBeCloseTo(onWelcome.width, 0);
+
+      /** The conversation composer is the anchored one: it lines up with the
+       *  message column, which is what the welcome screen now matches. */
+      const messageRow = await boxOf(page, '.message-render');
+      expect(Math.abs(inConversation.centre - messageRow.centre)).toBeLessThanOrEqual(1);
+    } finally {
+      await dropThread(conversationId);
+    }
+  });
+
+  test('the composer keeps its position where scrollbars overlay @scenario:composer-holds-position-with-overlay-scrollbars', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    skipBelowSm(page);
+    const conversationId = await seedThread();
+
+    try {
+      await serveWithOverlayScrollbars(page);
+
+      await page.goto('/c/new', { timeout: 10000 });
+      await expect(page.locator(COMPOSER)).toBeVisible();
+      const onWelcome = await settleComposer(page);
+
+      await openSeededConversation(page);
+      const inConversation = await settleComposer(page);
+
+      /** The emulation is the whole point of this scenario: if the platform still
+       *  reserves a band, the run proves nothing and has to say so. */
+      expect(await measuredGutter(page)).toBe(0);
+
+      expect(inConversation.left).toBeCloseTo(onWelcome.left, 0);
+      expect(inConversation.width).toBeCloseTo(onWelcome.width, 0);
+
+      const messageRow = await boxOf(page, '.message-render');
+      expect(Math.abs(inConversation.centre - messageRow.centre)).toBeLessThanOrEqual(1);
+    } finally {
+      await dropThread(conversationId);
+    }
+  });
+
+  test('the composer slides down when a conversation opens @scenario:composer-slides-down-into-conversation', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    skipBelowSm(page);
+    const conversationId = await seedThread();
+
+    try {
+      /** The reported case: the welcome composer already sits at the bottom, so
+       *  the clearance change is the whole movement. */
+      await page.addInitScript(() => {
+        window.localStorage.setItem('centerFormOnLanding', 'false');
+      });
+      await page.goto('/c/new', { timeout: 10000 });
+      await expect(page.locator(COMPOSER)).toBeVisible();
+      const onWelcome = await settleComposer(page);
+
+      await watchComposerTransitions(page);
+      await openSeededConversation(page);
+      const inConversation = await settleComposer(page);
+
+      expect(inConversation.left).toBeCloseTo(onWelcome.left, 0);
+      expect(await recordedTransitions(page)).toContain('margin-bottom');
+    } finally {
+      await dropThread(conversationId);
+    }
+  });
+
+  test('the composer settles without motion when the reader asked for less @scenario:composer-settles-instantly-under-reduced-motion', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    skipBelowSm(page);
+    const conversationId = await seedThread();
+
+    try {
+      await page.emulateMedia({ reducedMotion: 'reduce' });
+      await page.addInitScript(() => {
+        window.localStorage.setItem('centerFormOnLanding', 'false');
+      });
+      await page.goto('/c/new', { timeout: 10000 });
+      await expect(page.locator(COMPOSER)).toBeVisible();
+      const onWelcome = await settleComposer(page);
+
+      await watchComposerTransitions(page);
+      await openSeededConversation(page);
+      const inConversation = await settleComposer(page);
+
+      expect(await recordedTransitions(page)).toEqual([]);
+      /** No motion is not no move: the conversation clearance still applies. */
+      expect(inConversation.right).toBeGreaterThan(0);
+      expect(inConversation.left).toBeCloseTo(onWelcome.left, 0);
+    } finally {
+      await page.emulateMedia({ reducedMotion: null });
+      await dropThread(conversationId);
+    }
+  });
+});
diff --git a/e2e/specs/mock/scenarios/configured-footer-clearance.spec.ts b/e2e/specs/mock/scenarios/configured-footer-clearance.spec.ts
new file mode 100644
index 00000000000..1ee0f6b205c
--- /dev/null
+++ b/e2e/specs/mock/scenarios/configured-footer-clearance.spec.ts
@@ -0,0 +1,68 @@
+import { randomUUID } from 'crypto';
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+import { getE2EUser } from '../../../setup/user';
+import { deleteConversations, deleteMessagesByConversation, seedConversations } from '../db';
+
+/**
+ * The footer is an absolutely positioned bar in a zero-height wrapper, so the
+ * composer above it is what reserves its band. A conversation that keeps a
+ * deployment's configured footer therefore has to keep that clearance too, or
+ * the bar paints over the composer's action row and takes the clicks meant for
+ * it.
+ */
+
+const COMPOSER = '[data-testid="composer-surface"]';
+const CUSTOM_FOOTER = 'Operator policy footer';
+const CONVERSATION_TITLE = 'Configured footer clearance';
+
+test.use({ viewport: { width: 1280, height: 800 } });
+
+async function withConfiguredFooter(page: Page) {
+  await page.route('**/api/config', async (route) => {
+    const response = await route.fetch();
+    const config = await response.json();
+    await route.fulfill({ response, json: { ...config, customFooter: CUSTOM_FOOTER } });
+  });
+}
+
+test.describe('configured footer clearance', () => {
+  test('a configured footer never covers the composer @scenario:configured-footer-clears-the-composer', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    const conversationId = randomUUID();
+    await seedConversations(getE2EUser().email, [
+      { conversationId, title: CONVERSATION_TITLE, updatedAt: new Date() },
+    ]);
+
+    try {
+      await withConfiguredFooter(page);
+      await page.goto(`/c/${conversationId}`, { timeout: 10000 });
+      await expect(page.locator(COMPOSER)).toBeVisible();
+      const footer = page.getByText(CUSTOM_FOOTER);
+      await expect(footer).toBeVisible();
+
+      const composerBox = await page.locator(COMPOSER).boundingBox();
+      const footerBox = await footer.boundingBox();
+      expect(composerBox).not.toBeNull();
+      expect(footerBox).not.toBeNull();
+      const composerBottom = (composerBox?.y ?? 0) + (composerBox?.height ?? 0);
+      expect(
+        footerBox?.y ?? 0,
+        'the configured footer overlaps the composer',
+      ).toBeGreaterThanOrEqual(composerBottom);
+
+      /** Overlap is not only visual: the bar would take the composer's clicks. */
+      const input = page.getByRole('textbox', { name: 'Message input' });
+      await page
+        .locator(COMPOSER)
+        .click({ position: { x: 40, y: (composerBox?.height ?? 40) - 8 } });
+      await input.fill('still reachable');
+      await expect(input).toHaveValue('still reachable');
+    } finally {
+      await deleteMessagesByConversation([conversationId]);
+      await deleteConversations([conversationId]);
+    }
+  });
+});
diff --git a/e2e/specs/mock/scenarios/configured-footer.spec.ts b/e2e/specs/mock/scenarios/configured-footer.spec.ts
new file mode 100644
index 00000000000..da6c409ced8
--- /dev/null
+++ b/e2e/specs/mock/scenarios/configured-footer.spec.ts
@@ -0,0 +1,62 @@
+import { randomUUID } from 'crypto';
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+import { getE2EUser } from '../../../setup/user';
+import { deleteConversations, deleteMessagesByConversation, seedConversations } from '../db';
+
+/**
+ * The generic model disclaimer belongs to the welcome screen. A deployment's own
+ * footer is different content: an operator who sets `customFooter` puts policy or
+ * branding there, and the authenticated chat is where it is read. Scoping the
+ * disclaimer to the welcome screen must not take that configuration off the
+ * conversation screen with it.
+ *
+ * The footer is hidden below `sm`, so this runs on the desktop viewport it
+ * describes.
+ */
+
+const CUSTOM_FOOTER = 'Operator policy footer';
+const CONVERSATION_TITLE = 'Configured footer';
+
+test.use({ viewport: { width: 1280, height: 800 } });
+
+/** Serve the deployment's startup config with a custom footer configured,
+ *  without changing the shared harness config every other spec reads. */
+async function withConfiguredFooter(page: Page) {
+  await page.route('**/api/config', async (route) => {
+    const response = await route.fetch();
+    const config = await response.json();
+    await route.fulfill({
+      response,
+      json: { ...config, customFooter: CUSTOM_FOOTER },
+    });
+  });
+}
+
+test.describe('configured footer', () => {
+  test("an operator's footer stays in the conversation @scenario:configured-footer-stays-in-a-conversation", async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    const conversationId = randomUUID();
+    await seedConversations(getE2EUser().email, [
+      { conversationId, title: CONVERSATION_TITLE, updatedAt: new Date() },
+    ]);
+
+    try {
+      await withConfiguredFooter(page);
+
+      await page.goto('/c/new', { timeout: 10000 });
+      await expect(page.getByText(CUSTOM_FOOTER)).toBeVisible();
+      /** The generic disclaimer is replaced by the operator's content, as before. */
+      await expect(page.locator('a[href="https://librechat.ai"]')).toHaveCount(0);
+
+      await page.goto(`/c/${conversationId}`, { timeout: 10000 });
+      await expect(page.getByRole('textbox', { name: 'Message input' })).toBeVisible();
+      await expect(page.getByText(CUSTOM_FOOTER)).toBeVisible();
+    } finally {
+      await deleteMessagesByConversation([conversationId]);
+      await deleteConversations([conversationId]);
+    }
+  });
+});
diff --git a/e2e/specs/mock/scenarios/contrast-switch-position.spec.ts b/e2e/specs/mock/scenarios/contrast-switch-position.spec.ts
new file mode 100644
index 00000000000..1952b2ec4ef
--- /dev/null
+++ b/e2e/specs/mock/scenarios/contrast-switch-position.spec.ts
@@ -0,0 +1,105 @@
+import { randomUUID } from 'crypto';
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+import { getE2EUser } from '../../../setup/user';
+import {
+  deleteConversations,
+  deleteMessagesByConversation,
+  seedConversations,
+  seedMessages,
+} from '../db';
+
+/**
+ * The band the message column reserves is not a constant of the platform: the
+ * contrast modes widen the app's own scrollbar. A reader who turns contrast on
+ * while the welcome screen is the only thing mounted has no message column to
+ * republish that width, so the welcome screen must remeasure it itself — or the
+ * first conversation corrects it and the composer steps sideways.
+ */
+
+const COMPOSER = '[data-testid="composer-surface"]';
+const CONVERSATION_TITLE = 'Contrast switch';
+
+test.use({ viewport: { width: 1280, height: 800 } });
+
+type Box = { left: number; width: number };
+
+const boxOf = (page: Page): Promise<Box> =>
+  page.evaluate((selector) => {
+    const node = document.querySelector(selector);
+    if (!node) {
+      throw new Error(`${selector} is not rendered`);
+    }
+    const rect = node.getBoundingClientRect();
+    return {
+      left: Math.round(rect.left * 100) / 100,
+      width: Math.round(rect.width * 100) / 100,
+    };
+  }, COMPOSER);
+
+async function settle(page: Page): Promise<Box> {
+  let previous = await boxOf(page);
+  for (let attempt = 0; attempt < 20; attempt++) {
+    await page.waitForTimeout(200);
+    const next = await boxOf(page);
+    if (Math.abs(next.left - previous.left) < 0.5 && Math.abs(next.width - previous.width) < 0.5) {
+      return next;
+    }
+    previous = next;
+  }
+  throw new Error(`the composer never settled: ${JSON.stringify(previous)}`);
+}
+
+test.describe('contrast switch', () => {
+  test('the composer holds its position across a contrast switch @scenario:composer-holds-position-across-a-contrast-switch', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    const conversationId = randomUUID();
+    const { email } = getE2EUser();
+    await seedConversations(email, [
+      { conversationId, title: CONVERSATION_TITLE, updatedAt: new Date() },
+    ]);
+    const userMessageId = randomUUID();
+    await seedMessages(email, conversationId, [
+      {
+        messageId: userMessageId,
+        parentMessageId: '00000000-0000-0000-0000-000000000000',
+        text: 'Does contrast move the composer?',
+        isCreatedByUser: true,
+        sender: 'User',
+      },
+      {
+        messageId: randomUUID(),
+        parentMessageId: userMessageId,
+        text: 'It should not.',
+        isCreatedByUser: false,
+        sender: 'Mock Provider A',
+      },
+    ]);
+
+    try {
+      await page.goto('/c/new', { timeout: 10000 });
+      await expect(page.locator(COMPOSER)).toBeVisible();
+      await settle(page);
+
+      /** The OS contrast preference, changed while the welcome screen is up. */
+      await page.emulateMedia({ contrast: 'more' });
+      await expect(page.locator('html.high-contrast')).toHaveCount(1, { timeout: 10000 });
+      const onWelcome = await settle(page);
+
+      const row = page.getByTestId('convo-item').filter({ hasText: CONVERSATION_TITLE }).first();
+      await expect(row).toBeVisible({ timeout: 20000 });
+      await row.click();
+      await expect(page.locator('.message-render').first()).toBeVisible({ timeout: 20000 });
+      const inConversation = await settle(page);
+
+      expect(inConversation.left).toBeCloseTo(onWelcome.left, 0);
+      expect(inConversation.width).toBeCloseTo(onWelcome.width, 0);
+    } finally {
+      await page.emulateMedia({ contrast: null });
+      await deleteMessagesByConversation([conversationId]);
+      await deleteConversations([conversationId]);
+    }
+  });
+});
diff --git a/e2e/specs/mock/scenarios/empty-prompts-panel.spec.ts b/e2e/specs/mock/scenarios/empty-prompts-panel.spec.ts
new file mode 100644
index 00000000000..90013dfb675
--- /dev/null
+++ b/e2e/specs/mock/scenarios/empty-prompts-panel.spec.ts
@@ -0,0 +1,60 @@
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+
+/**
+ * The panels share one empty card: a bordered box with a circular icon, a title
+ * and a line of explanation. The prompts panel drew its own copy of it, a shade
+ * off on the border, so an empty prompts list did not look like an empty
+ * bookmarks or memories list.
+ */
+
+type CardStyle = {
+  borderColor: string;
+  borderWidth: string;
+  borderRadius: string;
+  padding: string;
+  textAlign: string;
+  iconBackground: string;
+};
+
+test.describe('empty panel cards', () => {
+  test('the empty prompts panel is drawn like the other panels @scenario:empty-prompts-panel-matches-other-panels', async ({
+    page,
+  }) => {
+    const width = page.viewportSize()?.width ?? 0;
+    test.skip(width < 768, 'the side panels open as a drawer below md');
+
+    await page.goto('/c/new', { timeout: 10000 });
+
+    const prompts = await openPanelCard(page, 'Prompts', 'No prompts yet');
+    const bookmarks = await openPanelCard(page, 'Bookmarks', 'No bookmarks yet');
+
+    expect(prompts).toEqual(bookmarks);
+  });
+});
+
+/** Open a side panel from the rail and measure the empty card it renders. */
+async function openPanelCard(page: Page, panel: string, title: string): Promise<CardStyle> {
+  await page.getByRole('button', { name: panel }).first().click();
+  await expect(page.getByText(title, { exact: true }).first()).toBeVisible({ timeout: 20000 });
+
+  return page.evaluate((heading) => {
+    const label = Array.from(document.querySelectorAll('p')).find(
+      (node) => node.textContent?.trim() === heading,
+    );
+    const card = label?.parentElement;
+    const icon = card?.firstElementChild;
+    if (!card || !icon) {
+      throw new Error(`the ${heading} card is not rendered`);
+    }
+    const style = getComputedStyle(card);
+    return {
+      borderColor: style.borderColor,
+      borderWidth: style.borderWidth,
+      borderRadius: style.borderRadius,
+      padding: style.padding,
+      textAlign: style.textAlign,
+      iconBackground: getComputedStyle(icon).backgroundColor,
+    };
+  }, title);
+}
diff --git a/e2e/specs/mock/scenarios/mobile-composer-edges.spec.ts b/e2e/specs/mock/scenarios/mobile-composer-edges.spec.ts
new file mode 100644
index 00000000000..c68e892b6ce
--- /dev/null
+++ b/e2e/specs/mock/scenarios/mobile-composer-edges.spec.ts
@@ -0,0 +1,57 @@
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+
+/**
+ * Below `sm` the composer is full-bleed: squared off at the bottom and flush
+ * with the screen. It was inset on two sides anyway — it reserved the message
+ * column's scrollbar band on its trailing edge, and carried a band of padding
+ * under its action row — so the surface stopped short of both edges.
+ */
+
+const COMPOSER = '[data-testid="composer-surface"]';
+/** The spec declares the viewport it describes rather than depending on a
+ *  runner's project matrix: the repository's own mock config has a single
+ *  Desktop Chrome project, where a width-gated mobile assertion would skip and
+ *  report nothing. */
+test.use({ viewport: { width: 390, height: 844 } });
+
+test.describe('mobile composer', () => {
+  test('the composer reaches the screen edges @scenario:mobile-composer-reaches-screen-edges', async ({
+    page,
+  }) => {
+    const width = page.viewportSize()?.width ?? 0;
+    expect(width).toBeLessThan(640);
+
+    await page.goto('/c/new', { timeout: 10000 });
+    await expect(page.locator(COMPOSER)).toBeVisible();
+
+    const edges = await measureEdges(page);
+    expect(edges.left).toBeCloseTo(0, 0);
+    expect(edges.right).toBeCloseTo(edges.viewportWidth, 0);
+    /** The action row is the last thing in the surface: no empty band under it. */
+    expect(edges.surfaceBottom - edges.actionRowBottom).toBeLessThanOrEqual(2);
+    expect(edges.viewportHeight - edges.surfaceBottom).toBeLessThanOrEqual(2);
+  });
+});
+
+async function measureEdges(page: Page) {
+  return page.evaluate((selector) => {
+    const surface = document.querySelector(selector);
+    if (!surface) {
+      throw new Error(`${selector} is not rendered`);
+    }
+    const actionRow = surface.lastElementChild;
+    if (!actionRow) {
+      throw new Error('the composer surface has no action row');
+    }
+    const surfaceRect = surface.getBoundingClientRect();
+    return {
+      left: Math.round(surfaceRect.left),
+      right: Math.round(surfaceRect.right),
+      surfaceBottom: Math.round(surfaceRect.bottom),
+      actionRowBottom: Math.round(actionRow.getBoundingClientRect().bottom),
+      viewportWidth: window.innerWidth,
+      viewportHeight: window.innerHeight,
+    };
+  }, COMPOSER);
+}
diff --git a/e2e/specs/mock/scenarios/stale-gutter.spec.ts b/e2e/specs/mock/scenarios/stale-gutter.spec.ts
new file mode 100644
index 00000000000..8db585370aa
--- /dev/null
+++ b/e2e/specs/mock/scenarios/stale-gutter.spec.ts
@@ -0,0 +1,63 @@
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+
+/**
+ * The measured band outlives the chat screen on purpose — a second chat column
+ * reads it rather than remeasuring — and the screens it outlives can change it:
+ * the auth layout carries a theme selector, and a contrast switch there widens
+ * the app's own scrollbar while nothing is watching. So the chat screen has to
+ * remeasure on arrival rather than trust what it finds.
+ */
+
+const COMPOSER = '[data-testid="composer-surface"]';
+/** Nothing the platform would ever reserve; only a stale value looks like this. */
+const STALE_GUTTER = '40px';
+
+test.use({ viewport: { width: 1280, height: 800 } });
+
+/** Leave a stale reservation behind, the way another screen would have. */
+async function withStaleGutter(page: Page) {
+  await page.addInitScript((value) => {
+    const apply = () => {
+      document.documentElement.style.setProperty('--message-scrollbar-gutter', value);
+    };
+    if (document.documentElement) {
+      apply();
+    }
+    document.addEventListener('readystatechange', apply, { once: true });
+  }, STALE_GUTTER);
+}
+
+const measured = (page: Page) =>
+  page.evaluate(() => {
+    const surface = document.querySelector('[data-testid="composer-surface"]');
+    const column = surface?.closest('form')?.parentElement;
+    if (!surface || !column) {
+      throw new Error('the composer column is not rendered');
+    }
+    return {
+      published: getComputedStyle(document.documentElement)
+        .getPropertyValue('--message-scrollbar-gutter')
+        .trim(),
+      composerRight: Math.round(surface.getBoundingClientRect().right),
+      columnRight: Math.round(column.getBoundingClientRect().right),
+    };
+  });
+
+test.describe('stale gutter', () => {
+  test('the welcome screen remeasures a band it did not measure @scenario:welcome-screen-remeasures-a-stale-gutter', async ({
+    page,
+  }) => {
+    test.setTimeout(60000);
+    await withStaleGutter(page);
+
+    await page.goto('/c/new', { timeout: 10000 });
+    await expect(page.locator(COMPOSER)).toBeVisible();
+    await page.waitForTimeout(600);
+
+    const state = await measured(page);
+    expect(state.published, 'the stale reservation was kept').not.toBe(STALE_GUTTER);
+    /** 40px of phantom scrollbar would push the composer that far off its column. */
+    expect(state.columnRight - state.composerRight).toBeLessThanOrEqual(16);
+  });
+});
diff --git a/e2e/specs/mock/scenarios/temporary-chat-icon.spec.ts b/e2e/specs/mock/scenarios/temporary-chat-icon.spec.ts
new file mode 100644
index 00000000000..656bcf37322
--- /dev/null
+++ b/e2e/specs/mock/scenarios/temporary-chat-icon.spec.ts
@@ -0,0 +1,54 @@
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+
+/**
+ * Temporary chat is a retention mode, and it was marked with a dashed speech
+ * bubble that reads as a generic chat glyph. It now carries lucide's
+ * hat-and-glasses incognito mark, on the toggle that turns it on and on the
+ * welcome screen that explains it.
+ */
+
+const INCOGNITO = 'svg.lucide-hat-glasses';
+const TOGGLE = 'button[aria-label="Temporary Chat"]';
+
+test.describe('temporary chat mark', () => {
+  test('turning temporary chat on marks it with the incognito icon @scenario:temporary-chat-marked-with-incognito-icon', async ({
+    page,
+  }) => {
+    const width = page.viewportSize()?.width ?? 0;
+    test.skip(width < 768, 'the header toggle collapses into the overflow menu below md');
+
+    await page.goto('/c/new', { timeout: 10000 });
+    const toggle = page.locator(TOGGLE);
+    await expect(toggle).toBeVisible({ timeout: 20000 });
+    await expect(toggle.locator(INCOGNITO)).toBeVisible();
+    await expect(toggle).toHaveAttribute('aria-pressed', 'false');
+
+    await toggle.click();
+    await expect(toggle).toHaveAttribute('aria-pressed', 'true');
+
+    /** The welcome screen takes over the explanation, under the same mark. */
+    await expect(page.getByText('Temporary Chat', { exact: true }).first()).toBeVisible();
+    await expect(page.locator(INCOGNITO)).toHaveCount(2);
+    expect(await strokeOnly(page)).toBe(true);
+
+    /** Leave the account as the suite found it: the mode is persisted locally. */
+    await toggle.click();
+    await expect(toggle).toHaveAttribute('aria-pressed', 'false');
+  });
+});
+
+/** The mark is a lucide outline icon: it follows the text colour rather than
+ *  painting a filled shape that would ignore the theme. */
+async function strokeOnly(page: Page): Promise<boolean> {
+  return page.evaluate((selector) => {
+    const icons = Array.from(document.querySelectorAll(selector));
+    return (
+      icons.length > 0 &&
+      icons.every((icon) => {
+        const style = getComputedStyle(icon);
+        return style.fill === 'none' && style.stroke !== 'none';
+      })
+    );
+  }, INCOGNITO);
+}
diff --git a/e2e/specs/mock/scenarios/welcome-disclaimer.spec.ts b/e2e/specs/mock/scenarios/welcome-disclaimer.spec.ts
new file mode 100644
index 00000000000..2b562068e76
--- /dev/null
+++ b/e2e/specs/mock/scenarios/welcome-disclaimer.spec.ts
@@ -0,0 +1,105 @@
+import { randomUUID } from 'crypto';
+import { expect, test } from '@playwright/test';
+import type { Page } from '@playwright/test';
+import { getE2EUser } from '../../../setup/user';
+import { deleteConversations, deleteMessagesByConversation, seedConversations } from '../db';
+
+/**
+ * The model disclaimer belongs to the welcome screen, where it is first read. It
+ * used to repeat under the composer in every conversation, and it carried
+ * `text-primary`, the weight of the greeting above it.
+ *
+ * The footer is hidden below `sm`, so both scenarios run on the desktop
+ * projects and skip the mobile one.
+ */
+
+const DISCLAIMER = 'a[href="https://librechat.ai"]';
+/** WCAG AA for body text; the disclaimer renders at 12px. */
+const AA_CONTRAST = 4.5;
+
+const skipBelowSm = (page: Page) => {
+  const width = page.viewportSize()?.width ?? 0;
+  test.skip(width < 640, 'the disclaimer is hidden below the sm breakpoint');
+};
+
+async function seedConversation(title: string) {
+  const conversationId = randomUUID();
+  await seedConversations(getE2EUser().email, [{ conversationId, title, updatedAt: new Date() }]);
+  return conversationId;
+}
+
+async function contrastOfDisclaimer(page: Page): Promise<number> {
+  return page.evaluate((selector) => {
+    const link = document.querySelector<HTMLElement>(selector);
+    if (!link) {
+      throw new Error('the disclaimer is not rendered');
+    }
+    const parse = (value: string): [number, number, number] => {
+      const parts = value.match(/[\d.]+/g);
+      if (!parts || parts.length < 3) {
+        throw new Error(`unreadable colour ${value}`);
+      }
+      return [Number(parts[0]), Number(parts[1]), Number(parts[2])];
+    };
+    const luminance = ([r, g, b]: [number, number, number]) => {
+      const channel = (value: number) => {
+        const ratio = value / 255;
+        return ratio <= 0.04045 ? ratio / 12.92 : ((ratio + 0.055) / 1.055) ** 2.4;
+      };
+      return 0.2126 * channel(r) + 0.7152 * channel(g) + 0.0722 * channel(b);
+    };
+    /** The bar itself paints nothing; walk up to whatever fills behind it. */
+    let node: HTMLElement | null = link;
+    let background = 'rgba(0, 0, 0, 0)';
+    while (node) {
+      const painted = getComputedStyle(node).backgroundColor;
+      if (painted && painted !== 'rgba(0, 0, 0, 0)' && painted !== 'transparent') {
+        background = painted;
+        break;
+      }
+      node = node.parentElement;
+    }
+    const foreground = luminance(parse(getComputedStyle(link).color));
+    const behind = luminance(parse(background));
+    const lighter = Math.max(foreground, behind);
+    const darker = Math.min(foreground, behind);
+    return (lighter + 0.05) / (darker + 0.05);
+  }, DISCLAIMER);
+}
+
+test.describe('welcome screen disclaimer', () => {
+  test('the disclaimer stays on the welcome screen and leaves the conversation @scenario:welcome-screen-disclaimer-only', async ({
+    page,
+  }) => {
+    skipBelowSm(page);
+    const conversationId = await seedConversation('Disclaimer placement');
+
+    try {
+      await page.goto('/c/new', { timeout: 10000 });
+      await expect(page.locator(DISCLAIMER)).toBeVisible();
+
+      await page.goto(`/c/${conversationId}`, { timeout: 10000 });
+      await expect(page.getByRole('textbox', { name: 'Message input' })).toBeVisible();
+      await expect(page.locator(DISCLAIMER)).toHaveCount(0);
+
+      await page.goto('/c/new', { timeout: 10000 });
+      await expect(page.locator(DISCLAIMER)).toBeVisible();
+    } finally {
+      await deleteMessagesByConversation([conversationId]);
+      await deleteConversations([conversationId]);
+    }
+  });
+
+  test('the muted disclaimer still clears AA contrast @scenario:welcome-disclaimer-readable-while-muted', async ({
+    page,
+  }) => {
+    skipBelowSm(page);
+    await page.goto('/c/new', { timeout: 10000 });
+    await expect(page.locator(DISCLAIMER)).toBeVisible();
+
+    const contrast = await contrastOfDisclaimer(page);
+    expect(contrast).toBeGreaterThanOrEqual(AA_CONTRAST);
+    /** Muted, not merely readable: the greeting's own weight is far above this. */
+    expect(contrast).toBeLessThan(12);
+  });
+});
diff --git a/package-lock.json b/package-lock.json
index bc6867163fc..43315890446 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -937,8 +937,8 @@
         "js-cookie": "^3.0.5",
         "librechat-data-provider": "*",
         "lodash": "^4.17.23",
-        "lucide": "^0.525.0",
-        "lucide-react": "^0.525.0",
+        "lucide": "^0.528.0",
+        "lucide-react": "^0.528.0",
         "match-sorter": "^8.1.0",
         "mdast-util-directive": "^3.0.0",
         "mdast-util-from-markdown": "^2.0.1",
@@ -30859,15 +30859,15 @@
       "license": "ISC"
     },
     "node_modules/lucide": {
-      "version": "0.525.0",
-      "resolved": "https://registry.npmjs.org/lucide/-/lucide-0.525.0.tgz",
-      "integrity": "sha512-sfehWlaE/7NVkcEQ4T9JD3eID8RNMIGJBBUq9wF3UFiJIrcMKRbU3g1KGfDk4svcW7yw8BtDLXaXo02scDtUYQ==",
+      "version": "0.528.0",
+      "resolved": "https://registry.npmjs.org/lucide/-/lucide-0.528.0.tgz",
+      "integrity": "sha512-ECgCnfShg2QV+ExL6PPBB304Vfc/+1B99K+2zmAiHBWUlst8lziRoloR7PVeBDENABCC0DbCpw5UpUi/GG3JdA==",
       "license": "ISC"
     },
     "node_modules/lucide-react": {
-      "version": "0.525.0",
-      "resolved": "https://registry.npmjs.org/lucide-react/-/lucide-react-0.525.0.tgz",
-      "integrity": "sha512-Tm1txJ2OkymCGkvwoHt33Y2JpN5xucVq1slHcgE6Lk0WjDfjgKWor5CdVER8U6DvcfMwh4M8XxmpTiyzfmfDYQ==",
+      "version": "0.528.0",
+      "resolved": "https://registry.npmjs.org/lucide-react/-/lucide-react-0.528.0.tgz",
+      "integrity": "sha512-Qeapzej+iIKQwOevWKtsSHJKkZh16ohe0Lm5bwdsmlMC7M3T9vIP+2jLiYjcvBl8Lekcc1BTtR4eUATqs3aAjw==",
       "license": "ISC",
       "peerDependencies": {
         "react": "^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0"
@@ -43062,8 +43062,8 @@
         "jotai": "^2.12.5",
         "js-yaml": "^4.3.2",
         "librechat-data-provider": "*",
-        "lucide": "^0.525.0",
-        "lucide-react": "^0.525.0",
+        "lucide": "^0.528.0",
+        "lucide-react": "^0.528.0",
         "morphicons": "^1.4.1",
         "react": "^18.2.0",
         "react-dom": "^18.2.0",
@@ -43113,8 +43113,8 @@
         "input-otp": "^1.4.2",
         "jotai": "^2.12.5",
         "librechat-data-provider": "*",
-        "lucide": "^0.525.0",
-        "lucide-react": "^0.525.0",
+        "lucide": "^0.525.0 || ^0.528.0",
+        "lucide-react": "^0.525.0 || ^0.528.0",
         "match-sorter": "^8.1.0",
         "morphicons": "^1.4.1",
         "rc-input-number": "^7.4.2",
diff --git a/packages/api/src/agents/hitl/inspection.ts b/packages/api/src/agents/hitl/inspection.ts
index 0b87e41c89f..0a0cadaaa0a 100644
--- a/packages/api/src/agents/hitl/inspection.ts
+++ b/packages/api/src/agents/hitl/inspection.ts
@@ -9,6 +9,7 @@ import {
 import type { Agent, FiltersConfig, UserSubmittedMessageFieldPath } from 'librechat-data-provider';
 import type { AppConfig, IUser } from '@librechat/data-schemas';
 import type { StoredMessageContentInput } from '~/protection/adapters/submissions';
+import type { LocatorTraversalReporter } from '../../protection/diagnostics';
 import type { ExternalChatMessage } from '~/protection/adapters/messages';
 import {
   hasActiveFilePolicy,
@@ -69,6 +70,7 @@ type GetResumeMessages = (filter: {
 }) => Promise<ResumeMessage[] | null | undefined>;
 
 export interface ResumeContentInspectionInput {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   appConfig?: AppConfig;
   conversationId: string;
   targetMessageId?: string | null;
@@ -374,6 +376,8 @@ async function getResumeFileInspection(
     fileReferenceInputs: input.fileReferenceInputs ?? [],
   };
   const fileInspection = await resolveCanonicalFileReferences({
+    messageCount: storedMessages.length + input.submittedMessages.length,
+    onTraversalFailure: input.onTraversalFailure,
     filters,
     input: originalInput,
     user: input.user,
diff --git a/packages/api/src/agents/hitl/protection.spec.ts b/packages/api/src/agents/hitl/protection.spec.ts
index 7b814906104..6c7c1949154 100644
--- a/packages/api/src/agents/hitl/protection.spec.ts
+++ b/packages/api/src/agents/hitl/protection.spec.ts
@@ -41,6 +41,40 @@ function createInput(appConfig: unknown): AssertResumeRuntimeContentAllowedInput
 }
 
 describe('assertResumeRuntimeContentAllowed', () => {
+  it('reports locator failures from restored HITL content through its dependencies', async () => {
+    const onTraversalFailure = jest.fn();
+    const dependencies = { ...createDependencies(), onTraversalFailure };
+    dependencies.getFiles.mockResolvedValue([{ file_id: 'owned', filename: 'safe.txt' }]);
+    const input = createInput({
+      filters: { files: { pii: { fields: ['name'], starterPatterns: ['sk_prefix'] } } },
+    });
+    await expect(
+      assertResumeRuntimeContentAllowed(
+        {
+          ...input,
+          storedMessages: [
+            {
+              messageId: 'source-message',
+              isCreatedByUser: true,
+              role: 'user',
+              files: [{ file_id: 'owned' }],
+              content: Array.from({ length: 4200 }, () => ({ type: 'text', text: 'safe' })),
+            },
+          ],
+        },
+        dependencies,
+      ),
+    ).rejects.toMatchObject({ code: 'content_filter_uninspectable' });
+    expect(onTraversalFailure).toHaveBeenCalledWith(
+      expect.objectContaining({
+        operation: 'omit_resolved_file_locators',
+        reason: 'array_length',
+        messageCount: 1,
+        resolvedFileCount: 1,
+      }),
+    );
+  });
+
   it.each([
     { filters: { prompts: { pii: {} } } },
     {
diff --git a/packages/api/src/agents/hitl/protection.ts b/packages/api/src/agents/hitl/protection.ts
index 7008e67375b..500e7b3126f 100644
--- a/packages/api/src/agents/hitl/protection.ts
+++ b/packages/api/src/agents/hitl/protection.ts
@@ -37,6 +37,7 @@ import type {
   ResumeContentInspectionInput,
   ResumeSnapshotAgent,
 } from './inspection';
+import type { LocatorTraversalReporter } from '../../protection/diagnostics';
 import type { TextContentFragment } from '~/protection/types';
 import type { CheckAccessParams } from '~/middleware/access';
 import {
@@ -167,6 +168,7 @@ const ENCRYPTED_ACTION_METADATA_FIELDS = [
 ] as const;
 
 export interface ResumeContentProtectionDependencies {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   getAgentCheckpointer: (
     config: TCheckpointerConfig | undefined,
   ) => Promise<ResumeCheckpointer | undefined>;
@@ -219,7 +221,7 @@ export interface AssertResumeRuntimeContentAllowedInput
 
 export type ResumeRuntimeContentProtectionDependencies = Pick<
   ResumeContentProtectionDependencies,
-  'getAgentCheckpointer' | 'getMessages' | 'getFiles'
+  'getAgentCheckpointer' | 'getMessages' | 'getFiles' | 'onTraversalFailure'
 >;
 
 export interface ResumeRuntimeContentProjection {
@@ -800,6 +802,7 @@ async function assertResumeAgentContentAllowed({
     definitionAgents.push(memoryAgentDefinition.definition);
   }
   assertModelBoundContent({
+    onTraversalFailure: dependencies.onTraversalFailure,
     filters: appConfig?.filters,
     legacyPii: appConfig?.messageFilter?.pii,
     agents: definitionAgents,
@@ -855,6 +858,7 @@ async function assertResumeModelBoundContentAllowed(
 ): Promise<ResumeModelBoundContentProjection> {
   if (!hasResumeHistoryProtection(appConfig)) {
     assertModelBoundContent({
+      onTraversalFailure: dependencies.onTraversalFailure,
       filters: appConfig?.filters,
       legacyPii: appConfig?.messageFilter?.pii,
       agents,
@@ -883,6 +887,7 @@ async function assertResumeModelBoundContentAllowed(
   }
   const checkpointContent = getResumeCheckpointContent(checkpointMessages);
   const contentInspection = await getResumeContentInspection({
+    onTraversalFailure: dependencies.onTraversalFailure,
     appConfig,
     conversationId,
     targetMessageId,
@@ -897,6 +902,7 @@ async function assertResumeModelBoundContentAllowed(
     getFiles: dependencies.getFiles,
   });
   assertModelBoundContent({
+    onTraversalFailure: dependencies.onTraversalFailure,
     filters: appConfig?.filters,
     legacyPii: appConfig?.messageFilter?.pii,
     submittedMessages: contentInspection.submittedMessages,
diff --git a/packages/api/src/agents/openai/service.ts b/packages/api/src/agents/openai/service.ts
index 782494635c0..2214390bfc7 100644
--- a/packages/api/src/agents/openai/service.ts
+++ b/packages/api/src/agents/openai/service.ts
@@ -1,3 +1,4 @@
+import type { LocatorTraversalReporter } from '../../protection/diagnostics';
 /**
  * OpenAI-compatible chat completions service for agents.
  *
@@ -85,6 +86,7 @@ import { createSafeUser } from '~/utils';
  * Dependencies for the chat completion service
  */
 export interface ChatCompletionDependencies {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   /** Get agent by ID */
   getAgent: (params: { id: string }) => Promise<Agent | null>;
   /** Initialize agent for use */
@@ -776,6 +778,7 @@ export async function createAgentChatCompletion(
       );
     }
     assertModelBoundContent({
+      onTraversalFailure: deps.onTraversalFailure,
       filters,
       legacyPii,
       submittedMessages,
diff --git a/packages/api/src/app/metrics.spec.ts b/packages/api/src/app/metrics.spec.ts
index 3b4ab585d5b..25141f6c25d 100644
--- a/packages/api/src/app/metrics.spec.ts
+++ b/packages/api/src/app/metrics.spec.ts
@@ -1,3 +1,4 @@
+import { omitResolvedCanonicalFileLocators } from '../protection/files';
 /// <reference types="jest" />
 import express from 'express';
 import request from 'supertest';
@@ -6,6 +7,7 @@ import { recordAgentEventActorReceiptMetric } from '@librechat/data-schemas';
 import type { Request, Response } from 'express';
 import {
   createMetrics,
+  reportLocatorTraversalFailure,
   instrumentMongooseQueryMetrics,
   normalizePath,
   recordAgentStartupMilestone,
@@ -137,6 +139,36 @@ describe('createMetrics', () => {
     );
   });
 
+  it('records locator traversal reasons and count distributions without content labels', async () => {
+    process.env.METRICS_SECRET = 'test-secret';
+    createMetrics();
+    const app = express();
+    app.use('/metrics', createMetrics().metricsRouter);
+    expect(() =>
+      omitResolvedCanonicalFileLocators(
+        { file_id: 'PRIVATE-FILE', payload: new Array(4096) },
+        new Map([['PRIVATE-FILE', { file_id: 'PRIVATE-FILE' }]]),
+        { messageCount: 58, onTraversalFailure: reportLocatorTraversalFailure },
+      ),
+    ).toThrow();
+    const response = await request(app).get('/metrics').set('Authorization', 'Bearer test-secret');
+    expect(response.status).toBe(200);
+    expect(response.text).toContain(
+      'content_filter_locator_traversal_failures_total{operation="omit_resolved_file_locators",reason="array_length"} 1',
+    );
+    for (const [dimension, count] of [
+      ['visitedNodes', 2],
+      ['depth', 1],
+      ['messageCount', 58],
+      ['resolvedFileCount', 1],
+    ]) {
+      expect(response.text).toContain(
+        `content_filter_locator_traversal_size_sum{operation="omit_resolved_file_locators",reason="array_length",dimension="${dimension}"} ${count}`,
+      );
+    }
+    expect(response.text).not.toContain('PRIVATE-FILE');
+  });
+
   it('exposes bounded event actor receipt settlement, replay, conflict, and migration metrics', async () => {
     const app = express();
     process.env.METRICS_SECRET = 'test-secret';
diff --git a/packages/api/src/app/metrics.ts b/packages/api/src/app/metrics.ts
index f44ae1ff59f..dc7bcc1da8b 100644
--- a/packages/api/src/app/metrics.ts
+++ b/packages/api/src/app/metrics.ts
@@ -5,6 +5,7 @@ import { logger, setAgentEventActorReceiptMetricObserver } from '@librechat/data
 import type { Request, Response, NextFunction, RequestHandler } from 'express';
 import type { Mongoose } from 'mongoose';
 import type { AgentStartupMilestone, AgentStartupResult } from '~/agents/phases';
+import type { LocatorTraversalFailure } from '../protection/diagnostics';
 import { agentStartupMilestones, agentStartupResults } from '~/agents/phases';
 
 const PATH_NORMALIZATIONS: [RegExp, string][] = [
@@ -281,7 +282,16 @@ let redisOperationMetrics: RedisOperationMetrics = {
   recordOperation: () => undefined,
 };
 
+let observeLocatorTraversal: (failure: LocatorTraversalFailure) => void = () => undefined;
+
+/** Application sink supplied explicitly to content inspection callers. */
+export function reportLocatorTraversalFailure(failure: LocatorTraversalFailure): void {
+  logger.warn(`[content-filter] Locator traversal incomplete ${JSON.stringify(failure)}`, failure);
+  observeLocatorTraversal(failure);
+}
+
 const resetMetricRecorders = (): void => {
+  observeLocatorTraversal = () => undefined;
   openIDUserLookupMetrics = {
     recordLookup: () => undefined,
   };
@@ -530,6 +540,33 @@ export function createMetrics(options: MetricsOptions = {}): PrometheusMetrics {
   const registry = new Registry();
   collectDefaultMetrics({ register: registry });
 
+  observeLocatorTraversal = () => undefined;
+  const locatorTraversalFailuresTotal = new Counter({
+    name: 'content_filter_locator_traversal_failures_total',
+    help: 'Incomplete resolved file locator traversals',
+    labelNames: ['operation', 'reason'] as const,
+    registers: [registry],
+  });
+  const locatorTraversalSize = new Histogram({
+    name: 'content_filter_locator_traversal_size',
+    help: 'Structural counts at an incomplete resolved file locator traversal',
+    labelNames: ['operation', 'reason', 'dimension'] as const,
+    buckets: [0, 1, 8, 24, 64, 256, 1024, 4096, 16384],
+    registers: [registry],
+  });
+  observeLocatorTraversal = (failure: LocatorTraversalFailure): void => {
+    const labels = { operation: failure.operation, reason: failure.reason };
+    locatorTraversalFailuresTotal.inc(labels);
+    for (const dimension of [
+      'visitedNodes',
+      'depth',
+      'messageCount',
+      'resolvedFileCount',
+    ] as const) {
+      locatorTraversalSize.observe({ ...labels, dimension }, failure[dimension]);
+    }
+  };
+
   const httpRequests = new Counter({
     name: 'http_requests_total',
     help: 'Total HTTP requests',
diff --git a/packages/api/src/assistants/protection.spec.ts b/packages/api/src/assistants/protection.spec.ts
index a7812319747..8de93d764af 100644
--- a/packages/api/src/assistants/protection.spec.ts
+++ b/packages/api/src/assistants/protection.spec.ts
@@ -48,6 +48,30 @@ function createOpenAI({
 }
 
 describe('Assistants model-bound content preflight', () => {
+  it('reports incomplete user-file hydration through the supplied reporter', async () => {
+    const onTraversalFailure = jest.fn();
+    await preflightAssistantUserMessageContent({
+      config: { filters: { files: { pii: { fields: ['name'], starterPatterns: ['sk_prefix'] } } } },
+      user: { id: 'user-1' },
+      message: {
+        file_ids: ['owned'],
+        metadata: {
+          trace: Array.from({ length: 4200 }, () => ({ text: 'safe' })),
+        },
+      },
+      getFiles: jest.fn().mockResolvedValue([{ file_id: 'owned', filename: 'safe.txt' }]),
+      onTraversalFailure,
+    });
+    expect(onTraversalFailure).toHaveBeenCalledWith(
+      expect.objectContaining({
+        operation: 'omit_resolved_file_locators',
+        reason: 'array_length',
+        messageCount: 1,
+        resolvedFileCount: 1,
+      }),
+    );
+  });
+
   let getFiles: jest.Mock;
 
   beforeEach(() => {
diff --git a/packages/api/src/assistants/protection.ts b/packages/api/src/assistants/protection.ts
index d2fc8697ac8..ce997c4a272 100644
--- a/packages/api/src/assistants/protection.ts
+++ b/packages/api/src/assistants/protection.ts
@@ -10,6 +10,7 @@ import type {
   StoredMessageContentInput,
 } from '../protection/adapters/submissions';
 import type { ExternalChatMessage } from '../protection/adapters/messages';
+import type { LocatorTraversalReporter } from '../protection/diagnostics';
 import { hasActiveFilePolicy, resolveCanonicalFileReferences } from '../protection/files';
 import { ContentTraversalLimitError } from '../protection/adapters/nested';
 import { assertModelBoundContent } from '../middleware/modelBoundContent';
@@ -65,6 +66,7 @@ interface AssistantUserMessage extends ExternalChatMessage {
 }
 
 interface PreflightAssistantRunContentInput {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   readonly config?: AssistantProtectionConfig;
   readonly openai: AssistantOpenAIClient;
   readonly user?: CanonicalFileInspectionUser;
@@ -74,6 +76,7 @@ interface PreflightAssistantRunContentInput {
 }
 
 interface PreflightAssistantUserMessageContentInput {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   readonly config?: AssistantProtectionConfig;
   readonly user?: CanonicalFileInspectionUser;
   readonly message: AssistantUserMessage;
@@ -310,6 +313,7 @@ export async function preflightAssistantRunContent({
   assistantId,
   threadId,
   getFiles,
+  onTraversalFailure,
 }: PreflightAssistantRunContentInput): Promise<AssistantContentInput | undefined> {
   const filters = config?.filters;
   const legacyPii = config?.messageFilter?.pii;
@@ -339,6 +343,8 @@ export async function preflightAssistantRunContent({
   let resolvedFiles: CanonicalFileInspectionFile[] = [];
   if (hasActiveFilePolicy(filters)) {
     const fileInspection = await resolveCanonicalFileReferences({
+      messageCount: storedMessages.length,
+      onTraversalFailure,
       filters,
       input: content,
       user,
@@ -349,6 +355,7 @@ export async function preflightAssistantRunContent({
   }
 
   assertModelBoundContent({
+    onTraversalFailure,
     filters,
     legacyPii,
     submittedMessages: hasActivePiiPatterns(legacyPii)
@@ -372,6 +379,7 @@ export async function preflightAssistantUserMessageContent({
   message,
   fileIds,
   getFiles,
+  onTraversalFailure,
 }: PreflightAssistantUserMessageContentInput): Promise<void> {
   const filters = config?.filters;
   if (!hasActiveFilePolicy(filters)) {
@@ -386,6 +394,8 @@ export async function preflightAssistantUserMessageContent({
           file_ids: [...new Set([...(message.file_ids ?? []), ...fileIds])],
         };
   const fileInspection = await resolveCanonicalFileReferences({
+    messageCount: 1,
+    onTraversalFailure,
     filters,
     input: inspectionMessage,
     user,
@@ -393,6 +403,7 @@ export async function preflightAssistantUserMessageContent({
   });
 
   assertModelBoundContent({
+    onTraversalFailure,
     filters,
     legacyPii: config?.messageFilter?.pii,
     submittedMessages: [fileInspection.sanitizedInput],
diff --git a/packages/api/src/imports.spec.ts b/packages/api/src/imports.spec.ts
index c3912826310..72c376f0250 100644
--- a/packages/api/src/imports.spec.ts
+++ b/packages/api/src/imports.spec.ts
@@ -33,6 +33,35 @@ function deepValue(depth = 30): string | { nested: ReturnType<typeof deepValue>
 }
 
 describe('conversation import protection', () => {
+  it('reports incomplete locator hydration through the import context', async () => {
+    const onTraversalFailure = jest.fn();
+    await assertConversationImportContentAllowed(
+      { files: { pii: { fields: ['name'], starterPatterns: ['sk_prefix'] } } },
+      {
+        conversations: [],
+        messages: [
+          {
+            files: [{ file_id: 'owned' }],
+            content: Array.from({ length: 4200 }, () => ({ type: 'text', text: 'safe' })),
+          },
+        ],
+      },
+      {
+        user: { id: 'user-1' },
+        onTraversalFailure,
+        getFiles: jest.fn().mockResolvedValue([{ file_id: 'owned', filename: 'safe.txt' }]),
+      },
+    );
+    expect(onTraversalFailure).toHaveBeenCalledWith(
+      expect.objectContaining({
+        operation: 'omit_resolved_file_locators',
+        reason: 'array_length',
+        messageCount: 1,
+        resolvedFileCount: 1,
+      }),
+    );
+  });
+
   it('returns without resolving or revalidating when protection is disabled', async () => {
     const getFiles = jest.fn<
       ReturnType<GetCanonicalFilesForInspection>,
diff --git a/packages/api/src/imports.ts b/packages/api/src/imports.ts
index 3547ff2abce..f8af5d082a5 100644
--- a/packages/api/src/imports.ts
+++ b/packages/api/src/imports.ts
@@ -14,6 +14,7 @@ import type {
   StoredMessageContentInput,
 } from './protection/adapters/submissions';
 import type { ModelBoundContentInput } from './middleware/modelBoundContent';
+import type { LocatorTraversalReporter } from './protection/diagnostics';
 import {
   getContentTraversalFragments,
   getContentTraversalScopes,
@@ -50,6 +51,7 @@ export interface ConversationImportSnapshot {
 }
 
 export interface ConversationImportProtectionContext {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   readonly user?: CanonicalFileInspectionUser;
   readonly getFiles?: GetCanonicalFilesForInspection;
   readonly trustedLiveFiles?: readonly CanonicalFileInspectionFile[];
@@ -131,6 +133,8 @@ async function inspectConversationImportContent(
   let resolvedFiles: CanonicalFileInspectionFile[] = [];
   if (hasActiveFilePolicy(activeFilters)) {
     const fileInspection = await resolveCanonicalFileReferences({
+      messageCount: snapshot.messages.length,
+      onTraversalFailure: context.onTraversalFailure,
       filters: activeFilters,
       input: snapshot.messages,
       user: context.user,
@@ -145,6 +149,7 @@ async function inspectConversationImportContent(
     context.assertModelBoundContent ?? assertModelBoundContentAtBoundary;
   if (resolvedFiles.length > 0) {
     assertModelBoundContent({
+      onTraversalFailure: context.onTraversalFailure,
       filters: activeFilters,
       resolvedFiles,
     });
@@ -153,6 +158,7 @@ async function inspectConversationImportContent(
   for (const message of storedMessages) {
     try {
       assertModelBoundContent({
+        onTraversalFailure: context.onTraversalFailure,
         filters: activeFilters,
         legacyPii,
         storedMessages: [message],
diff --git a/packages/api/src/middleware/contentFilter.ts b/packages/api/src/middleware/contentFilter.ts
index 88a9ce81a12..8700e496d61 100644
--- a/packages/api/src/middleware/contentFilter.ts
+++ b/packages/api/src/middleware/contentFilter.ts
@@ -6,6 +6,7 @@ import type {
 } from 'express';
 import type { FiltersConfig, MessageFilterPiiConfig } from 'librechat-data-provider';
 import type { ProtectionFinding, TextContentFragment } from '../protection/types';
+import type { LocatorTraversalReporter } from '../protection/diagnostics';
 import {
   contentFilterUninspectableResponse,
   getBlockedOpaqueFileField,
@@ -98,6 +99,8 @@ export function isContentFilterError(
 }
 
 export interface CreateContentFilterOptions {
+  readonly messageCount?: number;
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   getFilters: (req: ServerRequest) => FiltersConfig | undefined;
   getLegacyPii?: (req: ServerRequest) => MessageFilterPiiConfig | undefined;
   getMessageRoles?: (req: ServerRequest) => readonly (string | undefined)[];
@@ -125,6 +128,8 @@ export function createContentFilter(options: CreateContentFilterOptions): Reques
     if (opaqueFileInput != null && options.getFiles != null && hasActiveFilePolicy(filters)) {
       try {
         const fileInspection = await resolveCanonicalFileReferences({
+          messageCount: options.messageCount,
+          onTraversalFailure: options.onTraversalFailure,
           filters,
           input: opaqueFileInput,
           user: (
diff --git a/packages/api/src/middleware/messageFilterPii.ts b/packages/api/src/middleware/messageFilterPii.ts
index 17893ad3d04..a9cd123c052 100644
--- a/packages/api/src/middleware/messageFilterPii.ts
+++ b/packages/api/src/middleware/messageFilterPii.ts
@@ -15,6 +15,7 @@ import type {
   Response as ServerResponse,
 } from 'express';
 import type { FiltersConfig, MessageFilterPiiConfig } from 'librechat-data-provider';
+import type { LocatorTraversalReporter } from '../protection/diagnostics';
 import type { TextContentFragment } from '../protection/types';
 import {
   contentFilterUninspectableResponse,
@@ -142,6 +143,7 @@ export function findPiiMatchInMessages(
 }
 
 export interface CreateMessageFilterPiiOptions {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   getConfig: (req: ServerRequest) => MessageFilterPiiConfig | undefined;
   getFilters?: (req: ServerRequest) => FiltersConfig | undefined;
   getFiles?: GetCanonicalFilesForInspection;
@@ -172,6 +174,8 @@ export function createMessageFilterPii(options: CreateMessageFilterPiiOptions):
     if (options.getFiles != null && hasActiveFilePolicy(filters)) {
       try {
         const fileInspection = await resolveCanonicalFileReferences({
+          messageCount: 1,
+          onTraversalFailure: options.onTraversalFailure,
           filters,
           input: req.body,
           user: (
diff --git a/packages/api/src/middleware/modelBoundContent.spec.ts b/packages/api/src/middleware/modelBoundContent.spec.ts
index aeb41fb9ce9..884326e080d 100644
--- a/packages/api/src/middleware/modelBoundContent.spec.ts
+++ b/packages/api/src/middleware/modelBoundContent.spec.ts
@@ -1133,6 +1133,57 @@ describe('assertModelBoundContent', () => {
     ).not.toThrow();
   });
 
+  it('inspects long stored history per message and still filters hydrated file content', () => {
+    const onTraversalFailure = jest.fn();
+    const storedMessages = Array.from({ length: 58 }, (_, index) => ({
+      isCreatedByUser: true,
+      role: 'user',
+      text: `Historical step ${index}`,
+      files: index === 0 ? [{ file_id: 'file-owned' }] : [],
+      content: Array.from({ length: 80 }, () => ({ type: 'text', text: 'safe preview material' })),
+    }));
+    const input = {
+      filters: {
+        files: {
+          pii: {
+            fields: ['extracted_text'],
+            starterPatterns: [],
+            customPatterns: [{ id: 'private', label: 'private value', regex: 'PRIVATE-FILE' }],
+            uninspectable: 'block',
+          },
+        },
+      } as FiltersConfig,
+      storedMessages,
+      onTraversalFailure,
+      resolvedFiles: [{ file_id: 'file-owned', text: 'safe canonical content' }],
+    };
+
+    expect(() => assertModelBoundContent(input)).not.toThrow();
+    expect(() =>
+      assertModelBoundContent({
+        ...input,
+        resolvedFiles: [{ file_id: 'file-owned', text: 'PRIVATE-FILE' }],
+      }),
+    ).toThrow('Submitted content contains a private value');
+    expect(() =>
+      assertModelBoundContent({
+        ...input,
+        storedMessages: [
+          { ...storedMessages[0], content: storedMessages.flatMap((m) => m.content) },
+        ],
+      }),
+    ).toThrow('Submitted content could not be completely inspected before processing.');
+    expect(onTraversalFailure).toHaveBeenCalledTimes(1);
+    expect(onTraversalFailure).toHaveBeenCalledWith(
+      expect.objectContaining({
+        operation: 'omit_resolved_file_locators',
+        reason: 'array_length',
+        messageCount: 1,
+        resolvedFileCount: 1,
+      }),
+    );
+  });
+
   it('inspects owner-resolved file content before authorizing its stored locator', () => {
     expect(() =>
       assertModelBoundContent({
diff --git a/packages/api/src/middleware/modelBoundContent.ts b/packages/api/src/middleware/modelBoundContent.ts
index f981d2cf1a3..c17136d42bd 100644
--- a/packages/api/src/middleware/modelBoundContent.ts
+++ b/packages/api/src/middleware/modelBoundContent.ts
@@ -26,6 +26,7 @@ import type {
 } from '../protection/adapters/nested';
 import type { JsonPointer, TextContentFragment } from '../protection/types';
 import type { ExternalChatMessage } from '../protection/adapters/messages';
+import type { LocatorTraversalReporter } from '../protection/diagnostics';
 import type { ConfiguredContentInspector } from '../protection/runtime';
 import type { CanonicalFileInspectionFile } from '../protection/files';
 import {
@@ -230,6 +231,7 @@ class FatalModelBoundPolicyError extends StreamLimitExceededError {
 }
 
 export interface ModelBoundProviderContentInput {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   readonly filters?: FiltersConfig;
   readonly legacyPii?: MessageFilterPiiConfig;
   readonly providerMessages: readonly ModelBoundProviderMessage[];
@@ -689,6 +691,7 @@ export interface InitialModelBoundAdmission {
 }
 
 export interface ModelBoundContentInput {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   readonly filters?: FiltersConfig;
   readonly legacyPii?: MessageFilterPiiConfig;
   /** Fresh API input: every role is caller-submitted. */
@@ -3067,6 +3070,7 @@ function assertIndexedModelBoundProviderContent(
   const resolvedWorkBudgets = workBudgets ?? createProviderProjectionWorkBudgets(index);
   const projection = projectModelBoundProviderContent(input, index, resolvedWorkBudgets);
   assertModelBoundContent({
+    onTraversalFailure: input.onTraversalFailure,
     filters: input.filters,
     legacyPii: input.legacyPii,
     storedMessages: projection.storedMessages,
@@ -3162,6 +3166,7 @@ export function createModelBoundChatModelCallback(
   const resolvedFileSnapshot = snapshotBoundedProviderArray(input.resolvedFiles);
   const sourceFileIdSnapshot = snapshotBoundedSourceFileIds(input.fileIdsBySourceMessageId);
   const stableInput = {
+    onTraversalFailure: input.onTraversalFailure,
     filters: input.filters,
     legacyPii: input.legacyPii,
     storedMessages: storedMessageSnapshot.values,
@@ -3530,7 +3535,6 @@ function inspectModelBoundContent(
       appendSubmittedTraversalError(error);
     }
   }
-  const storedUserMessages: StoredModelBoundMessage[] = [];
   let aggregateStoredTraversalErrorAdded = false;
   const appendStoredTraversalError = (error: ContentTraversalLimitError): void => {
     if (
@@ -3624,7 +3628,10 @@ function inspectModelBoundContent(
       if (projectedMessage != null) {
         assertInspectableFileInput(
           input.filters,
-          omitResolvedCanonicalFileLocators(projectedMessage, resolvedFilesById),
+          omitResolvedCanonicalFileLocators(projectedMessage, resolvedFilesById, {
+            messageCount: input.storedMessages?.length ?? 0,
+            onTraversalFailure: input.onTraversalFailure,
+          }),
         );
       }
       /** Legacy unmarked assistant rows are treated as model-generated by
@@ -3719,7 +3726,13 @@ function inspectModelBoundContent(
       }
       continue;
     }
-    storedUserMessages.push(message);
+    assertInspectableFileInput(
+      input.filters,
+      omitResolvedCanonicalFileLocators(message, resolvedFilesById, {
+        messageCount: input.storedMessages?.length ?? 0,
+        onTraversalFailure: input.onTraversalFailure,
+      }),
+    );
     inspectFragments(messageFragments);
     inspectFragments(exactMessageFragments);
     if (
@@ -3734,10 +3747,6 @@ function inspectModelBoundContent(
       appendStoredTraversalError(traversalError);
     }
   }
-  assertInspectableFileInput(
-    input.filters,
-    omitResolvedCanonicalFileLocators(storedUserMessages, resolvedFilesById),
-  );
   for (const agent of input.agents ?? []) {
     const agentFilesById = new Map<string, ModelBoundCanonicalFile>();
     for (const file of getHydratedAgentFiles(agent)) {
@@ -3748,7 +3757,10 @@ function inspectModelBoundContent(
     }
     assertInspectableFileInput(
       input.filters,
-      omitResolvedCanonicalFileLocators(agent, agentFilesById),
+      omitResolvedCanonicalFileLocators(agent, agentFilesById, {
+        onTraversalFailure: input.onTraversalFailure,
+        messageCount: input.storedMessages?.length ?? 0,
+      }),
     );
     appendExtractedContent(() => extractAgentContent(agent));
   }
diff --git a/packages/api/src/protection/adapters/nested.ts b/packages/api/src/protection/adapters/nested.ts
index e2f66d24788..0590339fc11 100644
--- a/packages/api/src/protection/adapters/nested.ts
+++ b/packages/api/src/protection/adapters/nested.ts
@@ -71,10 +71,14 @@ export interface VisitNestedStringsOptions {
 export function getBoundedOwnEnumerableEntries(
   value: object,
   limit: number,
-): { readonly entries: [string, unknown][]; readonly complete: boolean } {
+): {
+  readonly entries: [string, unknown][];
+  readonly complete: boolean;
+  readonly reason?: 'object_entries' | 'reflection_error';
+} {
   const entries: [string, unknown][] = [];
   if (limit !== Number.POSITIVE_INFINITY && (!Number.isSafeInteger(limit) || limit < 0)) {
-    return { entries, complete: false };
+    return { entries, complete: false, reason: 'object_entries' };
   }
   try {
     for (const key in value) {
@@ -82,12 +86,12 @@ export function getBoundedOwnEnumerableEntries(
         continue;
       }
       if (entries.length >= limit) {
-        return { entries, complete: false };
+        return { entries, complete: false, reason: 'object_entries' };
       }
       entries.push([key, (value as { readonly [key: string]: unknown })[key]]);
     }
   } catch {
-    return { entries, complete: false };
+    return { entries, complete: false, reason: 'reflection_error' };
   }
   return { entries, complete: true };
 }
@@ -109,14 +113,30 @@ export type ContentTraversalScope = {
 const CONTENT_TRAVERSAL_FRAGMENTS = new WeakMap<object, readonly TextContentFragment[]>();
 const CONTENT_TRAVERSAL_SCOPES = new WeakMap<object, readonly ContentTraversalScope[]>();
 
+export type ContentTraversalLimitReason =
+  | 'max_depth'
+  | 'max_nodes'
+  | 'array_length'
+  | 'object_entries'
+  | 'reflection_error';
+
+export interface ContentTraversalDiagnostics {
+  readonly operation: 'omit_resolved_file_locators';
+  readonly reason: ContentTraversalLimitReason;
+  readonly visitedNodes: number;
+  readonly depth: number;
+}
+
 export class ContentTraversalLimitError extends Error {
   public readonly code = 'content_filter_uninspectable';
   public readonly statusCode = 400;
   public readonly body: UninspectableNestedContentResponse;
+  public readonly diagnostics?: ContentTraversalDiagnostics;
 
   constructor(
     fragments: readonly TextContentFragment[] = [],
     scopes: readonly ContentTraversalScope[] = [],
+    diagnostics?: ContentTraversalDiagnostics,
   ) {
     const primaryScope = scopes.find(({ fields }) => fields.length > 0);
     const body: UninspectableNestedContentResponse = {
@@ -128,6 +148,7 @@ export class ContentTraversalLimitError extends Error {
     super(body.message);
     this.name = 'ContentTraversalLimitError';
     this.body = body;
+    this.diagnostics = diagnostics;
     CONTENT_TRAVERSAL_FRAGMENTS.set(this, fragments);
     CONTENT_TRAVERSAL_SCOPES.set(this, scopes);
     Object.setPrototypeOf(this, ContentTraversalLimitError.prototype);
diff --git a/packages/api/src/protection/diagnostics.ts b/packages/api/src/protection/diagnostics.ts
new file mode 100644
index 00000000000..aa085150b5a
--- /dev/null
+++ b/packages/api/src/protection/diagnostics.ts
@@ -0,0 +1,8 @@
+import type { ContentTraversalDiagnostics } from './adapters/nested';
+
+export interface LocatorTraversalFailure extends ContentTraversalDiagnostics {
+  readonly messageCount: number;
+  readonly resolvedFileCount: number;
+}
+
+export type LocatorTraversalReporter = (failure: LocatorTraversalFailure) => void;
diff --git a/packages/api/src/protection/files.spec.ts b/packages/api/src/protection/files.spec.ts
index c700e05e388..2c1cc6f9947 100644
--- a/packages/api/src/protection/files.spec.ts
+++ b/packages/api/src/protection/files.spec.ts
@@ -18,6 +18,7 @@ import {
   UPLOAD_EXTRACTED_TEXT_PLANS,
   UninspectableFileError,
 } from './files';
+import { ContentTraversalLimitError } from './adapters/nested';
 
 describe('file content inspection policy', () => {
   it('defers extracted-text fail-close only to supported agent context extraction paths', () => {
@@ -981,6 +982,7 @@ describe('file content inspection policy', () => {
   });
 
   it('hydrates discovered file names without rejecting an unrelated oversized subtree', async () => {
+    const onTraversalFailure = jest.fn();
     const canonicalFile = {
       file_id: 'owned-file',
       filename: 'safe-report.txt',
@@ -1014,11 +1016,21 @@ describe('file content inspection policy', () => {
         input,
         user: { id: 'user-1' },
         getFiles,
+        onTraversalFailure,
+        messageCount: input.messages.length,
       }),
     ).resolves.toMatchObject({
       sanitizedInput: input,
       hydratedFiles: [canonicalFile],
     });
+    expect(onTraversalFailure).toHaveBeenCalledWith(
+      expect.objectContaining({
+        operation: 'omit_resolved_file_locators',
+        reason: 'array_length',
+        messageCount: 4200,
+        resolvedFileCount: 1,
+      }),
+    );
     expect(getFiles).toHaveBeenCalledWith(
       { file_id: { $in: ['owned-file'] }, user: 'user-1' },
       {},
@@ -1380,6 +1392,90 @@ describe('file content inspection policy', () => {
     });
   });
 
+  it.each([
+    [
+      'max_depth',
+      () => {
+        let value: object = {};
+        for (let i = 0; i < 26; i++) value = { child: value };
+        return value;
+      },
+    ],
+    ['max_nodes', () => [...Array.from({ length: 2047 }, () => ({ child: {} })), {}, {}]],
+    ['array_length', () => new Array(4096)],
+    [
+      'object_entries',
+      () => Object.fromEntries(Array.from({ length: 4096 }, (_, i) => [i, 'safe'])),
+    ],
+    [
+      'reflection_error',
+      () =>
+        Object.defineProperty({}, 'payload', {
+          enumerable: true,
+          get() {
+            throw new Error('PRIVATE-CONTENT');
+          },
+        }),
+    ],
+    [
+      'reflection_error',
+      () =>
+        Object.defineProperty([], '0', {
+          get() {
+            throw new Error('PRIVATE-CONTENT');
+          },
+        }),
+    ],
+    [
+      'reflection_error',
+      () => {
+        const { proxy, revoke } = Proxy.revocable({}, {});
+        revoke();
+        return proxy;
+      },
+    ],
+  ] as const)('reports safe %s diagnostics for locator sanitization', (reason, makeInput) => {
+    const report = jest.fn();
+    let failure: ContentTraversalLimitError | undefined;
+    try {
+      omitResolvedCanonicalFileLocators(makeInput(), new Map([['owned', { file_id: 'owned' }]]), {
+        onTraversalFailure: report,
+        messageCount: 58,
+      });
+    } catch (error) {
+      expect(error).toBeInstanceOf(ContentTraversalLimitError);
+      failure = error as ContentTraversalLimitError;
+    }
+    expect(failure).toBeDefined();
+    expect(failure?.diagnostics).toEqual({
+      operation: 'omit_resolved_file_locators',
+      reason,
+      visitedNodes: expect.any(Number),
+      depth: expect.any(Number),
+    });
+    expect(failure?.body).not.toHaveProperty('diagnostics');
+    expect(report).toHaveBeenCalledTimes(1);
+    expect(report).toHaveBeenCalledWith({
+      ...failure?.diagnostics,
+      messageCount: 58,
+      resolvedFileCount: 1,
+    });
+    expect(JSON.stringify(report.mock.calls)).not.toContain('PRIVATE-CONTENT');
+  });
+
+  it('preserves own __proto__ opaque payloads in a null-prototype inspection copy', () => {
+    const input = JSON.parse('{"file_id":"owned","__proto__":{"file_id":"unresolved"}}');
+    const sanitized = omitResolvedCanonicalFileLocators(
+      input,
+      new Map([['owned', { file_id: 'owned' }]]),
+    );
+    expect(Object.getPrototypeOf(sanitized)).toBeNull();
+    expect(Object.prototype.hasOwnProperty.call(sanitized, '__proto__')).toBe(true);
+    expect(
+      getBlockedOpaqueFileField({ files: { pii: { uninspectable: 'block' } } }, sanitized),
+    ).not.toBeNull();
+  });
+
   it('omits only locators that exactly match the resolved canonical row', () => {
     const canonicalFile = {
       file_id: 'owned-file',
diff --git a/packages/api/src/protection/files.ts b/packages/api/src/protection/files.ts
index 6a20f35914a..aefa675d83b 100644
--- a/packages/api/src/protection/files.ts
+++ b/packages/api/src/protection/files.ts
@@ -8,6 +8,8 @@ import {
   isPermissiveMimeConfig,
 } from 'librechat-data-provider';
 import type { FileConfig, FileFilterField, FiltersConfig } from 'librechat-data-provider';
+import type { ContentTraversalLimitReason } from './adapters/nested';
+import type { LocatorTraversalReporter } from './diagnostics';
 import {
   ContentTraversalLimitError,
   escapeJsonPointer,
@@ -91,6 +93,8 @@ export type GetCanonicalFilesForInspection = (
 ) => Promise<CanonicalFileInspectionFile[] | null | undefined>;
 
 export interface CanonicalFileReferenceInspectionInput<T> {
+  readonly messageCount?: number;
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   readonly filters?: FiltersConfig;
   readonly input: T;
   readonly user?: CanonicalFileInspectionUser;
@@ -1031,114 +1035,132 @@ function omitResolvedFileLocators(
   if (value == null || typeof value !== 'object') {
     return value;
   }
-  if (depth > MAX_OPAQUE_DEPTH) {
-    throw new ContentTraversalLimitError();
-  }
-
   const traversal = state ?? { seen: new WeakMap<object, unknown>(), visited: 0 };
-  if (traversal.visited >= MAX_OPAQUE_NODES) {
-    throw new ContentTraversalLimitError();
-  }
-  const seenValue = traversal.seen.get(value);
-  if (seenValue !== undefined) {
-    return seenValue;
-  }
-  traversal.visited++;
-
-  let valueIsArray: boolean;
+  const fail = (reason: ContentTraversalLimitReason): ContentTraversalLimitError =>
+    new ContentTraversalLimitError([], [], {
+      operation: 'omit_resolved_file_locators',
+      reason,
+      visitedNodes: traversal.visited,
+      depth,
+    });
   try {
-    valueIsArray = Array.isArray(value);
-  } catch {
-    throw new ContentTraversalLimitError();
-  }
-  if (valueIsArray) {
-    const arrayValue = value as readonly unknown[];
-    const arrayLength = captureOpaqueArrayLength(arrayValue);
-    const remainingNodes = MAX_OPAQUE_NODES - traversal.visited;
-    if (arrayLength > remainingNodes) {
-      throw new ContentTraversalLimitError();
+    if (depth > MAX_OPAQUE_DEPTH) {
+      throw fail('max_depth');
     }
-    const cloned: unknown[] = [];
-    traversal.seen.set(value, cloned);
-    for (let index = 0; index < arrayLength; index++) {
-      cloned.push(
-        omitResolvedFileLocators(arrayValue[index], resolvedFilesById, depth + 1, traversal),
-      );
+    if (traversal.visited >= MAX_OPAQUE_NODES) {
+      throw fail('max_nodes');
     }
-    return cloned;
-  }
-
-  const remainingNodes = MAX_OPAQUE_NODES - traversal.visited;
-  const boundedEntries = getBoundedOwnEnumerableEntries(value, remainingNodes);
-  if (!boundedEntries.complete) {
-    throw new ContentTraversalLimitError();
-  }
-  const entries = boundedEntries.entries;
-
-  const cloned = Object.create(null) as MutableUnknownDictionary;
-  traversal.seen.set(value, cloned);
-  const fileId = entries.find(([key]) => key === 'file_id')?.[1];
-  const resolvedFile = typeof fileId === 'string' ? resolvedFilesById.get(fileId) : undefined;
-  const matchesResolvedLocator = (locator: unknown): boolean => {
-    if (typeof locator !== 'string' || resolvedFile == null) {
-      return false;
-    }
-    return (
-      resolvedFile.filepath === locator ||
-      resolvedFile.uri === locator ||
-      resolvedFile.url === locator ||
-      resolvedFile.preview === locator
-    );
-  };
-
-  for (const [key, child] of entries) {
-    if (resolvedFile != null && key === 'file_id') {
-      continue;
+    const seenValue = traversal.seen.get(value);
+    if (seenValue !== undefined) {
+      return seenValue;
     }
-    if (
-      resolvedFile != null &&
-      (key === 'uri' || key === 'url' || key === 'filepath' || key === 'preview') &&
-      matchesResolvedLocator(child)
-    ) {
-      continue;
+    traversal.visited++;
+
+    const valueIsArray = Array.isArray(value);
+    if (valueIsArray) {
+      const arrayValue = value as readonly unknown[];
+      const arrayLength = captureOpaqueArrayLength(arrayValue);
+      const remainingNodes = MAX_OPAQUE_NODES - traversal.visited;
+      if (arrayLength > remainingNodes) {
+        throw fail('array_length');
+      }
+      const cloned: unknown[] = [];
+      traversal.seen.set(value, cloned);
+      for (let index = 0; index < arrayLength; index++) {
+        cloned.push(
+          omitResolvedFileLocators(arrayValue[index], resolvedFilesById, depth + 1, traversal),
+        );
+      }
+      return cloned;
     }
-    let childIsArray: boolean;
-    try {
-      childIsArray = Array.isArray(child);
-    } catch {
-      throw new ContentTraversalLimitError();
+
+    const remainingNodes = MAX_OPAQUE_NODES - traversal.visited;
+    const boundedEntries = getBoundedOwnEnumerableEntries(value, remainingNodes);
+    if (!boundedEntries.complete) {
+      throw fail(boundedEntries.reason ?? 'object_entries');
     }
-    if (key === 'file_ids' && childIsArray) {
-      const childFileIds = child as readonly unknown[];
-      const childFileIdCount = captureOpaqueArrayLength(childFileIds);
-      if (childFileIdCount > MAX_OPAQUE_NODES - traversal.visited) {
-        throw new ContentTraversalLimitError();
+    const entries = boundedEntries.entries;
+
+    const cloned = Object.create(null) as MutableUnknownDictionary;
+    traversal.seen.set(value, cloned);
+    const fileId = entries.find(([key]) => key === 'file_id')?.[1];
+    const resolvedFile = typeof fileId === 'string' ? resolvedFilesById.get(fileId) : undefined;
+    const matchesResolvedLocator = (locator: unknown): boolean => {
+      if (typeof locator !== 'string' || resolvedFile == null) {
+        return false;
       }
-      const unresolvedFileIds: unknown[] = [];
-      for (let index = 0; index < childFileIdCount; index++) {
-        const childFileId = childFileIds[index];
-        if (typeof childFileId !== 'string' || !resolvedFilesById.has(childFileId)) {
-          unresolvedFileIds.push(childFileId);
-        }
+      return (
+        resolvedFile.filepath === locator ||
+        resolvedFile.uri === locator ||
+        resolvedFile.url === locator ||
+        resolvedFile.preview === locator
+      );
+    };
+
+    for (const [key, child] of entries) {
+      if (resolvedFile != null && key === 'file_id') {
+        continue;
       }
-      if (unresolvedFileIds.length > 0) {
-        cloned[key] = unresolvedFileIds;
+      if (
+        resolvedFile != null &&
+        (key === 'uri' || key === 'url' || key === 'filepath' || key === 'preview') &&
+        matchesResolvedLocator(child)
+      ) {
+        continue;
       }
-      continue;
+      const childIsArray = Array.isArray(child);
+      if (key === 'file_ids' && childIsArray) {
+        const childFileIds = child as readonly unknown[];
+        const childFileIdCount = captureOpaqueArrayLength(childFileIds);
+        if (childFileIdCount > MAX_OPAQUE_NODES - traversal.visited) {
+          throw fail('array_length');
+        }
+        const unresolvedFileIds: unknown[] = [];
+        for (let index = 0; index < childFileIdCount; index++) {
+          const childFileId = childFileIds[index];
+          if (typeof childFileId !== 'string' || !resolvedFilesById.has(childFileId)) {
+            unresolvedFileIds.push(childFileId);
+          }
+        }
+        if (unresolvedFileIds.length > 0) {
+          cloned[key] = unresolvedFileIds;
+        }
+        continue;
+      }
+      cloned[key] = omitResolvedFileLocators(child, resolvedFilesById, depth + 1, traversal);
+    }
+    return cloned;
+  } catch (error) {
+    if (error instanceof ContentTraversalLimitError && error.diagnostics != null) {
+      throw error;
     }
-    cloned[key] = omitResolvedFileLocators(child, resolvedFilesById, depth + 1, traversal);
+    throw fail(error instanceof ContentTraversalLimitError ? 'array_length' : 'reflection_error');
   }
-  return cloned;
 }
 
 export function omitResolvedCanonicalFileLocators<T>(
   input: T,
   resolvedFilesById: ReadonlyMap<string, CanonicalFileInspectionFile>,
+  context: {
+    readonly messageCount?: number;
+    readonly onTraversalFailure?: LocatorTraversalReporter;
+  } = {},
 ): T {
   if (resolvedFilesById.size === 0) {
     return input;
   }
-  return omitResolvedFileLocators(input, resolvedFilesById) as T;
+  try {
+    return omitResolvedFileLocators(input, resolvedFilesById) as T;
+  } catch (error) {
+    if (error instanceof ContentTraversalLimitError && error.diagnostics != null) {
+      context.onTraversalFailure?.({
+        ...error.diagnostics,
+        messageCount: context.messageCount ?? 0,
+        resolvedFileCount: resolvedFilesById.size,
+      });
+    }
+    throw error;
+  }
 }
 
 export function allowHydratedFileReferences(
@@ -1254,7 +1276,10 @@ export async function resolveCanonicalFileReferences<T>(
   let sanitizedInput = input.input;
   if (currentById.size > 0) {
     try {
-      sanitizedInput = omitResolvedCanonicalFileLocators(input.input, currentById);
+      sanitizedInput = omitResolvedCanonicalFileLocators(input.input, currentById, {
+        messageCount: input.messageCount,
+        onTraversalFailure: input.onTraversalFailure,
+      });
     } catch (error) {
       if (!(error instanceof ContentTraversalLimitError)) {
         throw error;
diff --git a/packages/api/src/protection/messageMutations.spec.ts b/packages/api/src/protection/messageMutations.spec.ts
index 3e6c6f88438..bbe2530a5df 100644
--- a/packages/api/src/protection/messageMutations.spec.ts
+++ b/packages/api/src/protection/messageMutations.spec.ts
@@ -56,6 +56,36 @@ describe('typed message mutation policy', () => {
     ).toThrow(expect.objectContaining({ code: 'content_filter_uninspectable' }));
   });
 
+  it('reports locator traversal failures through branch dependencies', async () => {
+    const onTraversalFailure = jest.fn();
+    const message = {
+      isUserSubmitted: true,
+      files: [{ file_id: 'owned' }],
+      content: Array.from({ length: 4200 }, () => ({ type: 'text', text: 'safe' })),
+    };
+    await expect(
+      assertStoredMessageBranchAllowed(
+        {
+          filters: { files: { pii: { fields: ['name'], starterPatterns: ['sk_prefix'] } } },
+          user: { id: 'user-1' },
+          message,
+        },
+        {
+          getFiles: jest.fn().mockResolvedValue([{ file_id: 'owned', filename: 'safe.txt' }]),
+          onTraversalFailure,
+        },
+      ),
+    ).rejects.toMatchObject({ code: 'content_filter_uninspectable' });
+    expect(onTraversalFailure).toHaveBeenCalledWith(
+      expect.objectContaining({
+        operation: 'omit_resolved_file_locators',
+        reason: 'array_length',
+        messageCount: 1,
+        resolvedFileCount: 1,
+      }),
+    );
+  });
+
   it('hydrates canonical files before admitting a branch message', async () => {
     const getFiles = jest.fn().mockResolvedValue([
       {
diff --git a/packages/api/src/protection/messageMutations.ts b/packages/api/src/protection/messageMutations.ts
index 50d24247eaf..0f3c5ab0c7e 100644
--- a/packages/api/src/protection/messageMutations.ts
+++ b/packages/api/src/protection/messageMutations.ts
@@ -3,6 +3,7 @@ import type { FiltersConfig, MessageFilterPiiConfig } from 'librechat-data-provi
 import type { CanonicalFileInspectionUser, GetCanonicalFilesForInspection } from './files';
 import type { ModelBoundContentInput } from '../middleware/modelBoundContent';
 import type { StoredMessageContentInput } from './adapters/submissions';
+import type { LocatorTraversalReporter } from './diagnostics';
 import type { ChatSubmissionBody } from './adapters/chat';
 import type { TextContentFragment } from './types';
 import { hasActiveFilePolicy, resolveCanonicalFileReferences } from './files';
@@ -58,12 +59,17 @@ export interface StoredMessageBranchPolicyInput {
  */
 export async function assertStoredMessageBranchAllowed(
   input: StoredMessageBranchPolicyInput,
-  dependencies: { readonly getFiles: GetCanonicalFilesForInspection },
+  dependencies: {
+    readonly getFiles: GetCanonicalFilesForInspection;
+    readonly onTraversalFailure?: LocatorTraversalReporter;
+  },
 ): Promise<void> {
   let storedMessage: StoredMessageContentInput = input.message;
   let resolvedFiles: NonNullable<ModelBoundContentInput['resolvedFiles']> = [];
   if (hasActiveFilePolicy(input.filters)) {
     const inspection = await resolveCanonicalFileReferences({
+      messageCount: 1,
+      onTraversalFailure: dependencies.onTraversalFailure,
       filters: input.filters,
       input: input.message,
       user: input.user,
@@ -73,6 +79,7 @@ export async function assertStoredMessageBranchAllowed(
     resolvedFiles = inspection.hydratedFiles;
   }
   assertModelBoundContent({
+    onTraversalFailure: dependencies.onTraversalFailure,
     filters: input.filters,
     legacyPii: input.legacyPii,
     storedMessages: [storedMessage],
diff --git a/packages/api/src/shared-links/protection.ts b/packages/api/src/shared-links/protection.ts
index 68364bf71a5..5a788a28b1b 100644
--- a/packages/api/src/shared-links/protection.ts
+++ b/packages/api/src/shared-links/protection.ts
@@ -12,6 +12,7 @@ import type {
 } from '../protection/files';
 import type { JsonPointer, TextContentFragment } from '../protection/types';
 import type { FileContentInput } from '../protection/adapters/submissions';
+import type { LocatorTraversalReporter } from '../protection/diagnostics';
 import type { ConversationImportMessage } from '../imports';
 import {
   CONTENT_TRAVERSAL_MAX_DEPTH,
@@ -101,6 +102,7 @@ export interface ShareContentPreflightInput {
 }
 
 export interface ShareContentPreflightOptions {
+  readonly onTraversalFailure?: LocatorTraversalReporter;
   readonly legacyPii?: MessageFilterPiiConfig | null;
   readonly snapshotFiles?: boolean;
   readonly user?: CanonicalFileInspectionUser;
@@ -162,6 +164,7 @@ export function createShareContentPreflight(
         legacyPii,
         user: options.user,
         getFiles: options.getFiles,
+        onTraversalFailure: options.onTraversalFailure,
       },
     );
     if (!inspectSharedFileMetadata) {
diff --git a/packages/client/package.json b/packages/client/package.json
index d15f126d1f9..47bf4c4ef4d 100644
--- a/packages/client/package.json
+++ b/packages/client/package.json
@@ -78,8 +78,8 @@
     "input-otp": "^1.4.2",
     "jotai": "^2.12.5",
     "librechat-data-provider": "*",
-    "lucide": "^0.525.0",
-    "lucide-react": "^0.525.0",
+    "lucide": "^0.525.0 || ^0.528.0",
+    "lucide-react": "^0.525.0 || ^0.528.0",
     "match-sorter": "^8.1.0",
     "morphicons": "^1.4.1",
     "rc-input-number": "^7.4.2",
@@ -114,8 +114,8 @@
     "jotai": "^2.12.5",
     "js-yaml": "^4.3.2",
     "librechat-data-provider": "*",
-    "lucide": "^0.525.0",
-    "lucide-react": "^0.525.0",
+    "lucide": "^0.528.0",
+    "lucide-react": "^0.528.0",
     "morphicons": "^1.4.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
diff --git a/packages/data-schemas/src/methods/openidRefreshFlight.spec.ts b/packages/data-schemas/src/methods/openidRefreshFlight.spec.ts
index a4c71c0d17f..42072be42b4 100644
--- a/packages/data-schemas/src/methods/openidRefreshFlight.spec.ts
+++ b/packages/data-schemas/src/methods/openidRefreshFlight.spec.ts
@@ -71,6 +71,26 @@ describe('OpenIDRefreshFlight Methods', () => {
     expect(second.flight?.status).toBe('pending');
   });
 
+  it('reads an existing flight from the primary when resolving an acquisition conflict', async () => {
+    const readSpy = jest.spyOn(mongoose.Query.prototype, 'read');
+    await methods.acquireOpenIDRefreshFlight({
+      key: 'flight-key',
+      ownerId: 'owner-1',
+      lockExpiresAt: new Date(Date.now() + 30000),
+      expiresAt: new Date(Date.now() + 60000),
+    });
+
+    await methods.acquireOpenIDRefreshFlight({
+      key: 'flight-key',
+      ownerId: 'owner-2',
+      lockExpiresAt: new Date(Date.now() + 30000),
+      expiresAt: new Date(Date.now() + 60000),
+    });
+
+    expect(readSpy).toHaveBeenCalledWith('primary');
+    readSpy.mockRestore();
+  });
+
   it('reclaims an expired pending lock', async () => {
     await methods.acquireOpenIDRefreshFlight({
       key: 'flight-key',
@@ -213,6 +233,15 @@ describe('OpenIDRefreshFlight Methods', () => {
     await expect(methods.findOpenIDRefreshFlight({ key: 'flight-key' })).resolves.toBeNull();
   });
 
+  it('reads publication state from the primary', async () => {
+    const readSpy = jest.spyOn(mongoose.Query.prototype, 'read');
+
+    await methods.findOpenIDRefreshFlight({ key: 'flight-key' });
+
+    expect(readSpy).toHaveBeenCalledWith('primary');
+    readSpy.mockRestore();
+  });
+
   it('persists a logout revocation fence that an active owner cannot publish through', async () => {
     await methods.acquireOpenIDRefreshFlight({
       key: 'flight-key',
diff --git a/packages/data-schemas/src/methods/openidRefreshFlight.ts b/packages/data-schemas/src/methods/openidRefreshFlight.ts
index 140c658ad80..9c080bd657e 100644
--- a/packages/data-schemas/src/methods/openidRefreshFlight.ts
+++ b/packages/data-schemas/src/methods/openidRefreshFlight.ts
@@ -130,7 +130,9 @@ export function createOpenIDRefreshFlightMethods(mongoose: typeof import('mongoo
       const existing = await OpenIDRefreshFlight.findOne({
         key: data.key,
         expiresAt: { $gt: now },
-      }).lean<IOpenIDRefreshFlight>();
+      })
+        .read('primary')
+        .lean<IOpenIDRefreshFlight>();
 
       return { acquired: false, flight: existing };
     } catch (error) {
@@ -243,7 +245,9 @@ export function createOpenIDRefreshFlightMethods(mongoose: typeof import('mongoo
       return await OpenIDRefreshFlight.findOne({
         key: query.key,
         expiresAt: { $gt: new Date() },
-      }).lean<IOpenIDRefreshFlight>();
+      })
+        .read('primary')
+        .lean<IOpenIDRefreshFlight>();
     } catch (error) {
       logger.debug('[findOpenIDRefreshFlight] Error finding flight:', error);
       throw error;