@axiom-lattice/core 4.2.2 → 4.2.4

package/dist/index.mjs

@@ -8546,7 +8546,7 @@ var createBrowserGetInfoTool = ({ vmIsolation }) => {
 };
 
 // src/index.ts
-import { HumanMessage as HumanMessage7 } from "@langchain/core/messages";
+import { HumanMessage as HumanMessage6 } from "@langchain/core/messages";
 
 // src/agent_lattice/types.ts
 import {
@@ -10070,8 +10070,8 @@ var metricsPlugin = {
     type: "metrics",
     category: "data",
     capabilityBundleEligible: true,
-    name: "Metrics",
-    description: "Provides metrics querying capabilities",
+    name: "Metrics (DEPRECATED)",
+    description: "DEPRECATED \u2014 use the 'semantic-metrics' plugin instead. Legacy metrics querying over the old server contract; kept for backward compatibility with existing agents. New agents should enable 'semantic-metrics' (connection-backed, /api/v1, table-grant scoping, semantic meta publishing).",
     tools: [
       { name: "list_datasources", description: "List all datasources from all configured servers" },
       { name: "query_metrics_list", description: "Query available metrics from datasources" },
@@ -11510,7 +11510,7 @@ var ConnectionRegistry = class {
 ConnectionRegistry.store = null;
 
 // src/agent_lattice/builders/commonMiddleware.ts
-import { createMiddleware as createMiddleware12 } from "langchain";
+import { createMiddleware as createMiddleware11 } from "langchain";
 
 // src/agent_lattice/builders/taskMiddlewareValidation.ts
 var REQUIRED_TASK_TOOLS = ["manage_task", "task"];
@@ -11880,373 +11880,6 @@ function createCapabilityGuardMiddleware(registry4) {
   });
 }
 
-// src/middlewares/projectRoomMiddleware.ts
-import { createHash as createHash3 } from "crypto";
-import {
-  descriptorDataValue,
-  parseTrustedRunContext as parseTrustedRunContext2,
-  snapshotExactArray as snapshotExactArray2,
-  snapshotExactRecord as snapshotExactRecord2
-} from "@axiom-lattice/protocols";
-import { createMiddleware as createMiddleware11, tool as tool39 } from "langchain";
-import { z as z41 } from "zod";
-
-// src/services/RoomAgentMessageService.ts
-import { randomUUID as randomUUID5 } from "crypto";
-import { snapshotExactArray, snapshotExactRecord } from "@axiom-lattice/protocols";
-var INPUT_KEYS = [
-  "tenantId",
-  "workspaceId",
-  "projectId",
-  "roomId",
-  "membershipId",
-  "assistantId",
-  "text",
-  "sourceRoomMessageId",
-  "sourceId",
-  "idempotencyKey"
-];
-var REPLY_INPUT_KEYS = ["tenantId", "membershipId", "text", "sourceRoomMessageId", "inputMessageId", "sourceId", "idempotencyKey"];
-var RoomAgentMessageService = class {
-  /**
-   * Creates a room writer over the durable membership and message stores.
-   *
-   * @param deps Store methods, optional deterministic ID factory, and detached post-commit hooks.
-   */
-  constructor(deps) {
-    this.deps = deps;
-  }
-  /**
-   * Persists a fully scoped Agent response after validating its human source and active membership.
-   *
-   * @param input Exact trusted scope and response payload.
-   * @returns A deep clone of the canonical idempotent room message.
-   */
-  post(input) {
-    const snapshot = exactStringRecord(input, INPUT_KEYS, "Invalid project room message input");
-    return this.persist(snapshot);
-  }
-  /**
-   * Persists a channel reply while deriving all scope from validated durable records.
-   *
-   * @param input Exact correlation IDs, tenant, target membership, and response text.
-   * @returns A deep clone of the canonical idempotent room message.
-   */
-  postReply(input) {
-    const snapshot = exactStringRecord(input, REPLY_INPUT_KEYS, "Invalid project room reply input");
-    if (snapshot.sourceId !== `reply:${snapshot.inputMessageId}` || snapshot.idempotencyKey !== `room-reply:${snapshot.sourceRoomMessageId}:${snapshot.membershipId}:${snapshot.sourceId}`) {
-      throw new Error("Invalid project room reply correlation");
-    }
-    return this.persistDerived(snapshot);
-  }
-  async persistDerived(input) {
-    const source = snapshotSource(await this.deps.messages.findById(input.tenantId, input.sourceRoomMessageId));
-    if (!source || source.id !== input.sourceRoomMessageId || source.tenantId !== input.tenantId) throw new Error("Invalid project room message");
-    const member = snapshotMembership(await this.deps.memberships.findById(input.tenantId, input.membershipId));
-    if (!member || member.id !== input.membershipId || member.tenantId !== input.tenantId) throw new Error("Invalid project room membership");
-    return this.persist({
-      ...input,
-      workspaceId: source.workspaceId,
-      projectId: source.projectId,
-      roomId: source.roomId,
-      assistantId: member.assistantId
-    }, source, member);
-  }
-  async persist(input, loadedSource, loadedMember) {
-    const text = input.text.trim();
-    if (text.length < 1 || text.length > 2e4) throw new Error("Invalid project room message text");
-    const source = loadedSource ?? snapshotSource(await this.deps.messages.findById(input.tenantId, input.sourceRoomMessageId));
-    if (!source || source.id !== input.sourceRoomMessageId || source.tenantId !== input.tenantId || source.workspaceId !== input.workspaceId || source.projectId !== input.projectId || source.roomId !== input.roomId) {
-      throw new Error("Invalid project room message");
-    }
-    const member = loadedMember ?? snapshotMembership(await this.deps.memberships.findById(input.tenantId, input.membershipId));
-    if (!member || member.id !== input.membershipId || member.status !== "active" || member.assistantId !== input.assistantId || member.tenantId !== input.tenantId || member.workspaceId !== input.workspaceId || member.projectId !== input.projectId || member.roomId !== input.roomId) {
-      throw new Error("Invalid project room membership");
-    }
-    const candidate = {
-      id: (this.deps.idFactory ?? randomUUID5)(),
-      tenantId: input.tenantId,
-      workspaceId: input.workspaceId,
-      projectId: input.projectId,
-      roomId: input.roomId,
-      author: { type: "bot", membershipId: input.membershipId, assistantId: input.assistantId },
-      content: { type: "text", text },
-      mentions: [],
-      replyToMessageId: input.sourceRoomMessageId,
-      source: "agent",
-      sourceId: input.sourceId,
-      idempotencyKey: input.idempotencyKey
-    };
-    const canonical = snapshotCanonical(await this.deps.messages.createIdempotent(candidate), candidate);
-    if (!canonical) throw new Error("Invalid canonical project room message");
-    const result = structuredClone(canonical);
-    this.notifyCommitted(result);
-    return result;
-  }
-  notifyCommitted(message) {
-    const callback = this.deps.onMessageCommitted;
-    if (!callback) return;
-    Promise.resolve().then(() => callback(structuredClone(message))).catch(() => {
-      try {
-        this.deps.onCallbackFailure?.({ messageId: message.id, code: "ROOM_MESSAGE_COMMIT_CALLBACK_FAILED" });
-      } catch {
-      }
-    });
-  }
-};
-function exactValues(value, required, optional = []) {
-  try {
-    if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-    return snapshotExactRecord(value, required, optional);
-  } catch {
-    return void 0;
-  }
-}
-function exactStringRecord(value, keys, message) {
-  const values = exactValues(value, keys);
-  if (!values || keys.some((key4) => typeof values[key4] !== "string" || values[key4].length === 0)) throw new Error(message);
-  return values;
-}
-function date(value) {
-  try {
-    const timestamp = Date.prototype.getTime.call(value);
-    return Number.isFinite(timestamp) ? new Date(timestamp) : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function snapshotSource(value) {
-  const values = exactValues(value, ["id", "tenantId", "workspaceId", "projectId", "roomId", "author", "content", "mentions", "source", "createdAt"], ["replyToMessageId", "sourceId", "idempotencyKey"]);
-  const author = exactValues(values?.author, ["type", "userId"]);
-  const content = exactValues(values?.content, ["type", "text"]);
-  const createdAt = date(values?.createdAt);
-  const mentions = snapshotMentions(values?.mentions);
-  if (!values || values.source !== "user" || author?.type !== "human" || typeof author.userId !== "string" || !author.userId || content?.type !== "text" || typeof content.text !== "string" || !mentions || !createdAt || ["id", "tenantId", "workspaceId", "projectId", "roomId"].some((key4) => typeof values[key4] !== "string" || !values[key4])) return void 0;
-  return {
-    id: values.id,
-    tenantId: values.tenantId,
-    workspaceId: values.workspaceId,
-    projectId: values.projectId,
-    roomId: values.roomId,
-    author: { type: "human", userId: author.userId },
-    content: { type: "text", text: content.text },
-    mentions,
-    source: "user",
-    createdAt
-  };
-}
-function snapshotMentions(value) {
-  const rows = snapshotExactArray(value);
-  if (!rows) return void 0;
-  const mentions = [];
-  for (const row of rows) {
-    const team = exactValues(row, ["type"]);
-    if (team?.type === "team") {
-      mentions.push({ type: "team" });
-      continue;
-    }
-    const bot = exactValues(row, ["type", "membershipId"]);
-    if (bot?.type !== "bot" || typeof bot.membershipId !== "string" || !bot.membershipId) return void 0;
-    mentions.push({ type: "bot", membershipId: bot.membershipId });
-  }
-  return mentions;
-}
-function snapshotMembership(value) {
-  const required = ["id", "tenantId", "workspaceId", "projectId", "roomId", "assistantId", "role", "title", "mentionName", "status", "roomThreadId", "joinedAt", "updatedAt"];
-  const values = exactValues(value, required, ["responsibility"]);
-  const joinedAt = date(values?.joinedAt);
-  const updatedAt = date(values?.updatedAt);
-  if (!values || required.slice(0, 7).some((key4) => typeof values[key4] !== "string" || !values[key4]) || values.role !== "coordinator" && values.role !== "specialist" || typeof values.title !== "string" || !values.title || typeof values.mentionName !== "string" || !values.mentionName || !["active", "paused", "removed"].includes(values.status) || typeof values.roomThreadId !== "string" || !values.roomThreadId || values.responsibility !== void 0 && typeof values.responsibility !== "string" || !joinedAt || !updatedAt) return void 0;
-  return { ...values, joinedAt, updatedAt };
-}
-function snapshotCanonical(value, expected) {
-  const values = exactValues(value, ["id", "tenantId", "workspaceId", "projectId", "roomId", "author", "content", "mentions", "replyToMessageId", "source", "sourceId", "idempotencyKey", "createdAt"]);
-  const author = exactValues(values?.author, ["type", "membershipId", "assistantId"]);
-  const content = exactValues(values?.content, ["type", "text"]);
-  const createdAt = date(values?.createdAt);
-  if (!values || !createdAt || typeof values.id !== "string" || values.id.length === 0 || snapshotExactArray(values.mentions)?.length !== 0 || author?.type !== "bot" || expected.author.type !== "bot" || author.membershipId !== expected.author.membershipId || author.assistantId !== expected.author.assistantId || content?.type !== "text" || content.text !== expected.content.text || values.tenantId !== expected.tenantId || values.workspaceId !== expected.workspaceId || values.projectId !== expected.projectId || values.roomId !== expected.roomId || values.replyToMessageId !== expected.replyToMessageId || values.source !== "agent" || values.sourceId !== expected.sourceId || values.idempotencyKey !== expected.idempotencyKey) return void 0;
-  return {
-    id: values.id,
-    tenantId: expected.tenantId,
-    workspaceId: expected.workspaceId,
-    projectId: expected.projectId,
-    roomId: expected.roomId,
-    author: { type: "bot", membershipId: expected.author.membershipId, assistantId: expected.author.assistantId },
-    content: { type: "text", text: expected.content.text },
-    mentions: [],
-    replyToMessageId: expected.replyToMessageId,
-    source: "agent",
-    sourceId: expected.sourceId,
-    idempotencyKey: expected.idempotencyKey,
-    createdAt
-  };
-}
-
-// src/middlewares/projectRoomMiddleware.ts
-var PROJECT_ROOM_CONTEXT_REQUIRED = "PROJECT_ROOM_CONTEXT_REQUIRED";
-var PROJECT_ROOM_POST_FAILED = "PROJECT_ROOM_POST_FAILED";
-var PROJECT_ROOM_ROSTER_FAILED = "PROJECT_ROOM_ROSTER_FAILED";
-var PROJECT_ROOM_POST_FAILED_MESSAGE = "Project room message could not be posted";
-var PROJECT_ROOM_ROSTER_FAILED_MESSAGE = "Project room roster is unavailable";
-var CONTEXT_REQUIRED = JSON.stringify({
-  success: false,
-  error: PROJECT_ROOM_CONTEXT_REQUIRED
-});
-var POST_FAILED = JSON.stringify({
-  success: false,
-  error: PROJECT_ROOM_POST_FAILED,
-  message: PROJECT_ROOM_POST_FAILED_MESSAGE
-});
-var ROSTER_FAILED = JSON.stringify({
-  success: false,
-  error: PROJECT_ROOM_ROSTER_FAILED,
-  message: PROJECT_ROOM_ROSTER_FAILED_MESSAGE
-});
-var postSchema = z41.object({
-  text: z41.string().trim().min(1).max(2e4)
-}).strict();
-var listSchema = z41.object({}).strict();
-function ownDataValue(record, key4) {
-  if (typeof record !== "object" || record === null || Array.isArray(record)) return void 0;
-  try {
-    const descriptor = Object.getOwnPropertyDescriptor(record, key4);
-    return descriptorDataValue(descriptor)?.value;
-  } catch {
-    return void 0;
-  }
-}
-function readTrustedRoomScope(config) {
-  const configurable = ownDataValue(config, "configurable");
-  const runConfig = ownDataValue(configurable, "runConfig");
-  const projectRoom = ownDataValue(runConfig, "projectRoom");
-  try {
-    return parseTrustedRunContext2({ projectRoom }).projectRoom;
-  } catch {
-    return void 0;
-  }
-}
-function exactValues2(value, required, optional = []) {
-  try {
-    return snapshotExactRecord2(value, required, optional);
-  } catch {
-    return void 0;
-  }
-}
-function safeDate(value) {
-  try {
-    const timestamp = Date.prototype.getTime.call(value);
-    return Number.isFinite(timestamp) ? new Date(timestamp) : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function snapshotMembership2(value) {
-  const required = [
-    "id",
-    "tenantId",
-    "workspaceId",
-    "projectId",
-    "roomId",
-    "assistantId",
-    "role",
-    "title",
-    "mentionName",
-    "status",
-    "roomThreadId",
-    "joinedAt",
-    "updatedAt"
-  ];
-  const values = exactValues2(value, required, ["responsibility"]);
-  const joinedAt = safeDate(values?.joinedAt);
-  const updatedAt = safeDate(values?.updatedAt);
-  if (!values || !joinedAt || !updatedAt || required.slice(0, 6).some((key4) => typeof values[key4] !== "string" || values[key4] === "") || values.role !== "coordinator" && values.role !== "specialist" || typeof values.title !== "string" || values.title === "" || typeof values.mentionName !== "string" || values.mentionName === "" || !["active", "paused", "removed"].includes(values.status) || typeof values.roomThreadId !== "string" || values.roomThreadId === "" || values.responsibility !== void 0 && typeof values.responsibility !== "string") return void 0;
-  return { ...values, joinedAt, updatedAt };
-}
-function snapshotRows(value) {
-  return snapshotExactArray2(value) ?? [];
-}
-async function hasActiveCurrentMembership(scope) {
-  const memberships = getStoreLattice("default", "projectBotMembership").store;
-  const member = snapshotMembership2(await memberships.findById(scope.tenantId, scope.membershipId));
-  if (!member || member.status !== "active" || member.id !== scope.membershipId || member.tenantId !== scope.tenantId || member.workspaceId !== scope.workspaceId || member.projectId !== scope.projectId || member.roomId !== scope.roomId || member.assistantId !== scope.assistantId) return false;
-  return true;
-}
-function createProjectRoomMiddleware() {
-  return createMiddleware11({
-    name: "ProjectRoomMiddleware",
-    tools: [
-      tool39(async (input, config) => {
-        const { text } = input;
-        const scope = readTrustedRoomScope(config);
-        if (!scope) return CONTEXT_REQUIRED;
-        const digest = createHash3("sha256").update(text).digest("hex");
-        try {
-          const service2 = new RoomAgentMessageService({
-            memberships: getStoreLattice("default", "projectBotMembership").store,
-            messages: getStoreLattice("default", "projectRoomMessage").store
-          });
-          await service2.post({
-            tenantId: scope.tenantId,
-            workspaceId: scope.workspaceId,
-            projectId: scope.projectId,
-            roomId: scope.roomId,
-            membershipId: scope.membershipId,
-            assistantId: scope.assistantId,
-            text,
-            sourceRoomMessageId: scope.sourceRoomMessageId,
-            sourceId: `${scope.inputMessageId}:${digest}`,
-            idempotencyKey: `room-tool:${scope.inputMessageId}:${scope.membershipId}:${digest}`
-          });
-          return JSON.stringify({ success: true, message: "Project room message posted" });
-        } catch {
-          return POST_FAILED;
-        }
-      }, {
-        name: "post_room_message",
-        description: "Post a text reply to the current trusted Project Room message",
-        schema: postSchema
-      }),
-      tool39(async (_input, config) => {
-        const scope = readTrustedRoomScope(config);
-        if (!scope) return CONTEXT_REQUIRED;
-        try {
-          if (!await hasActiveCurrentMembership(scope)) return CONTEXT_REQUIRED;
-          const rows = await getStoreLattice("default", "projectBotMembership").store.list(scope.tenantId, scope.projectId);
-          const members = snapshotRows(rows).map(snapshotMembership2).filter((member) => member !== void 0 && member.status === "active" && member.tenantId === scope.tenantId && member.workspaceId === scope.workspaceId && member.projectId === scope.projectId && member.roomId === scope.roomId).sort((left, right) => left.joinedAt.getTime() - right.joinedAt.getTime() || (left.id < right.id ? -1 : left.id > right.id ? 1 : 0)).map((member) => ({
-            assistantId: member.assistantId,
-            mentionName: member.mentionName,
-            title: member.title,
-            ...member.responsibility === void 0 ? {} : { responsibility: member.responsibility },
-            role: member.role
-          }));
-          return JSON.stringify({ success: true, members });
-        } catch {
-          return ROSTER_FAILED;
-        }
-      }, {
-        name: "list_room_roster",
-        description: "List active Agent roles in the current trusted Project Room, including assistantId for delegation",
-        schema: listSchema
-      })
-    ]
-  });
-}
-var projectRoomPlugin = {
-  meta: {
-    type: "project_room",
-    category: "assistant",
-    name: "Project Room",
-    description: "Trusted Project Room posting and active roster tools",
-    tools: [
-      { name: "post_room_message", description: "Post to the current trusted Project Room" },
-      { name: "list_room_roster", description: "List active Agents in the current trusted Project Room" }
-    ],
-    configSchema: { type: "object", properties: {}, additionalProperties: false },
-    defaultConfig: {}
-  },
-  middleware: () => createProjectRoomMiddleware()
-};
-
 // src/agent_lattice/builders/commonMiddleware.ts
 var SKILL_RESOURCE_SELECTOR = Object.freeze({
   argumentField: "skill_name",
@@ -12417,7 +12050,7 @@ async function resolveAllConnections(type, tenantId2) {
   }
 }
 function createStandardConnectionRefreshMiddleware(configurations, toolTypes) {
-  return createMiddleware12({
+  return createMiddleware11({
     name: "StandardConnectionRefreshMiddleware",
     wrapToolCall: async (request, handler) => {
       const type = toolTypes.get(request.toolCall.name);
@@ -12483,7 +12116,6 @@ async function createCommonMiddlewares(middlewareConfigs, filesystemBackend, fsI
       })
     );
   }
-  middlewares.push(createProjectRoomMiddleware());
   const filesystemConfig = normalizedMiddlewareConfigs.find((m) => m.type === "filesystem");
   const clawConfig = normalizedMiddlewareConfigs.find((m) => m.type === "claw");
   const needsFilesystemBackend = filesystemConfig?.enabled || clawConfig?.enabled;
@@ -12510,7 +12142,7 @@ async function createCommonMiddlewares(middlewareConfigs, filesystemBackend, fsI
     }
   }
   for (const config of normalizedMiddlewareConfigs) {
-    if (!config.enabled || config.type === "filesystem" || config.type === "project_room") continue;
+    if (!config.enabled || config.type === "filesystem") continue;
     switch (config.type) {
       case "code_eval":
         addConfiguredMiddleware(
@@ -12852,16 +12484,15 @@ import {
 } from "langchain";
 
 // src/deep_agent_new/middleware/subagents.ts
-import { z as z43 } from "zod/v3";
+import { z as z42 } from "zod/v3";
 import {
-  createMiddleware as createMiddleware13,
+  createMiddleware as createMiddleware12,
   createAgent as createAgent2,
-  tool as tool40,
+  tool as tool39,
   ToolMessage as ToolMessage6,
   humanInTheLoopMiddleware
 } from "langchain";
 import { Command as Command3, getCurrentTaskInput as getCurrentTaskInput2, GraphInterrupt } from "@langchain/langgraph";
-import { HumanMessage as HumanMessage4 } from "@langchain/core/messages";
 
 // src/agent_worker/agent_worker_graph.ts
 import {
@@ -13268,7 +12899,7 @@ function createAgentWorkerGraph() {
 var agentWorkerGraph = createAgentWorkerGraph();
 
 // src/services/Agent.ts
-import { descriptorDataValue as descriptorDataValue2 } from "@axiom-lattice/protocols";
+import { descriptorDataValue } from "@axiom-lattice/protocols";
 import { Command as Command2 } from "@langchain/langgraph";
 import { AIMessage as AIMessage3, filterMessages, HumanMessage as HumanMessage3, SystemMessage, ToolMessage as ToolMessage5 } from "langchain";
 
@@ -13590,10 +13221,10 @@ registerChunkBuffer("default", buffer);
 import { v4 as v42 } from "uuid";
 
 // src/capability/CapabilityRuntimeResolver.ts
-import { z as z42 } from "zod";
+import { z as z41 } from "zod";
 
 // src/capability/CapabilityBundleMerger.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 import { isDeepStrictEqual } from "util";
 
 // src/capability/CredentialFieldPolicy.ts
@@ -14029,7 +13660,7 @@ function createCapabilityRevision(bundles, effectivePolicy) {
     bundles: bundles.map(({ id, updatedAt }) => [id, updatedAt]),
     effectivePolicy
   };
-  return createHash4("sha256").update(JSON.stringify(canonicalize(revisionInput))).digest("hex");
+  return createHash3("sha256").update(JSON.stringify(canonicalize(revisionInput))).digest("hex");
 }
 var LEGACY_UNION_CONFIG_FIELDS = new Set(
   Object.values(LEGACY_PLUGIN_CONNECTION_FIELDS).map(({ selectorField }) => selectorField)
@@ -14372,9 +14003,9 @@ var CapabilityRuntimeResolutionError = class extends Error {
     this.actualRevision = context.actualRevision;
   }
 };
-var bundleIdsSchema = z42.array(z42.string().uuid()).superRefine((ids, context) => {
+var bundleIdsSchema = z41.array(z41.string().uuid()).superRefine((ids, context) => {
   if (new Set(ids).size !== ids.length) {
-    context.addIssue({ code: z42.ZodIssueCode.custom, message: "Bundle IDs must be unique" });
+    context.addIssue({ code: z41.ZodIssueCode.custom, message: "Bundle IDs must be unique" });
   }
 });
 function projectBundleIds(config) {
@@ -14650,7 +14281,7 @@ function cloneRunConfig(value, stripReserved) {
         const clone4 = [];
         for (let index = 0; index < length; index += 1) {
           const key4 = String(index);
-          const data = descriptorDataValue2(descriptors[key4]);
+          const data = descriptorDataValue(descriptors[key4]);
           if (!data || data.value === void 0) {
             throw new CallerRunConfigValidationError(`Unsupported caller run config value at ${path8}/${key4}`);
           }
@@ -14665,7 +14296,7 @@ function cloneRunConfig(value, stripReserved) {
       for (const key4 of keys) {
         if (typeof key4 !== "string") continue;
         const fieldPath = callerRunConfigPath(path8, key4);
-        const data = descriptorDataValue2(descriptors[key4]);
+        const data = descriptorDataValue(descriptors[key4]);
         if (!data) throw new CallerRunConfigValidationError(`Unsupported caller run config value at ${fieldPath}`);
         if (stripReserved && RESERVED_CALLER_RUN_KEYS.has(key4) || data.value === void 0) continue;
         Object.defineProperty(clone3, key4, {
@@ -14701,7 +14332,7 @@ function sanitizeCallerRunConfig(value, preserveDelegatedContext = true) {
     if (Array.isArray(entry)) {
       const descriptors2 = Object.getOwnPropertyDescriptors(entry);
       for (let index = 0; index < entry.length; index += 1) {
-        const data = descriptorDataValue2(descriptors2[String(index)]);
+        const data = descriptorDataValue(descriptors2[String(index)]);
         if (!data) throw new CallerRunConfigValidationError(`Unsupported caller run config value at ${path8}/${index}`);
         visit(data.value, `${path8}/${index}`);
       }
@@ -14720,7 +14351,7 @@ function sanitizeCallerRunConfig(value, preserveDelegatedContext = true) {
       }
       const fieldPath = callerRunConfigPath(path8, key4);
       const descriptor = descriptors[key4];
-      const data = descriptorDataValue2(descriptor);
+      const data = descriptorDataValue(descriptor);
       if (!data) throw new CallerRunConfigValidationError(`Unsupported caller run config value at ${fieldPath}`);
       if (isCredentialBearingKey(key4)) {
         throw new CapabilityRuntimeResolutionError(
@@ -14755,7 +14386,7 @@ function cloneExecutionRunConfigBase(value) {
         throw new CallerRunConfigValidationError("Unsupported caller run config value at /run_config");
       }
       const descriptor = descriptors[key4];
-      const data = descriptorDataValue2(descriptor);
+      const data = descriptorDataValue(descriptor);
       if (!data) {
         throw new CallerRunConfigValidationError("Unsupported caller run config value at /run_config");
       }
@@ -14838,19 +14469,19 @@ var DelegatedScopeNotQueueableError = class extends Error {
     this.name = "DelegatedScopeNotQueueableError";
   }
 };
-function ownDataValue2(value, key4) {
+function ownDataValue(value, key4) {
   if (typeof value !== "object" || value === null) return void 0;
   try {
-    return descriptorDataValue2(Object.getOwnPropertyDescriptor(value, key4))?.value;
+    return descriptorDataValue(Object.getOwnPropertyDescriptor(value, key4))?.value;
   } catch {
     return void 0;
   }
 }
 function checkpointCapabilityRevision(state) {
-  const config = ownDataValue2(state, "config");
-  const configurable = ownDataValue2(config, "configurable");
-  const runConfig = ownDataValue2(configurable, "runConfig");
-  const revision = ownDataValue2(runConfig, "capabilityRuntimeRevision");
+  const config = ownDataValue(state, "config");
+  const configurable = ownDataValue(config, "configurable");
+  const runConfig = ownDataValue(configurable, "runConfig");
+  const revision = ownDataValue(runConfig, "capabilityRuntimeRevision");
   return typeof revision === "string" && revision.length > 0 ? revision : void 0;
 }
 var QUEUE_PROCESSOR_RETRY_BASE_MS = 100;
@@ -15490,10 +15121,14 @@ var Agent = class {
     if (!Array.isArray(messages) || messages.length === 0) {
       return [new HumanMessage3({ id: content.id, content: content.message })];
     }
+    const invalid = messages.filter((message) => !isMessageContent(message.content));
+    if (invalid.length > 0) {
+      console.error(
+        `[Agent] Dropping ${invalid.length} queued message(s) with invalid serialized content for queued message ${content.id}; falling back to stored display content`
+      );
+      return [new HumanMessage3({ id: content.id, content: content.message })];
+    }
     return messages.map((message) => {
-      if (!isMessageContent(message.content)) {
-        throw new Error(`Invalid structured message content for queued message ${content.id}`);
-      }
       const fields = {
         id: message.id,
         content: message.content,
@@ -16802,7 +16437,7 @@ function createTaskTool(options) {
     generalPurposeAgent
   });
   const finalTaskDescription = taskDescription ? taskDescription : getTaskToolDescription(subagentDescriptions);
-  return tool40(
+  return tool39(
     async (input, config) => {
       const { description, subagent_type, async } = input;
       if (input.taskId) {
@@ -16858,7 +16493,8 @@ function createTaskTool(options) {
         const currentState = getCurrentTaskInput2();
         const subagentState = filterStateForSubagent(currentState);
         subagentState.messages = input.taskId ? [
-          new HumanMessage4({
+          {
+            role: "human",
             content: `${description}
 
 ---
@@ -16868,8 +16504,8 @@ You are executing a persistent task (ID: ${input.taskId}). Use manage_task.updat
 - Preserve the Objective and Acceptance Criteria contract. Do not append progress notes to the description; put progress and evidence in the result or Activity.
 - Complete agent-owned tasks with result plus beliefImpact: [{ key, after, basis }] where key references the belief owner's canonical Belief State; the middleware records completion evidence and writes the parent belief activity automatically.
 - Use add_activity only for additional observations or plan revisions when the result changes the parent belief or plan.`
-          })
-        ] : [new HumanMessage4({ content: description })];
+          }
+        ] : [{ role: "human", content: description }];
         const subagent_thread_id = config.configurable?.thread_id + "____" + assistant_id + "_" + config.toolCall.id;
         if (async) {
           const tenantId2 = config.configurable?.runConfig?.tenantId;
@@ -16963,19 +16599,19 @@ The result will be delivered as a notification when complete. Do not poll.`,
     {
       name: "task",
       description: finalTaskDescription,
-      schema: z43.object({
-        description: z43.string().describe("The task to execute with the selected agent"),
-        subagent_type: z43.string().describe(
+      schema: z42.object({
+        description: z42.string().describe("The task to execute with the selected agent"),
+        subagent_type: z42.string().describe(
           `Name of the agent to use. Available: ${Object.keys(
             subagentGraphs
           ).join(", ")}`
         ),
         ...allowAsync ? {
-          async: z43.boolean().default(false).describe(
+          async: z42.boolean().default(false).describe(
             "When true, runs the task in the background and returns immediately. Use for independent tasks that can run in parallel. The result is delivered as a notification when complete. Use check_async_task or list_async_tasks to monitor progress."
           )
         } : {},
-        taskId: z43.string().optional().describe(
+        taskId: z42.string().optional().describe(
           "Optional: ID of a TaskItem created via manage_task. When set, the subagent will update this task's status as it works. Use this when executing a persistent task from the task board."
         )
       })
@@ -16993,7 +16629,7 @@ function getMainAgentFromConfig(config) {
   });
 }
 function createCheckAsyncTaskTool() {
-  return tool40(
+  return tool39(
     async (input, config) => {
       const { task_id } = input;
       const mainAgent = getMainAgentFromConfig(config);
@@ -17053,14 +16689,14 @@ Description: ${cached.description}`;
     {
       name: "check_async_task",
       description: "Get the current status and result of an async background task. Use this to check if a previously launched async task has completed.",
-      schema: z43.object({
-        task_id: z43.string().describe("The task ID returned when the async task was started")
+      schema: z42.object({
+        task_id: z42.string().describe("The task ID returned when the async task was started")
       })
     }
   );
 }
 function createListAsyncTasksTool() {
-  return tool40(
+  return tool39(
     async (_input, config) => {
       const mainAgent = getMainAgentFromConfig(config);
       if (!mainAgent) {
@@ -17106,12 +16742,12 @@ function createListAsyncTasksTool() {
     {
       name: "list_async_tasks",
       description: "List all async background tasks with their current status. Use this before reporting task status to the user. Statuses in conversation history may be stale.",
-      schema: z43.object({})
+      schema: z42.object({})
     }
   );
 }
 function createCancelAsyncTaskTool() {
-  return tool40(
+  return tool39(
     async (input, config) => {
       const { task_id } = input;
       const mainAgent = getMainAgentFromConfig(config);
@@ -17150,8 +16786,8 @@ function createCancelAsyncTaskTool() {
     {
       name: "cancel_async_task",
       description: "Cancel a running async background task.",
-      schema: z43.object({
-        task_id: z43.string().describe("The task ID to cancel")
+      schema: z42.object({
+        task_id: z42.string().describe("The task ID to cancel")
       })
     }
   );
@@ -17187,7 +16823,7 @@ function createSubAgentMiddleware(options) {
     );
   }
   const effectiveSystemPrompt = allowAsync ? systemPrompt + getAsyncPromptText() : systemPrompt;
-  return createMiddleware13({
+  return createMiddleware12({
     name: "subAgentMiddleware",
     tools: allTools,
     wrapModelCall: async (request, handler) => {
@@ -17207,8 +16843,8 @@ ${effectiveSystemPrompt}` : effectiveSystemPrompt;
 }
 
 // src/deep_agent_new/middleware/date.ts
-import { createMiddleware as createMiddleware14, tool as tool41 } from "langchain";
-import { z as z44 } from "zod";
+import { createMiddleware as createMiddleware13, tool as tool40 } from "langchain";
+import { z as z43 } from "zod";
 function formatCurrentDate(timezone = "UTC") {
   const now = /* @__PURE__ */ new Date();
   let validTimezone = timezone;
@@ -17236,10 +16872,10 @@ function generateDateContext(timezone = "UTC") {
 function createDateMiddleware(options = {}) {
   const timezone = options.timezone || "UTC";
   const dateContext = generateDateContext(timezone);
-  return createMiddleware14({
+  return createMiddleware13({
     name: "DateMiddleware",
     tools: [
-      tool41(
+      tool40(
         async () => {
           const now = /* @__PURE__ */ new Date();
           let validTimezone = timezone;
@@ -17269,7 +16905,7 @@ function createDateMiddleware(options = {}) {
         {
           name: "get_current_date_time",
           description: "Get the exact current date and time at the moment of invocation. Use this when the user asks about the current time (e.g., 'what time is it', '\u51E0\u70B9\u4E86', '\u73B0\u5728\u51E0\u70B9'), or when you need to know the precise time for scheduling, deadlines, or time-sensitive operations.",
-          schema: z44.object({})
+          schema: z43.object({})
         }
       )
     ],
@@ -17335,8 +16971,8 @@ var datePlugin = {
 };
 
 // src/deep_agent_new/middleware/scheduler.ts
-import { tool as tool42, createMiddleware as createMiddleware15 } from "langchain";
-import { z as z45 } from "zod";
+import { tool as tool41, createMiddleware as createMiddleware14 } from "langchain";
+import { z as z44 } from "zod";
 import { v4 as uuidv43 } from "uuid";
 import { ScheduledTaskStatus as ScheduledTaskStatus3, ScheduleExecutionType as ScheduleExecutionType3 } from "@axiom-lattice/protocols";
 
@@ -18410,10 +18046,10 @@ function registerAgentAddMessageHandler() {
 function createSchedulerMiddleware(options = {}) {
   const defaultMaxRetries = options.defaultMaxRetries ?? 0;
   registerAgentAddMessageHandler();
-  return createMiddleware15({
+  return createMiddleware14({
     name: "SchedulerMiddleware",
     tools: [
-      tool42(
+      tool41(
         async (input, config) => {
           const runConfig = getRunConfig(config);
           const scheduleLattice = getScheduleLattice(SCHEDULE_LATTICE_KEY);
@@ -18441,14 +18077,14 @@ function createSchedulerMiddleware(options = {}) {
         {
           name: "schedule_at",
           description: "Schedule a system message for an absolute future timestamp",
-          schema: z45.object({
-            executeAt: z45.number(),
-            maxRetries: z45.number().int().min(0).optional(),
-            message: z45.string()
+          schema: z44.object({
+            executeAt: z44.number(),
+            maxRetries: z44.number().int().min(0).optional(),
+            message: z44.string()
           })
         }
       ),
-      tool42(
+      tool41(
         async (input, config) => {
           const runConfig = getRunConfig(config);
           const scheduleLattice = getScheduleLattice(SCHEDULE_LATTICE_KEY);
@@ -18476,14 +18112,14 @@ function createSchedulerMiddleware(options = {}) {
         {
           name: "schedule_after",
           description: "Schedule a system message after a relative delay",
-          schema: z45.object({
-            delayMs: z45.number().positive(),
-            maxRetries: z45.number().int().min(0).optional(),
-            message: z45.string()
+          schema: z44.object({
+            delayMs: z44.number().positive(),
+            maxRetries: z44.number().int().min(0).optional(),
+            message: z44.string()
           })
         }
       ),
-      tool42(
+      tool41(
         async (input, config) => {
           const runConfig = getRunConfig(config);
           const scheduleLattice = getScheduleLattice(SCHEDULE_LATTICE_KEY);
@@ -18518,16 +18154,16 @@ function createSchedulerMiddleware(options = {}) {
         {
           name: "schedule_recurring",
           description: "Schedule a recurring system message with a cron expression",
-          schema: z45.object({
-            cronExpression: z45.string(),
-            maxRuns: z45.number().int().positive().optional(),
-            expiresAt: z45.number().optional(),
-            maxRetries: z45.number().int().min(0).optional(),
-            message: z45.string()
+          schema: z44.object({
+            cronExpression: z44.string(),
+            maxRuns: z44.number().int().positive().optional(),
+            expiresAt: z44.number().optional(),
+            maxRetries: z44.number().int().min(0).optional(),
+            message: z44.string()
           })
         }
       ),
-      tool42(
+      tool41(
         async (input) => {
           const scheduleLattice = getScheduleLattice(SCHEDULE_LATTICE_KEY);
           const success = await scheduleLattice.client.cancel(input.taskId);
@@ -18536,12 +18172,12 @@ function createSchedulerMiddleware(options = {}) {
         {
           name: "cancel_scheduled_task",
           description: "Cancel a scheduled task by task id",
-          schema: z45.object({
-            taskId: z45.string()
+          schema: z44.object({
+            taskId: z44.string()
           })
         }
       ),
-      tool42(
+      tool41(
         async (input, config) => {
           const runConfig = getRunConfig(config);
           const scheduleLattice = getScheduleLattice(SCHEDULE_LATTICE_KEY);
@@ -18563,11 +18199,11 @@ function createSchedulerMiddleware(options = {}) {
         {
           name: "list_scheduled_tasks",
           description: "List scheduled tasks for the current agent context",
-          schema: z45.object({
-            status: z45.enum(["pending", "running", "completed", "failed", "cancelled", "paused"]).optional(),
-            executionType: z45.enum(["once", "cron"]).optional(),
-            limit: z45.number().int().positive().optional(),
-            offset: z45.number().int().min(0).optional()
+          schema: z44.object({
+            status: z44.enum(["pending", "running", "completed", "failed", "cancelled", "paused"]).optional(),
+            executionType: z44.enum(["once", "cron"]).optional(),
+            limit: z44.number().int().positive().optional(),
+            offset: z44.number().int().min(0).optional()
           })
         }
       )
@@ -19824,8 +19460,8 @@ var MemoryBackend = class {
 
 // src/deep_agent_new/middleware/todos.ts
 import { Command as Command4 } from "@langchain/langgraph";
-import { z as z46 } from "zod";
-import { createMiddleware as createMiddleware16, tool as tool43, ToolMessage as ToolMessage7 } from "langchain";
+import { z as z45 } from "zod";
+import { createMiddleware as createMiddleware15, tool as tool42, ToolMessage as ToolMessage7 } from "langchain";
 var WRITE_TODOS_DESCRIPTION = `Use this tool to create and manage a structured task list for your current work session. This helps you track progress, organize complex tasks, and demonstrate thoroughness to the user.
 It also helps the user understand the progress of the task and overall progress of their requests.
 Only use this tool if you think it will be helpful in staying organized. If the user's request is trivial and takes less than 3 steps, it is better to NOT use this tool and just do the taks directly.
@@ -20052,14 +19688,14 @@ Writing todos takes time and tokens, use it when it is helpful for managing comp
 ## Important To-Do List Usage Notes to Remember
 - The \`write_todos\` tool should never be called multiple times in parallel.
 - Don't be afraid to revise the To-Do list as you go. New information may reveal new tasks that need to be done, or old tasks that are irrelevant.`;
-var TodoStatus = z46.enum(["pending", "in_progress", "completed"]).describe("Status of the todo");
-var TodoSchema = z46.object({
-  content: z46.string().describe("Content of the todo item"),
+var TodoStatus = z45.enum(["pending", "in_progress", "completed"]).describe("Status of the todo");
+var TodoSchema = z45.object({
+  content: z45.string().describe("Content of the todo item"),
   status: TodoStatus
 });
-var stateSchema = z46.object({ todos: z46.array(TodoSchema).default([]) });
+var stateSchema = z45.object({ todos: z45.array(TodoSchema).default([]) });
 function todoListMiddleware(options) {
-  const writeTodos = tool43(
+  const writeTodos = tool42(
     ({ todos }, config) => {
       return new Command4({
         update: {
@@ -20076,12 +19712,12 @@ function todoListMiddleware(options) {
     {
       name: "write_todos",
       description: options?.toolDescription ?? WRITE_TODOS_DESCRIPTION,
-      schema: z46.object({
-        todos: z46.array(TodoSchema).describe("List of todo items to update")
+      schema: z45.object({
+        todos: z45.array(TodoSchema).describe("List of todo items to update")
       })
     }
   );
-  return createMiddleware16({
+  return createMiddleware15({
     name: "todoListMiddleware",
     stateSchema,
     tools: [writeTodos],
@@ -20232,7 +19868,7 @@ var DeepAgentGraphBuilder = class {
 };
 
 // src/agent_team/agent_team.ts
-import { z as z49 } from "zod/v3";
+import { z as z48 } from "zod/v3";
 import { createAgent as createAgent5 } from "langchain";
 
 // src/agent_team/types.ts
@@ -20668,14 +20304,14 @@ var InMemoryMailboxStore = class {
 };
 
 // src/agent_team/middleware/team.ts
-import { z as z48 } from "zod/v3";
-import { createMiddleware as createMiddleware17, createAgent as createAgent4, tool as tool45, ToolMessage as ToolMessage9 } from "langchain";
+import { z as z47 } from "zod/v3";
+import { createMiddleware as createMiddleware16, createAgent as createAgent4, tool as tool44, ToolMessage as ToolMessage9 } from "langchain";
 import { Command as Command6, getCurrentTaskInput as getCurrentTaskInput3 } from "@langchain/langgraph";
 import { v4 as uuidv44 } from "uuid";
 
 // src/agent_team/middleware/teammate_tools.ts
-import { z as z47 } from "zod/v3";
-import { tool as tool44, ToolMessage as ToolMessage8 } from "langchain";
+import { z as z46 } from "zod/v3";
+import { tool as tool43, ToolMessage as ToolMessage8 } from "langchain";
 import { Command as Command5 } from "@langchain/langgraph";
 
 // src/agent_team/middleware/formatMessages.ts
@@ -20700,7 +20336,7 @@ ${meta}${body}`;
 // src/agent_team/middleware/teammate_tools.ts
 function createTeammateTools(options) {
   const { teamId, agentId, taskListStore, mailboxStore } = options;
-  const claimTaskTool = tool44(
+  const claimTaskTool = tool43(
     async (input) => {
       const task = await taskListStore.claimTaskById(
         teamId,
@@ -20725,12 +20361,12 @@ function createTeammateTools(options) {
     {
       name: "claim_task",
       description: "Pick a task to work on by task_id. Use check_tasks first to see all tasks; then call this with the task_id you choose. The task's assignee is set to you and you should focus on that task until you complete_task or fail_task it.",
-      schema: z47.object({
-        task_id: z47.string().describe("ID of the task to claim (e.g. task-01). Use check_tasks to see IDs.")
+      schema: z46.object({
+        task_id: z46.string().describe("ID of the task to claim (e.g. task-01). Use check_tasks to see IDs.")
       })
     }
   );
-  const completeTaskTool = tool44(
+  const completeTaskTool = tool43(
     async (input) => {
       const task = await taskListStore.completeTask(
         teamId,
@@ -20751,13 +20387,13 @@ function createTeammateTools(options) {
     {
       name: "complete_task",
       description: "Mark a claimed task as completed with a result summary. Call this after you have finished working on a task.",
-      schema: z47.object({
-        task_id: z47.string().describe("ID of the task to complete"),
-        result: z47.string().describe("Summary of the task result")
+      schema: z46.object({
+        task_id: z46.string().describe("ID of the task to complete"),
+        result: z46.string().describe("Summary of the task result")
       })
     }
   );
-  const failTaskTool = tool44(
+  const failTaskTool = tool43(
     async (input) => {
       const task = await taskListStore.failTask(
         teamId,
@@ -20778,13 +20414,13 @@ function createTeammateTools(options) {
     {
       name: "fail_task",
       description: "Mark a claimed task as failed with an error description. Call this if you cannot complete the task.",
-      schema: z47.object({
-        task_id: z47.string().describe("ID of the task to fail"),
-        error: z47.string().describe("Description of why the task failed")
+      schema: z46.object({
+        task_id: z46.string().describe("ID of the task to fail"),
+        error: z46.string().describe("Description of why the task failed")
       })
     }
   );
-  const sendMessageTool = tool44(
+  const sendMessageTool = tool43(
     async (input) => {
       await mailboxStore.sendMessage(
         teamId,
@@ -20798,11 +20434,11 @@ function createTeammateTools(options) {
     {
       name: "send_message",
       description: 'Send a message to the team lead or another teammate via the mailbox. Use "team_lead" to message the team lead. Use this to report discoveries, request guidance, or suggest new tasks.',
-      schema: z47.object({
-        to: z47.string().describe(
+      schema: z46.object({
+        to: z46.string().describe(
           'Recipient agent name (e.g. "team_lead" or a teammate name)'
         ),
-        content: z47.string().describe("Message content")
+        content: z46.string().describe("Message content")
       })
     }
   );
@@ -20822,7 +20458,7 @@ function createTeammateTools(options) {
       read: msg.read
     }));
   };
-  const readMessagesTool = tool44(
+  const readMessagesTool = tool43(
     async (input, config) => {
       const formatAndMarkAsRead = async (msgs2) => {
         for (const msg of msgs2) {
@@ -20881,10 +20517,10 @@ function createTeammateTools(options) {
     {
       name: "read_messages",
       description: "Read unread messages from the mailbox. Returns immediately if messages exist, otherwise waits for up to 3 minutes for new messages.",
-      schema: z47.object({})
+      schema: z46.object({})
     }
   );
-  const checkTasksTool = tool44(
+  const checkTasksTool = tool43(
     async () => {
       const tasks = await taskListStore.getAllTasks(teamId);
       return formatTaskSummary(tasks);
@@ -20892,10 +20528,10 @@ function createTeammateTools(options) {
     {
       name: "check_tasks",
       description: "Use this tool to get the current status of all tasks in a team. This is your primary way to monitor task progress.",
-      schema: z47.object({})
+      schema: z46.object({})
     }
   );
-  const broadcastMessageTool = tool44(
+  const broadcastMessageTool = tool43(
     async (input) => {
       const allAgents = await mailboxStore.getRegisteredAgents(teamId);
       const recipients = allAgents.filter((a) => a !== agentId);
@@ -20914,8 +20550,8 @@ function createTeammateTools(options) {
     {
       name: "broadcast_message",
       description: "Send a message to everyone in the team except yourself. Use this to share updates or information with all teammates and the team lead at once.",
-      schema: z47.object({
-        content: z47.string().describe("Message content to broadcast to others")
+      schema: z46.object({
+        content: z46.string().describe("Message content to broadcast to others")
       })
     }
   );
@@ -21149,7 +20785,7 @@ async function spawnTeammate(options) {
 function createTeamMiddleware(options) {
   const { teamConfig, taskListStore, mailboxStore, tenantId: tenantId2 } = options;
   const defaultModel = teamConfig.model ?? "claude-sonnet-4-5-20250929";
-  const createTeamTool = tool45(
+  const createTeamTool = tool44(
     async (input, config) => {
       const state = getCurrentTaskInput3();
       if (state?.team?.teamId) {
@@ -21304,20 +20940,20 @@ After calling create_team, you MUST:
 2. When messages indicate task changes, call check_tasks to get full task status
 3. Continue until all tasks show "completed" or "failed"
 4. Do NOT assume tasks are done - always verify with check_tasks`,
-      schema: z48.object({
-        tasks: z48.array(
-          z48.object({
-            id: z48.string().describe("Task ID in format task-01, task-02, etc."),
-            title: z48.string().describe("Short task title"),
-            description: z48.string().describe("Detailed task description - what exactly needs to be done"),
-            dependencies: z48.array(z48.string()).optional().default([]).describe('Array of task IDs that must complete before this task (e.g. ["task-01"])')
+      schema: z47.object({
+        tasks: z47.array(
+          z47.object({
+            id: z47.string().describe("Task ID in format task-01, task-02, etc."),
+            title: z47.string().describe("Short task title"),
+            description: z47.string().describe("Detailed task description - what exactly needs to be done"),
+            dependencies: z47.array(z47.string()).optional().default([]).describe('Array of task IDs that must complete before this task (e.g. ["task-01"])')
           })
         ).describe("List of tasks for teammates to work on. Each task needs unique ID (task-01, task-02, etc.)."),
-        teammates: z48.array(
-          z48.object({
-            name: z48.string().describe("Teammate name (must match a pre-configured teammate type)"),
-            role: z48.string().describe("Role category (e.g. researcher, writer, coder, reviewer)"),
-            description: z48.string().describe("What this teammate will focus on - specific instructions for their work")
+        teammates: z47.array(
+          z47.object({
+            name: z47.string().describe("Teammate name (must match a pre-configured teammate type)"),
+            role: z47.string().describe("Role category (e.g. researcher, writer, coder, reviewer)"),
+            description: z47.string().describe("What this teammate will focus on - specific instructions for their work")
           })
         ).describe("Teammate agents to create. Each should have a clear role and focus.")
       })
@@ -21328,7 +20964,7 @@ After calling create_team, you MUST:
     if (state?.team?.teamId) return state.team.teamId;
     throw new Error("No team_id provided and no team in state. Call create_team first.");
   };
-  const addTasksTool = tool45(
+  const addTasksTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       const created = await taskListStore.addTasks(
@@ -21380,20 +21016,20 @@ IMPORTANT: Dependencies
 
 IMPORTANT: Assigning to a specific teammate
 - When you need a particular teammate to do the work, set assignee to that teammate's name (e.g. assignee: "researcher"). They can then claim or see the task as assigned to them.`,
-      schema: z48.object({
-        tasks: z48.array(
-          z48.object({
-            id: z48.string().describe("Task ID in format task-01, task-02, etc. Must be unique."),
-            title: z48.string().describe("Short task title"),
-            description: z48.string().describe("Detailed task description - what needs to be done"),
-            assignee: z48.string().optional().describe("Teammate name to assign this task to (use when you need that person to do the work)"),
-            dependencies: z48.array(z48.string()).optional().default([]).describe("Array of task IDs that must complete before this task")
+      schema: z47.object({
+        tasks: z47.array(
+          z47.object({
+            id: z47.string().describe("Task ID in format task-01, task-02, etc. Must be unique."),
+            title: z47.string().describe("Short task title"),
+            description: z47.string().describe("Detailed task description - what needs to be done"),
+            assignee: z47.string().optional().describe("Teammate name to assign this task to (use when you need that person to do the work)"),
+            dependencies: z47.array(z47.string()).optional().default([]).describe("Array of task IDs that must complete before this task")
           })
         ).describe("New tasks to add to the team")
       })
     }
   );
-  const assignTaskTool = tool45(
+  const assignTaskTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       const task = await taskListStore.updateTask(teamId, input.task_id, {
@@ -21415,13 +21051,13 @@ IMPORTANT: Assigning to a specific teammate
     {
       name: "assign_task",
       description: "Assign a task to a specific teammate. Use when you need to reassign work to a different teammate. Omit team_id to use the active team from state.",
-      schema: z48.object({
-        task_id: z48.string().describe("Task ID to assign"),
-        assignee: z48.string().describe("Teammate name to assign this task to")
+      schema: z47.object({
+        task_id: z47.string().describe("Task ID to assign"),
+        assignee: z47.string().describe("Teammate name to assign this task to")
       })
     }
   );
-  const setTaskStatusTool = tool45(
+  const setTaskStatusTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       const task = await taskListStore.updateTask(teamId, input.task_id, {
@@ -21443,13 +21079,13 @@ IMPORTANT: Assigning to a specific teammate
     {
       name: "set_task_status",
       description: "Set a task's status. Use to reopen a task (set to pending), mark as failed, or correct status. Values: pending, claimed, in_progress, completed, failed. Omit team_id to use the active team from state.",
-      schema: z48.object({
-        task_id: z48.string().describe("Task ID to update"),
-        status: z48.enum(["pending", "claimed", "in_progress", "completed", "failed"]).describe("New status for the task")
+      schema: z47.object({
+        task_id: z47.string().describe("Task ID to update"),
+        status: z47.enum(["pending", "claimed", "in_progress", "completed", "failed"]).describe("New status for the task")
       })
     }
   );
-  const setTaskDependenciesTool = tool45(
+  const setTaskDependenciesTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       const task = await taskListStore.updateTask(teamId, input.task_id, {
@@ -21471,13 +21107,13 @@ IMPORTANT: Assigning to a specific teammate
     {
       name: "set_task_dependencies",
       description: 'Set which task IDs must complete before this task can be claimed. Pass an array of task IDs (e.g. ["task-01", "task-02"]). Use to fix task order or add/remove dependencies. Omit team_id to use the active team from state.',
-      schema: z48.object({
-        task_id: z48.string().describe("Task ID to update"),
-        dependencies: z48.array(z48.string()).describe("Task IDs that must complete before this task can be claimed")
+      schema: z47.object({
+        task_id: z47.string().describe("Task ID to update"),
+        dependencies: z47.array(z47.string()).describe("Task IDs that must complete before this task can be claimed")
       })
     }
   );
-  const checkTasksTool = tool45(
+  const checkTasksTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       const tasks = await taskListStore.getAllTasks(teamId);
@@ -21517,12 +21153,12 @@ Task Status Values:
 - in_progress: Teammate is actively working on this task
 - completed: Task finished successfully
 - failed: Task encountered an error`,
-      schema: z48.object({
-        team_id: z48.string().optional().describe("Team ID (omit to use active team)")
+      schema: z47.object({
+        team_id: z47.string().optional().describe("Team ID (omit to use active team)")
       })
     }
   );
-  const sendMessageTool = tool45(
+  const sendMessageTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       await mailboxStore.sendMessage(
@@ -21541,13 +21177,13 @@ Task Status Values:
     {
       name: "send_message",
       description: "Send a message to a specific teammate in the team. Omit team_id to use the active team from state.",
-      schema: z48.object({
-        to: z48.string().describe("Recipient teammate name"),
-        content: z48.string().describe("Message content")
+      schema: z47.object({
+        to: z47.string().describe("Recipient teammate name"),
+        content: z47.string().describe("Message content")
       })
     }
   );
-  const readMessagesTool = tool45(
+  const readMessagesTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       const formatAndMarkAsRead = async (msgs2) => {
@@ -21629,12 +21265,12 @@ Task Status Values:
     {
       name: "read_messages",
       description: "Read unread messages from teammates. Returns immediately if messages exist, otherwise waits for up to 3 minutes for new messages.",
-      schema: z48.object({
-        team_id: z48.string().optional().describe("Team ID (omit to use active team)")
+      schema: z47.object({
+        team_id: z47.string().optional().describe("Team ID (omit to use active team)")
       })
     }
   );
-  const disbandTeamTool = tool45(
+  const disbandTeamTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       await mailboxStore.broadcastMessage(
@@ -21655,7 +21291,7 @@ Task Status Values:
       description: "Disband a team when all work is done. Before calling: (1) Call check_tasks to verify no tasks are still pending/in_progress; (2) if any are, discuss with the team via read_messages and broadcast_message/send_message whether to continue or stop/cancel them; (3) only after alignment (all tasks completed/failed or explicitly stopped), then call this tool. This will: 1) Send a shutdown message to all teammates, 2) Wait briefly for them to clean up, 3) Clear all tasks and messages. Omit team_id to use the active team from state."
     }
   );
-  const broadcastMessageTool = tool45(
+  const broadcastMessageTool = tool44(
     async (input, config) => {
       const teamId = resolveTeamId();
       await mailboxStore.broadcastMessage(
@@ -21673,12 +21309,12 @@ Task Status Values:
     {
       name: "broadcast_message",
       description: "Send a message to all teammates at once. Use this to communicate with everyone in the team. Omit team_id to use the active team from state.",
-      schema: z48.object({
-        content: z48.string().describe("Message content to broadcast to all teammates")
+      schema: z47.object({
+        content: z47.string().describe("Message content to broadcast to all teammates")
       })
     }
   );
-  return createMiddleware17({
+  return createMiddleware16({
     name: "teamMiddleware",
     tools: [
       createTeamTool,
@@ -21706,37 +21342,37 @@ ${TEAM_SYSTEM_PROMPT}` : TEAM_SYSTEM_PROMPT;
 }
 
 // src/agent_team/agent_team.ts
-var TeammateInfoSchema = z49.object({
-  name: z49.string().describe("Teammate name"),
-  role: z49.string().describe("Role category (e.g. research, writing, review)"),
-  description: z49.string().describe("What this teammate focuses on")
+var TeammateInfoSchema = z48.object({
+  name: z48.string().describe("Teammate name"),
+  role: z48.string().describe("Role category (e.g. research, writing, review)"),
+  description: z48.string().describe("What this teammate focuses on")
 });
-var TeamTaskInfoSchema = z49.object({
-  id: z49.string(),
-  title: z49.string(),
-  description: z49.string(),
-  status: z49.string().optional()
+var TeamTaskInfoSchema = z48.object({
+  id: z48.string(),
+  title: z48.string(),
+  description: z48.string(),
+  status: z48.string().optional()
 });
-var MailboxMessageSchema = z49.object({
-  id: z49.string().describe("Unique message identifier"),
-  from: z49.string().describe("Sender agent name"),
-  to: z49.string().describe("Recipient agent name"),
-  content: z49.string().describe("Message content"),
-  timestamp: z49.string().describe("ISO timestamp when the message was sent"),
-  type: z49.nativeEnum(MessageType).describe("Message type"),
-  read: z49.boolean().describe("Whether the recipient has read this message")
+var MailboxMessageSchema = z48.object({
+  id: z48.string().describe("Unique message identifier"),
+  from: z48.string().describe("Sender agent name"),
+  to: z48.string().describe("Recipient agent name"),
+  content: z48.string().describe("Message content"),
+  timestamp: z48.string().describe("ISO timestamp when the message was sent"),
+  type: z48.nativeEnum(MessageType).describe("Message type"),
+  read: z48.boolean().describe("Whether the recipient has read this message")
 });
-var TeamInfoSchema = z49.object({
-  teamId: z49.string().describe("Unique team identifier"),
-  teamLeadId: z49.string().default("team_lead").describe("Team lead agent ID"),
-  teammates: z49.array(TeammateInfoSchema).describe("Active teammates in this team"),
-  tasks: z49.array(TeamTaskInfoSchema).optional().describe("Initial tasks snapshot"),
-  createdAt: z49.string().optional().describe("ISO timestamp when team was created")
+var TeamInfoSchema = z48.object({
+  teamId: z48.string().describe("Unique team identifier"),
+  teamLeadId: z48.string().default("team_lead").describe("Team lead agent ID"),
+  teammates: z48.array(TeammateInfoSchema).describe("Active teammates in this team"),
+  tasks: z48.array(TeamTaskInfoSchema).optional().describe("Initial tasks snapshot"),
+  createdAt: z48.string().optional().describe("ISO timestamp when team was created")
 });
-var TEAM_STATE_SCHEMA = z49.object({
+var TEAM_STATE_SCHEMA = z48.object({
   team: TeamInfoSchema.optional().describe("Team info: teamId, teamLeadId, teammates, tasks. Set when create_team succeeds."),
-  tasks: z49.array(TeamTaskInfoSchema).optional().describe("Current tasks snapshot from check_tasks. Updated on each check."),
-  team_mailbox: z49.array(MailboxMessageSchema).optional().describe("All team mailbox messages for display")
+  tasks: z48.array(TeamTaskInfoSchema).optional().describe("Current tasks snapshot from check_tasks. Updated on each check."),
+  team_mailbox: z48.array(MailboxMessageSchema).optional().describe("All team mailbox messages for display")
 });
 var TEAM_LEAD_BASE_PROMPT = `You are a team lead that coordinates a team of specialized agents. In order to complete the objective that the user asks of you, you will need to:
 
@@ -22990,6 +22626,14 @@ Do not update or change a belief without new evidence. Every update cites the
 observation, states how it supports or contradicts the Claim, and records the
 resulting Decision Impact or explains why the plan remains unchanged.
 
+An approved scope or criteria change is one reconciliation, not two updates:
+revise \`## Objective\` / \`## Acceptance Criteria\` and, in the same
+reconciliation, re-base every affected Belief Key \u2014 its new Basis must cite the
+user approval \u2014 cancel or replace subtasks that depended on the superseded
+scope, and revise eval coverage to the revised contract. A downgraded
+probability after a scope change is an honest reset, not a regression; continue
+only from the re-based Belief State.
+
 The current runtime requires numeric \`beliefImpact.after\` values and the
 canonical compatibility table below. Treat \`after\` as the evidence support
 percentage for the Claim. It is not an Eval score, Agent quality metric, or Task
@@ -23051,6 +22695,15 @@ that can change the parent goal, acceptance judgment, or next action. It is not
 tool call. Reading a skill, running one command, calling SQL, or editing a file is
 normally an internal \`write_todos\` step.
 
+Persist the plan before executing it. Announcing work in conversation (for
+example, "I will create three sub-agents") is not a plan: before that work
+starts, the parent Belief State must already exist and every planned child must
+be persisted with its contract (\`pending\` until its phase starts,
+\`in_progress\` when it starts). The persisted decomposition is what the user
+aligns on \u2014 in normal approval flows, present the decomposition (children,
+Targets, and belief dimensions) and confirm it before executing it; a deviation
+from the approved design is a material boundary requiring renewed confirmation.
+
 Before creating a subtask, identify: (1) the uncertain parent Belief Key, (2) why
 it affects a decision, (3) the observable evidence this subtask will produce, and
 (4) the Prediction contract with positive and negative result branches and their
@@ -24680,6 +24333,9 @@ For a new Orchestra parent \u2014 build the delegation tree before the parent:
 each sub-agent is a bounded specialist with a clear interface (input/output/responsibility).
 A sub-agent qualifies as a sub-agent when it has independent tools, its own skill, or
 needs separate eval. Do not create a sub-agent for a simple inline step.
+Persist the approved delegation tree as planned child tasks with contracts and
+\`Targets\` before creating any sub-agent ([[task-tracking]]); in normal approval
+flows the decomposition is presented for user confirmation first.
 
 **2. Build each sub-agent's skill first.** Per sub-agent:
 - If domain knowledge exists \u2192 load [[document-learning-learn-capability]]
@@ -25838,7 +25494,7 @@ ${body}` : `${frontmatter}
 };
 
 // src/store_lattice/InMemoryMenuStore.ts
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 var InMemoryMenuStore = class {
   constructor() {
     this.items = /* @__PURE__ */ new Map();
@@ -25859,7 +25515,7 @@ var InMemoryMenuStore = class {
   async create(input) {
     const now = /* @__PURE__ */ new Date();
     const item = {
-      id: randomUUID6(),
+      id: randomUUID5(),
       tenantId: input.tenantId,
       menuTarget: input.menuTarget,
       group: input.group,
@@ -25895,7 +25551,7 @@ var InMemoryMenuStore = class {
 };
 
 // src/agent_lattice/agentArchitectTools.ts
-import z50 from "zod";
+import z49 from "zod";
 import { v4 as v43 } from "uuid";
 import { AgentType as AgentType3 } from "@axiom-lattice/protocols";
 function getTenantId2(exeConfig) {
@@ -26004,7 +25660,7 @@ registerToolLattice(
   {
     name: "list_agents",
     description: "List all agents for the current workspace. Returns a summary with id, name, description, and type for each agent.",
-    schema: z50.object({})
+    schema: z49.object({})
   },
   async (_input, exeConfig) => {
     try {
@@ -26031,8 +25687,8 @@ registerToolLattice(
   {
     name: "get_agent",
     description: "Get the full configuration of a specific agent by its ID. Returns the complete AgentConfig including prompt, middleware, tools, and sub-agents.",
-    schema: z50.object({
-      id: z50.string().describe("The agent ID to retrieve")
+    schema: z49.object({
+      id: z49.string().describe("The agent ID to retrieve")
     })
   },
   async (input, exeConfig) => {
@@ -26049,27 +25705,27 @@ registerToolLattice(
     }
   }
 );
-var middlewareConfigSchema = z50.object({
-  id: z50.string(),
-  type: z50.string(),
-  name: z50.string(),
-  description: z50.string(),
-  enabled: z50.boolean(),
-  allowedTools: z50.array(z50.string()).optional().describe("Optional tool-name allowlist. Omit it or pass [] to enable all tools from this middleware. A non-empty task middleware allowlist must include both manage_task and task."),
-  config: z50.record(z50.any()).optional()
+var middlewareConfigSchema = z49.object({
+  id: z49.string(),
+  type: z49.string(),
+  name: z49.string(),
+  description: z49.string(),
+  enabled: z49.boolean(),
+  allowedTools: z49.array(z49.string()).optional().describe("Optional tool-name allowlist. Omit it or pass [] to enable all tools from this middleware. A non-empty task middleware allowlist must include both manage_task and task."),
+  config: z49.record(z49.any()).optional()
 });
-var createAgentSchema = z50.object({
-  skillLoaded: z50.literal(true).optional().describe("For agent-architect, set true only after loading agent-architecture in the current conversation context."),
-  name: z50.string().describe("Human-friendly display name for the agent. The machine ID (used in other tools) is auto-generated as a slug from this name (e.g. 'My Cool Agent' \u2192 'my-cool-agent')."),
-  description: z50.string().optional().describe("Short description"),
-  type: z50.enum(["react", "deep_agent"]).describe("Agent type. Use 'react' for simple single-responsibility agents, 'deep_agent' for complex open-ended agents. For PROCESSING agents (workflow orchestration), use create_processing_agent instead."),
-  prompt: z50.string().describe("System prompt for the agent"),
-  tools: z50.array(z50.string()).optional().describe("Tool keys (strings) to assign. Call list_tools first to see available keys. Each element is a plain string like 'sap_api_search'. IMPORTANT: tools is a FLAT string array of tool names. Do NOT put middleware-like objects here \u2014 middleware goes in the separate 'middleware' field."),
-  middleware: z50.array(middlewareConfigSchema).optional().describe("Middleware configuration objects. Each has {id, type, name, description, enabled, config}. IMPORTANT: middleware objects are NOT tools. Do NOT put tool keys (strings) here \u2014 tool names go in the separate 'tools' array. For user approval/confirmation scenarios, use type: 'ask_user_to_clarify' with config: {}."),
-  subAgents: z50.array(z50.string()).optional().describe("Sub-agent IDs (deep_agent only)"),
-  internalSubAgents: z50.array(z50.any()).optional().describe("Inline sub-agent configs (deep_agent only)"),
-  modelKey: z50.string().optional().describe("Model key to use"),
-  metadata: z50.record(z50.string(), z50.string()).optional().describe("Arbitrary metadata key-value pairs (e.g. verified: 'human-reviewed', version: '1.0', source: 'PO-Format-SAP.pdf')")
+var createAgentSchema = z49.object({
+  skillLoaded: z49.literal(true).optional().describe("For agent-architect, set true only after loading agent-architecture in the current conversation context."),
+  name: z49.string().describe("Human-friendly display name for the agent. The machine ID (used in other tools) is auto-generated as a slug from this name (e.g. 'My Cool Agent' \u2192 'my-cool-agent')."),
+  description: z49.string().optional().describe("Short description"),
+  type: z49.enum(["react", "deep_agent"]).describe("Agent type. Use 'react' for simple single-responsibility agents, 'deep_agent' for complex open-ended agents. For PROCESSING agents (workflow orchestration), use create_processing_agent instead."),
+  prompt: z49.string().describe("System prompt for the agent"),
+  tools: z49.array(z49.string()).optional().describe("Tool keys (strings) to assign. Call list_tools first to see available keys. Each element is a plain string like 'sap_api_search'. IMPORTANT: tools is a FLAT string array of tool names. Do NOT put middleware-like objects here \u2014 middleware goes in the separate 'middleware' field."),
+  middleware: z49.array(middlewareConfigSchema).optional().describe("Middleware configuration objects. Each has {id, type, name, description, enabled, config}. IMPORTANT: middleware objects are NOT tools. Do NOT put tool keys (strings) here \u2014 tool names go in the separate 'tools' array. For user approval/confirmation scenarios, use type: 'ask_user_to_clarify' with config: {}."),
+  subAgents: z49.array(z49.string()).optional().describe("Sub-agent IDs (deep_agent only)"),
+  internalSubAgents: z49.array(z49.any()).optional().describe("Inline sub-agent configs (deep_agent only)"),
+  modelKey: z49.string().optional().describe("Model key to use"),
+  metadata: z49.record(z49.string(), z49.string()).optional().describe("Arbitrary metadata key-value pairs (e.g. verified: 'human-reviewed', version: '1.0', source: 'PO-Format-SAP.pdf')")
 });
 registerToolLattice(
   "create_agent",
@@ -26114,14 +25770,14 @@ registerToolLattice(
     }
   }
 );
-var createWorkflowSchema = z50.object({
-  name: z50.string().describe("Display name for the workflow agent"),
-  description: z50.string().optional().describe("Short description"),
-  skillLoaded: z50.literal(true).describe("MUST be true. Set after loading the 'create-workflow' skill."),
-  yaml: z50.string().describe("The YAML workflow definition in linear DSL format (steps execute top-to-bottom, use parallel: for concurrency)"),
-  tools: z50.array(z50.string()).optional().describe("Tool keys for the workflow agent"),
-  middleware: z50.array(middlewareConfigSchema).optional().describe("Middleware configs"),
-  modelKey: z50.string().optional().describe("Model key")
+var createWorkflowSchema = z49.object({
+  name: z49.string().describe("Display name for the workflow agent"),
+  description: z49.string().optional().describe("Short description"),
+  skillLoaded: z49.literal(true).describe("MUST be true. Set after loading the 'create-workflow' skill."),
+  yaml: z49.string().describe("The YAML workflow definition in linear DSL format (steps execute top-to-bottom, use parallel: for concurrency)"),
+  tools: z49.array(z49.string()).optional().describe("Tool keys for the workflow agent"),
+  middleware: z49.array(middlewareConfigSchema).optional().describe("Middleware configs"),
+  modelKey: z49.string().optional().describe("Model key")
 });
 registerToolLattice(
   "create_workflow",
@@ -26172,8 +25828,8 @@ registerToolLattice(
   {
     name: "validate_workflow",
     description: "Validate a workflow agent's DSL for correctness by compiling it.",
-    schema: z50.object({
-      id: z50.string().describe("The workflow agent ID to validate")
+    schema: z49.object({
+      id: z49.string().describe("The workflow agent ID to validate")
     })
   },
   async (input, exeConfig) => {
@@ -26270,15 +25926,15 @@ registerToolLattice(
     }
   }
 );
-var updateWorkflowSchema = z50.object({
-  id: z50.string().describe("The workflow agent ID to update"),
-  skillLoaded: z50.literal(true).optional().describe("For agent-architect, set true only after loading agent-architecture in the current conversation context."),
-  name: z50.string().optional().describe("New display name"),
-  description: z50.string().optional().describe("New description"),
-  yaml: z50.string().optional().describe("Replacement YAML workflow DSL. Omit to keep existing."),
-  tools: z50.array(z50.string()).optional().describe("Replacement tool keys"),
-  middleware: z50.array(middlewareConfigSchema).optional().describe("Replacement middleware configs"),
-  modelKey: z50.string().optional().describe("Replacement model key")
+var updateWorkflowSchema = z49.object({
+  id: z49.string().describe("The workflow agent ID to update"),
+  skillLoaded: z49.literal(true).optional().describe("For agent-architect, set true only after loading agent-architecture in the current conversation context."),
+  name: z49.string().optional().describe("New display name"),
+  description: z49.string().optional().describe("New description"),
+  yaml: z49.string().optional().describe("Replacement YAML workflow DSL. Omit to keep existing."),
+  tools: z49.array(z49.string()).optional().describe("Replacement tool keys"),
+  middleware: z49.array(middlewareConfigSchema).optional().describe("Replacement middleware configs"),
+  modelKey: z49.string().optional().describe("Replacement model key")
 });
 registerToolLattice(
   "update_workflow",
@@ -26384,20 +26040,20 @@ registerToolLattice(
     }
   }
 );
-var updateAgentSchema = z50.object({
-  id: z50.string().describe("The agent ID to update"),
-  skillLoaded: z50.literal(true).optional().describe("For agent-architect, set true only after loading agent-architecture in the current conversation context."),
-  config: z50.object({
-    name: z50.string().optional().describe("New display name for the agent"),
-    description: z50.string().optional().describe("New short description"),
-    type: z50.enum(["react", "deep_agent"]).optional().describe("Agent type"),
-    prompt: z50.string().optional().describe("New system prompt for the agent"),
-    tools: z50.array(z50.string()).optional().describe("Tool keys to assign to this agent. These are registered tool names (strings), NOT middleware objects."),
-    middleware: z50.array(middlewareConfigSchema).optional().describe("Middleware configurations. NOTE: middleware objects have type/name/description/enabled/config fields and are NOT the same as tools. Tool keys go in the 'tools' array. For user approval/confirmation scenarios, use type: 'ask_user_to_clarify' with config: {}."),
-    subAgents: z50.array(z50.string()).optional().describe("Sub-agent IDs (deep_agent only)"),
-    internalSubAgents: z50.array(z50.any()).optional().describe("Inline sub-agent configs (deep_agent only)"),
-    modelKey: z50.string().optional().describe("Model key to use"),
-    metadata: z50.record(z50.string(), z50.string()).optional().describe("Arbitrary metadata key-value pairs (e.g. verified: 'machine-confirmed', version: '1.1'). Replaces the whole map when provided.")
+var updateAgentSchema = z49.object({
+  id: z49.string().describe("The agent ID to update"),
+  skillLoaded: z49.literal(true).optional().describe("For agent-architect, set true only after loading agent-architecture in the current conversation context."),
+  config: z49.object({
+    name: z49.string().optional().describe("New display name for the agent"),
+    description: z49.string().optional().describe("New short description"),
+    type: z49.enum(["react", "deep_agent"]).optional().describe("Agent type"),
+    prompt: z49.string().optional().describe("New system prompt for the agent"),
+    tools: z49.array(z49.string()).optional().describe("Tool keys to assign to this agent. These are registered tool names (strings), NOT middleware objects."),
+    middleware: z49.array(middlewareConfigSchema).optional().describe("Middleware configurations. NOTE: middleware objects have type/name/description/enabled/config fields and are NOT the same as tools. Tool keys go in the 'tools' array. For user approval/confirmation scenarios, use type: 'ask_user_to_clarify' with config: {}."),
+    subAgents: z49.array(z49.string()).optional().describe("Sub-agent IDs (deep_agent only)"),
+    internalSubAgents: z49.array(z49.any()).optional().describe("Inline sub-agent configs (deep_agent only)"),
+    modelKey: z49.string().optional().describe("Model key to use"),
+    metadata: z49.record(z49.string(), z49.string()).optional().describe("Arbitrary metadata key-value pairs (e.g. verified: 'machine-confirmed', version: '1.1'). Replaces the whole map when provided.")
   }).describe("Configuration fields to update. Only include the fields you want to change.")
 });
 registerToolLattice(
@@ -26519,8 +26175,8 @@ registerToolLattice(
   {
     name: "delete_agent",
     description: "Permanently delete an agent by its ID. This action cannot be undone.",
-    schema: z50.object({
-      id: z50.string().describe("The agent ID to delete")
+    schema: z49.object({
+      id: z49.string().describe("The agent ID to delete")
     })
   },
   async (input, exeConfig) => {
@@ -26546,7 +26202,7 @@ registerToolLattice(
   {
     name: "list_tools",
     description: "List all available tools that can be assigned to agents. Returns each tool's registry key (use this string value in the 'tools' array), name, description, and whether it requires user approval.",
-    schema: z50.object({})
+    schema: z49.object({})
   },
   async (_input, _exeConfig) => {
     try {
@@ -26569,7 +26225,7 @@ registerToolLattice(
   {
     name: "list_models",
     description: "List all registered models. Returns each model's key (use this string as modelKey when creating eval projects via manage_eval create_project, or as an agent's modelKey in create_agent/update_agent) and its display name.",
-    schema: z50.object({})
+    schema: z49.object({})
   },
   async (_input) => {
     try {
@@ -26590,9 +26246,9 @@ registerToolLattice(
   {
     name: "invoke_agent",
     description: "Invoke an agent with a test message and return its response. Use this to verify an agent works correctly after creating or modifying it. The agent must be compiled (already created and valid).",
-    schema: z50.object({
-      id: z50.string().describe("The agent ID to invoke"),
-      message: z50.string().describe("The test message to send to the agent")
+    schema: z49.object({
+      id: z49.string().describe("The agent ID to invoke"),
+      message: z49.string().describe("The test message to send to the agent")
     })
   },
   async (input, exeConfig) => {
@@ -26628,7 +26284,7 @@ registerToolLattice(
   {
     name: "list_middleware_types",
     description: "\u5217\u51FA\u5F53\u524D\u7CFB\u7EDF\u4E2D\u6240\u6709\u53EF\u7528\u7684\u4E2D\u95F4\u4EF6\u7C7B\u578B\uFF08Middlewares\uFF09\uFF0C\u5305\u62EC\u5185\u7F6E\u548C\u81EA\u5B9A\u4E49\u63D2\u4EF6\u3002\u8FD4\u56DE\u6BCF\u4E2A\u4E2D\u95F4\u4EF6\u7684 type\u3001name\u3001description\u3001tools \u6E05\u5355\uFF08\u652F\u6301 allowedTools \u8FC7\u6EE4\uFF09\u3001configSchema\uFF08\u914D\u7F6E\u9762\u677F\u9700\u8981\u54EA\u4E9B\u5B57\u6BB5\uFF09\u548C connectionSchema\uFF08\u662F\u5426\u652F\u6301\u8FDE\u63A5\u6D4B\u8BD5\u548C\u8D44\u6E90\u53D1\u73B0\uFF09\u3002\n\n\u4F7F\u7528\u573A\u666F\uFF1A\n1. \u5728\u521B\u5EFA agent \u524D\uFF0C\u5148\u8C03\u6B64\u5DE5\u5177\u4E86\u89E3\u6709\u54EA\u4E9B\u4E2D\u95F4\u4EF6\u53EF\u914D\u7F6E\n2. \u6839\u636E configSchema \u51B3\u5B9A\u9700\u8981\u63D0\u4F9B\u54EA\u4E9B\u914D\u7F6E\u5B57\u6BB5\uFF1B\u65B0\u8FDE\u63A5\u578B\u63D2\u4EF6\u4F7F\u7528 connections \u548C connectAll\uFF0C\u5185\u7F6E\u65E7\u63D2\u4EF6\u7684 selector \u5B57\u6BB5\u7531 core \u7684 legacy compatibility map \u5B9A\u4E49\n3. \u5982\u679C\u67D0\u4E2A\u4E2D\u95F4\u4EF6\u7684 connectionSchema \u5B58\u5728\uFF0C\u8BF4\u660E\u5B83\u662F\u8FDE\u63A5\u578B\u4E2D\u95F4\u4EF6\uFF0C\u9700\u8981\u518D\u8C03 list_connections \u83B7\u53D6\u53EF\u7528\u8FDE\u63A5\n4. \u7528\u8FD4\u56DE\u7684 type \u5B57\u6BB5\u6784\u5EFA middleware \u6570\u7EC4\u4F20\u7ED9 create_agent / update_agent",
-    schema: z50.object({})
+    schema: z49.object({})
   },
   async () => {
     const availableMiddlewareTypes = getAvailableMiddlewareTypes();
@@ -26641,8 +26297,8 @@ registerToolLattice(
   {
     name: "list_connections",
     description: "\u5217\u51FA\u6307\u5B9A\u63D2\u4EF6\u7C7B\u578B\u7684\u6240\u6709\u5DF2\u914D\u7F6E\u8FDE\u63A5\u3002\u7528\u4E8E\u67E5\u8BE2\u6709\u54EA\u4E9B\u53EF\u7528\u7684\u8FDE\u63A5\u5B9E\u4F8B\uFF08\u5982 'sap-prod', 'sap-dev'\uFF09\uFF0C\u65B9\u4FBF\u5728 agent \u914D\u7F6E\u4E2D\u9009\u62E9\u5177\u4F53\u8FDE\u63A5\u3002\n\n\u4F7F\u7528\u573A\u666F\uFF1A\n1. \u5148\u8C03 list_middleware_types \u786E\u5B9A\u67D0\u4E2A\u4E2D\u95F4\u4EF6\u662F\u8FDE\u63A5\u578B\uFF08\u6709 connectionSchema\uFF09\n2. \u8C03\u6B64\u5DE5\u5177\u4F20\u5165 type\uFF08\u5982 'erp'\uFF09\uFF0C\u83B7\u53D6\u8BE5\u7C7B\u578B\u4E0B\u5DF2\u914D\u597D\u7684\u8FDE\u63A5\u5217\u8868\n3. \u5728 create_agent \u7684 middleware[i].config.connections \u4E2D\u586B\u5165\u5BF9\u5E94\u7684 key \u503C\n\n\u8FD4\u56DE\u683C\u5F0F\uFF1A{ success: true, data: { records: [{ key, name, ... }] } }",
-    schema: z50.object({
-      type: z50.string().describe("\u63D2\u4EF6\u7C7B\u578B\u6807\u8BC6\uFF0C\u5982 'erp'\u3002\u4ECE list_middleware_types \u7684\u8FD4\u56DE\u4E2D\u83B7\u53D6")
+    schema: z49.object({
+      type: z49.string().describe("\u63D2\u4EF6\u7C7B\u578B\u6807\u8BC6\uFF0C\u5982 'erp'\u3002\u4ECE list_middleware_types \u7684\u8FD4\u56DE\u4E2D\u83B7\u53D6")
     }),
     needUserApprove: false
   },
@@ -26918,6 +26574,14 @@ var roomCoordinatorConfig = {
       description: "Wait for user input at approval gates",
       enabled: true,
       config: {}
+    },
+    {
+      id: "project_room",
+      type: "project_room",
+      name: "Project Room",
+      description: "Post to the room and list active members for delegation",
+      enabled: true,
+      config: {}
     }
   ]
 };
@@ -26960,7 +26624,7 @@ function assistantToConfig(assistant) {
   Object.assign(config, graphDef);
   return config;
 }
-var AgentLatticeManager = class _AgentLatticeManager extends BaseLatticeManager {
+var _AgentLatticeManager = class _AgentLatticeManager extends BaseLatticeManager {
   constructor() {
     super();
     this.initialized = false;
@@ -27069,7 +26733,18 @@ var AgentLatticeManager = class _AgentLatticeManager extends BaseLatticeManager
   getLatticeType() {
     return "agents";
   }
-  // ========== 带租户的新API ==========
+  /**
+   * Returns the parent assistant key for a `{parent}-general-purpose` key, or
+   * `null` when the key is not a suffixed GP key (including the bare
+   * `general-purpose` key itself).
+   */
+  generalPurposeParentKey(key4) {
+    const suffix = _AgentLatticeManager.GENERAL_PURPOSE_SUFFIX;
+    if (!key4.endsWith(suffix) || key4.length <= suffix.length) {
+      return null;
+    }
+    return key4.slice(0, -suffix.length);
+  }
   /**
    * 带租户注册Agent Lattice
    * @param tenantId 租户ID
@@ -27085,20 +26760,66 @@ var AgentLatticeManager = class _AgentLatticeManager extends BaseLatticeManager
   }
   /**
    * 带租户获取AgentLattice
+   *
+   * @remarks
+   * For unregistered `{parent}-general-purpose` keys (ephemeral subagent
+   * assistants created by the subagents middleware), this falls back to the
+   * parent assistant's lattice so that read paths (thread state/messages)
+   * resolve in processes where the runtime GP registration is absent.
+   * {@link hasAgentLatticeWithTenant} stays strict.
+   *
    * @param tenantId 租户ID
    * @param key Lattice键名
    */
   getAgentLatticeWithTenant(tenantId2, key4) {
-    return this.getWithTenant(tenantId2, key4);
+    const exact = this.getWithTenant(tenantId2, key4);
+    if (exact) {
+      return exact;
+    }
+    const parentKey = this.generalPurposeParentKey(key4);
+    if (!parentKey) {
+      return void 0;
+    }
+    return this.getWithTenant(tenantId2, parentKey);
   }
   /**
    * 带租户检查Lattice是否存在
+   *
+   * @remarks
+   * Deliberately strict: `{parent}-general-purpose` keys are NOT covered by
+   * the read fallback. The subagents middleware relies on this check to decide
+   * whether to register the real GP runtime agent; a permissive check would
+   * skip that registration and silently run the parent graph for GP tasks.
+   *
    * @param tenantId 租户ID
    * @param key Lattice键名
    */
   hasAgentLatticeWithTenant(tenantId2, key4) {
     return this.hasWithTenant(tenantId2, key4);
   }
+  /**
+   * 异步获取AgentLattice（内存未命中时尝试从store加载）
+   *
+   * @remarks
+   * Mirrors {@link getAgentLatticeWithTenant}'s general-purpose fallback: an
+   * unregistered `{parent}-general-purpose` key resolves to the parent
+   * assistant's lattice. This is the lookup used by `getAgentClientAsync`,
+   * which backs Gateway thread state/message reads for GP subagent threads.
+   *
+   * @param tenantId 租户ID
+   * @param key Lattice键名
+   */
+  async getOrLoadWithTenant(tenantId2, key4) {
+    const exact = await super.getOrLoadWithTenant(tenantId2, key4);
+    if (exact) {
+      return exact;
+    }
+    const parentKey = this.generalPurposeParentKey(key4);
+    if (!parentKey) {
+      return void 0;
+    }
+    return super.getOrLoadWithTenant(tenantId2, parentKey);
+  }
   /**
    * 带租户移除Lattice
    * @param tenantId 租户ID
@@ -27422,6 +27143,18 @@ var AgentLatticeManager = class _AgentLatticeManager extends BaseLatticeManager
     }
   }
 };
+// ========== 带租户的新API ==========
+/**
+ * Suffix that identifies ephemeral general-purpose subagent assistants.
+ *
+ * The subagents middleware (deep_agent_new) registers a runtime agent
+ * `{assistant_id}-general-purpose` in the process that executes the task.
+ * Other processes (e.g. the Gateway serving thread state/messages) never see
+ * that in-memory registration, so lattice lookups for the suffixed key fall
+ * back to the parent assistant's lattice.
+ */
+_AgentLatticeManager.GENERAL_PURPOSE_SUFFIX = "-general-purpose";
+var AgentLatticeManager = _AgentLatticeManager;
 var agentLatticeManager = AgentLatticeManager.getInstance();
 var registerAgentLattice = (config) => {
   agentLatticeManager.registerLattice(config);
@@ -30801,7 +30534,7 @@ function clearEvalRunService() {
 }
 
 // src/eval_lattice/LatticeEval.ts
-import { HumanMessage as HumanMessage5 } from "@langchain/core/messages";
+import { HumanMessage as HumanMessage4 } from "@langchain/core/messages";
 import { v4 as v44 } from "uuid";
 function parseJudgeVerdict(raw) {
   try {
@@ -31210,7 +30943,7 @@ Note: if final_score >= 80 and there are no fatal errors, pass should be true; o
     const judgeAgent = await getAgentClient(judgeTenantId, judgeAgentKey);
     const testResponse = await judgeAgent.invoke(
       {
-        messages: [new HumanMessage5(testPrompt)]
+        messages: [new HumanMessage4(testPrompt)]
       },
       {
         configurable: {
@@ -31581,7 +31314,7 @@ var LatticeEvalSuite = class {
 
 // src/eval_lattice/LatticeEvalProject.ts
 import { AgentType as AgentType7 } from "@axiom-lattice/protocols";
-import { HumanMessage as HumanMessage6 } from "@langchain/core/messages";
+import { HumanMessage as HumanMessage5 } from "@langchain/core/messages";
 import { v4 as uuidv46 } from "uuid";
 var DEFAULT_CALIBRATION_PROBES = [
   {
@@ -31745,7 +31478,7 @@ Respond with JSON only: {"pass": true|false, "final_score": 0-100, "summary": "r
       for (let attempt = 0; attempt < 2; attempt++) {
         try {
           const resp = await judgeAgent.invoke(
-            { messages: [new HumanMessage6(prompt)] },
+            { messages: [new HumanMessage5(prompt)] },
             { configurable: { thread_id: uuidv46() } }
           );
           const last = resp?.messages?.[resp.messages.length - 1];
@@ -31862,7 +31595,7 @@ function getMenuRegistry() {
 }
 
 // src/services/ProjectTaskReassignmentAuthorization.ts
-import { snapshotExactRecord as snapshotExactRecord3 } from "@axiom-lattice/protocols";
+import { snapshotExactRecord } from "@axiom-lattice/protocols";
 var issued = /* @__PURE__ */ new WeakMap();
 function createProjectTaskReassignmentAuthorizer(policy, threadValidator) {
   return {
@@ -31895,7 +31628,7 @@ function inspectProjectTaskReassignmentAuthorization(authorization) {
   return snapshot ? { ...snapshot } : void 0;
 }
 function snapshotInput(input) {
-  const row = snapshotExactRecord3(input, [
+  const row = snapshotExactRecord(input, [
     "tenantId",
     "workspaceId",
     "projectId",
@@ -31938,7 +31671,7 @@ function snapshotInput(input) {
 }
 
 // src/services/TaskLifecycleNotifier.ts
-import { snapshotExactRecord as snapshotExactRecord4 } from "@axiom-lattice/protocols";
+import { snapshotExactRecord as snapshotExactRecord2 } from "@axiom-lattice/protocols";
 var TaskLifecycleNotifier = class {
   constructor() {
     this.listeners = /* @__PURE__ */ new Set();
@@ -31982,7 +31715,7 @@ var TaskLifecycleNotifier = class {
 };
 var taskLifecycleNotifier = new TaskLifecycleNotifier();
 function snapshotNotification(value) {
-  const row = snapshotExactRecord4(value, [
+  const row = snapshotExactRecord2(value, [
     "tenantId",
     "workspaceId",
     "projectId",
@@ -32014,7 +31747,7 @@ function nonempty(value) {
 }
 
 // src/services/ProjectTaskAdmissionNotifier.ts
-import { snapshotExactRecord as snapshotExactRecord5 } from "@axiom-lattice/protocols";
+import { snapshotExactRecord as snapshotExactRecord3 } from "@axiom-lattice/protocols";
 var ProjectTaskAdmissionNotifier = class {
   /**
    * Creates a bounded Project task admission notifier.
@@ -32087,7 +31820,7 @@ var ProjectTaskAdmissionNotifier = class {
 };
 var projectTaskAdmissionNotifier = new ProjectTaskAdmissionNotifier();
 function snapshotNotification2(value) {
-  const row = snapshotExactRecord5(value, [
+  const row = snapshotExactRecord3(value, [
     "tenantId",
     "workspaceId",
     "projectId",
@@ -32117,9 +31850,9 @@ function canonicalTimestamp(value) {
 }
 
 // src/services/ProjectMutationMutex.ts
-import { snapshotExactRecord as snapshotExactRecord6 } from "@axiom-lattice/protocols";
+import { snapshotExactRecord as snapshotExactRecord4 } from "@axiom-lattice/protocols";
 function projectKey(scope) {
-  const row = snapshotExactRecord6(scope, ["tenantId", "projectId"]);
+  const row = snapshotExactRecord4(scope, ["tenantId", "projectId"]);
   if (!row || typeof row.tenantId !== "string" || !row.tenantId || row.tenantId.includes("\0") || typeof row.projectId !== "string" || !row.projectId || row.projectId.includes("\0")) {
     throw new Error("Invalid Project mutation scope");
   }
@@ -32192,8 +31925,199 @@ function createTrustedAgentMessageDispatcher(resolve4) {
   };
 }
 
+// src/services/RoomAgentMessageService.ts
+import { randomUUID as randomUUID6 } from "crypto";
+import { snapshotExactArray, snapshotExactRecord as snapshotExactRecord5 } from "@axiom-lattice/protocols";
+var INPUT_KEYS = [
+  "tenantId",
+  "workspaceId",
+  "projectId",
+  "roomId",
+  "membershipId",
+  "assistantId",
+  "text",
+  "sourceRoomMessageId",
+  "sourceId",
+  "idempotencyKey"
+];
+var REPLY_INPUT_KEYS = ["tenantId", "membershipId", "text", "sourceRoomMessageId", "inputMessageId", "sourceId", "idempotencyKey"];
+var RoomAgentMessageService = class {
+  /**
+   * Creates a room writer over the durable membership and message stores.
+   *
+   * @param deps Store methods, optional deterministic ID factory, and detached post-commit hooks.
+   */
+  constructor(deps) {
+    this.deps = deps;
+  }
+  /**
+   * Persists a fully scoped Agent response after validating its human source and active membership.
+   *
+   * @param input Exact trusted scope and response payload.
+   * @returns A deep clone of the canonical idempotent room message.
+   */
+  post(input) {
+    const snapshot = exactStringRecord(input, INPUT_KEYS, "Invalid project room message input");
+    return this.persist(snapshot);
+  }
+  /**
+   * Persists a channel reply while deriving all scope from validated durable records.
+   *
+   * @param input Exact correlation IDs, tenant, target membership, and response text.
+   * @returns A deep clone of the canonical idempotent room message.
+   */
+  postReply(input) {
+    const snapshot = exactStringRecord(input, REPLY_INPUT_KEYS, "Invalid project room reply input");
+    if (snapshot.sourceId !== `reply:${snapshot.inputMessageId}` || snapshot.idempotencyKey !== `room-reply:${snapshot.sourceRoomMessageId}:${snapshot.membershipId}:${snapshot.sourceId}`) {
+      throw new Error("Invalid project room reply correlation");
+    }
+    return this.persistDerived(snapshot);
+  }
+  async persistDerived(input) {
+    const source = snapshotSource(await this.deps.messages.findById(input.tenantId, input.sourceRoomMessageId));
+    if (!source || source.id !== input.sourceRoomMessageId || source.tenantId !== input.tenantId) throw new Error("Invalid project room message");
+    const member = snapshotMembership(await this.deps.memberships.findById(input.tenantId, input.membershipId));
+    if (!member || member.id !== input.membershipId || member.tenantId !== input.tenantId) throw new Error("Invalid project room membership");
+    return this.persist({
+      ...input,
+      workspaceId: source.workspaceId,
+      projectId: source.projectId,
+      roomId: source.roomId,
+      assistantId: member.assistantId
+    }, source, member);
+  }
+  async persist(input, loadedSource, loadedMember) {
+    const text = input.text.trim();
+    if (text.length < 1 || text.length > 2e4) throw new Error("Invalid project room message text");
+    const source = loadedSource ?? snapshotSource(await this.deps.messages.findById(input.tenantId, input.sourceRoomMessageId));
+    if (!source || source.id !== input.sourceRoomMessageId || source.tenantId !== input.tenantId || source.workspaceId !== input.workspaceId || source.projectId !== input.projectId || source.roomId !== input.roomId) {
+      throw new Error("Invalid project room message");
+    }
+    const member = loadedMember ?? snapshotMembership(await this.deps.memberships.findById(input.tenantId, input.membershipId));
+    if (!member || member.id !== input.membershipId || member.status !== "active" || member.assistantId !== input.assistantId || member.tenantId !== input.tenantId || member.workspaceId !== input.workspaceId || member.projectId !== input.projectId || member.roomId !== input.roomId) {
+      throw new Error("Invalid project room membership");
+    }
+    const candidate = {
+      id: (this.deps.idFactory ?? randomUUID6)(),
+      tenantId: input.tenantId,
+      workspaceId: input.workspaceId,
+      projectId: input.projectId,
+      roomId: input.roomId,
+      author: { type: "bot", membershipId: input.membershipId, assistantId: input.assistantId },
+      content: { type: "text", text },
+      mentions: [],
+      replyToMessageId: input.sourceRoomMessageId,
+      source: "agent",
+      sourceId: input.sourceId,
+      idempotencyKey: input.idempotencyKey
+    };
+    const canonical = snapshotCanonical(await this.deps.messages.createIdempotent(candidate), candidate);
+    if (!canonical) throw new Error("Invalid canonical project room message");
+    const result = structuredClone(canonical);
+    this.notifyCommitted(result);
+    return result;
+  }
+  notifyCommitted(message) {
+    const callback = this.deps.onMessageCommitted;
+    if (!callback) return;
+    Promise.resolve().then(() => callback(structuredClone(message))).catch(() => {
+      try {
+        this.deps.onCallbackFailure?.({ messageId: message.id, code: "ROOM_MESSAGE_COMMIT_CALLBACK_FAILED" });
+      } catch {
+      }
+    });
+  }
+};
+function exactValues(value, required, optional = []) {
+  try {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+    return snapshotExactRecord5(value, required, optional);
+  } catch {
+    return void 0;
+  }
+}
+function exactStringRecord(value, keys, message) {
+  const values = exactValues(value, keys);
+  if (!values || keys.some((key4) => typeof values[key4] !== "string" || values[key4].length === 0)) throw new Error(message);
+  return values;
+}
+function date(value) {
+  try {
+    const timestamp = Date.prototype.getTime.call(value);
+    return Number.isFinite(timestamp) ? new Date(timestamp) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function snapshotSource(value) {
+  const values = exactValues(value, ["id", "tenantId", "workspaceId", "projectId", "roomId", "author", "content", "mentions", "source", "createdAt"], ["replyToMessageId", "sourceId", "idempotencyKey"]);
+  const author = exactValues(values?.author, ["type", "userId"]);
+  const content = exactValues(values?.content, ["type", "text"]);
+  const createdAt = date(values?.createdAt);
+  const mentions = snapshotMentions(values?.mentions);
+  if (!values || values.source !== "user" || author?.type !== "human" || typeof author.userId !== "string" || !author.userId || content?.type !== "text" || typeof content.text !== "string" || !mentions || !createdAt || ["id", "tenantId", "workspaceId", "projectId", "roomId"].some((key4) => typeof values[key4] !== "string" || !values[key4])) return void 0;
+  return {
+    id: values.id,
+    tenantId: values.tenantId,
+    workspaceId: values.workspaceId,
+    projectId: values.projectId,
+    roomId: values.roomId,
+    author: { type: "human", userId: author.userId },
+    content: { type: "text", text: content.text },
+    mentions,
+    source: "user",
+    createdAt
+  };
+}
+function snapshotMentions(value) {
+  const rows = snapshotExactArray(value);
+  if (!rows) return void 0;
+  const mentions = [];
+  for (const row of rows) {
+    const team = exactValues(row, ["type"]);
+    if (team?.type === "team") {
+      mentions.push({ type: "team" });
+      continue;
+    }
+    const bot = exactValues(row, ["type", "membershipId"]);
+    if (bot?.type !== "bot" || typeof bot.membershipId !== "string" || !bot.membershipId) return void 0;
+    mentions.push({ type: "bot", membershipId: bot.membershipId });
+  }
+  return mentions;
+}
+function snapshotMembership(value) {
+  const required = ["id", "tenantId", "workspaceId", "projectId", "roomId", "assistantId", "role", "title", "mentionName", "status", "roomThreadId", "joinedAt", "updatedAt"];
+  const values = exactValues(value, required, ["responsibility"]);
+  const joinedAt = date(values?.joinedAt);
+  const updatedAt = date(values?.updatedAt);
+  if (!values || required.slice(0, 7).some((key4) => typeof values[key4] !== "string" || !values[key4]) || values.role !== "coordinator" && values.role !== "specialist" || typeof values.title !== "string" || !values.title || typeof values.mentionName !== "string" || !values.mentionName || !["active", "paused", "removed"].includes(values.status) || typeof values.roomThreadId !== "string" || !values.roomThreadId || values.responsibility !== void 0 && typeof values.responsibility !== "string" || !joinedAt || !updatedAt) return void 0;
+  return { ...values, joinedAt, updatedAt };
+}
+function snapshotCanonical(value, expected) {
+  const values = exactValues(value, ["id", "tenantId", "workspaceId", "projectId", "roomId", "author", "content", "mentions", "replyToMessageId", "source", "sourceId", "idempotencyKey", "createdAt"]);
+  const author = exactValues(values?.author, ["type", "membershipId", "assistantId"]);
+  const content = exactValues(values?.content, ["type", "text"]);
+  const createdAt = date(values?.createdAt);
+  if (!values || !createdAt || typeof values.id !== "string" || values.id.length === 0 || snapshotExactArray(values.mentions)?.length !== 0 || author?.type !== "bot" || expected.author.type !== "bot" || author.membershipId !== expected.author.membershipId || author.assistantId !== expected.author.assistantId || content?.type !== "text" || content.text !== expected.content.text || values.tenantId !== expected.tenantId || values.workspaceId !== expected.workspaceId || values.projectId !== expected.projectId || values.roomId !== expected.roomId || values.replyToMessageId !== expected.replyToMessageId || values.source !== "agent" || values.sourceId !== expected.sourceId || values.idempotencyKey !== expected.idempotencyKey) return void 0;
+  return {
+    id: values.id,
+    tenantId: expected.tenantId,
+    workspaceId: expected.workspaceId,
+    projectId: expected.projectId,
+    roomId: expected.roomId,
+    author: { type: "bot", membershipId: expected.author.membershipId, assistantId: expected.author.assistantId },
+    content: { type: "text", text: expected.content.text },
+    mentions: [],
+    replyToMessageId: expected.replyToMessageId,
+    source: "agent",
+    sourceId: expected.sourceId,
+    idempotencyKey: expected.idempotencyKey,
+    createdAt
+  };
+}
+
 // src/services/ProjectTaskOwnerPolicy.ts
-import { snapshotExactRecord as snapshotExactRecord7 } from "@axiom-lattice/protocols";
+import { snapshotExactRecord as snapshotExactRecord6 } from "@axiom-lattice/protocols";
 var MEMBERSHIP_REQUIRED_KEYS = [
   "id",
   "tenantId",
@@ -32248,7 +32172,7 @@ var ProjectTaskOwnerPolicy = class {
     if (!scope) throw new ProjectTaskOwnerPolicyError("PROJECT_TASK_CALLER_INACTIVE", CALLER_MESSAGE);
     let caller;
     try {
-      caller = snapshotMembership3(await this.memberships.findById(scope.tenantId, scope.callerMembershipId));
+      caller = snapshotMembership2(await this.memberships.findById(scope.tenantId, scope.callerMembershipId));
     } catch {
       throw new ProjectTaskOwnerPolicyError("PROJECT_TASK_CALLER_INACTIVE", CALLER_MESSAGE);
     }
@@ -32268,7 +32192,7 @@ var ProjectTaskOwnerPolicy = class {
     if (!scope) throw new ProjectTaskOwnerPolicyError("PROJECT_TASK_OWNER_INACTIVE", OWNER_MESSAGE);
     let target;
     try {
-      target = snapshotMembership3(await this.memberships.findByAssistant(
+      target = snapshotMembership2(await this.memberships.findByAssistant(
         scope.tenantId,
         scope.projectId,
         scope.targetAssistantId
@@ -32302,7 +32226,7 @@ function sameRosterScope(membership, scope) {
   return membership.tenantId === scope.tenantId && membership.workspaceId === scope.workspaceId && membership.projectId === scope.projectId && membership.roomId === scope.roomId;
 }
 function snapshotScope(value, keys) {
-  const values = snapshotExactRecord7(value, keys);
+  const values = snapshotExactRecord6(value, keys);
   if (!values || keys.some((key4) => !isNonemptyString(values[key4]))) return void 0;
   return values;
 }
@@ -32311,10 +32235,10 @@ function projectScope(scope, keys) {
   for (const key4 of keys) projected[key4] = scope[key4];
   return projected;
 }
-function snapshotMembership3(value) {
+function snapshotMembership2(value) {
   try {
     if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-    const values = snapshotExactRecord7(value, MEMBERSHIP_REQUIRED_KEYS, ["responsibility"]);
+    const values = snapshotExactRecord6(value, MEMBERSHIP_REQUIRED_KEYS, ["responsibility"]);
     if (!values) return void 0;
     const joinedAt = snapshotDate(values.joinedAt);
     const updatedAt = snapshotDate(values.updatedAt);
@@ -32352,11 +32276,11 @@ function snapshotDate(value) {
 }
 
 // src/services/TaskLifecycleService.ts
-import { createHash as createHash6 } from "crypto";
-import { parseTaskBeliefState as parseTaskBeliefState2, snapshotExactArray as snapshotExactArray3, snapshotExactRecord as snapshotExactRecord8, taskBeliefStatesEqual } from "@axiom-lattice/protocols";
+import { createHash as createHash5 } from "crypto";
+import { parseTaskBeliefState as parseTaskBeliefState2, replaceTaskBeliefState, snapshotExactArray as snapshotExactArray2, snapshotExactRecord as snapshotExactRecord7, taskBeliefStatesEqual } from "@axiom-lattice/protocols";
 
 // src/middlewares/taskBelief.ts
-import { createHash as createHash5 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import { parseTaskBeliefState } from "@axiom-lattice/protocols";
 function resolveBeliefOwnerScope(parent) {
   if (parent != null && parent.ownerType === "agent") {
@@ -32413,7 +32337,7 @@ function buildBeliefCompletionEventKey(taskId, result, impacts) {
     })),
     result: result.trim()
   });
-  return createHash5("sha256").update(canonical).digest("hex");
+  return createHash4("sha256").update(canonical).digest("hex");
 }
 function buildCompletionEvidenceDetail(result, impacts, eventKey) {
   return { result, beliefImpact: impacts, eventKey };
@@ -32450,13 +32374,78 @@ function buildParentBeliefActivity(input) {
 function failure2(code, error, hint) {
   return { success: false, code, error, ...hint === void 0 ? {} : { hint } };
 }
+async function seedBeliefOwnerTable(taskStore, owner, impacts) {
+  if (impacts.length === 0) return { description: owner.description ?? "" };
+  const parsed = parseTaskBeliefState2(owner.description ?? "");
+  if (!parsed.success && parsed.code !== "MISSING_BELIEF_STATE") {
+    return failure2("INVALID_BELIEF_TABLE", parsed.message);
+  }
+  const entries = parsed.success ? [...parsed.state.entries] : [];
+  const known = new Set(entries.map((entry) => entry.key));
+  const missing = impacts.filter((impact) => !known.has(impact.key));
+  if (missing.length === 0) return { description: owner.description ?? "" };
+  for (const impact of missing) {
+    entries.push({ key: impact.key, probability: impact.after, target: impact.after, basis: impact.basis });
+  }
+  const base = owner.description ?? "";
+  const description = replaceTaskBeliefState(base, { entries });
+  const updated = await taskStore.update(owner.tenantId, owner.id, { description });
+  if (!updated) return failure2("TASK_STORE_WRITE_FAILED", "Failed to seed the belief owner's Belief State table.");
+  return { description: updated.description ?? description };
+}
+function beliefValidationFailure(validation) {
+  switch (validation.code) {
+    case "MISSING_BELIEF_TABLE":
+      return failure2(
+        validation.code,
+        "The belief owner's description has no '## Belief State' table.",
+        "Initialize a '## Belief State' section in the belief owner task's description via manage_task update, using the canonical four-column table | Belief Key | Probability | Target | Basis |, then retry completion with beliefImpact keys from that table."
+      );
+    case "INVALID_BELIEF_TABLE":
+      return failure2(
+        validation.code,
+        `The belief owner's Belief State table is invalid: ${validation.message}`,
+        "Fix the Belief State table via manage_task update on the belief owner task, then retry completion."
+      );
+    case "INVALID_BELIEF_KEY":
+      return failure2(
+        validation.code,
+        `Belief key '${validation.key}' is not in the belief owner's Belief State table.`,
+        "Add the key to the belief owner's Belief State table via manage_task update, or report an existing key."
+      );
+    case "INVALID_BELIEF_VALUE":
+      return failure2(
+        validation.code,
+        `Belief key '${validation.key}' has an invalid after value.`,
+        "after must be an integer between 0 and 100."
+      );
+    case "INVALID_BELIEF_BASIS":
+      return failure2(
+        validation.code,
+        `Belief key '${validation.key}' has an invalid basis.`,
+        "basis must be a single nonblank line of at most 1000 characters."
+      );
+    case "INVALID_DUPLICATE_BELIEF_KEY":
+      return failure2(
+        validation.code,
+        `Duplicate belief key '${validation.key}'.`,
+        "Report each belief key at most once."
+      );
+    case "MISSING_BELIEF_IMPACT":
+      return failure2(
+        validation.code,
+        "Agent task completion requires beliefImpact.",
+        "Provide beliefImpact: [{ key: '<belief-key>', after: <0-100>, basis: '<evidence>' }]"
+      );
+  }
+}
 function isProjectLifecycleTask(task) {
   const source = task.context?.source;
   return typeof task.workspaceId === "string" && task.workspaceId.length > 0 && typeof task.projectId === "string" && task.projectId.length > 0 && task.workspaceId !== "default" && task.projectId !== "default" && (source === "project_room" || source === "project_task");
 }
 function parseExternalDependency(value) {
-  const row = snapshotExactRecord8(value, ["type", "summary", "requestedAt", "dependencyTaskIds"]);
-  const ids = snapshotExactArray3(row?.dependencyTaskIds);
+  const row = snapshotExactRecord7(value, ["type", "summary", "requestedAt", "dependencyTaskIds"]);
+  const ids = snapshotExactArray2(row?.dependencyTaskIds);
   if (!row || row.type !== "external_dependency" || typeof row.summary !== "string" || !row.summary.trim() || typeof row.requestedAt !== "string" || !Number.isFinite(Date.parse(row.requestedAt)) || !ids || ids.length === 0 || ids.some((id) => typeof id !== "string" || !id.trim())) return void 0;
   const trimmed = ids.map((id) => id.trim());
   if (new Set(trimmed).size !== trimmed.length) return void 0;
@@ -32469,15 +32458,10 @@ function unsupportedTaskStatus() {
   );
 }
 function requireProjectTaskThread(task, inputThreadId, allowPendingClaim = false) {
-  if (!isProjectLifecycleTask(task)) return void 0;
-  const stored = task.context?.thread_id;
-  if (typeof stored === "string" && stored.length > 0) {
-    return stored === inputThreadId ? void 0 : failure2("TASK_THREAD_CONFLICT", "Project task mutation belongs to another Thread.");
-  }
-  if (allowPendingClaim && task.status === "pending" && typeof inputThreadId === "string" && inputThreadId.length > 0) {
-    return void 0;
-  }
-  return failure2("PROJECT_TASK_THREAD_REQUIRED", "Project task execution requires its authoritative Task Thread.");
+  void task;
+  void inputThreadId;
+  void allowPendingClaim;
+  return void 0;
 }
 function detailOf(item) {
   const detail = item.detail;
@@ -32567,7 +32551,7 @@ function canonicalJson(value) {
   return JSON.stringify(value);
 }
 function sha256(value) {
-  return createHash6("sha256").update(canonicalJson(value)).digest("hex");
+  return createHash5("sha256").update(canonicalJson(value)).digest("hex");
 }
 function sameEvidenceDetail(detail, taskId, result, impacts, eventKey, beliefOwner) {
   const storedOwner = detail.beliefOwner;
@@ -33706,7 +33690,11 @@ var TaskLifecycleService = class {
     if (existing.ownerType !== "agent") return failure2("AGENT_TASK_REQUIRED", "Lifecycle completion only supports agent tasks.");
     const threadFailure = requireProjectTaskThread(existing, input.threadId);
     if (threadFailure) return threadFailure;
-    if (existing.status !== "in_progress") return failure2("TASK_STATUS_CONFLICT", "Task is not in progress.");
+    if (existing.status !== "in_progress") return failure2(
+      "TASK_STATUS_CONFLICT",
+      "Task is not in progress.",
+      "Start the task first (status='in_progress'), then complete it with result and beliefImpact."
+    );
     if (!review && existing.requireReview === true) {
       return failure2("REVIEW_REQUIRED", "Task requires completion evidence review through submitReview.");
     }
@@ -33714,12 +33702,18 @@ var TaskLifecycleService = class {
     if (!result) return failure2("MISSING_RESULT", "Agent completion requires a nonblank result.");
     const parentResult = await this.loadParent(existing);
     if (parentResult && "success" in parentResult) return parentResult;
+    const beliefOwnerTask = parentResult?.ownerType === "agent" ? parentResult : existing;
+    if (input.beliefImpact?.length) {
+      const seeded = await seedBeliefOwnerTable(this.deps.taskStore, beliefOwnerTask, input.beliefImpact);
+      if ("code" in seeded) return seeded;
+      beliefOwnerTask.description = seeded.description;
+    }
     const validation = validateBeliefImpactForTask({
       parent: parentResult ? { ownerType: parentResult.ownerType } : null,
       impacts: input.beliefImpact,
       ownerDescription: parentResult?.ownerType === "agent" ? parentResult.description : existing.description
     });
-    if (!validation.ok) return failure2(validation.code, "Belief impact failed validation.");
+    if (!validation.ok) return beliefValidationFailure(validation);
     const beliefOwner = this.beliefOwnerSnapshot(existing, parentResult);
     const baseEventKey = eventKeyFor(input.taskId, result, input.beliefImpact, beliefOwner);
     let eventKey = baseEventKey;
@@ -35243,11 +35237,11 @@ function clearEncryptionKeyCache() {
 }
 
 // src/middlewares/skillMiddleware.ts
-import { createMiddleware as createMiddleware18 } from "langchain";
+import { createMiddleware as createMiddleware17 } from "langchain";
 
 // src/tool_lattice/skill/load_skills.ts
-import z51 from "zod";
-import { tool as tool46 } from "langchain";
+import z50 from "zod";
+import { tool as tool45 } from "langchain";
 var LOAD_SKILLS_DESCRIPTION = `Load all available skills and return their metadata (name, description, license, compatibility, metadata, and subSkills) without the content. This tool returns skill information including hierarchical relationships (subSkills). Use this to discover what skills are available and their structure.`;
 function getSandboxFromExeConfig(_exe_config) {
   const runConfig = _exe_config?.configurable?.runConfig || {};
@@ -35262,7 +35256,7 @@ function getSandboxFromExeConfig(_exe_config) {
   });
 }
 var createLoadSkillsTool = ({ skills, readAll, pluginSkills, pluginSkillOwners } = {}) => {
-  return tool46(
+  return tool45(
     async (_input, _exe_config) => {
       const allSkills = [];
       try {
@@ -35328,7 +35322,7 @@ var createLoadSkillsTool = ({ skills, readAll, pluginSkills, pluginSkillOwners }
     {
       name: "load_skills",
       description: LOAD_SKILLS_DESCRIPTION,
-      schema: z51.object({})
+      schema: z50.object({})
     }
   );
 };
@@ -35338,8 +35332,8 @@ function isSkillAllowed(skillName, staticSkills, staticReadAll) {
 }
 
 // src/tool_lattice/skill/load_skill_content.ts
-import z52 from "zod";
-import { tool as tool47 } from "langchain";
+import z51 from "zod";
+import { tool as tool46 } from "langchain";
 var LOAD_SKILL_CONTENT_DESCRIPTION = `
 Execute a skill within the main conversation
 
@@ -35379,7 +35373,7 @@ function getSandboxFromExeConfig2(_exe_config) {
 var createLoadSkillContentTool = (pluginSkills, pluginSkillOwnersOrStaticSelection, staticSelection) => {
   const pluginSkillOwners = staticSelection === void 0 ? isStaticSkillSelection(pluginSkillOwnersOrStaticSelection) ? void 0 : pluginSkillOwnersOrStaticSelection : pluginSkillOwnersOrStaticSelection;
   const effectiveStaticSelection = isStaticSkillSelection(pluginSkillOwnersOrStaticSelection) ? pluginSkillOwnersOrStaticSelection : staticSelection ?? {};
-  return tool47(
+  return tool46(
     async (input, _exe_config) => {
       try {
         if (!isSkillAllowed2(input.skill_name, effectiveStaticSelection)) {
@@ -35460,8 +35454,8 @@ var createLoadSkillContentTool = (pluginSkills, pluginSkillOwnersOrStaticSelecti
     {
       name: "skill",
       description: LOAD_SKILL_CONTENT_DESCRIPTION,
-      schema: z52.object({
-        skill_name: z52.string().describe("The name of the skill to load")
+      schema: z51.object({
+        skill_name: z51.string().describe("The name of the skill to load")
       })
     }
   );
@@ -35480,8 +35474,8 @@ function isSkillAllowed2(skillName, staticSelection) {
 }
 
 // src/tool_lattice/skill/load_skill_resource.ts
-import z53 from "zod";
-import { tool as tool48 } from "langchain";
+import z52 from "zod";
+import { tool as tool47 } from "langchain";
 var LOAD_SKILL_RESOURCE_DESCRIPTION = `Load a specific resource file from a skill's resources directory. Use this tool when you need to access template files, example data, or other resources bundled with a skill. The resource paths are listed in the skill content when using the load_skill_content tool.`;
 function getSandboxFromExeConfig3(_exe_config) {
   const runConfig = _exe_config?.configurable?.runConfig || {};
@@ -35496,7 +35490,7 @@ function getSandboxFromExeConfig3(_exe_config) {
   });
 }
 var createLoadSkillResourceTool = (pluginSkills, pluginSkillOwners) => {
-  return tool48(
+  return tool47(
     async (input, _exe_config) => {
       try {
         validateRelativePath(input.skill_name, "skill");
@@ -35523,17 +35517,17 @@ var createLoadSkillResourceTool = (pluginSkills, pluginSkillOwners) => {
     {
       name: "load_skill_resource",
       description: LOAD_SKILL_RESOURCE_DESCRIPTION,
-      schema: z53.object({
-        skill_name: z53.string().describe("The name of the skill containing the resource"),
-        resource_path: z53.string().describe("The path to the resource relative to the skill's resources/ directory")
+      schema: z52.object({
+        skill_name: z52.string().describe("The name of the skill containing the resource"),
+        resource_path: z52.string().describe("The path to the resource relative to the skill's resources/ directory")
       })
     }
   );
 };
 
 // src/tool_lattice/skill/delete_skill.ts
-import z54 from "zod";
-import { tool as tool49 } from "langchain";
+import z53 from "zod";
+import { tool as tool48 } from "langchain";
 var DELETE_SKILL_DESCRIPTION = `
 Delete a skill by name from the skill system.
 This permanently removes the skill and its SKILL.md file.
@@ -35560,7 +35554,7 @@ function validateSkillName3(name) {
   }
 }
 var createDeleteSkillTool = (staticSelection = {}) => {
-  return tool49(
+  return tool48(
     async (input, _exe_config) => {
       try {
         validateSkillName3(input.skill_name);
@@ -35592,8 +35586,8 @@ var createDeleteSkillTool = (staticSelection = {}) => {
     {
       name: "delete_skill",
       description: DELETE_SKILL_DESCRIPTION,
-      schema: z54.object({
-        skill_name: z54.string().describe("The name of the skill to delete")
+      schema: z53.object({
+        skill_name: z53.string().describe("The name of the skill to delete")
       })
     }
   );
@@ -35617,7 +35611,7 @@ function createSkillMiddleware(params = {}) {
   } = params;
   const skills = params.skills;
   let latestSkills = [];
-  return createMiddleware18({
+  return createMiddleware17({
     name: "skillMiddleware",
     contextSchema,
     tools: [
@@ -35767,11 +35761,11 @@ var skillPlugin = {
 };
 
 // src/middlewares/semanticMetricsMiddleware.ts
-import { createMiddleware as createMiddleware19 } from "langchain";
+import { createMiddleware as createMiddleware18 } from "langchain";
 
 // src/tool_lattice/semantic_metrics/metrics_datasource_tool.ts
-import z55 from "zod";
-import { tool as tool50 } from "langchain";
+import z54 from "zod";
+import { tool as tool49 } from "langchain";
 
 // src/tool_lattice/semantic_metrics/types.ts
 function readToolRunConfig(exeConfig) {
@@ -36249,7 +36243,7 @@ COMMON MISTAKES (do not):
 - Do not attempt writes \u2014 SQL is validated read-only and rejected before sending.`;
 function createMetricsDatasourceTool(params) {
   const { resolvedConnections, selectedDataSources } = params;
-  return tool50(
+  return tool49(
     async (input, exeConfig) => {
       try {
         const client = await resolveClientFromConnections(input.connectionKey, resolvedConnections, readToolRunConfig(exeConfig));
@@ -36304,23 +36298,23 @@ function createMetricsDatasourceTool(params) {
     {
       name: "metrics_datasource_tool",
       description: DESCRIPTION,
-      schema: z55.object({
-        action: z55.enum(["list_datasources", "get_grants", "query_sql", "test_connection", "pool_status"]).describe(
+      schema: z54.object({
+        action: z54.enum(["list_datasources", "get_grants", "query_sql", "test_connection", "pool_status"]).describe(
           "list_datasources: list datasources \u2014 ALWAYS call this first to obtain the datasource id used by every other action and tool; get_grants: read table-grants; query_sql: run read-only SQL against PHYSICAL tables (note: this is query_sql, NOT the semantic 'query' action of metrics_runtime_tool); test_connection: test the datasource; pool_status: connection-pool status"
         ),
-        connectionKey: z55.string().optional().describe("Connection key. Omit when only one semantic-metrics connection exists"),
-        datasourceId: z55.coerce.number().optional().describe("Numeric datasource id, e.g. 15 (required for all actions except list_datasources; optional if set in runConfig.metricsDataSource)"),
-        sql: z55.string().optional().describe("Read-only SQL (SELECT/WITH only). Required for the query action. Metadata templates \u2014 PostgreSQL/SQL Server columns: select column_name, data_type from information_schema.columns where table_schema = :schemaName and table_name = :tableName order by ordinal_position; HANA columns: select column_name, data_type_name from table_columns where schema_name = :schemaName and table_name = :tableName order by position; distributions: select <dim>, count(*) as row_count from <table> group by <dim> order by row_count desc limit :maxRows"),
-        params: z55.record(z55.union([z55.string(), z55.number(), z55.boolean()])).optional().describe("Named :param values for the SQL"),
-        maxRows: z55.number().optional().describe("Max rows to return")
+        connectionKey: z54.string().optional().describe("Connection key. Omit when only one semantic-metrics connection exists"),
+        datasourceId: z54.coerce.number().optional().describe("Numeric datasource id, e.g. 15 (required for all actions except list_datasources; optional if set in runConfig.metricsDataSource)"),
+        sql: z54.string().optional().describe("Read-only SQL (SELECT/WITH only). Required for the query action. Metadata templates \u2014 PostgreSQL/SQL Server columns: select column_name, data_type from information_schema.columns where table_schema = :schemaName and table_name = :tableName order by ordinal_position; HANA columns: select column_name, data_type_name from table_columns where schema_name = :schemaName and table_name = :tableName order by position; distributions: select <dim>, count(*) as row_count from <table> group by <dim> order by row_count desc limit :maxRows"),
+        params: z54.record(z54.union([z54.string(), z54.number(), z54.boolean()])).optional().describe("Named :param values for the SQL"),
+        maxRows: z54.number().optional().describe("Max rows to return")
       })
     }
   );
 }
 
 // src/tool_lattice/semantic_metrics/metrics_meta_tool.ts
-import z56 from "zod";
-import { tool as tool51 } from "langchain";
+import z55 from "zod";
+import { tool as tool50 } from "langchain";
 var DESCRIPTION2 = `SEMANTIC ASSET REGISTRY (Builder/Admin only) \u2014 the only tool for reading and publishing the runtime's semantic layer: table meta (meta/tables) and metric meta (meta/metrics).
 
 OWNS: listing published tables and metrics, reading one by objectKey, publishing a semantic table (create_table: columns tagged with role dimension|measure), publishing a metric (create_metric: a metric_index payload then a metric_detail payload using the SQL-free calculation DSL), and correcting published assets (update_table / update_metric).
@@ -36356,7 +36350,7 @@ function actionRequiresPayload(action) {
 }
 function createMetricsMetaTool(params) {
   const { resolvedConnections, selectedDataSources } = params;
-  return tool51(
+  return tool50(
     async (input, exeConfig) => {
       try {
         const guardError = requireModelingSkillLoaded(input.action, input, exeConfig);
@@ -36405,8 +36399,8 @@ function createMetricsMetaTool(params) {
     {
       name: "metrics_meta_tool",
       description: DESCRIPTION2,
-      schema: z56.object({
-        action: z56.enum([
+      schema: z55.object({
+        action: z55.enum([
           "list_tables",
           "read_table_meta",
           "create_table",
@@ -36418,19 +36412,19 @@ function createMetricsMetaTool(params) {
         ]).describe(
           "Actions ONLY in this meta tool (runtime query actions like get_meta/query belong to metrics_runtime_tool): list_tables/list_metrics (browse published assets), read_table_meta/read_metric_meta (details by objectKey), create_table/create_metric (publish), update_table/update_metric (correct)"
         ),
-        connectionKey: z56.string().optional().describe("Connection key. Omit when only one semantic-metrics connection exists"),
-        datasourceId: z56.coerce.number().optional().describe("Numeric datasource id, e.g. 15 (optional if set in runConfig.metricsDataSource)"),
-        objectKey: z56.string().optional().describe("Semantic table/metric key (required for read_table_meta/update_table/read_metric_meta/update_metric)"),
-        payload: z56.record(z56.unknown()).optional().describe("Meta payload (required for create/update actions; objectType/objectKey/status/payload/accessGrant)"),
-        modelingSkillLoaded: z56.literal(true).optional().describe("Set true after loading the semantic-metrics-modeling skill (required for the builder assistant on write actions)")
+        connectionKey: z55.string().optional().describe("Connection key. Omit when only one semantic-metrics connection exists"),
+        datasourceId: z55.coerce.number().optional().describe("Numeric datasource id, e.g. 15 (optional if set in runConfig.metricsDataSource)"),
+        objectKey: z55.string().optional().describe("Semantic table/metric key (required for read_table_meta/update_table/read_metric_meta/update_metric)"),
+        payload: z55.record(z55.unknown()).optional().describe("Meta payload (required for create/update actions; objectType/objectKey/status/payload/accessGrant)"),
+        modelingSkillLoaded: z55.literal(true).optional().describe("Set true after loading the semantic-metrics-modeling skill (required for the builder assistant on write actions)")
       })
     }
   );
 }
 
 // src/tool_lattice/semantic_metrics/metrics_runtime_tool.ts
-import z57 from "zod";
-import { tool as tool52 } from "langchain";
+import z56 from "zod";
+import { tool as tool51 } from "langchain";
 var DESCRIPTION3 = `RUNTIME QUERY SURFACE \u2014 read what is published and answer business questions with numbers. Business agents use ONLY this tool; Builder agents also use it to verify freshly published metrics.
 
 OWNS: read_semantic_catalog (the published semantic model for a datasource: tables, metrics, dimensions, filters) and query_metrics (the semantic metric query: metrics / groupBy / filters / orderBy / limit \u2014 the server generates the SQL, so there is no free-form SQL here).
@@ -36448,7 +36442,7 @@ COMMON MISTAKES (do not):
 - Metrics and dimensions in query_metrics must already be published; querying an unpublished metric fails with "not found in catalog".`;
 function createMetricsRuntimeTool(params) {
   const { resolvedConnections, selectedDataSources } = params;
-  return tool52(
+  return tool51(
     async (input, exeConfig) => {
       try {
         const client = await resolveClientFromConnections(input.connectionKey, resolvedConnections, readToolRunConfig(exeConfig));
@@ -36475,13 +36469,13 @@ function createMetricsRuntimeTool(params) {
     {
       name: "metrics_runtime_tool",
       description: DESCRIPTION3,
-      schema: z57.object({
-        action: z57.enum(["read_semantic_catalog", "query_metrics"]).describe(
+      schema: z56.object({
+        action: z56.enum(["read_semantic_catalog", "query_metrics"]).describe(
           "Actions ONLY in this runtime tool: read_semantic_catalog (read the published semantic model: tables, metrics, dimensions \u2014 obtain the datasourceId from metrics_datasource_tool list_datasources first), query_metrics (run a semantic metric query \u2014 the only way to get business numbers). Do NOT put meta-tool actions (list_tables/read_table_meta/create_table/update_table/list_metrics/read_metric_meta/create_metric/update_metric) here"
         ),
-        connectionKey: z57.string().optional().describe("Connection key. Omit when only one semantic-metrics connection exists"),
-        datasourceId: z57.coerce.number().optional().describe("Numeric datasource id, e.g. 15 (optional if set in runConfig.metricsDataSource)"),
-        query: z57.record(z57.unknown()).optional().describe('Semantic metric query request. Required for the query_metrics action, e.g. { datasourceId: 15, metrics: ["sell_in_nes"], groupBy: ["sales_team"], filters: [{ dimension: "posting_year", operator: "GTE", values: [2024] }], limit: 10 }')
+        connectionKey: z56.string().optional().describe("Connection key. Omit when only one semantic-metrics connection exists"),
+        datasourceId: z56.coerce.number().optional().describe("Numeric datasource id, e.g. 15 (optional if set in runConfig.metricsDataSource)"),
+        query: z56.record(z56.unknown()).optional().describe('Semantic metric query request. Required for the query_metrics action, e.g. { datasourceId: 15, metrics: ["sell_in_nes"], groupBy: ["sales_team"], filters: [{ dimension: "posting_year", operator: "GTE", values: [2024] }], limit: 10 }')
       })
     }
   );
@@ -36904,7 +36898,7 @@ import { AgentType as AgentType8 } from "@axiom-lattice/protocols";
 function createSemanticMetricsMiddleware(config) {
   const resolvedConnections = config._resolvedConnections ?? [];
   const selectedDataSources = void 0;
-  return createMiddleware19({
+  return createMiddleware18({
     name: "SemanticMetrics",
     contextSchema,
     tools: [
@@ -36935,7 +36929,7 @@ var semanticMetricsPlugin = {
     category: "data",
     capabilityBundleEligible: true,
     name: "Semantic Metrics",
-    description: "Semantic metrics datasource exploration, meta publishing, and runtime querying",
+    description: "Semantic metrics datasource exploration, meta publishing, and runtime querying. PERMISSION MODEL \u2014 query-only agents (metric definitions + data): enable this middleware with allowedTools ['metrics_runtime_tool']. Metric designers (Builder): keep all three tools (metrics_datasource_tool, metrics_meta_tool, metrics_runtime_tool) for exploration, publishing, and verification, or use the built-in 'semantic-metrics-builder' agent.",
     version: "1.0.0",
     tools: [
       { name: "metrics_datasource_tool", description: "Explore datasource structure within the tenant's granted scope" },
@@ -36944,6 +36938,8 @@ var semanticMetricsPlugin = {
     ],
     configSchema: {
       type: "object",
+      title: "Semantic Metrics Configuration",
+      description: "First select connections (connections or connectAll). Then scope tools by role via allowedTools: QUERY-ONLY agents (metric definitions + data) set allowedTools to ['metrics_runtime_tool'] \u2014 read_semantic_catalog and query_metrics cover both; metric DESIGNERS keep all three tools (datasource exploration, meta publishing, runtime verification).",
       properties: {
         connections: {
           type: "array",
@@ -37102,11 +37098,11 @@ var semanticMetricsPlugin = {
 };
 
 // src/middlewares/collectionMiddleware.ts
-import { createMiddleware as createMiddleware20 } from "langchain";
+import { createMiddleware as createMiddleware19 } from "langchain";
 
 // src/tool_lattice/collection/list_collections.ts
-import z58 from "zod";
-import { tool as tool53 } from "langchain";
+import z57 from "zod";
+import { tool as tool52 } from "langchain";
 
 // src/tool_lattice/collection/utils.ts
 function getEffectiveCollectionScope(exeConfig, staticScope) {
@@ -37129,7 +37125,7 @@ var createListCollectionsTool = ({
   collectionKeys,
   connectAll
 }) => {
-  return tool53(
+  return tool52(
     async (_input, _exeConfig) => {
       try {
         const tenantId2 = _exeConfig?.configurable?.runConfig?.tenantId || "default";
@@ -37164,23 +37160,23 @@ var createListCollectionsTool = ({
     {
       name: "list_collections",
       description: LIST_COLLECTIONS_DESCRIPTION,
-      schema: z58.object({})
+      schema: z57.object({})
     }
   );
 };
 
 // src/tool_lattice/collection/search_collection.ts
-import z59 from "zod";
-import { tool as tool54 } from "langchain";
+import z58 from "zod";
+import { tool as tool53 } from "langchain";
 var SEARCH_COLLECTION_DESCRIPTION = `Search for content within a specific collection using semantic (vector) similarity. Use the 'filter' parameter to narrow results by metadata fields (e.g., {"category": "cardiovascular"}). Returns the most relevant content entries with similarity scores.`;
-var searchSchema = z59.object({
-  collection: z59.string().describe("The collection name to search in"),
-  query: z59.string().describe("The search query text"),
-  filter: z59.record(z59.unknown()).optional().describe("Metadata filter conditions"),
-  top_k: z59.number().optional().default(5).describe("Number of results to return")
+var searchSchema = z58.object({
+  collection: z58.string().describe("The collection name to search in"),
+  query: z58.string().describe("The search query text"),
+  filter: z58.record(z58.unknown()).optional().describe("Metadata filter conditions"),
+  top_k: z58.number().optional().default(5).describe("Number of results to return")
 });
 var createSearchCollectionTool = (scope = { collectionKeys: [], connectAll: true }) => {
-  return tool54(
+  return tool53(
     async (input, _exeConfig) => {
       try {
         const { collection, query, filter: filter2, top_k } = input;
@@ -37246,10 +37242,10 @@ var createSearchCollectionTool = (scope = { collectionKeys: [], connectAll: true
 };
 
 // src/tool_lattice/collection/get_collection.ts
-import z60 from "zod";
-import { tool as tool55 } from "langchain";
+import z59 from "zod";
+import { tool as tool54 } from "langchain";
 var GET_COLLECTION_DESCRIPTION = `Get a collection's full definition including its custom fields schema. Use this to discover what metadata fields are available before adding entries.`;
-var createGetCollectionTool = (scope = { collectionKeys: [], connectAll: true }) => tool55(
+var createGetCollectionTool = (scope = { collectionKeys: [], connectAll: true }) => tool54(
   async (input, _exeConfig) => {
     try {
       const scopeError = validateCollectionScope(input.name, _exeConfig, scope);
@@ -37274,24 +37270,24 @@ Embedding: ${c.embeddingKey}${fieldsDesc}`;
       return `Error: ${error.message}`;
     }
   },
-  { name: "get_collection", description: GET_COLLECTION_DESCRIPTION, schema: z60.object({ name: z60.string().describe("Collection name") }) }
+  { name: "get_collection", description: GET_COLLECTION_DESCRIPTION, schema: z59.object({ name: z59.string().describe("Collection name") }) }
 );
 
 // src/tool_lattice/collection/create_collection.ts
-import z61 from "zod";
-import { tool as tool56 } from "langchain";
-var createSchema = z61.object({
-  name: z61.string().describe("Collection name (lowercase, underscores only)"),
-  label: z61.string().describe("Display name"),
-  embeddingKey: z61.string().describe("Embedding model key"),
-  fields: z61.array(z61.object({
-    key: z61.string().describe("Field key name"),
-    type: z61.enum(["string", "number", "enum"]).describe("Field data type"),
-    enumValues: z61.array(z61.string()).optional().describe("Valid values for enum type"),
-    required: z61.boolean().optional().default(false).describe("Whether field is required")
+import z60 from "zod";
+import { tool as tool55 } from "langchain";
+var createSchema = z60.object({
+  name: z60.string().describe("Collection name (lowercase, underscores only)"),
+  label: z60.string().describe("Display name"),
+  embeddingKey: z60.string().describe("Embedding model key"),
+  fields: z60.array(z60.object({
+    key: z60.string().describe("Field key name"),
+    type: z60.enum(["string", "number", "enum"]).describe("Field data type"),
+    enumValues: z60.array(z60.string()).optional().describe("Valid values for enum type"),
+    required: z60.boolean().optional().default(false).describe("Whether field is required")
   })).optional().describe("Custom field definitions for entries in this collection")
 });
-var createCreateCollectionTool = (scope = {}) => tool56(
+var createCreateCollectionTool = (scope = {}) => tool55(
   async (input, _exeConfig) => {
     try {
       const tenantId2 = _exeConfig?.configurable?.runConfig?.tenantId || "default";
@@ -37317,20 +37313,20 @@ var createCreateCollectionTool = (scope = {}) => tool56(
 );
 
 // src/tool_lattice/collection/update_collection.ts
-import z62 from "zod";
-import { tool as tool57 } from "langchain";
-var schema = z62.object({
-  name: z62.string().describe("Collection name"),
-  label: z62.string().optional().describe("New display name"),
-  embeddingKey: z62.string().optional().describe("New embedding model key"),
-  fields: z62.array(z62.object({
-    key: z62.string().describe("Field key name"),
-    type: z62.enum(["string", "number", "enum"]).describe("Field data type"),
-    enumValues: z62.array(z62.string()).optional().describe("Valid values for enum type"),
-    required: z62.boolean().optional().default(false).describe("Whether field is required")
+import z61 from "zod";
+import { tool as tool56 } from "langchain";
+var schema = z61.object({
+  name: z61.string().describe("Collection name"),
+  label: z61.string().optional().describe("New display name"),
+  embeddingKey: z61.string().optional().describe("New embedding model key"),
+  fields: z61.array(z61.object({
+    key: z61.string().describe("Field key name"),
+    type: z61.enum(["string", "number", "enum"]).describe("Field data type"),
+    enumValues: z61.array(z61.string()).optional().describe("Valid values for enum type"),
+    required: z61.boolean().optional().default(false).describe("Whether field is required")
   })).optional().describe("Custom field definitions for entries (replaces existing schema)")
 });
-var createUpdateCollectionTool = (scope = { collectionKeys: [], connectAll: true }) => tool57(
+var createUpdateCollectionTool = (scope = { collectionKeys: [], connectAll: true }) => tool56(
   async (input, _exeConfig) => {
     try {
       const scopeError = validateCollectionScope(input.name, _exeConfig, scope);
@@ -37351,9 +37347,9 @@ var createUpdateCollectionTool = (scope = { collectionKeys: [], connectAll: true
 );
 
 // src/tool_lattice/collection/delete_collection.ts
-import z63 from "zod";
-import { tool as tool58 } from "langchain";
-var createDeleteCollectionTool = (scope = { collectionKeys: [], connectAll: true }) => tool58(
+import z62 from "zod";
+import { tool as tool57 } from "langchain";
+var createDeleteCollectionTool = (scope = { collectionKeys: [], connectAll: true }) => tool57(
   async (input, _exeConfig) => {
     try {
       const scopeError = validateCollectionScope(input.name, _exeConfig, scope);
@@ -37365,19 +37361,19 @@ var createDeleteCollectionTool = (scope = { collectionKeys: [], connectAll: true
       return `Error: ${e.message}`;
     }
   },
-  { name: "delete_collection", description: `Delete a collection and all its entries. This cannot be undone.`, schema: z63.object({ name: z63.string().describe("Collection name") }) }
+  { name: "delete_collection", description: `Delete a collection and all its entries. This cannot be undone.`, schema: z62.object({ name: z62.string().describe("Collection name") }) }
 );
 
 // src/tool_lattice/collection/list_entries.ts
-import z64 from "zod";
-import { tool as tool59 } from "langchain";
-var schema2 = z64.object({
-  collection: z64.string().describe("Collection name")
+import z63 from "zod";
+import { tool as tool58 } from "langchain";
+var schema2 = z63.object({
+  collection: z63.string().describe("Collection name")
 });
 function buildKey2(tenantId2, name) {
   return `${tenantId2}:${name}`;
 }
-var createListEntriesTool = (scope = { collectionKeys: [], connectAll: true }) => tool59(
+var createListEntriesTool = (scope = { collectionKeys: [], connectAll: true }) => tool58(
   async (input, _exeConfig) => {
     try {
       const scopeError = validateCollectionScope(input.collection, _exeConfig, scope);
@@ -37406,19 +37402,19 @@ var createListEntriesTool = (scope = { collectionKeys: [], connectAll: true }) =
 );
 
 // src/tool_lattice/collection/add_entry.ts
-import z65 from "zod";
-import { tool as tool60 } from "langchain";
+import z64 from "zod";
+import { tool as tool59 } from "langchain";
 import { Document } from "@langchain/core/documents";
 import { v4 as uuidv47 } from "uuid";
-var schema3 = z65.object({
-  collection: z65.string().describe("Collection name"),
-  content: z65.string().describe("Entry content text"),
-  metadata: z65.record(z65.unknown()).optional().describe("Metadata fields matching the collection schema")
+var schema3 = z64.object({
+  collection: z64.string().describe("Collection name"),
+  content: z64.string().describe("Entry content text"),
+  metadata: z64.record(z64.unknown()).optional().describe("Metadata fields matching the collection schema")
 });
 function key(t, n) {
   return `${t}:${n}`;
 }
-var createAddEntryTool = (scope = { collectionKeys: [], connectAll: true }) => tool60(
+var createAddEntryTool = (scope = { collectionKeys: [], connectAll: true }) => tool59(
   async (input, _exeConfig) => {
     try {
       const scopeError = validateCollectionScope(input.collection, _exeConfig, scope);
@@ -37450,18 +37446,18 @@ var createAddEntryTool = (scope = { collectionKeys: [], connectAll: true }) => t
 );
 
 // src/tool_lattice/collection/update_entry.ts
-import z66 from "zod";
-import { tool as tool61 } from "langchain";
-var schema4 = z66.object({
-  collection: z66.string().describe("Collection name"),
-  entryId: z66.string().describe("Entry ID to update"),
-  content: z66.string().optional().describe("New content"),
-  metadata: z66.record(z66.unknown()).optional().describe("New metadata")
+import z65 from "zod";
+import { tool as tool60 } from "langchain";
+var schema4 = z65.object({
+  collection: z65.string().describe("Collection name"),
+  entryId: z65.string().describe("Entry ID to update"),
+  content: z65.string().optional().describe("New content"),
+  metadata: z65.record(z65.unknown()).optional().describe("New metadata")
 });
 function key2(t, n) {
   return `${t}:${n}`;
 }
-var createUpdateEntryTool = (scope = { collectionKeys: [], connectAll: true }) => tool61(
+var createUpdateEntryTool = (scope = { collectionKeys: [], connectAll: true }) => tool60(
   async (input, _exeConfig) => {
     try {
       const scopeError = validateCollectionScope(input.collection, _exeConfig, scope);
@@ -37482,16 +37478,16 @@ var createUpdateEntryTool = (scope = { collectionKeys: [], connectAll: true }) =
 );
 
 // src/tool_lattice/collection/delete_entry.ts
-import z67 from "zod";
-import { tool as tool62 } from "langchain";
-var schema5 = z67.object({
-  collection: z67.string().describe("Collection name"),
-  entryId: z67.string().describe("Entry ID to delete")
+import z66 from "zod";
+import { tool as tool61 } from "langchain";
+var schema5 = z66.object({
+  collection: z66.string().describe("Collection name"),
+  entryId: z66.string().describe("Entry ID to delete")
 });
 function key3(t, n) {
   return `${t}:${n}`;
 }
-var createDeleteEntryTool = (scope = { collectionKeys: [], connectAll: true }) => tool62(
+var createDeleteEntryTool = (scope = { collectionKeys: [], connectAll: true }) => tool61(
   async (input, _exeConfig) => {
     try {
       const scopeError = validateCollectionScope(input.collection, _exeConfig, scope);
@@ -37511,7 +37507,7 @@ var createDeleteEntryTool = (scope = { collectionKeys: [], connectAll: true }) =
 function createCollectionMiddleware(params) {
   const { collectionKeys, connectAll, compileStableCandidateTools = false } = params;
   if (!compileStableCandidateTools && !connectAll && (!collectionKeys || collectionKeys.length === 0)) {
-    return createMiddleware20({
+    return createMiddleware19({
       name: "collectionMiddleware",
       contextSchema,
       tools: [
@@ -37521,7 +37517,7 @@ function createCollectionMiddleware(params) {
     });
   }
   const toolParams = { collectionKeys, connectAll };
-  return createMiddleware20({
+  return createMiddleware19({
     name: "collectionMiddleware",
     contextSchema,
     tools: [
@@ -37584,24 +37580,24 @@ var collectionPlugin = {
 };
 
 // src/middlewares/askUserClarifyMiddleware.ts
-import { createMiddleware as createMiddleware21, ToolMessage as ToolMessage10 } from "langchain";
+import { createMiddleware as createMiddleware20, ToolMessage as ToolMessage10 } from "langchain";
 import { interrupt as interrupt3 } from "@langchain/langgraph";
 
 // src/tool_lattice/ask_user_to_clarify/index.ts
-import { tool as tool63 } from "langchain";
-import z68 from "zod";
-var questionSchema = z68.object({
-  question: z68.string().describe("The question text to ask the user. MUST include the specific context, options, or details being clarified \u2014 never use a bare generic label. Good: 'Confirm the plan: use Redis cache + PostgreSQL primary, split microservices as needed?' Bad: 'Confirm the plan?'"),
-  options: z68.array(z68.string()).optional().default([]).describe("List of EXACT, selectable values. Maximum 3 options allowed. DO NOT include placeholder values like 'Other' or 'Enter manually'. For free-text with predefined choices, use allowOther=true (works with 'single' and 'multiple'). For pure free-text without choices, use type='input' instead. For file_upload and input, pass an empty array."),
-  type: z68.enum(["single", "multiple", "file_upload", "input"]).describe("The question format. 'single' = pick one from options (default, see tool description for guidance). 'multiple' = pick several from options. 'input' = free-text field (only when options cannot express the answer). 'file_upload' = file picker."),
-  required: z68.boolean().optional().default(false).describe("Whether this question must be answered"),
-  allowOther: z68.boolean().optional().default(true).describe("Set to true to append an 'Other' checkbox with a free-text input field. Works with 'single' and 'multiple' types. Use for open-ended answers or when the options cannot cover all possibilities. Not applicable for 'input' or 'file_upload' types.")
+import { tool as tool62 } from "langchain";
+import z67 from "zod";
+var questionSchema = z67.object({
+  question: z67.string().describe("The question text to ask the user. MUST include the specific context, options, or details being clarified \u2014 never use a bare generic label. Good: 'Confirm the plan: use Redis cache + PostgreSQL primary, split microservices as needed?' Bad: 'Confirm the plan?'"),
+  options: z67.array(z67.string()).optional().default([]).describe("List of EXACT, selectable values. Maximum 3 options allowed. DO NOT include placeholder values like 'Other' or 'Enter manually'. For free-text with predefined choices, use allowOther=true (works with 'single' and 'multiple'). For pure free-text without choices, use type='input' instead. For file_upload and input, pass an empty array."),
+  type: z67.enum(["single", "multiple", "file_upload", "input"]).describe("The question format. 'single' = pick one from options (default, see tool description for guidance). 'multiple' = pick several from options. 'input' = free-text field (only when options cannot express the answer). 'file_upload' = file picker."),
+  required: z67.boolean().optional().default(false).describe("Whether this question must be answered"),
+  allowOther: z67.boolean().optional().default(true).describe("Set to true to append an 'Other' checkbox with a free-text input field. Works with 'single' and 'multiple' types. Use for open-ended answers or when the options cannot cover all possibilities. Not applicable for 'input' or 'file_upload' types.")
 });
-var inputSchema = z68.object({
-  questions: z68.array(questionSchema).min(1, "At least one question is required").describe("A structured sequence of clarification questions. Use these to gather missing parameters or disambiguate user intent before proceeding.")
+var inputSchema = z67.object({
+  questions: z67.array(questionSchema).min(1, "At least one question is required").describe("A structured sequence of clarification questions. Use these to gather missing parameters or disambiguate user intent before proceeding.")
 });
 function createAskUserToClarifyTool() {
-  return tool63(
+  return tool62(
     async (input) => {
       return JSON.stringify(input);
     },
@@ -37615,7 +37611,7 @@ function createAskUserToClarifyTool() {
 
 // src/middlewares/askUserClarifyMiddleware.ts
 function createAskUserClarifyMiddleware() {
-  return createMiddleware21({
+  return createMiddleware20({
     name: "AskUserClarifyMiddleware",
     tools: [createAskUserToClarifyTool()],
     wrapToolCall: async (request, handler) => {
@@ -37712,11 +37708,11 @@ var askUserClarifyPlugin = {
 };
 
 // src/middlewares/widgetMiddleware.ts
-import { createMiddleware as createMiddleware22 } from "langchain";
+import { createMiddleware as createMiddleware21 } from "langchain";
 
 // src/tool_lattice/widget/loadGuidelines.ts
-import { tool as tool64 } from "langchain";
-import { z as z69 } from "zod";
+import { tool as tool63 } from "langchain";
+import { z as z68 } from "zod";
 
 // src/middlewares/guidelines/index.ts
 var CORE = `# Imagine \u2014 Visual Creation Suite
@@ -38507,13 +38503,13 @@ function getGuidelines(modules) {
 var AVAILABLE_MODULES = Object.keys(MODULE_SECTIONS);
 
 // src/tool_lattice/widget/loadGuidelines.ts
-var LoadGuidelinesInputSchema = z69.object({
-  modules: z69.array(z69.string()).describe(
+var LoadGuidelinesInputSchema = z68.object({
+  modules: z68.array(z68.string()).describe(
     "Which design modules to load. Choose all that apply. Available modules: [" + AVAILABLE_MODULES.join(",") + "]"
   )
 });
 function createLoadGuidelinesTool() {
-  return tool64(
+  return tool63(
     async (input) => {
       const result = getGuidelines(input.modules);
       return result;
@@ -38527,8 +38523,8 @@ function createLoadGuidelinesTool() {
 }
 
 // src/tool_lattice/widget/showWidget.ts
-import { tool as tool65 } from "langchain";
-import { z as z70 } from "zod";
+import { tool as tool64 } from "langchain";
+import { z as z69 } from "zod";
 function containsForbiddenTags(code) {
   const forbiddenPatterns = [
     /<!DOCTYPE/i,
@@ -38550,20 +38546,20 @@ function validateWidgetCode(code) {
   }
   return { valid: true };
 }
-var ShowWidgetInputSchema = z70.object({
-  i_have_seen_guidelines: z70.boolean().describe(
+var ShowWidgetInputSchema = z69.object({
+  i_have_seen_guidelines: z69.boolean().describe(
     "Must be true. Confirm you have called load_guidelines first."
   ),
-  title: z70.string().describe("Title displayed above the widget"),
-  loading_messages: z70.array(z70.string()).optional().describe(
+  title: z69.string().describe("Title displayed above the widget"),
+  loading_messages: z69.array(z69.string()).optional().describe(
     "1-4 short strings shown while the widget renders"
   ),
-  widget_code: z70.string().describe(
+  widget_code: z69.string().describe(
     "HTML fragment to render. Rules: 1. No DOCTYPE, <html>, <head>, or <body> tags. 2. Order: <style> block first, then HTML content, then <script> last. 3. Use only CSS variables for colors (e.g. var(--color-accent)). 4. No gradients, shadows, or blur effects. For SVG: start directly with <svg> tag."
   )
 });
 function createShowWidgetTool() {
-  return tool65(
+  return tool64(
     async (input) => {
       if (!input.i_have_seen_guidelines) {
         return "Error: You must call load_guidelines before using show_widget. Set i_have_seen_guidelines to true only after loading guidelines.";
@@ -38594,7 +38590,7 @@ function createWidgetMiddleware() {
     createLoadGuidelinesTool(),
     createShowWidgetTool()
   ];
-  return createMiddleware22({
+  return createMiddleware21({
     name: "widgetMiddleware",
     contextSchema,
     tools
@@ -38618,12 +38614,12 @@ var widgetPlugin = {
 };
 
 // src/middlewares/taskMiddleware.ts
-import { createMiddleware as createMiddleware23, tool as tool66 } from "langchain";
-import { z as z71 } from "zod";
+import { createMiddleware as createMiddleware22, tool as tool65 } from "langchain";
+import { z as z70 } from "zod";
 import { GraphInterrupt as GraphInterrupt2, interrupt as interrupt4 } from "@langchain/langgraph";
 import {
   isExecutionResultEventKey as isExecutionResultEventKey3,
-  parseTrustedRunContext as parseTrustedRunContext3,
+  parseTrustedRunContext as parseTrustedRunContext2,
   requireProjectTaskWorkItemStore
 } from "@axiom-lattice/protocols";
 
@@ -38956,7 +38952,7 @@ function classifyTaskAuthority(runConfig) {
     return delegatedTaskId ? { kind: "delegated", taskId: delegatedTaskId } : { kind: "ordinary" };
   }
   try {
-    const trusted = parseTrustedRunContext3(hasProjectTask ? { projectTask: runConfig.projectTask } : { projectRoom: runConfig.projectRoom });
+    const trusted = parseTrustedRunContext2(hasProjectTask ? { projectTask: runConfig.projectTask } : { projectRoom: runConfig.projectRoom });
     return { kind: hasProjectTask ? "projectTask" : "projectRoom", trusted };
   } catch {
     return { kind: "invalid" };
@@ -39309,38 +39305,38 @@ function missingBeliefImpactError() {
     hint: "Provide beliefImpact: [{ key: '<belief-key>', after: <0-100>, basis: '<evidence>' }]"
   });
 }
-var manageTaskSchema = z71.object({
-  action: z71.enum(["create", "get", "list", "update", "add_activity", "delete"]).describe("Action to perform. Available: create, get, list, update, add_activity, delete. To mark a task complete, use update with status='completed'"),
-  id: z71.string().optional().describe("Task ID (required for get, update, add_activity, and delete)"),
-  title: z71.string().optional().describe("Task title (required for create)"),
-  description: z71.string().optional().describe("Task description in Markdown"),
-  priority: z71.enum(["low", "medium", "high"]).optional().describe("Priority level"),
-  status: z71.enum(["pending", "in_progress", "review", "failed", "interrupted", "completed", "cancelled"]).optional().describe("Task status. Agent summary-only interrupted updates default to missing_input"),
-  dueDate: z71.string().optional().describe("Due date (ISO 8601 format)"),
-  metadata: z71.record(z71.unknown()).optional().describe("Structured metadata (e.g. projectId, module)"),
-  parentId: z71.string().optional().describe("Parent task ID for grouping subtasks"),
-  sourceId: z71.string().optional().describe("Source session/thread ID"),
-  context: z71.record(z71.unknown()).optional().describe("Additional context data"),
-  ownerType: z71.enum(["user", "agent"]).optional().describe("Owner type. Defaults to 'user' if omitted"),
-  ownerId: z71.string().optional().describe("Owner ID. Auto-filled from current user/agent if omitted"),
-  requireReview: z71.boolean().optional().describe("If true, agent completion pauses as interrupted(review_required) for HITL approval"),
-  dependencies: z71.array(z71.string()).optional().describe("List of task IDs that must be completed before this task can start"),
-  dependencyTaskIds: z71.array(z71.string().trim().min(1)).optional().describe("Exact blocking task IDs required for an external_dependency interruption"),
-  result: z71.string().optional().describe("Nonblank result summary required when creating or updating a task with status='completed'"),
-  failureReason: z71.string().optional().describe("Nonblank failure reason required when creating or updating a task with status='failed'"),
-  files: z71.array(z71.object({
-    uri: z71.string().describe("Uniquely locates the resource: http(s):// URL, /s/:token share, or sandbox path"),
-    name: z71.string().optional().describe("Display name"),
-    addedBy: z71.enum(["user", "agent"]).optional().describe("Who attached the file")
+var manageTaskSchema = z70.object({
+  action: z70.enum(["create", "get", "list", "update", "add_activity", "delete"]).describe("Action to perform. Available: create, get, list, update, add_activity, delete. To mark a task complete, use update with status='completed'"),
+  id: z70.string().optional().describe("Task ID (required for get, update, add_activity, and delete)"),
+  title: z70.string().optional().describe("Task title (required for create)"),
+  description: z70.string().optional().describe("Task description in Markdown"),
+  priority: z70.enum(["low", "medium", "high"]).optional().describe("Priority level"),
+  status: z70.enum(["pending", "in_progress", "review", "failed", "interrupted", "completed", "cancelled"]).optional().describe("Task status. Agent summary-only interrupted updates default to missing_input"),
+  dueDate: z70.string().optional().describe("Due date (ISO 8601 format)"),
+  metadata: z70.record(z70.unknown()).optional().describe("Structured metadata (e.g. projectId, module)"),
+  parentId: z70.string().optional().describe("Parent task ID for grouping subtasks"),
+  sourceId: z70.string().optional().describe("Source session/thread ID"),
+  context: z70.record(z70.unknown()).optional().describe("Additional context data"),
+  ownerType: z70.enum(["user", "agent"]).optional().describe("Owner type. Defaults to 'user' if omitted"),
+  ownerId: z70.string().optional().describe("Owner ID. Auto-filled from current user/agent if omitted"),
+  requireReview: z70.boolean().optional().describe("If true, agent completion pauses as interrupted(review_required) for HITL approval"),
+  dependencies: z70.array(z70.string()).optional().describe("List of task IDs that must be completed before this task can start"),
+  dependencyTaskIds: z70.array(z70.string().trim().min(1)).optional().describe("Exact blocking task IDs required for an external_dependency interruption"),
+  result: z70.string().optional().describe("Nonblank result summary required when creating or updating a task with status='completed'"),
+  failureReason: z70.string().optional().describe("Nonblank failure reason required when creating or updating a task with status='failed'"),
+  files: z70.array(z70.object({
+    uri: z70.string().describe("Uniquely locates the resource: http(s):// URL, /s/:token share, or sandbox path"),
+    name: z70.string().optional().describe("Display name"),
+    addedBy: z70.enum(["user", "agent"]).optional().describe("Who attached the file")
   })).optional().describe("File references attached to this task"),
-  beliefImpact: z71.array(z71.object({
-    key: z71.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
-    after: z71.number().int().min(0).max(100),
-    basis: z71.string().trim().min(1).max(1e3)
+  beliefImpact: z70.array(z70.object({
+    key: z70.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/),
+    after: z70.number().int().min(0).max(100),
+    basis: z70.string().trim().min(1).max(1e3)
   })).optional().describe("Structured belief reports required when an agent-owned task completes; keys must exist in the belief owner's Belief State"),
-  content: z71.string().optional().describe("Markdown content required for add_activity"),
-  summary: z71.string().optional().describe("Brief summary of the operation"),
-  executionResultId: z71.string().refine(isExecutionResultEventKey3, {
+  content: z70.string().optional().describe("Markdown content required for add_activity"),
+  summary: z70.string().optional().describe("Brief summary of the operation"),
+  executionResultId: z70.string().refine(isExecutionResultEventKey3, {
     message: "executionResultId must be the execution-result:<threadId> event key returned by task()"
   }).optional().describe(
     "Canonical ASCII `execution-result:<suffix>` event key returned by task(); the nonempty suffix allows only A-Z, a-z, 0-9, period, underscore, colon, and hyphen, and is not a database row ID"
@@ -39348,15 +39344,15 @@ var manageTaskSchema = z71.object({
 }).superRefine((input, context) => {
   if (input.executionResultId && input.action !== "update" && input.action !== "add_activity") {
     context.addIssue({
-      code: z71.ZodIssueCode.custom,
+      code: z70.ZodIssueCode.custom,
       path: ["executionResultId"],
       message: "executionResultId is valid only for update or add_activity"
     });
   }
 });
-var startTaskSchema = z71.object({
-  taskId: z71.string().trim().min(1).describe("ID of the persisted TaskItem to start"),
-  agentId: z71.string().trim().min(1).describe("ID of the Agent that should execute the task")
+var startTaskSchema = z70.object({
+  taskId: z70.string().trim().min(1).describe("ID of the persisted TaskItem to start"),
+  agentId: z70.string().trim().min(1).describe("ID of the Agent that should execute the task")
 });
 function mergeTaskUpdateWarnings(existing, added) {
   const warnings = [...existing ?? [], ...added ?? []];
@@ -39531,6 +39527,15 @@ function createTaskMiddleware(options = {}) {
           });
         }
         const title = input.title;
+        let createScopeWorkspaceId = workspaceId;
+        let createScopeProjectId = projectId;
+        if (!trustedProject && !delegatedTaskId && input.parentId && (!createScopeWorkspaceId || !createScopeProjectId)) {
+          const parentTask = await store.getById(tenantId2, input.parentId);
+          if (parentTask) {
+            createScopeWorkspaceId = createScopeWorkspaceId ?? parentTask.workspaceId;
+            createScopeProjectId = createScopeProjectId ?? parentTask.projectId;
+          }
+        }
         const effectiveOwnerType = delegatedTaskId ? "agent" : trustedProject ? "agent" : input.ownerType || "user";
         const effectiveOwnerId = delegatedTaskId ? rc.assistant_id : ownerId;
         if (delegatedTaskId && !effectiveOwnerId) {
@@ -39605,7 +39610,7 @@ function createTaskMiddleware(options = {}) {
             store,
             tenantId2,
             delegatedTaskId,
-            { workspaceId, projectId },
+            { workspaceId: createScopeWorkspaceId, projectId: createScopeProjectId },
             input.parentId,
             input.dependencies
           );
@@ -39614,7 +39619,7 @@ function createTaskMiddleware(options = {}) {
         const referenceError = await validateReferencedTasks(
           store,
           tenantId2,
-          { workspaceId, projectId },
+          { workspaceId: createScopeWorkspaceId, projectId: createScopeProjectId },
           input.parentId,
           input.dependencies
         );
@@ -39631,7 +39636,7 @@ function createTaskMiddleware(options = {}) {
           const dependencyError = await validateEffectiveDependencies(
             store,
             tenantId2,
-            { workspaceId, projectId },
+            { workspaceId: createScopeWorkspaceId, projectId: createScopeProjectId },
             input.dependencies
           );
           if (dependencyError) return dependencyError;
@@ -39679,8 +39684,8 @@ function createTaskMiddleware(options = {}) {
             dependencies: input.dependencies,
             result: input.result,
             failureReason: input.failureReason,
-            workspaceId,
-            projectId,
+            workspaceId: createScopeWorkspaceId,
+            projectId: createScopeProjectId,
             files: input.files
           });
         };
@@ -39874,7 +39879,7 @@ function createTaskMiddleware(options = {}) {
         if (delegatedTaskId && input.id !== delegatedTaskId) {
           return delegatedTaskScopeError(delegatedTaskId);
         }
-        const existing = await store.getById(tenantId2, input.id);
+        let existing = await store.getById(tenantId2, input.id);
         if (!existing) {
           return JSON.stringify({
             success: false,
@@ -39916,15 +39921,6 @@ function createTaskMiddleware(options = {}) {
         }
         const isAgentTask = existing.ownerType === "agent";
         const candidateReviewInterruption = input.status === "interrupted" && input.context?.interruption && typeof input.context.interruption === "object" && input.context.interruption.type === "review_required" && !!input.result?.trim() && !!input.beliefImpact?.length;
-        const trustedLifecycleInterruption = !!trustedProject && input.status === "interrupted" && input.context?.interruption && typeof input.context.interruption === "object";
-        if (isAgentTask && input.context !== void 0 && !candidateReviewInterruption && !trustedLifecycleInterruption) {
-          return JSON.stringify({
-            success: false,
-            code: "TASK_LIFECYCLE_CONTEXT_PROTECTED",
-            error: "Agent task context is owned by the task lifecycle service.",
-            hint: "Use lifecycle status inputs without context; the service preserves thread and interruption audit data."
-          });
-        }
         const changesOwnerType = input.ownerType !== void 0 && input.ownerType !== existing.ownerType;
         const changesAgentIdentity = isAgentTask && (input.ownerId !== void 0 && input.ownerId !== existing.ownerId || input.parentId !== void 0 && input.parentId !== existing.parentId);
         if (changesOwnerType || changesAgentIdentity) {
@@ -39954,14 +39950,6 @@ function createTaskMiddleware(options = {}) {
             hint: "Persist ownership or parent changes separately before changing lifecycle or task content."
           });
         }
-        if (isAgentTask && input.description !== void 0 && input.status !== void 0) {
-          return JSON.stringify({
-            success: false,
-            code: "AGENT_TASK_LIFECYCLE_REQUIRED",
-            error: "Agent description and status updates must be separate operations.",
-            hint: "Reconcile the description first, then issue the lifecycle status update."
-          });
-        }
         const actor = trustedActor(trustedProject, rc) ?? (existing.ownerType === "agent" ? `agent:${existing.ownerId}` : `user:${existing.ownerId ?? ownerId}`);
         const threadId = trustedProject?.projectTask?.threadId ?? (trustedProject?.projectRoom ? void 0 : input.sourceId ?? rc.thread_id);
         const lifecycle = isAgentTask ? createTaskLifecycleService({
@@ -39972,29 +39960,36 @@ function createTaskMiddleware(options = {}) {
           if (result.success && result.mutated) markMutation();
           return lifecycleResponse(input.id, result, extra);
         };
+        const hasCarriedContentFields = () => ["title", "description", "priority", "dueDate", "metadata", "files"].some((key4) => input[key4] !== void 0);
         if (lifecycle && input.status === "failed") {
           await validateExecutionResult();
           const callerError = await revalidateCaller();
           if (callerError) return callerError;
-          return lifecycleMutationResponse(await lifecycle.failTask({
+          const failed = await lifecycle.failTask({
             tenantId: tenantId2,
             taskId: input.id,
             failureReason: input.failureReason ?? existing.failureReason ?? "",
             actor,
             threadId
-          }));
+          });
+          if (!failed.success) return lifecycleMutationResponse(failed);
+          if (trustedProject || !hasCarriedContentFields()) return lifecycleMutationResponse(failed);
+          existing = { ...existing, status: input.status };
         }
         if (lifecycle && input.status === "cancelled") {
           await validateExecutionResult();
           const callerError = await revalidateCaller();
           if (callerError) return callerError;
-          return lifecycleMutationResponse(await lifecycle.cancelTask({
+          const cancelled = await lifecycle.cancelTask({
             tenantId: tenantId2,
             taskId: input.id,
             actor,
             threadId,
             summary: input.summary
-          }));
+          });
+          if (!cancelled.success) return lifecycleMutationResponse(cancelled);
+          if (trustedProject || !hasCarriedContentFields()) return lifecycleMutationResponse(cancelled);
+          existing = { ...existing, status: input.status };
         }
         if (lifecycle && input.status === "interrupted" && !(input.context?.interruption && typeof input.context.interruption === "object" && input.context.interruption.type === "review_required")) {
           const interruption = input.context?.interruption;
@@ -40010,7 +40005,7 @@ function createTaskMiddleware(options = {}) {
           await validateExecutionResult();
           const callerError = await revalidateCaller();
           if (callerError) return callerError;
-          return lifecycleMutationResponse(await lifecycle.interruptTask({
+          const interrupted = await lifecycle.interruptTask({
             tenantId: tenantId2,
             taskId: input.id,
             type,
@@ -40018,40 +40013,52 @@ function createTaskMiddleware(options = {}) {
             actor,
             threadId,
             dependencyTaskIds: input.dependencyTaskIds
-          }));
+          });
+          if (!interrupted.success) return lifecycleMutationResponse(interrupted);
+          if (trustedProject || !hasCarriedContentFields()) return lifecycleMutationResponse(interrupted);
+          existing = { ...existing, status: input.status };
         }
         if (lifecycle && input.status === "in_progress" && existing.status === "interrupted") {
           await validateExecutionResult();
           const callerError = await revalidateCaller();
           if (callerError) return callerError;
-          return lifecycleMutationResponse(await lifecycle.resumeInterruption({
+          const resumed = await lifecycle.resumeInterruption({
             tenantId: tenantId2,
             taskId: input.id,
             actor,
             threadId
-          }));
+          });
+          if (!resumed.success) return lifecycleMutationResponse(resumed);
+          if (trustedProject || !hasCarriedContentFields()) return lifecycleMutationResponse(resumed);
+          existing = { ...existing, status: input.status };
         }
         if (lifecycle && input.status === "in_progress" && existing.status === "pending") {
           await validateExecutionResult();
           const callerError = await revalidateCaller();
           if (callerError) return callerError;
-          return lifecycleMutationResponse(await lifecycle.startTask({
+          const started = await lifecycle.startTask({
             tenantId: tenantId2,
             taskId: input.id,
             actor,
             threadId
-          }));
+          });
+          if (!started.success) return lifecycleMutationResponse(started);
+          if (trustedProject || !hasCarriedContentFields()) return lifecycleMutationResponse(started);
+          existing = { ...existing, status: input.status };
         }
         if (lifecycle && input.status === "in_progress" && existing.status === "failed") {
           await validateExecutionResult();
           const callerError = await revalidateCaller();
           if (callerError) return callerError;
-          return lifecycleMutationResponse(await lifecycle.retryTask({
+          const retried = await lifecycle.retryTask({
             tenantId: tenantId2,
             taskId: input.id,
             actor,
             threadId
-          }));
+          });
+          if (!retried.success) return lifecycleMutationResponse(retried);
+          if (trustedProject || !hasCarriedContentFields()) return lifecycleMutationResponse(retried);
+          existing = { ...existing, status: input.status };
         }
         if (isAgentTask && input.requireReview === true && options.reviewMode !== "hitl") {
           return reviewModeDisabledResponse();
@@ -40172,7 +40179,8 @@ function createTaskMiddleware(options = {}) {
           return JSON.stringify({
             success: false,
             code: "AGENT_TASK_LIFECYCLE_REQUIRED",
-            error: `Agent task lifecycle cannot transition from '${existing.status}' to '${input.status}'.`
+            error: `Agent task lifecycle cannot transition from '${existing.status}' to '${input.status}'.`,
+            hint: "Valid transitions: pending\u2192in_progress, in_progress\u2192completed (requires result + beliefImpact), in_progress\u2192failed (requires failureReason), in_progress\u2192cancelled, in_progress\u2192interrupted. Check the current status with manage_task get first."
           });
         }
         const persistedStatus = input.status;
@@ -40395,8 +40403,8 @@ function createTaskMiddleware(options = {}) {
         if (!existing) {
           return JSON.stringify({
             success: false,
-            error: `Task '${input.id}' not found or could not be deleted`,
-            hint: "Use list to verify the task exists"
+            error: `Task '${input.id}' not found`,
+            hint: "Use list to see available tasks and their IDs"
           });
         }
         if (!taskMatchesRuntimeScope3(existing, workspaceId, projectId)) {
@@ -40579,7 +40587,7 @@ function createTaskMiddleware(options = {}) {
       callerThreadId: rc.thread_id
     }));
   };
-  return createMiddleware23({
+  return createMiddleware22({
     name: "TaskMiddleware",
     contextSchema,
     wrapModelCall: async (request, handler) => {
@@ -40620,7 +40628,7 @@ ${TASK_CONVERGENCE_GUIDANCE}
       });
     },
     tools: [
-      tool66(
+      tool65(
         handleManageTask,
         {
           name: "manage_task",
@@ -40654,7 +40662,7 @@ pending/in_progress, then complete them separately.`,
           schema: manageTaskSchema
         }
       ),
-      tool66(handleStartTask, {
+      tool65(handleStartTask, {
         name: "task",
         description: "Start a persisted TaskItem with any Agent in a fresh isolated thread and return an observation plus executionResultId; the caller passes that exact ID to the manage_task update or add_activity that interprets it.",
         schema: startTaskSchema
@@ -40792,8 +40800,8 @@ canonical Belief State:
 };
 
 // src/middlewares/evalMiddleware.ts
-import { createMiddleware as createMiddleware24, tool as tool67 } from "langchain";
-import { z as z72 } from "zod";
+import { createMiddleware as createMiddleware23, tool as tool66 } from "langchain";
+import { z as z71 } from "zod";
 import { v4 as uuidv48 } from "uuid";
 
 // src/middlewares/evalSkills.ts
@@ -41012,8 +41020,8 @@ async function runWithResults(tid, store, svc, run, runnerAlive) {
   return { ...run, runnerAlive, results };
 }
 function createReadEvalTool() {
-  const schema6 = z72.object({
-    action: z72.enum([
+  const schema6 = z71.object({
+    action: z71.enum([
       "list_projects",
       "get_project",
       "list_suites",
@@ -41025,13 +41033,13 @@ function createReadEvalTool() {
       "get_run_results",
       "get_project_report"
     ]).describe("Operation"),
-    projectId: z72.string().optional(),
-    suiteId: z72.string().optional(),
-    caseId: z72.string().optional(),
-    runId: z72.string().optional(),
-    status: z72.string().optional().describe("Filter: running|completed|failed|aborted")
+    projectId: z71.string().optional(),
+    suiteId: z71.string().optional(),
+    caseId: z71.string().optional(),
+    runId: z71.string().optional(),
+    status: z71.string().optional().describe("Filter: running|completed|failed|aborted")
   });
-  return tool67(
+  return tool66(
     async (input, exeConfig) => {
       const tid = tenantId(exeConfig);
       if (!tid) {
@@ -41113,8 +41121,8 @@ ACTIONS:
   );
 }
 function createManageEvalTool() {
-  const schema6 = z72.object({
-    action: z72.enum([
+  const schema6 = z71.object({
+    action: z71.enum([
       "create_project",
       "update_project",
       "delete_project",
@@ -41125,26 +41133,26 @@ function createManageEvalTool() {
       "update_case",
       "delete_case"
     ]).describe("Operation"),
-    projectId: z72.string().optional(),
-    name: z72.string().optional(),
-    description: z72.string().optional(),
-    judgeModelKey: z72.string().optional(),
-    concurrency: z72.number().optional(),
-    targetAgentId: z72.string().optional().describe("Optional for create_project \u2014 the agent this eval project verifies. Recorded in targetServerConfig so the agent's detail page can find its eval data without relying on project naming."),
-    suiteId: z72.string().optional(),
-    caseId: z72.string().optional(),
-    inputMessage: z72.string().optional(),
-    inputFiles: z72.record(z72.string()).optional(),
-    steps: z72.array(z72.object({ agent_id: z72.string(), override_message: z72.string().optional() })).optional(),
-    outputType: z72.enum(["file_content", "message_content"]).optional(),
-    contentAssertion: z72.string().optional(),
-    rubrics: z72.array(z72.object({ name: z72.string(), weight: z72.number(), description: z72.string() })).optional(),
-    interruptPolicy: z72.object({
-      mode: z72.enum(["stop", "auto-approve", "auto-reject", "canned-response"]).describe("stop=judge the pause; auto-approve/auto-reject/canned-response=resume the agent to test the flow after the human input"),
-      value: z72.string().optional().describe("Response to inject (defaults: \u540C\u610F / \u62D2\u7EDD; required for canned-response)")
+    projectId: z71.string().optional(),
+    name: z71.string().optional(),
+    description: z71.string().optional(),
+    judgeModelKey: z71.string().optional(),
+    concurrency: z71.number().optional(),
+    targetAgentId: z71.string().optional().describe("Optional for create_project \u2014 the agent this eval project verifies. Recorded in targetServerConfig so the agent's detail page can find its eval data without relying on project naming."),
+    suiteId: z71.string().optional(),
+    caseId: z71.string().optional(),
+    inputMessage: z71.string().optional(),
+    inputFiles: z71.record(z71.string()).optional(),
+    steps: z71.array(z71.object({ agent_id: z71.string(), override_message: z71.string().optional() })).optional(),
+    outputType: z71.enum(["file_content", "message_content"]).optional(),
+    contentAssertion: z71.string().optional(),
+    rubrics: z71.array(z71.object({ name: z71.string(), weight: z71.number(), description: z71.string() })).optional(),
+    interruptPolicy: z71.object({
+      mode: z71.enum(["stop", "auto-approve", "auto-reject", "canned-response"]).describe("stop=judge the pause; auto-approve/auto-reject/canned-response=resume the agent to test the flow after the human input"),
+      value: z71.string().optional().describe("Response to inject (defaults: \u540C\u610F / \u62D2\u7EDD; required for canned-response)")
     }).optional().describe("Optional for create_case/update_case \u2014 how HITL interrupts are handled")
   });
-  return tool67(
+  return tool66(
     async (input, exeConfig) => {
       const tid = tenantId(exeConfig);
       if (!tid) {
@@ -41253,17 +41261,17 @@ Case: create_case(suiteId, inputMessage, steps, outputType, contentAssertion, in
   );
 }
 function createRunEvalTool() {
-  const schema6 = z72.object({
-    action: z72.enum(["start", "status", "resume", "abort"]).describe("Operation"),
-    projectId: z72.string().optional().describe("Required for start"),
-    suiteIds: z72.array(z72.string()).optional().describe("Optional for start \u2014 only run these suites (e.g. dev set only). Omit to run all."),
-    caseIds: z72.array(z72.string()).optional().describe("Optional for start \u2014 only run these cases across the selected suites. Omit to run all cases in those suites."),
-    runId: z72.string().optional().describe("Required for status, resume, abort"),
-    taskId: z72.string().optional().describe("Optional for start \u2014 training task ID this run belongs to (round association)"),
-    sleepMs: z72.number().int().min(0).max(12e4).optional().describe("Optional for status \u2014 sleep this many ms BEFORE checking the run, to pace polling (e.g. 15000 \u2192 30000 \u2192 60000 \u2192 120000). Omit to check immediately."),
-    wait: z72.boolean().optional().describe("Optional for start \u2014 defaults to true: block synchronously (up to ~150s) and return final results in one call. Set false to return the runId immediately and poll.")
+  const schema6 = z71.object({
+    action: z71.enum(["start", "status", "resume", "abort"]).describe("Operation"),
+    projectId: z71.string().optional().describe("Required for start"),
+    suiteIds: z71.array(z71.string()).optional().describe("Optional for start \u2014 only run these suites (e.g. dev set only). Omit to run all."),
+    caseIds: z71.array(z71.string()).optional().describe("Optional for start \u2014 only run these cases across the selected suites. Omit to run all cases in those suites."),
+    runId: z71.string().optional().describe("Required for status, resume, abort"),
+    taskId: z71.string().optional().describe("Optional for start \u2014 training task ID this run belongs to (round association)"),
+    sleepMs: z71.number().int().min(0).max(12e4).optional().describe("Optional for status \u2014 sleep this many ms BEFORE checking the run, to pace polling (e.g. 15000 \u2192 30000 \u2192 60000 \u2192 120000). Omit to check immediately."),
+    wait: z71.boolean().optional().describe("Optional for start \u2014 defaults to true: block synchronously (up to ~150s) and return final results in one call. Set false to return the runId immediately and poll.")
   });
-  return tool67(
+  return tool66(
     withToolTimeout(
       async (input, exeConfig) => {
         const tid = tenantId(exeConfig);
@@ -41394,7 +41402,7 @@ var evalPlugin = {
     defaultConfig: {}
   },
   skills: EVAL_SKILLS,
-  middleware: () => createMiddleware24({
+  middleware: () => createMiddleware23({
     name: "EvalMiddleware",
     tools: [createReadEvalTool(), createManageEvalTool(), createRunEvalTool()]
   })
@@ -41402,7 +41410,7 @@ var evalPlugin = {
 
 // src/middlewares/documentLearningMiddleware.ts
 import { AgentType as AgentType9 } from "@axiom-lattice/protocols";
-import { createMiddleware as createMiddleware25 } from "langchain";
+import { createMiddleware as createMiddleware24 } from "langchain";
 
 // src/middlewares/documentLearningSkills.ts
 var LEARN_CAPABILITY_SKILL = `---
@@ -41478,6 +41486,10 @@ never plain text. One question per tool call.
 safety boundary): the target identity exists and is fixed. Preserve the IDs. Confirm only
 material-boundary decisions. After architecture approval, apply reversible in-contract updates
 without routine renewed confirmation; every material boundary requires HITL or human confirmation.
+The bound tracking Task is your main task and belief root: reconcile its description before
+creating children \u2014 write the confirmed Objective, Acceptance Criteria, and Belief State once the
+Goal Model is confirmed, and keep reconciling the same task as evidence arrives. Never create a
+parallel main task under it; children are only independently verifiable outcomes.
 If the exact bound target is missing or cannot be loaded \u2192 hard stop: update the tracking task with status
 "interrupted" and a recovery condition. NEVER create a replacement.
 
@@ -41610,7 +41622,7 @@ patterns discovered, recommendations. Include validation coverage: user-sample N
 `;
 
 // src/middlewares/documentLearningMiddleware.ts
-var createDocumentLearningMiddleware = () => createMiddleware25({
+var createDocumentLearningMiddleware = () => createMiddleware24({
   name: "DocumentLearningMiddleware",
   contextSchema,
   tools: []
@@ -41728,12 +41740,12 @@ var documentLearningPlugin = {
 };
 
 // src/middlewares/documentParserMiddleware.ts
-import { createMiddleware as createMiddleware26 } from "langchain";
+import { createMiddleware as createMiddleware25 } from "langchain";
 
 // src/tool_lattice/document_parser/index.ts
 import * as path7 from "path";
-import z73 from "zod";
-import { tool as tool68 } from "langchain";
+import z72 from "zod";
+import { tool as tool67 } from "langchain";
 var PARSE_DOCUMENT_DESCRIPTION = `Parse a document file (docx, pdf) into structured Markdown using a remote document parsing service.
 This tool handles the full pipeline internally: file upload \u2192 document parsing \u2192 polling until complete \u2192 download result \u2192 save to filesystem.
 
@@ -41856,7 +41868,7 @@ function createParseDocumentTool({
   baseUrl = "",
   apiKey = ""
 }) {
-  return tool68(
+  return tool67(
     async (input, exe_config) => {
       try {
         const runConfig = exe_config?.configurable?.runConfig ?? { assistant_id: "", thread_id: "" };
@@ -41927,17 +41939,17 @@ function createParseDocumentTool({
     {
       name: "parse_document",
       description: PARSE_DOCUMENT_DESCRIPTION,
-      schema: z73.object({
-        file_path: z73.string().describe(
+      schema: z72.object({
+        file_path: z72.string().describe(
           'Absolute path to the document file. Must point to an existing .docx or .pdf file. Example: "/project/reports/contract.docx". The file must be accessible from the current workspace.'
         ),
-        engine: z73.string().describe(
+        engine: z72.string().describe(
           'Parsing engine to use. Available options: "textin" (recommended, works with local files, supports docx/pdf), "datalab" (alternative engine for docx/pdf), "mineru" (requires public URL, use only if textin/datalab fail), "paddleocr_remote" (PaddleOCR, good for scanned documents), "qwen_ocr" (OCR-focused, best for image-heavy PDFs).'
         ),
-        output_path: z73.string().optional().describe(
+        output_path: z72.string().optional().describe(
           'Path to save the parsed result. If not specified, the input extension is replaced with .md. Example: "/project/report.docx" becomes "/project/report.md". Parent directories are created automatically.'
         ),
-        output_format: z73.enum(["markdown", "json"]).optional().default("markdown").describe(
+        output_format: z72.enum(["markdown", "json"]).optional().default("markdown").describe(
           'Output format. "markdown": structured Markdown with tables, headers, formatting preserved (recommended). "json": raw JSON output from the parsing engine (for programmatic use).'
         )
       })
@@ -42393,7 +42405,7 @@ function createDocumentParserMiddleware(config) {
   const baseUrl = config.baseUrl || "";
   const apiKey = config.apiKey || "";
   const connections = Array.isArray(config.connections) ? config.connections.filter((key4) => typeof key4 === "string") : [];
-  return createMiddleware26({
+  return createMiddleware25({
     name: "DocumentParser",
     contextSchema,
     tools: [createParseDocumentTool({ connectAll, connections, baseUrl, apiKey })]
@@ -42505,6 +42517,180 @@ var documentParserPlugin = {
   }
 };
 
+// src/middlewares/projectRoomMiddleware.ts
+import { createHash as createHash6 } from "crypto";
+import {
+  descriptorDataValue as descriptorDataValue2,
+  parseTrustedRunContext as parseTrustedRunContext3,
+  snapshotExactArray as snapshotExactArray3,
+  snapshotExactRecord as snapshotExactRecord8
+} from "@axiom-lattice/protocols";
+import { createMiddleware as createMiddleware26, tool as tool68 } from "langchain";
+import { z as z73 } from "zod";
+var PROJECT_ROOM_CONTEXT_REQUIRED = "PROJECT_ROOM_CONTEXT_REQUIRED";
+var PROJECT_ROOM_POST_FAILED = "PROJECT_ROOM_POST_FAILED";
+var PROJECT_ROOM_ROSTER_FAILED = "PROJECT_ROOM_ROSTER_FAILED";
+var PROJECT_ROOM_POST_FAILED_MESSAGE = "Project room message could not be posted";
+var PROJECT_ROOM_ROSTER_FAILED_MESSAGE = "Project room roster is unavailable";
+var CONTEXT_REQUIRED = JSON.stringify({
+  success: false,
+  error: PROJECT_ROOM_CONTEXT_REQUIRED
+});
+var POST_FAILED = JSON.stringify({
+  success: false,
+  error: PROJECT_ROOM_POST_FAILED,
+  message: PROJECT_ROOM_POST_FAILED_MESSAGE
+});
+var ROSTER_FAILED = JSON.stringify({
+  success: false,
+  error: PROJECT_ROOM_ROSTER_FAILED,
+  message: PROJECT_ROOM_ROSTER_FAILED_MESSAGE
+});
+var postSchema = z73.object({
+  text: z73.string().trim().min(1).max(2e4)
+}).strict();
+var listSchema = z73.object({}).strict();
+function ownDataValue2(record, key4) {
+  if (typeof record !== "object" || record === null || Array.isArray(record)) return void 0;
+  try {
+    const descriptor = Object.getOwnPropertyDescriptor(record, key4);
+    return descriptorDataValue2(descriptor)?.value;
+  } catch {
+    return void 0;
+  }
+}
+function readTrustedRoomScope(config) {
+  const configurable = ownDataValue2(config, "configurable");
+  const runConfig = ownDataValue2(configurable, "runConfig");
+  const projectRoom = ownDataValue2(runConfig, "projectRoom");
+  try {
+    return parseTrustedRunContext3({ projectRoom }).projectRoom;
+  } catch {
+    return void 0;
+  }
+}
+function exactValues2(value, required, optional = []) {
+  try {
+    return snapshotExactRecord8(value, required, optional);
+  } catch {
+    return void 0;
+  }
+}
+function safeDate(value) {
+  try {
+    const timestamp = Date.prototype.getTime.call(value);
+    return Number.isFinite(timestamp) ? new Date(timestamp) : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function snapshotMembership3(value) {
+  const required = [
+    "id",
+    "tenantId",
+    "workspaceId",
+    "projectId",
+    "roomId",
+    "assistantId",
+    "role",
+    "title",
+    "mentionName",
+    "status",
+    "roomThreadId",
+    "joinedAt",
+    "updatedAt"
+  ];
+  const values = exactValues2(value, required, ["responsibility"]);
+  const joinedAt = safeDate(values?.joinedAt);
+  const updatedAt = safeDate(values?.updatedAt);
+  if (!values || !joinedAt || !updatedAt || required.slice(0, 6).some((key4) => typeof values[key4] !== "string" || values[key4] === "") || values.role !== "coordinator" && values.role !== "specialist" || typeof values.title !== "string" || values.title === "" || typeof values.mentionName !== "string" || values.mentionName === "" || !["active", "paused", "removed"].includes(values.status) || typeof values.roomThreadId !== "string" || values.roomThreadId === "" || values.responsibility !== void 0 && typeof values.responsibility !== "string") return void 0;
+  return { ...values, joinedAt, updatedAt };
+}
+function snapshotRows(value) {
+  return snapshotExactArray3(value) ?? [];
+}
+async function hasActiveCurrentMembership(scope) {
+  const memberships = getStoreLattice("default", "projectBotMembership").store;
+  const member = snapshotMembership3(await memberships.findById(scope.tenantId, scope.membershipId));
+  if (!member || member.status !== "active" || member.id !== scope.membershipId || member.tenantId !== scope.tenantId || member.workspaceId !== scope.workspaceId || member.projectId !== scope.projectId || member.roomId !== scope.roomId || member.assistantId !== scope.assistantId) return false;
+  return true;
+}
+function createProjectRoomMiddleware() {
+  return createMiddleware26({
+    name: "ProjectRoomMiddleware",
+    tools: [
+      tool68(async (input, config) => {
+        const { text } = input;
+        const scope = readTrustedRoomScope(config);
+        if (!scope) return CONTEXT_REQUIRED;
+        const digest = createHash6("sha256").update(text).digest("hex");
+        try {
+          const service2 = new RoomAgentMessageService({
+            memberships: getStoreLattice("default", "projectBotMembership").store,
+            messages: getStoreLattice("default", "projectRoomMessage").store
+          });
+          await service2.post({
+            tenantId: scope.tenantId,
+            workspaceId: scope.workspaceId,
+            projectId: scope.projectId,
+            roomId: scope.roomId,
+            membershipId: scope.membershipId,
+            assistantId: scope.assistantId,
+            text,
+            sourceRoomMessageId: scope.sourceRoomMessageId,
+            sourceId: `${scope.inputMessageId}:${digest}`,
+            idempotencyKey: `room-tool:${scope.inputMessageId}:${scope.membershipId}:${digest}`
+          });
+          return JSON.stringify({ success: true, message: "Project room message posted" });
+        } catch {
+          return POST_FAILED;
+        }
+      }, {
+        name: "post_room_message",
+        description: "Post a text reply to the current trusted Project Room message",
+        schema: postSchema
+      }),
+      tool68(async (_input, config) => {
+        const scope = readTrustedRoomScope(config);
+        if (!scope) return CONTEXT_REQUIRED;
+        try {
+          if (!await hasActiveCurrentMembership(scope)) return CONTEXT_REQUIRED;
+          const rows = await getStoreLattice("default", "projectBotMembership").store.list(scope.tenantId, scope.projectId);
+          const members = snapshotRows(rows).map(snapshotMembership3).filter((member) => member !== void 0 && member.status === "active" && member.tenantId === scope.tenantId && member.workspaceId === scope.workspaceId && member.projectId === scope.projectId && member.roomId === scope.roomId).sort((left, right) => left.joinedAt.getTime() - right.joinedAt.getTime() || (left.id < right.id ? -1 : left.id > right.id ? 1 : 0)).map((member) => ({
+            assistantId: member.assistantId,
+            mentionName: member.mentionName,
+            title: member.title,
+            ...member.responsibility === void 0 ? {} : { responsibility: member.responsibility },
+            role: member.role
+          }));
+          return JSON.stringify({ success: true, members });
+        } catch {
+          return ROSTER_FAILED;
+        }
+      }, {
+        name: "list_room_roster",
+        description: "List active Agent roles in the current trusted Project Room, including assistantId for delegation",
+        schema: listSchema
+      })
+    ]
+  });
+}
+var projectRoomPlugin = {
+  meta: {
+    type: "project_room",
+    category: "assistant",
+    name: "Project Room",
+    description: "Trusted Project Room posting and active roster tools",
+    tools: [
+      { name: "post_room_message", description: "Post to the current trusted Project Room" },
+      { name: "list_room_roster", description: "List active Agents in the current trusted Project Room" }
+    ],
+    configSchema: { type: "object", properties: {}, additionalProperties: false },
+    defaultConfig: {}
+  },
+  middleware: () => createProjectRoomMiddleware()
+};
+
 // src/plugin/BuiltinPlugins.ts
 var BUILTIN_PLUGINS = [
   filesystemPlugin,
@@ -42976,7 +43162,7 @@ export {
   ExportableEntityRegistry,
   FileSystemSkillStore,
   FilesystemBackend,
-  HumanMessage7 as HumanMessage,
+  HumanMessage6 as HumanMessage,
   IdRemapper,
   InMemoryA2AApiKeyStore,
   InMemoryAgentWebAppStore,