The catch block previously echoed err.message (which may contain internal network addresses like ECONNREFUSED 192.168.1.50:9091) to the pre-auth caller. Log the raw message server-side only and return a generic user- facing string with no internal network detail. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>