@axiom-lattice/gateway 4.10.2 → 5.0.0

package/dist/index.js

@@ -38,21 +38,21 @@ __export(collection_service_exports, {
 function getTenantId5(request) {
   return request.user?.tenantId || request.headers["x-tenant-id"] || "default";
 }
-var import_uuid2, import_documents, import_core11, CollectionService;
+var import_uuid2, import_documents, import_core12, CollectionService;
 var init_collection_service = __esm({
   "src/services/collection_service.ts"() {
     "use strict";
     import_uuid2 = require("uuid");
     import_documents = require("@langchain/core/documents");
-    import_core11 = require("@axiom-lattice/core");
+    import_core12 = require("@axiom-lattice/core");
     CollectionService = class {
       // ─── Collection CRUD ──────────────────────────────────────────
       async getAllCollections(request) {
         const tenantId = getTenantId5(request);
-        const collections = await import_core11.collectionLatticeManager.getAllCollections(tenantId);
+        const collections = await import_core12.collectionLatticeManager.getAllCollections(tenantId);
         for (const c2 of collections) {
           try {
-            c2._entryCount = await (0, import_core11.getCollectionEntryCount)(c2.name, c2.embeddingKey, c2.tenantId);
+            c2._entryCount = await (0, import_core12.getCollectionEntryCount)(c2.name, c2.embeddingKey, c2.tenantId);
           } catch {
             c2._entryCount = 0;
           }
@@ -61,13 +61,13 @@ var init_collection_service = __esm({
       }
       async getCollectionByName(request, name) {
         const tenantId = getTenantId5(request);
-        return import_core11.collectionLatticeManager.getCollection(tenantId, name);
+        return import_core12.collectionLatticeManager.getCollection(tenantId, name);
       }
       async createCollection(request, data) {
         const tenantId = getTenantId5(request);
-        const collection = await import_core11.collectionLatticeManager.registerCollection(tenantId, data);
+        const collection = await import_core12.collectionLatticeManager.registerCollection(tenantId, data);
         try {
-          await (0, import_core11.getOrCreateCollectionVectorStore)(data.name, data.embeddingKey, tenantId);
+          await (0, import_core12.getOrCreateCollectionVectorStore)(data.name, data.embeddingKey, tenantId);
         } catch (err) {
           console.warn(`[CollectionService] Failed to init vector store for ${data.name}:`, err);
         }
@@ -75,18 +75,18 @@ var init_collection_service = __esm({
       }
       async updateCollection(request, name, updates) {
         const tenantId = getTenantId5(request);
-        return import_core11.collectionLatticeManager.updateCollection(tenantId, name, updates);
+        return import_core12.collectionLatticeManager.updateCollection(tenantId, name, updates);
       }
       async deleteCollection(request, name) {
         const tenantId = getTenantId5(request);
-        await (0, import_core11.removeCollectionVectorStore)(name, tenantId);
-        return import_core11.collectionLatticeManager.removeCollection(tenantId, name);
+        await (0, import_core12.removeCollectionVectorStore)(name, tenantId);
+        return import_core12.collectionLatticeManager.removeCollection(tenantId, name);
       }
       // ─── Entry CRUD ───────────────────────────────────────────────
       async getEntries(request, collectionName) {
         const collection = await this.getCollectionByName(request, collectionName);
         if (!collection) throw new Error(`Collection "${collectionName}" not found`);
-        const docs = await (0, import_core11.listCollectionEntries)(collectionName, collection.embeddingKey, collection.tenantId);
+        const docs = await (0, import_core12.listCollectionEntries)(collectionName, collection.embeddingKey, collection.tenantId);
         return docs.map((doc) => ({
           id: doc.metadata._id || "",
           content: doc.pageContent,
@@ -98,7 +98,7 @@ var init_collection_service = __esm({
       async createEntry(request, collectionName, data) {
         const collection = await this.getCollectionByName(request, collectionName);
         if (!collection) throw new Error(`Collection "${collectionName}" not found`);
-        const vectorStore = await (0, import_core11.getOrCreateCollectionVectorStore)(
+        const vectorStore = await (0, import_core12.getOrCreateCollectionVectorStore)(
           collectionName,
           collection.embeddingKey,
           collection.tenantId
@@ -120,7 +120,7 @@ var init_collection_service = __esm({
       async getEntry(request, collectionName, entryId) {
         const collection = await this.getCollectionByName(request, collectionName);
         if (!collection) throw new Error(`Collection "${collectionName}" not found`);
-        const docs = await (0, import_core11.listCollectionEntries)(collectionName, collection.embeddingKey, collection.tenantId);
+        const docs = await (0, import_core12.listCollectionEntries)(collectionName, collection.embeddingKey, collection.tenantId);
         const doc = docs.find((d) => d.metadata._id === entryId);
         if (!doc) return null;
         return {
@@ -136,7 +136,7 @@ var init_collection_service = __esm({
         if (!existing) return null;
         const collection = await this.getCollectionByName(request, collectionName);
         if (!collection) throw new Error(`Collection "${collectionName}" not found`);
-        const vectorStore = await (0, import_core11.getOrCreateCollectionVectorStore)(
+        const vectorStore = await (0, import_core12.getOrCreateCollectionVectorStore)(
           collectionName,
           collection.embeddingKey,
           collection.tenantId
@@ -157,7 +157,7 @@ var init_collection_service = __esm({
       async deleteEntry(request, collectionName, entryId) {
         const collection = await this.getCollectionByName(request, collectionName);
         if (!collection) throw new Error(`Collection "${collectionName}" not found`);
-        const vectorStore = await (0, import_core11.getOrCreateCollectionVectorStore)(
+        const vectorStore = await (0, import_core12.getOrCreateCollectionVectorStore)(
           collectionName,
           collection.embeddingKey,
           collection.tenantId
@@ -172,16 +172,16 @@ var init_collection_service = __esm({
       async searchEntries(request, collectionName, params) {
         const collection = await this.getCollectionByName(request, collectionName);
         if (!collection) throw new Error(`Collection "${collectionName}" not found`);
-        const vectorStore = await (0, import_core11.getOrCreateCollectionVectorStore)(
+        const vectorStore = await (0, import_core12.getOrCreateCollectionVectorStore)(
           collectionName,
           collection.embeddingKey,
           collection.tenantId
         );
         let embeddings;
         try {
-          embeddings = import_core11.embeddingsLatticeManager.getEmbeddingsClient(collection.embeddingKey);
+          embeddings = import_core12.embeddingsLatticeManager.getEmbeddingsClient(collection.embeddingKey);
         } catch {
-          embeddings = import_core11.embeddingsLatticeManager.getEmbeddingsClient("default");
+          embeddings = import_core12.embeddingsLatticeManager.getEmbeddingsClient("default");
         }
         const queryVector = await embeddings.embedQuery(params.query);
         const results = await vectorStore.similaritySearchVectorWithScore(
@@ -318,7 +318,7 @@ function secret() {
 function signOpenToken(payload) {
   const data = { ...payload, exp: payload.exp ?? Date.now() + 15 * 60 * 1e3 };
   const encoded = Buffer.from(JSON.stringify(data)).toString("base64url");
-  const sig = (0, import_crypto5.createHmac)("sha256", secret()).update(encoded).digest("base64url");
+  const sig = (0, import_crypto4.createHmac)("sha256", secret()).update(encoded).digest("base64url");
   return `${encoded}.${sig}`;
 }
 function verifyOpenToken(bearer) {
@@ -330,8 +330,8 @@ function verifyOpenToken(bearer) {
   try {
     const actual = Buffer.from(sigStr, "base64url");
     if (actual.toString("base64url") !== sigStr) return null;
-    const expected = (0, import_crypto5.createHmac)("sha256", secret()).update(encoded).digest();
-    if (actual.length !== expected.length || !(0, import_crypto5.timingSafeEqual)(actual, expected)) return null;
+    const expected = (0, import_crypto4.createHmac)("sha256", secret()).update(encoded).digest();
+    if (actual.length !== expected.length || !(0, import_crypto4.timingSafeEqual)(actual, expected)) return null;
     const payload = JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
     if (typeof payload !== "object" || payload === null) return null;
     const p = payload;
@@ -343,11 +343,11 @@ function verifyOpenToken(bearer) {
     return null;
   }
 }
-var import_crypto5;
+var import_crypto4;
 var init_openToken = __esm({
   "src/services/open/openToken.ts"() {
     "use strict";
-    import_crypto5 = require("crypto");
+    import_crypto4 = require("crypto");
   }
 });
 
@@ -415,8 +415,8 @@ function filesystemRootDirectory(tenantId, workspaceId, projectId) {
   return `/lattice_store/tenants/${tenantId}/workspaces/${workspaceId}/${projectId}`;
 }
 async function saveProjectFile(params) {
-  const workspaceStore = (0, import_core24.getStoreLattice)("default", "workspace").store;
-  const projectStore = (0, import_core24.getStoreLattice)("default", "project").store;
+  const workspaceStore = (0, import_core25.getStoreLattice)("default", "workspace").store;
+  const projectStore = (0, import_core25.getStoreLattice)("default", "project").store;
   let workspaceId = params.workspaceId;
   if (!workspaceId) {
     const project = await projectStore.getProjectById(
@@ -442,7 +442,7 @@ async function saveProjectFile(params) {
     throw new ProjectFileValidationError("Invalid filename");
   }
   if (workspace.storageType === "sandbox") {
-    const sandboxManager = (0, import_core24.getSandBoxManager)();
+    const sandboxManager = (0, import_core25.getSandBoxManager)();
     const volumeConfig = {
       assistant_id: params.assistantId || "",
       thread_id: "",
@@ -495,13 +495,13 @@ async function saveProjectFile(params) {
   const uri = path3.posix.join("/", relativeDirectory, filename);
   return { uri, name: filename, size: stat3.size };
 }
-var fs3, path3, import_core24, BINARY_EXTENSIONS, ProjectFileValidationError;
+var fs3, path3, import_core25, BINARY_EXTENSIONS, ProjectFileValidationError;
 var init_workspace_file_service = __esm({
   "src/services/workspace-file-service.ts"() {
     "use strict";
     fs3 = __toESM(require("fs/promises"));
     path3 = __toESM(require("path"));
-    import_core24 = require("@axiom-lattice/core");
+    import_core25 = require("@axiom-lattice/core");
     init_path_containment();
     BINARY_EXTENSIONS = /* @__PURE__ */ new Set([
       "pdf",
@@ -573,13 +573,13 @@ async function invokePluginTool(deps, tenantId, pluginType, name, args, runConte
     maxResultBytes: tool.maxResultBytes
   });
   if (!result.ok) throw new Error(result.error ?? "sandbox plugin execution failed");
-  return result.result === void 0 ? (0, import_core35.handlerResultText)(result) : result.result;
+  return result.result === void 0 ? (0, import_core36.handlerResultText)(result) : result.result;
 }
-var import_core35, PluginToolScopeError;
+var import_core36, PluginToolScopeError;
 var init_pluginToolExecution = __esm({
   "src/services/plugins/pluginToolExecution.ts"() {
     "use strict";
-    import_core35 = require("@axiom-lattice/core");
+    import_core36 = require("@axiom-lattice/core");
     PluginToolScopeError = class extends Error {
       /**
        * @param name - Rejected tool name.
@@ -1145,8 +1145,8 @@ async function refreshStoreKeyMap() {
 function broadcastA2AKeyChanged(tenantId) {
   if (!tenantId) return;
   try {
-    const outbox = (0, import_core58.getStoreLattice)("default", "outbox").store;
-    void publishA2AKeyChanged(outbox, (0, import_core58.getReplicaId)(), tenantId);
+    const outbox = (0, import_core59.getStoreLattice)("default", "outbox").store;
+    void publishA2AKeyChanged(outbox, (0, import_core59.getReplicaId)(), tenantId);
   } catch {
   }
 }
@@ -1322,11 +1322,11 @@ function registerA2ARoutes(app2) {
     );
   }
 }
-var import_core58, _a2aKeyStore, _a2aAuthService;
+var import_core59, _a2aKeyStore, _a2aAuthService;
 var init_a2a = __esm({
   "src/routes/a2a.ts"() {
     "use strict";
-    import_core58 = require("@axiom-lattice/core");
+    import_core59 = require("@axiom-lattice/core");
     init_A2AAuthService();
     init_a2aKeySync();
     _a2aKeyStore = null;
@@ -1543,25 +1543,14 @@ function createTaskRunLiveness() {
   } catch {
     return void 0;
   }
-  return async (task) => {
-    try {
-      const store2 = import_core77.storeLatticeManager.getStoreLattice("default", "lease").store;
-      if (await store2.get((0, import_core77.taskRunLeaseKey)(task.id))) return true;
-      const threadId = typeof task.context?.thread_id === "string" ? task.context.thread_id : void 0;
-      if (threadId && task.ownerId) {
-        if (await store2.get((0, import_core77.threadRunLeaseKey)(task.tenantId, task.ownerId, threadId))) return true;
-      }
-      return false;
-    } catch {
-      return true;
-    }
-  };
+  return (task) => (0, import_core78.isTaskRunLeaseHeld)(task);
 }
-var import_core77;
+var import_core77, import_core78;
 var init_taskRunLiveness = __esm({
   "src/services/collaboration/taskRunLiveness.ts"() {
     "use strict";
     import_core77 = require("@axiom-lattice/core");
+    import_core78 = require("@axiom-lattice/core");
   }
 });
 
@@ -1571,7 +1560,7 @@ __export(OrphanRecoveryRuntime_exports, {
   createOrphanRecoveryRuntime: () => createOrphanRecoveryRuntime
 });
 function createOrphanRecoveryRuntime(deps) {
-  const lifecycle = deps.lifecycle ?? (0, import_core78.createTaskLifecycleService)({
+  const lifecycle = deps.lifecycle ?? (0, import_core79.createTaskLifecycleService)({
     taskStore: deps.taskStore,
     workItemStore: deps.workItemStore
   });
@@ -1579,7 +1568,7 @@ function createOrphanRecoveryRuntime(deps) {
     async recoverAll() {
       const isTaskLive = deps.isTaskLive ?? createTaskRunLiveness();
       return runOrphanRecovery({
-        reconcile: () => (0, import_core78.reconcileAllTenantTaskRuns)({
+        reconcile: () => (0, import_core79.reconcileAllTenantTaskRuns)({
           actor: "system:orphan-recovery",
           tenantStore: {
             listTenants: async () => (await deps.tenantStore.getAllTenants()).map((tenant2) => ({ id: tenant2.id }))
@@ -1605,7 +1594,7 @@ function createOrphanRecoveryRuntime(deps) {
       const isTaskLive = deps.isTaskLive ?? createTaskRunLiveness();
       return recoverTask(task, {
         lifecycle,
-        registry: import_core78.taskRunRegistry,
+        registry: import_core79.taskRunRegistry,
         orphans,
         callerFor: deps.callerFor,
         resume: deps.resume,
@@ -1614,11 +1603,11 @@ function createOrphanRecoveryRuntime(deps) {
     }
   };
 }
-var import_core78;
+var import_core79;
 var init_OrphanRecoveryRuntime = __esm({
   "src/services/collaboration/OrphanRecoveryRuntime.ts"() {
     "use strict";
-    import_core78 = require("@axiom-lattice/core");
+    import_core79 = require("@axiom-lattice/core");
     init_TopCallerRecovery();
     init_projectTaskScope();
     init_taskRunLiveness();
@@ -1634,12 +1623,12 @@ function createRecoveryCallerDeps() {
   return {
     callerFor: async (top, tenantId) => {
       if (!top.assistantId) return void 0;
-      const load = import_core79.getAgentClientAsync ?? import_core79.getAgentClient;
+      const load = import_core80.getAgentClientAsync ?? import_core80.getAgentClient;
       const client = await load(tenantId, top.assistantId);
       const config = { configurable: { thread_id: top.threadId, runConfig: { tenantId, assistant_id: top.assistantId } } };
       let agent;
       try {
-        agent = import_core79.agentInstanceManager.getAgent({ assistant_id: top.assistantId, thread_id: top.threadId, tenant_id: tenantId });
+        agent = import_core80.agentInstanceManager.getAgent({ assistant_id: top.assistantId, thread_id: top.threadId, tenant_id: tenantId });
       } catch {
       }
       return agent ? { client, config, agent } : { client, config };
@@ -1656,11 +1645,11 @@ function createRecoveryCallerDeps() {
     }
   };
 }
-var import_core79;
+var import_core80;
 var init_RecoveryCallerDeps = __esm({
   "src/services/collaboration/RecoveryCallerDeps.ts"() {
     "use strict";
-    import_core79 = require("@axiom-lattice/core");
+    import_core80 = require("@axiom-lattice/core");
   }
 });
 
@@ -2079,13 +2068,13 @@ function isA2ATaskSnapshot(value) {
 function snapshotSequence(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
 }
-var import_node_crypto31, import_node_util, import_core80, TASK_STATUS_TO_A2A_STATE, TITLE_MAX_LENGTH, A2ATaskScopeConflictError, A2ATaskStoreAdapter;
+var import_node_crypto31, import_node_util, import_core81, TASK_STATUS_TO_A2A_STATE, TITLE_MAX_LENGTH, A2ATaskScopeConflictError, A2ATaskStoreAdapter;
 var init_A2ATaskStoreAdapter = __esm({
   "src/services/a2a/A2ATaskStoreAdapter.ts"() {
     "use strict";
     import_node_crypto31 = require("crypto");
     import_node_util = require("util");
-    import_core80 = require("@axiom-lattice/core");
+    import_core81 = require("@axiom-lattice/core");
     TASK_STATUS_TO_A2A_STATE = {
       pending: "submitted",
       in_progress: "working",
@@ -2111,7 +2100,7 @@ var init_A2ATaskStoreAdapter = __esm({
         this.workItemStore = options.workItemStore;
         this.lifecycle = options.lifecycle;
         this.scope = options.scope;
-        this.runBridge = (0, import_core80.createTaskRunBridge)({
+        this.runBridge = (0, import_core81.createTaskRunBridge)({
           lifecycle: this.lifecycle,
           taskStore: this.taskStore,
           workItemStore: this.workItemStore
@@ -2462,12 +2451,12 @@ function assistantHasGovernedTask(assistant) {
   const allowedTools = taskMiddleware?.allowedTools;
   return !!taskMiddleware && (allowedTools === void 0 || Array.isArray(allowedTools) && (allowedTools.length === 0 || allowedTools.includes("manage_task")));
 }
-var import_uuid11, import_core81, import_protocols35, _AxiomAgentExecutor, AxiomAgentExecutor;
+var import_uuid11, import_core82, import_protocols35, _AxiomAgentExecutor, AxiomAgentExecutor;
 var init_AxiomAgentExecutor = __esm({
   "src/services/a2a/AxiomAgentExecutor.ts"() {
     "use strict";
     import_uuid11 = require("uuid");
-    import_core81 = require("@axiom-lattice/core");
+    import_core82 = require("@axiom-lattice/core");
     import_protocols35 = require("@axiom-lattice/protocols");
     init_a2aFileRefs();
     init_task_file_refs();
@@ -2564,7 +2553,7 @@ var init_AxiomAgentExecutor = __esm({
           await this.taskStore.save(initialTask);
           bus.publish(initialTask);
           try {
-            const agent = import_core81.agentInstanceManager.getAgent(this.agentParams(threadId));
+            const agent = import_core82.agentInstanceManager.getAgent(this.agentParams(threadId));
             const requestText = inputFiles.length > 0 ? `${text}
 
 ${formatFileRefsSection(inputFiles)}` : text;
@@ -2752,7 +2741,7 @@ ${formatFileRefsSection(inputFiles)}` : text;
         const threadId = task ? asString2(task.metadata?.threadId) : void 0;
         if (threadId) {
           try {
-            const agent = import_core81.agentInstanceManager.getAgent(this.agentParams(threadId));
+            const agent = import_core82.agentInstanceManager.getAgent(this.agentParams(threadId));
             await agent.abort();
           } catch (err) {
             console.warn({
@@ -3126,10 +3115,10 @@ function isAsyncGenerator(value) {
 }
 function registerA2AStandardRoutes(app2, deps) {
   const authService = deps.authService;
-  const resolveTasks = deps.getTaskStoreLattice ?? (() => (0, import_core82.getStoreLattice)("default", "task").store);
-  const resolveTaskWorkItems = deps.getTaskWorkItemStore ?? (() => (0, import_core82.getStoreLattice)("default", "taskWorkItem").store);
-  const getAssistantStore2 = deps.getAssistantStore ?? (() => (0, import_core82.getStoreLattice)("default", "assistant").store);
-  const getProjectStore2 = deps.getProjectStore ?? (() => (0, import_core82.getStoreLattice)("default", "project").store);
+  const resolveTasks = deps.getTaskStoreLattice ?? (() => (0, import_core83.getStoreLattice)("default", "task").store);
+  const resolveTaskWorkItems = deps.getTaskWorkItemStore ?? (() => (0, import_core83.getStoreLattice)("default", "taskWorkItem").store);
+  const getAssistantStore2 = deps.getAssistantStore ?? (() => (0, import_core83.getStoreLattice)("default", "assistant").store);
+  const getProjectStore2 = deps.getProjectStore ?? (() => (0, import_core83.getStoreLattice)("default", "project").store);
   const runtimeRegistry = deps.runtimeRegistry ?? new A2ARuntimeRegistry();
   app2.addHook("onClose", async () => {
     runtimeRegistry.close();
@@ -3212,7 +3201,7 @@ function registerA2AStandardRoutes(app2, deps) {
       const taskStore = assistantHasGovernedTask(assistant) ? new A2ATaskStoreAdapter({
         taskStore: internalTasks,
         workItemStore: workItems,
-        lifecycle: (0, import_core82.createTaskLifecycleService)({
+        lifecycle: (0, import_core83.createTaskLifecycleService)({
           taskStore: internalTasks,
           workItemStore: workItems
         }),
@@ -3331,7 +3320,7 @@ data: ${JSON.stringify(errorResponse)}
       const taskStore = assistantHasGovernedTask(assistant) ? new A2ATaskStoreAdapter({
         taskStore: internalTasks,
         workItemStore: workItems,
-        lifecycle: (0, import_core82.createTaskLifecycleService)({
+        lifecycle: (0, import_core83.createTaskLifecycleService)({
           taskStore: internalTasks,
           workItemStore: workItems
         }),
@@ -3386,13 +3375,13 @@ data: ${JSON.stringify(data)}
     }
   );
 }
-var import_uuid12, import_server2, import_core82, SSE_HEADERS;
+var import_uuid12, import_server2, import_core83, SSE_HEADERS;
 var init_a2a_standard = __esm({
   "src/routes/a2a-standard.ts"() {
     "use strict";
     import_uuid12 = require("uuid");
     import_server2 = require("@a2a-js/sdk/server");
-    import_core82 = require("@axiom-lattice/core");
+    import_core83 = require("@axiom-lattice/core");
     init_A2AAuthService();
     init_A2AAgentCardBuilder();
     init_A2ATaskStoreAdapter();
@@ -3848,7 +3837,7 @@ async function buildSessionServer(options) {
   }
   const transport = new import_streamableHttp.StreamableHTTPServerTransport({
     sessionIdGenerator: () => {
-      const sessionId = (0, import_crypto13.randomUUID)();
+      const sessionId = (0, import_crypto12.randomUUID)();
       void registerSession(
         sessionId,
         { credentialId: credential.credentialId, kind: credential.kind },
@@ -3865,13 +3854,13 @@ async function buildSessionServer(options) {
   });
   return { server, transport, tools: catalog };
 }
-var import_mcp, import_streamableHttp, import_crypto13, OPEN_MCP_SERVER_INFO;
+var import_mcp, import_streamableHttp, import_crypto12, OPEN_MCP_SERVER_INFO;
 var init_openMcpServer = __esm({
   "src/services/open/openMcpServer.ts"() {
     "use strict";
     import_mcp = require("@modelcontextprotocol/sdk/server/mcp.js");
     import_streamableHttp = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
-    import_crypto13 = require("crypto");
+    import_crypto12 = require("crypto");
     init_mcpTransportRegistry();
     OPEN_MCP_SERVER_INFO = {
       name: "axiom-open",
@@ -3959,8 +3948,8 @@ function exposedDeclarations(plugin) {
   return (plugin.meta.tools ?? []).filter((t2) => t2.expose);
 }
 async function registerExposedPluginTools() {
-  for (const key of import_core83.PluginRegistry.list()) {
-    const plugin = import_core83.PluginRegistry.get(key);
+  for (const key of import_core84.PluginRegistry.list()) {
+    const plugin = import_core84.PluginRegistry.get(key);
     if (!plugin?.middleware) continue;
     const exposed = exposedDeclarations(plugin);
     if (exposed.length === 0) continue;
@@ -3995,8 +3984,8 @@ async function registerExposedPluginTools() {
 }
 function collectExposedPluginUiResources(grants) {
   const resources = /* @__PURE__ */ new Map();
-  for (const type of import_core83.PluginRegistry.list()) {
-    const plugin = import_core83.PluginRegistry.get(type);
+  for (const type of import_core84.PluginRegistry.list()) {
+    const plugin = import_core84.PluginRegistry.get(type);
     if (!plugin?.middleware) continue;
     const exposedNames = new Set(exposedDeclarations(plugin).map((d) => d.name));
     if (exposedNames.size === 0) continue;
@@ -4020,11 +4009,11 @@ function collectExposedPluginUiResources(grants) {
   }
   return resources;
 }
-var import_core83;
+var import_core84;
 var init_registerExposedPlugins = __esm({
   "src/services/open/registerExposedPlugins.ts"() {
     "use strict";
-    import_core83 = require("@axiom-lattice/core");
+    import_core84 = require("@axiom-lattice/core");
     init_openLattice();
     init_pluginExposeAdapter();
   }
@@ -4039,14 +4028,14 @@ function toText(result) {
 }
 function defaultCatalog() {
   return {
-    getValidatedManifest: (tenantId, type) => (0, import_core84.getSandboxPluginCatalog)().getValidatedManifest(tenantId, type),
-    getExecutor: () => (0, import_core84.getSandboxPluginCatalog)().getExecutor(),
-    readPluginFile: (tenantId, type, relPath) => (0, import_core84.getSandboxPluginCatalog)().readPluginFile(tenantId, type, relPath)
+    getValidatedManifest: (tenantId, type) => (0, import_core85.getSandboxPluginCatalog)().getValidatedManifest(tenantId, type),
+    getExecutor: () => (0, import_core85.getSandboxPluginCatalog)().getExecutor(),
+    readPluginFile: (tenantId, type, relPath) => (0, import_core85.getSandboxPluginCatalog)().readPluginFile(tenantId, type, relPath)
   };
 }
 async function defaultResolveConnections(pluginType, ctx) {
   try {
-    return await (0, import_core84.resolveSandboxPluginConnections)(
+    return await (0, import_core85.resolveSandboxPluginConnections)(
       pluginType,
       { connectAll: true },
       {
@@ -4075,7 +4064,7 @@ function mergeOpenCatalog(globalCatalog, tenantTools) {
 async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
   const catalog = deps.catalog ?? defaultCatalog();
   const listPlugins = deps.listPlugins ?? (async (tenant2) => {
-    const snapshot = await (0, import_core84.getSandboxPluginCatalog)().ensureLoaded(tenant2);
+    const snapshot = await (0, import_core85.getSandboxPluginCatalog)().ensureLoaded(tenant2);
     return { plugins: snapshot.plugins, diagnostics: snapshot.diagnostics };
   });
   const resolveConnections = deps.resolveConnections ?? defaultResolveConnections;
@@ -4117,7 +4106,7 @@ async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
         domain,
         action: tool.name,
         description: tool.description,
-        schema: (0, import_core84.jsonSchemaToZod)(tool.schema),
+        schema: (0, import_core85.jsonSchemaToZod)(tool.schema),
         annotations: {
           readOnlyHint: tool.readOnly ?? false,
           destructiveHint: tool.destructive ?? false
@@ -4168,11 +4157,11 @@ async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
     }
   };
 }
-var import_core84;
+var import_core85;
 var init_tenantOpenPlugins = __esm({
   "src/services/open/tenantOpenPlugins.ts"() {
     "use strict";
-    import_core84 = require("@axiom-lattice/core");
+    import_core85 = require("@axiom-lattice/core");
     init_openLattice();
     init_pluginToolExecution();
   }
@@ -4209,13 +4198,13 @@ function emptyTenantPlugins() {
 }
 function registerOpenRoutes(app2, deps = {}) {
   const openAuth = deps.openAuth ?? new OpenCredentialService(
-    (0, import_core85.getStoreLattice)("default", "a2aApiKey").store,
-    (0, import_core85.getStoreLattice)("default", "project").store
+    (0, import_core86.getStoreLattice)("default", "a2aApiKey").store,
+    (0, import_core86.getStoreLattice)("default", "project").store
   );
   const grantsSource = deps.grantsSource ?? ((ctx) => ctx.grants);
   const audit = deps.audit ?? (() => {
     try {
-      const store2 = (0, import_core85.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core86.getStoreLattice)("default", "openAudit").store;
       return new OpenAuditService(store2);
     } catch {
       return void 0;
@@ -4370,12 +4359,12 @@ function registerOpenRoutes(app2, deps = {}) {
     }
   );
 }
-var import_types, import_core85, RPC_ERROR;
+var import_types, import_core86, RPC_ERROR;
 var init_open = __esm({
   "src/routes/open.ts"() {
     "use strict";
     import_types = require("@modelcontextprotocol/sdk/types.js");
-    import_core85 = require("@axiom-lattice/core");
+    import_core86 = require("@axiom-lattice/core");
     init_openCredentialService();
     init_openAuditService();
     init_openRateLimiter();
@@ -4408,7 +4397,7 @@ function registerOpenSessionRoutes(app2) {
       if (typeof shareToken !== "string" || shareToken.length === 0) {
         return reply.status(400).send({ error: "SHARE_TOKEN_REQUIRED" });
       }
-      const store2 = (0, import_core86.getStoreLattice)("default", "sharedResource").store;
+      const store2 = (0, import_core87.getStoreLattice)("default", "sharedResource").store;
       const record = await store2.findByToken(shareToken);
       if (!record || record.revoked) {
         return reply.status(404).send({ error: "SHARE_NOT_FOUND" });
@@ -4433,11 +4422,11 @@ function registerOpenSessionRoutes(app2) {
     }
   );
 }
-var import_core86;
+var import_core87;
 var init_open_session = __esm({
   "src/routes/open-session.ts"() {
     "use strict";
-    import_core86 = require("@axiom-lattice/core");
+    import_core87 = require("@axiom-lattice/core");
     init_openToken();
     init_previewToken();
     init_openLattice();
@@ -4446,13 +4435,13 @@ var init_open_session = __esm({
 
 // src/services/open/openCatalogService.ts
 async function defaultListTenantPlugins(tenantId) {
-  return (await (0, import_core87.getSandboxPluginCatalog)().ensureLoaded(tenantId)).plugins;
+  return (await (0, import_core88.getSandboxPluginCatalog)().ensureLoaded(tenantId)).plugins;
 }
-var import_core87, OpenCatalogService;
+var import_core88, OpenCatalogService;
 var init_openCatalogService = __esm({
   "src/services/open/openCatalogService.ts"() {
     "use strict";
-    import_core87 = require("@axiom-lattice/core");
+    import_core88 = require("@axiom-lattice/core");
     init_openLattice();
     OpenCatalogService = class {
       constructor(assistantStore, lattice = openLattice, listTenantPlugins2 = defaultListTenantPlugins) {
@@ -4527,17 +4516,17 @@ function registerOpenCatalogRoutes(app2) {
     if (!tenantId) {
       return reply.status(401).send({ success: false, error: "Unauthorized" });
     }
-    const assistantStore = (0, import_core88.getStoreLattice)("default", "assistant").store;
+    const assistantStore = (0, import_core89.getStoreLattice)("default", "assistant").store;
     const service2 = new OpenCatalogService(assistantStore);
     const catalog = await service2.buildForTenant(tenantId);
     return reply.status(200).send({ success: true, data: catalog });
   });
 }
-var import_core88;
+var import_core89;
 var init_open_catalog = __esm({
   "src/routes/open-catalog.ts"() {
     "use strict";
-    import_core88 = require("@axiom-lattice/core");
+    import_core89 = require("@axiom-lattice/core");
     init_openCatalogService();
   }
 });
@@ -4552,11 +4541,11 @@ async function resolveContextSandbox(ctx) {
   const sandboxName = ctx.runConfig?.sandboxName;
   if (typeof sandboxName === "string" && sandboxName.length > 0) {
     try {
-      return await import_core89.sandboxLatticeManager.getSandbox(sandboxName);
+      return await import_core90.sandboxLatticeManager.getSandbox(sandboxName);
     } catch {
     }
   }
-  return import_core89.sandboxLatticeManager.getSandboxFromConfig({
+  return import_core90.sandboxLatticeManager.getSandboxFromConfig({
     assistant_id: "",
     thread_id: "",
     tenantId: ctx.tenantId,
@@ -4654,12 +4643,12 @@ ${truncated}`
     }
   };
 }
-var import_zod22, import_core89, MAX_OUTPUT_BYTES;
+var import_zod22, import_core90, MAX_OUTPUT_BYTES;
 var init_sandboxProvider = __esm({
   "src/services/open/providers/sandboxProvider.ts"() {
     "use strict";
     import_zod22 = require("zod");
-    import_core89 = require("@axiom-lattice/core");
+    import_core90 = require("@axiom-lattice/core");
     MAX_OUTPUT_BYTES = 64e3;
   }
 });
@@ -4681,12 +4670,12 @@ function safePath(raw) {
 }
 function registerOpenFilesRoutes(app2, deps = {}) {
   const openAuth = deps.openAuth ?? new OpenCredentialService(
-    (0, import_core90.getStoreLattice)("default", "a2aApiKey").store,
-    (0, import_core90.getStoreLattice)("default", "project").store
+    (0, import_core91.getStoreLattice)("default", "a2aApiKey").store,
+    (0, import_core91.getStoreLattice)("default", "project").store
   );
   const audit = deps.audit ?? (() => {
     try {
-      const store2 = (0, import_core90.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core91.getStoreLattice)("default", "openAudit").store;
       return new OpenAuditService(store2);
     } catch {
       return void 0;
@@ -4796,11 +4785,11 @@ function registerOpenFilesRoutes(app2, deps = {}) {
     }
   });
 }
-var import_core90;
+var import_core91;
 var init_open_files = __esm({
   "src/routes/open-files.ts"() {
     "use strict";
-    import_core90 = require("@axiom-lattice/core");
+    import_core91 = require("@axiom-lattice/core");
     init_openCredentialService();
     init_openLattice();
     init_sandboxProvider();
@@ -4822,7 +4811,7 @@ function registerOpenAuditRoutes(app2) {
         return reply.status(401).send({ success: false, error: "Unauthorized" });
       }
       const status = request.query.status === "ok" || request.query.status === "error" ? request.query.status : void 0;
-      const store2 = (0, import_core91.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core92.getStoreLattice)("default", "openAudit").store;
       const records = await store2.query({
         tenantId,
         credentialId: request.query.credentialId,
@@ -4837,11 +4826,11 @@ function registerOpenAuditRoutes(app2) {
     }
   );
 }
-var import_core91;
+var import_core92;
 var init_open_audit = __esm({
   "src/routes/open-audit.ts"() {
     "use strict";
-    import_core91 = require("@axiom-lattice/core");
+    import_core92 = require("@axiom-lattice/core");
   }
 });
 
@@ -4858,7 +4847,7 @@ function registerOpenExposureRoutes(app2, deps = {}) {
       if (!tenantId) {
         return reply.status(401).send({ success: false, error: "Unauthorized" });
       }
-      const keyStore = (0, import_core92.getStoreLattice)("default", "a2aApiKey").store;
+      const keyStore = (0, import_core93.getStoreLattice)("default", "a2aApiKey").store;
       const record = await keyStore.findById(request.params.id);
       if (!record || record.tenantId !== tenantId) {
         return reply.status(404).send({ success: false, error: "Key not found" });
@@ -4892,7 +4881,7 @@ function registerOpenExposureRoutes(app2, deps = {}) {
         hasUi: Boolean(t2.ui)
       }));
       const agentGrant = grants.find((g) => g.domain === "agent");
-      const assistantStore = (0, import_core92.getStoreLattice)("default", "assistant").store;
+      const assistantStore = (0, import_core93.getStoreLattice)("default", "assistant").store;
       const agents = [];
       for (const assistantId of agentGrant?.items ?? []) {
         const assistant = await assistantStore.getAssistantById(
@@ -4927,11 +4916,11 @@ function registerOpenExposureRoutes(app2, deps = {}) {
     }
   );
 }
-var import_core92, import_protocols38;
+var import_core93, import_protocols38;
 var init_open_exposure = __esm({
   "src/routes/open-exposure.ts"() {
     "use strict";
-    import_core92 = require("@axiom-lattice/core");
+    import_core93 = require("@axiom-lattice/core");
     import_protocols38 = require("@axiom-lattice/protocols");
     init_openLattice();
     init_tenantOpenPlugins();
@@ -5051,7 +5040,7 @@ function createAgentProvider(deps = {}) {
         } catch {
         }
       }
-      const agent = import_core93.agentInstanceManager.getAgent({
+      const agent = import_core94.agentInstanceManager.getAgent({
         tenant_id: ctx.tenantId,
         assistant_id: assistantId,
         thread_id: threadId,
@@ -5076,12 +5065,12 @@ function createAgentProvider(deps = {}) {
     }
   };
 }
-var import_zod24, import_core93, import_protocols39, STOP_TYPES;
+var import_zod24, import_core94, import_protocols39, STOP_TYPES;
 var init_agentProvider = __esm({
   "src/services/open/providers/agentProvider.ts"() {
     "use strict";
     import_zod24 = require("zod");
-    import_core93 = require("@axiom-lattice/core");
+    import_core94 = require("@axiom-lattice/core");
     import_protocols39 = require("@axiom-lattice/protocols");
     STOP_TYPES = [import_protocols39.MessageChunkTypes.MESSAGE_COMPLETED];
   }
@@ -5184,11 +5173,11 @@ async function resolveAgentOpenGrants(tenantId, assistantId, deps) {
   }
 }
 function createDefaultAgentReflectionDeps(tenantId) {
-  (0, import_core94.ensureBuiltinAgentsForTenant)(tenantId);
+  (0, import_core95.ensureBuiltinAgentsForTenant)(tenantId);
   return {
-    ensure: (t2) => import_core94.agentLatticeManager.initializeStoredAssistantsForTenant(t2),
+    ensure: (t2) => import_core95.agentLatticeManager.initializeStoredAssistantsForTenant(t2),
     getAgentConfig: (t2, assistantId) => {
-      const config = import_core94.agentLatticeManager.getAgentConfigWithTenant(t2, assistantId);
+      const config = import_core95.agentLatticeManager.getAgentConfigWithTenant(t2, assistantId);
       if (!config) return void 0;
       return {
         middleware: extractMiddleware(config),
@@ -5196,16 +5185,16 @@ function createDefaultAgentReflectionDeps(tenantId) {
       };
     },
     getAssistantMiddleware: async (t2, assistantId) => {
-      const store2 = (0, import_core94.getStoreLattice)("default", "assistant").store;
+      const store2 = (0, import_core95.getStoreLattice)("default", "assistant").store;
       const assistant = await store2.getAssistantById(t2, assistantId);
       return extractMiddleware(assistant?.graphDefinition);
     },
     exposedActionsByType: (type) => {
-      const plugin = import_core94.PluginRegistry.get(type);
+      const plugin = import_core95.PluginRegistry.get(type);
       return plugin ? normalizeOpenExpose(plugin.meta.openExpose) : [];
     },
     resolvableAssistants: async (t2) => new Set(
-      import_core94.agentLatticeManager.getAllAgentLatticesByTenant(t2).map((lattice) => lattice.config.key)
+      import_core95.agentLatticeManager.getAllAgentLatticesByTenant(t2).map((lattice) => lattice.config.key)
     )
   };
 }
@@ -5270,30 +5259,30 @@ function buildTenantExposedGrants(manifests) {
 }
 function createDefaultPluginReflectionDeps() {
   return {
-    ensure: (tenantId) => import_core94.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
+    ensure: (tenantId) => import_core95.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
     globalExposedDomains: () => {
       const grants = [];
-      for (const type of import_core94.PluginRegistry.list()) {
-        const plugin = import_core94.PluginRegistry.get(type);
+      for (const type of import_core95.PluginRegistry.list()) {
+        const plugin = import_core95.PluginRegistry.get(type);
         const items = normalizeOpenExpose(plugin?.meta.openExpose);
         if (items.length > 0) grants.push({ domain: type, items });
       }
       return grants;
     },
     tenantExposedDomains: async (tenantId) => {
-      const { manifests } = await (0, import_core94.getSandboxPluginCatalog)().ensureLoaded(tenantId);
+      const { manifests } = await (0, import_core95.getSandboxPluginCatalog)().ensureLoaded(tenantId);
       return buildTenantExposedGrants(Object.values(manifests));
     },
     resolvableAssistants: async (tenantId) => new Set(
-      import_core94.agentLatticeManager.getAllAgentLatticesByTenant(tenantId).map((lattice) => lattice.config.key)
+      import_core95.agentLatticeManager.getAllAgentLatticesByTenant(tenantId).map((lattice) => lattice.config.key)
     )
   };
 }
-var import_core94, AGENT_REFLECTION_CACHE_TTL_MS, cache, PLUGIN_REFLECTION_CACHE_TTL_MS, pluginCache;
+var import_core95, AGENT_REFLECTION_CACHE_TTL_MS, cache, PLUGIN_REFLECTION_CACHE_TTL_MS, pluginCache;
 var init_sandboxOpenReflection = __esm({
   "src/services/open/sandboxOpenReflection.ts"() {
     "use strict";
-    import_core94 = require("@axiom-lattice/core");
+    import_core95 = require("@axiom-lattice/core");
     AGENT_REFLECTION_CACHE_TTL_MS = 6e4;
     cache = /* @__PURE__ */ new Map();
     PLUGIN_REFLECTION_CACHE_TTL_MS = 6e4;
@@ -5339,7 +5328,7 @@ function createSandboxOpenCredentialProvider(options) {
   };
 }
 function registerGatewaySandboxOpenCredentialProvider(onError) {
-  return (0, import_core95.registerSandboxOpenCredentialProvider)(
+  return (0, import_core96.registerSandboxOpenCredentialProvider)(
     createSandboxOpenCredentialProvider({
       gatewayUrl: process.env.PUBLIC_GATEWAY_URL?.trim() || void 0,
       onError
@@ -5347,11 +5336,11 @@ function registerGatewaySandboxOpenCredentialProvider(onError) {
     { onError }
   );
 }
-var import_core95, DEFAULT_SANDBOX_OPEN_GRANTS, MAX_SANDBOX_OPEN_DEPTH;
+var import_core96, DEFAULT_SANDBOX_OPEN_GRANTS, MAX_SANDBOX_OPEN_DEPTH;
 var init_sandboxOpenCredentialProvider = __esm({
   "src/services/open/sandboxOpenCredentialProvider.ts"() {
     "use strict";
-    import_core95 = require("@axiom-lattice/core");
+    import_core96 = require("@axiom-lattice/core");
     init_openToken();
     init_sandboxOpenReflection();
     DEFAULT_SANDBOX_OPEN_GRANTS = [
@@ -5388,12 +5377,12 @@ var resources_exports = {};
 __export(resources_exports, {
   ResourceController: () => ResourceController
 });
-var import_bcryptjs, import_core96, ResourceController;
+var import_bcryptjs, import_core97, ResourceController;
 var init_resources = __esm({
   "src/controllers/resources.ts"() {
     "use strict";
     import_bcryptjs = __toESM(require("bcryptjs"));
-    import_core96 = require("@axiom-lattice/core");
+    import_core97 = require("@axiom-lattice/core");
     init_mime();
     init_http_range();
     init_sandboxGrants();
@@ -5410,14 +5399,14 @@ var init_resources = __esm({
         if (!workspaceId || !projectId) {
           return reply.status(400).send({ error: "x-workspace-id and x-project-id headers required" });
         }
-        const payload = (0, import_core96.createSharePayload)(
+        const payload = (0, import_core97.createSharePayload)(
           tenantId,
           workspaceId,
           projectId,
           userId,
           body
         );
-        const token = (0, import_core96.generateToken)();
+        const token = (0, import_core97.generateToken)();
         try {
           await this.deps.store.create({ ...payload, token });
           this.deps.logger.info(
@@ -5569,7 +5558,7 @@ var init_resources = __esm({
             resourcePath: subPath
           }, subPath, ext, request, reply);
         }
-        const volume = (0, import_core96.buildNamedVolumeName)("p", "project", tenantId, workspaceId, projectId);
+        const volume = (0, import_core97.buildNamedVolumeName)("p", "project", tenantId, workspaceId, projectId);
         return this._resolveAndServe(
           volume,
           subPath,
@@ -7654,6 +7643,9 @@ var setQueueServiceType = (type) => {
   }
   (0, import_core8.registerQueueLattice)(DEFAULT_QUEUE_KEY, config, client);
 };
+var getQueueServiceType = () => {
+  return queueServiceType;
+};
 var getQueueService = () => {
   if (!import_core8.queueLatticeManager.hasLattice(DEFAULT_QUEUE_KEY)) {
     setQueueServiceType(queueServiceType);
@@ -7851,6 +7843,66 @@ async function updateModels(request, reply) {
   }
 }
 
+// src/services/multiReplicaReadiness.ts
+var import_core10 = require("@axiom-lattice/core");
+var SHARED_STORE_KINDS = [
+  "lease",
+  "outbox",
+  "threadMessageQueue",
+  "task",
+  "taskWorkItem",
+  "channelInstallation"
+];
+function isMultiReplicaDeclared() {
+  return typeof process.env.AXIOM_REPLICA_ID === "string" && process.env.AXIOM_REPLICA_ID.trim() !== "";
+}
+function storeClassName(kind) {
+  try {
+    return (0, import_core10.getStoreLattice)("default", kind).store.constructor?.name;
+  } catch {
+    return void 0;
+  }
+}
+function computeMultiReplicaReadiness() {
+  const multiReplicaDeclared = isMultiReplicaDeclared();
+  const warnings = [];
+  if (!multiReplicaDeclared) {
+    return { multiReplicaDeclared, ok: true, warnings };
+  }
+  for (const kind of SHARED_STORE_KINDS) {
+    const name = storeClassName(kind);
+    if (name === void 0 || !name.startsWith("InMemory")) continue;
+    warnings.push(`Multi-replica: store '${kind}' is ${name} (not shared); configure a shared store`);
+  }
+  if (!process.env.AUTH_TOKEN_SECRET?.trim() && !process.env.JWT_SECRET?.trim()) {
+    warnings.push(
+      "Multi-replica: AUTH_TOKEN_SECRET/JWT_SECRET unset; console sessions are signed per-process and will not verify across replicas"
+    );
+  }
+  if (!process.env.LATTICE_ENCRYPTION_KEY?.trim()) {
+    warnings.push(
+      "Multi-replica: LATTICE_ENCRYPTION_KEY unset; stored credentials use the shared dev default and may not decrypt across differing keys"
+    );
+  }
+  if (getQueueServiceType() !== "redis") {
+    warnings.push(
+      "Multi-replica: task queue service is 'memory' (not shared); set QUEUE_SERVICE_TYPE=redis so queued work is visible across replicas"
+    );
+  }
+  return { multiReplicaDeclared, ok: warnings.length === 0, warnings };
+}
+function warnMultiReplicaReadiness(logger9) {
+  const { multiReplicaDeclared, warnings } = computeMultiReplicaReadiness();
+  if (!multiReplicaDeclared) return;
+  for (const message of warnings) {
+    logger9.warn(message, { phase: "multi_replica_readiness" });
+  }
+  logger9.warn(
+    "Multi-replica: agent run SSE and resume_stream are process-local; route a thread's follow-up runs to the replica streaming it (sticky routing) or share the stream/queue state",
+    { phase: "multi_replica_readiness", feature: "agent-run-sse" }
+  );
+}
+
 // src/controllers/health.ts
 async function getHealth(request, reply) {
   try {
@@ -7859,7 +7911,8 @@ async function getHealth(request, reply) {
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       uptime: process.uptime(),
       service: "lattice-gateway",
-      version: process.env.npm_package_version || "1.0.0"
+      version: process.env.npm_package_version || "1.0.0",
+      readiness: computeMultiReplicaReadiness()
     };
     return reply.send({
       success: true,
@@ -7875,7 +7928,7 @@ async function getHealth(request, reply) {
 }
 
 // src/services/skill_service.ts
-var import_core10 = require("@axiom-lattice/core");
+var import_core11 = require("@axiom-lattice/core");
 var PLUGIN_SKILL_SOURCE = "builtin-plugin";
 function getTenantId4(request) {
   return request.user?.tenantId || request.headers["x-tenant-id"] || "default";
@@ -7910,7 +7963,7 @@ function pluginSkillToSkill(item, tenantId, content) {
 }
 var SkillService = class {
   constructor() {
-    this.store = new import_core10.SandboxSkillStore();
+    this.store = new import_core11.SandboxSkillStore();
   }
   /**
    * Read the read-only skills contributed by the tenant's sandbox plugins.
@@ -7920,10 +7973,10 @@ var SkillService = class {
   async tenantPluginSkills(tenantId) {
     const items = [];
     try {
-      const loaded = await (0, import_core10.getSandboxPluginCatalog)().ensureLoaded(tenantId);
+      const loaded = await (0, import_core11.getSandboxPluginCatalog)().ensureLoaded(tenantId);
       for (const plugin of loaded.plugins) {
         for (const [name, definition] of Object.entries(plugin.skills ?? {})) {
-          const { meta } = (0, import_core10.parseSkillFrontmatter)(definition.content);
+          const { meta } = (0, import_core11.parseSkillFrontmatter)(definition.content);
           items.push({
             id: name,
             name: meta.name || name,
@@ -7949,7 +8002,7 @@ var SkillService = class {
     for (const skill of storeSkills) {
       merged.set(skill.id, skill);
     }
-    for (const item of import_core10.PluginRegistry.listSkills()) {
+    for (const item of import_core11.PluginRegistry.listSkills()) {
       merged.set(item.id, pluginSkillToSkill(item, tenantId));
     }
     for (const item of await this.tenantPluginSkills(tenantId)) {
@@ -7959,10 +8012,10 @@ var SkillService = class {
   }
   async getSkillById(request, id3) {
     const tenantId = getTenantId4(request);
-    const plugin = import_core10.PluginRegistry.getSkill(id3);
+    const plugin = import_core11.PluginRegistry.getSkill(id3);
     if (plugin) {
       const { definition } = plugin;
-      const item = import_core10.PluginRegistry.listSkills().find((entry) => entry.id === id3);
+      const item = import_core11.PluginRegistry.listSkills().find((entry) => entry.id === id3);
       if (item) {
         return pluginSkillToSkill(item, tenantId, definition.content);
       }
@@ -8015,7 +8068,7 @@ var SkillService = class {
    * existing "built-in skill" -> 403 mapping applies.
    */
   assertNotPluginSkill(id3, action) {
-    if (import_core10.PluginRegistry.getSkill(id3)) {
+    if (import_core11.PluginRegistry.getSkill(id3)) {
       throw new Error(`Skill "${id3}" is a built-in skill and cannot be ${action}`);
     }
   }
@@ -8338,10 +8391,10 @@ async function deleteCollection(request, reply) {
 }
 
 // src/controllers/embeddings.ts
-var import_core12 = require("@axiom-lattice/core");
+var import_core13 = require("@axiom-lattice/core");
 async function listEmbeddings(_request, _reply) {
   try {
-    const info = import_core12.embeddingsLatticeManager.getAllEmbeddingsInfo();
+    const info = import_core13.embeddingsLatticeManager.getAllEmbeddingsInfo();
     return {
       success: true,
       message: "Successfully retrieved embedding models",
@@ -8486,7 +8539,7 @@ async function searchEntries(request, reply) {
 }
 
 // src/controllers/tools.ts
-var import_core13 = require("@axiom-lattice/core");
+var import_core14 = require("@axiom-lattice/core");
 function serializeSchema(schema) {
   if (!schema) {
     return void 0;
@@ -8532,10 +8585,10 @@ async function getToolConfigs(request, reply) {
   try {
     const tenantId = request.user?.tenantId || request.headers["x-tenant-id"] || "default";
     const byKey = /* @__PURE__ */ new Map();
-    for (const lattice of import_core13.toolLatticeManager.getAllByTenant("default")) {
+    for (const lattice of import_core14.toolLatticeManager.getAllByTenant("default")) {
       byKey.set(lattice.key, lattice);
     }
-    for (const lattice of import_core13.toolLatticeManager.getAllByTenant(tenantId)) {
+    for (const lattice of import_core14.toolLatticeManager.getAllByTenant(tenantId)) {
       byKey.set(lattice.key, lattice);
     }
     const allLattices = [...byKey.values()];
@@ -8576,7 +8629,7 @@ async function getToolConfigs(request, reply) {
 }
 
 // src/controllers/data-query.ts
-var import_core14 = require("@axiom-lattice/core");
+var import_core15 = require("@axiom-lattice/core");
 function getTenantId6(request) {
   return request.headers["x-tenant-id"] || "default";
 }
@@ -8607,7 +8660,7 @@ async function executeDataQuery(request, reply) {
         message: "Cannot provide both metrics and customSql. Use one query type only."
       };
     }
-    const storeLattice = (0, import_core14.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core15.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     if (!body.serverKey) {
       reply.code(400);
@@ -8640,7 +8693,7 @@ async function executeDataQuery(request, reply) {
     }
     let client;
     try {
-      client = await import_core14.metricsServerManager.getClient(tenantId, body.serverKey);
+      client = await import_core15.metricsServerManager.getClient(tenantId, body.serverKey);
     } catch {
       reply.code(400);
       return {
@@ -8715,7 +8768,7 @@ async function executeSqlQuery(client, body, reply) {
 }
 
 // src/controllers/workflow-tracking.ts
-var import_core15 = require("@axiom-lattice/core");
+var import_core16 = require("@axiom-lattice/core");
 var import_protocols4 = require("@axiom-lattice/protocols");
 function getTenantId7(request) {
   const userTenantId = request.user?.tenantId;
@@ -8724,7 +8777,7 @@ function getTenantId7(request) {
 }
 function getTrackingStore() {
   try {
-    const storeLattice = (0, import_core15.getStoreLattice)("default", "workflowTracking");
+    const storeLattice = (0, import_core16.getStoreLattice)("default", "workflowTracking");
     return storeLattice.store;
   } catch {
     return null;
@@ -8732,7 +8785,7 @@ function getTrackingStore() {
 }
 async function getDefinitionsFromAssistants(tenantId) {
   try {
-    const storeLattice = (0, import_core15.getStoreLattice)("default", "assistant");
+    const storeLattice = (0, import_core16.getStoreLattice)("default", "assistant");
     const assistantStore = storeLattice.store;
     const assistants = await assistantStore.getAllAssistants(tenantId);
     const results = [];
@@ -8812,7 +8865,7 @@ async function getAllWorkflowRuns(request, reply) {
     }
     const nameMap = {};
     try {
-      const asStoreLattice = (0, import_core15.getStoreLattice)("default", "assistant");
+      const asStoreLattice = (0, import_core16.getStoreLattice)("default", "assistant");
       const assistantStore = asStoreLattice.store;
       const assistants = await assistantStore.getAllAssistants(tenantId);
       for (const a of assistants) {
@@ -8865,7 +8918,7 @@ async function getInboxItems(request, reply) {
     }
     const nameMap = {};
     try {
-      const asStoreLattice = (0, import_core15.getStoreLattice)("default", "assistant");
+      const asStoreLattice = (0, import_core16.getStoreLattice)("default", "assistant");
       const assistantStore = asStoreLattice.store;
       const assistants = await assistantStore.getAllAssistants(tenantId);
       for (const a of assistants) {
@@ -8904,7 +8957,7 @@ async function getInboxItems(request, reply) {
           store2.getRunSteps(r.id).catch(() => []),
           (async () => {
             try {
-              return import_core15.agentInstanceManager.getAgentForRead({
+              return import_core16.agentInstanceManager.getAgentForRead({
                 assistant_id: r.assistantId,
                 thread_id: r.threadId,
                 tenant_id: r.tenantId
@@ -9046,7 +9099,7 @@ async function deleteWorkflowRun(request, reply) {
       try {
         const workspace_id = request.headers["x-workspace-id"];
         const project_id = request.headers["x-project-id"];
-        const agent = import_core15.agentInstanceManager.getAgent({
+        const agent = import_core16.agentInstanceManager.getAgent({
           assistant_id: run2.assistantId,
           thread_id: run2.threadId,
           tenant_id: tenantId,
@@ -9133,7 +9186,7 @@ async function replyInboxTask(request, reply) {
     }
     const workspace_id = request.headers["x-workspace-id"];
     const project_id = request.headers["x-project-id"];
-    const agent = import_core15.agentInstanceManager.getAgent({
+    const agent = import_core16.agentInstanceManager.getAgent({
       assistant_id: run2.assistantId,
       thread_id: run2.threadId,
       tenant_id: tenantId,
@@ -9141,7 +9194,7 @@ async function replyInboxTask(request, reply) {
       project_id
     });
     const runStatus = await agent.getRunStatus();
-    if (runStatus !== import_core15.ThreadStatus.INTERRUPTED) {
+    if (runStatus !== import_core16.ThreadStatus.INTERRUPTED) {
       return reply.status(409).send({
         success: false,
         message: `Cannot resume: graph is not interrupted (current status: ${runStatus})`,
@@ -9215,7 +9268,7 @@ async function abortWorkflowRun(request, reply) {
     });
     const workspace_id = request.headers["x-workspace-id"];
     const project_id = request.headers["x-project-id"];
-    const agent = import_core15.agentInstanceManager.getAgent({
+    const agent = import_core16.agentInstanceManager.getAgent({
       assistant_id: run2.assistantId,
       thread_id: run2.threadId,
       tenant_id: tenantId,
@@ -9223,7 +9276,7 @@ async function abortWorkflowRun(request, reply) {
       project_id
     });
     await agent.abort();
-    (0, import_core15.abortWorkflowRun)(runId);
+    (0, import_core16.abortWorkflowRun)(runId);
     return reply.status(200).send({
       success: true,
       message: "Workflow aborted",
@@ -9239,7 +9292,7 @@ async function abortWorkflowRun(request, reply) {
 }
 
 // src/controllers/personal-assistant.ts
-var import_core16 = require("@axiom-lattice/core");
+var import_core17 = require("@axiom-lattice/core");
 var import_crypto3 = require("crypto");
 function getWorkspaceId2(request) {
   return request.headers["x-workspace-id"] || "default";
@@ -9255,13 +9308,13 @@ function getUserId3(request) {
   return userId;
 }
 function getLinkStore() {
-  return (0, import_core16.getStoreLattice)("default", "userTenantLink").store;
+  return (0, import_core17.getStoreLattice)("default", "userTenantLink").store;
 }
 function getAssistantStore() {
-  return (0, import_core16.getStoreLattice)("default", "assistant").store;
+  return (0, import_core17.getStoreLattice)("default", "assistant").store;
 }
 function getProjectStore() {
-  return (0, import_core16.getStoreLattice)("default", "project").store;
+  return (0, import_core17.getStoreLattice)("default", "project").store;
 }
 async function getLinkMeta(userId, tenantId) {
   const link = await getLinkStore().getLink(userId, tenantId);
@@ -9291,9 +9344,9 @@ async function createPersonalAssistant(request, reply) {
     description: "Personal workspace for your assistant",
     kind: "personal"
   });
-  const config = import_core16.PersonalAssistantConfig.get();
+  const config = import_core17.PersonalAssistantConfig.get();
   config.key = assistantId;
-  import_core16.PersonalAssistantConfig.render(config, name, personality);
+  import_core17.PersonalAssistantConfig.render(config, name, personality);
   const data = { name, graphDefinition: config, ownerUserId: userId };
   const assistant = await store2.createAssistant(tenantId, assistantId, data);
   const meta = await getLinkMeta(userId, tenantId);
@@ -9336,8 +9389,8 @@ async function deletePersonalAssistant(request, reply) {
   if (!deleted) {
     return reply.status(500).send({ success: false, message: "Failed to delete personal assistant" });
   }
-  import_core16.eventBus.publish("assistant:deleted", { id: assistant.id, tenantId });
-  const threadStore = (0, import_core16.getStoreLattice)("default", "thread").store;
+  import_core17.eventBus.publish("assistant:deleted", { id: assistant.id, tenantId });
+  const threadStore = (0, import_core17.getStoreLattice)("default", "thread").store;
   try {
     const threads = await threadStore.getThreadsByAssistantId(tenantId, assistant.id);
     for (const t2 of threads) {
@@ -9362,41 +9415,30 @@ async function deletePersonalAssistant(request, reply) {
 }
 
 // src/services/ExportImportService.ts
-var import_core17 = require("@axiom-lattice/core");
-var import_crypto4 = require("crypto");
+var import_core18 = require("@axiom-lattice/core");
 var fs = __toESM(require("fs/promises"));
 var os = __toESM(require("os"));
 var path = __toESM(require("path"));
 var tar = __toESM(require("tar"));
 var zlib = __toESM(require("zlib"));
-var exportJobs = /* @__PURE__ */ new Map();
-var JOB_TTL_MS = 60 * 60 * 1e3;
 var MAX_ARCHIVE_ENTRIES = 1e4;
 var MAX_ARCHIVE_FILE_BYTES = 100 * 1024 * 1024;
 var MAX_ARCHIVE_TOTAL_BYTES = 512 * 1024 * 1024;
-function cleanExpiredJobs() {
-  const now = Date.now();
-  for (const [id3, entry] of exportJobs) {
-    if (now - entry.createdAt > JOB_TTL_MS) {
-      exportJobs.delete(id3);
-    }
-  }
-}
 function archiveFileKey(entityType, entityId, relPath) {
   return `files/${entityType}/${entityId}/${relPath}`;
 }
 var ExportImportService = class {
   constructor() {
-    this.registry = import_core17.ExportableEntityRegistry.getInstance();
+    this.registry = import_core18.ExportableEntityRegistry.getInstance();
   }
   /**
    * Preview an export: check which types would be auto-included, which dependencies are missing.
    */
   async exportPreview(tenantId, selectedTypes, entityIds, context) {
     const allDefs = this.registry.getAll();
-    const expanded = import_core17.DependencyResolver.expandCascade(allDefs, selectedTypes);
+    const expanded = import_core18.DependencyResolver.expandCascade(allDefs, selectedTypes);
     const cascadeAdditions = expanded.filter((t2) => !selectedTypes.includes(t2));
-    const deps = import_core17.DependencyResolver.computeDependencies(allDefs, expanded);
+    const deps = import_core18.DependencyResolver.computeDependencies(allDefs, expanded);
     const registeredTypes = new Set(allDefs.map((d) => d.entityType));
     const missingDependencies = deps.missing.filter((t2) => registeredTypes.has(t2));
     await this.resolveExportSelection(tenantId, selectedTypes, entityIds, context);
@@ -9404,7 +9446,8 @@ var ExportImportService = class {
   }
   /**
    * Generate a full export (bundle + file content) for the given tenant and entity types.
-   * Stores the data in-memory and returns a jobId for download.
+   * The result is returned directly so the caller can pack and stream it in the same
+   * request, with no process-local job state that would break across Gateway replicas.
    */
   async export(tenantId, entityTypes, entityIds, context) {
     const { dependencyOrder, entities: rawEntities } = await this.resolveExportSelection(
@@ -9463,18 +9506,7 @@ var ExportImportService = class {
       dependencyOrder,
       _warning: "This file contains plaintext secrets (passwords, API keys, tokens). Store it securely and delete after import."
     };
-    const jobId = (0, import_crypto4.randomUUID)();
-    exportJobs.set(jobId, { data: { bundle, files }, tenantId, createdAt: Date.now() });
-    return { jobId, data: { bundle, files } };
-  }
-  /**
-   * Retrieve a previously generated export job data by jobId with tenant validation.
-   */
-  getExportJob(jobId, tenantId) {
-    cleanExpiredJobs();
-    const entry = exportJobs.get(jobId);
-    if (!entry || entry.tenantId !== tenantId) return void 0;
-    return entry.data;
+    return { bundle, files };
   }
   /**
    * Pack an ExportJobData into a tar.gz buffer.
@@ -9692,14 +9724,14 @@ var ExportImportService = class {
     for (const entity of skillEntities) {
       const subSkills = entity.data.subSkills;
       if (!Array.isArray(subSkills)) continue;
-      const unresolved = subSkills.find((id3) => typeof id3 === "string" && !skillSourceToTarget.has(id3) && !(0, import_core17.isBuiltInSkill)(id3));
+      const unresolved = subSkills.find((id3) => typeof id3 === "string" && !skillSourceToTarget.has(id3) && !(0, import_core18.isBuiltInSkill)(id3));
       if (unresolved) unresolvedSkillReferences.set(entity._exportId, unresolved);
     }
     for (const entityType of dependencyOrder) {
       const entities = bundle.entities[entityType];
       if (!entities || entities.length === 0) continue;
       const def = this.registry.get(entityType);
-      const remapper = new import_core17.IdRemapper(idMap);
+      const remapper = new import_core18.IdRemapper(idMap);
       let insertions = /* @__PURE__ */ new Set();
       let conflicts = /* @__PURE__ */ new Set();
       let conflictByExportId = /* @__PURE__ */ new Map();
@@ -9795,7 +9827,7 @@ var ExportImportService = class {
             }
           }
           if (entityType === "agent" && Object.keys(skillIdRemap).length > 0) {
-            const skillRemapper = new import_core17.IdRemapper({});
+            const skillRemapper = new import_core18.IdRemapper({});
             remappedData.graphDefinition = skillRemapper.remapSkillIds(
               remappedData.graphDefinition || {},
               skillIdRemap
@@ -9873,10 +9905,10 @@ var ExportImportService = class {
         throw new Error(`Exportable entity type is not registered: "${type}"`);
       }
     }
-    const expanded = import_core17.DependencyResolver.expandCascade(allDefs, entityTypes);
-    const dependencies = import_core17.DependencyResolver.computeDependencies(allDefs, expanded).missing;
+    const expanded = import_core18.DependencyResolver.expandCascade(allDefs, entityTypes);
+    const dependencies = import_core18.DependencyResolver.computeDependencies(allDefs, expanded).missing;
     const finalTypeSet = /* @__PURE__ */ new Set([...expanded, ...dependencies]);
-    const dependencyOrder = import_core17.DependencyResolver.resolveOrder(
+    const dependencyOrder = import_core18.DependencyResolver.resolveOrder(
       allDefs.filter((def) => finalTypeSet.has(def.entityType))
     );
     const availableByType = /* @__PURE__ */ new Map();
@@ -9916,7 +9948,7 @@ var ExportImportService = class {
           const targetEntities = availableByType.get(referencedType);
           const explicitSelection = entityIds && Object.prototype.hasOwnProperty.call(entityIds, referencedType) ? new Set(entityIds[referencedType]) : void 0;
           for (const id3 of new Set(ids)) {
-            if (referencedType === "skill" && (0, import_core17.isBuiltInSkill)(id3)) continue;
+            if (referencedType === "skill" && (0, import_core18.isBuiltInSkill)(id3)) continue;
             if (explicitSelection && !explicitSelection.has(id3)) {
               throw new Error(
                 `Required reference from ${type} to ${referencedType} "${id3}" is omitted by entityIds.${referencedType}`
@@ -10002,7 +10034,7 @@ var ExportImportService = class {
       }
     }
     const typeSet = new Set(entityTypes);
-    const canonicalOrder = import_core17.DependencyResolver.resolveOrder(
+    const canonicalOrder = import_core18.DependencyResolver.resolveOrder(
       this.registry.getAll().filter((def) => typeSet.has(def.entityType))
     );
     if (canonicalOrder.length !== bundle.dependencyOrder.length || canonicalOrder.some((type, index) => bundle.dependencyOrder[index] !== type)) {
@@ -10022,7 +10054,7 @@ var ExportImportService = class {
 };
 
 // src/controllers/export-import.ts
-var import_core18 = require("@axiom-lattice/core");
+var import_core19 = require("@axiom-lattice/core");
 var service = new ExportImportService();
 var TenantScopeError = class extends Error {
   constructor() {
@@ -10059,6 +10091,12 @@ function safeArchiveFilename(sourceTenantId) {
   const safeTenantId = sourceTenantId.replace(/[^A-Za-z0-9._-]/g, "_");
   return `tenant-export-${safeTenantId}.tar.gz`;
 }
+async function sendArchive(reply, data) {
+  const tarGz = await service.packTarGz(data);
+  reply.type("application/gzip");
+  reply.header("Content-Disposition", `attachment; filename="${safeArchiveFilename(data.bundle.sourceTenantId)}"`);
+  reply.send(tarGz);
+}
 function assertCompleteFile(file) {
   if (file.truncated) {
     throw new Error("Uploaded file was truncated because it exceeds the configured file size limit");
@@ -10146,37 +10184,21 @@ async function exportConfig(request, reply) {
       }
     });
   }
-  const { jobId, data } = await service.export(tenantId, entityTypes, entityIds, getContext(request));
-  return reply.send({
-    success: true,
-    data: {
-      jobId,
-      summary: Object.fromEntries(
-        Object.entries(data.bundle.entities).map(([type, entities]) => [type, entities.length])
-      )
-    }
-  });
+  const data = await service.export(tenantId, entityTypes, entityIds, getContext(request));
+  return sendArchive(reply, data);
 }
 async function exportConfigConfirm(request, reply) {
   const tenantId = resolveTenantId(request, request.params.tenantId);
   const { entityTypes, entityIds } = request.body;
-  const { jobId, data } = await service.export(tenantId, entityTypes, entityIds, getContext(request));
-  return reply.send({
-    success: true,
-    data: {
-      jobId,
-      summary: Object.fromEntries(
-        Object.entries(data.bundle.entities).map(([type, entities]) => [type, entities.length])
-      )
-    }
-  });
+  const data = await service.export(tenantId, entityTypes, entityIds, getContext(request));
+  return sendArchive(reply, data);
 }
 async function previewEntities(request, reply) {
   const tenantId = resolveTenantId(request, request.params.tenantId);
   const { entityTypes } = request.body;
   const context = getContext(request);
   try {
-    const registry = import_core18.ExportableEntityRegistry.getInstance();
+    const registry = import_core19.ExportableEntityRegistry.getInstance();
     const result = {};
     for (const type of entityTypes) {
       const def = registry.get(type);
@@ -10192,18 +10214,6 @@ async function previewEntities(request, reply) {
     return reply.status(400).send({ success: false, message: err.message });
   }
 }
-async function downloadExport(request, reply) {
-  const tenantId = resolveTenantId(request, request.params.tenantId);
-  const data = service.getExportJob(request.params.jobId, tenantId);
-  if (!data) {
-    return reply.status(404).send({ success: false, message: "Export job not found or expired" });
-  }
-  const tarGz = await service.packTarGz(data);
-  const filename = safeArchiveFilename(data.bundle.sourceTenantId);
-  reply.type("application/gzip");
-  reply.header("Content-Disposition", `attachment; filename="${filename}"`);
-  return reply.send(tarGz);
-}
 async function importPreview(request, reply) {
   const tenantId = resolveTenantId(request, request.params.tenantId);
   try {
@@ -10234,17 +10244,17 @@ async function importApply(request, reply) {
 }
 
 // src/controllers/middleware-types.ts
-var import_core20 = require("@axiom-lattice/core");
+var import_core21 = require("@axiom-lattice/core");
 
 // src/services/plugins/tenantPluginResolver.ts
-var import_core19 = require("@axiom-lattice/core");
+var import_core20 = require("@axiom-lattice/core");
 async function resolveTenantPluginByType(tenantId, type) {
-  return (await (0, import_core19.listTenantPlugins)(tenantId)).find((p) => p.meta.type === type);
+  return (await (0, import_core20.listTenantPlugins)(tenantId)).find((p) => p.meta.type === type);
 }
 
 // src/controllers/middleware-types.ts
 async function collectMiddlewareMetas(tenantId) {
-  return (await (0, import_core19.listTenantPlugins)(tenantId)).map(import_core20.serializePluginMeta);
+  return (await (0, import_core20.listTenantPlugins)(tenantId)).map(import_core21.serializePluginMeta);
 }
 function middlewareTypesRoutes(fastify2) {
   fastify2.get("/api/middleware-types", async (request, reply) => {
@@ -10620,7 +10630,15 @@ var getHealthSchema = {
             timestamp: { type: "string" },
             uptime: { type: "number" },
             service: { type: "string" },
-            version: { type: "string" }
+            version: { type: "string" },
+            readiness: {
+              type: "object",
+              properties: {
+                multiReplicaDeclared: { type: "boolean" },
+                ok: { type: "boolean" },
+                warnings: { type: "array", items: { type: "string" } }
+              }
+            }
           }
         }
       }
@@ -10637,7 +10655,7 @@ var getHealthSchema = {
 };
 
 // src/controllers/thread_status.ts
-var import_core21 = require("@axiom-lattice/core");
+var import_core22 = require("@axiom-lattice/core");
 async function removePendingMessageHandler(request, reply) {
   try {
     const { assistant_id, thread_id, message_id } = request.params;
@@ -10650,7 +10668,7 @@ async function removePendingMessageHandler(request, reply) {
     if (!assistant_id) {
       return reply.code(400).send({ error: "Missing assistant_id parameter" });
     }
-    const agent = import_core21.agentInstanceManager.getAgent({
+    const agent = import_core22.agentInstanceManager.getAgent({
       assistant_id,
       thread_id,
       tenant_id,
@@ -10684,7 +10702,7 @@ async function removePendingMessageHandler(request, reply) {
 }
 
 // src/services/sandbox_service.ts
-var import_core22 = require("@axiom-lattice/core");
+var import_core23 = require("@axiom-lattice/core");
 var ERROR_HTML = `<!DOCTYPE html>
 <html lang="zh-CN">
 <head>
@@ -10796,7 +10814,7 @@ var ERROR_HTML = `<!DOCTYPE html>
 </html>`;
 var SandboxService = class {
   getFilesystemVmIsolation(tenantId, assistantId) {
-    const agentLattice = import_core22.agentLatticeManager.getAgentLatticeWithTenant(tenantId, assistantId);
+    const agentLattice = import_core23.agentLatticeManager.getAgentLatticeWithTenant(tenantId, assistantId);
     if (!agentLattice) {
       return null;
     }
@@ -10810,9 +10828,9 @@ var SandboxService = class {
   computeSandboxName(assistantId, threadId, vmIsolation, tenantId, workspaceId, projectId) {
     switch (vmIsolation) {
       case "agent":
-        return (0, import_core22.normalizeSandboxName)(`${tenantId ?? "default"}-${assistantId}`);
+        return (0, import_core23.normalizeSandboxName)(`${tenantId ?? "default"}-${assistantId}`);
       case "project":
-        return (0, import_core22.normalizeSandboxName)(
+        return (0, import_core23.normalizeSandboxName)(
           `${tenantId ?? "default"}-${workspaceId ?? "default"}-${projectId ?? "default"}`
         );
       case "global":
@@ -10868,7 +10886,7 @@ var SandboxService = class {
 var sandboxService = new SandboxService();
 
 // src/controllers/sandbox.ts
-var import_core23 = require("@axiom-lattice/core");
+var import_core24 = require("@axiom-lattice/core");
 init_mime();
 init_http_range();
 function registerSandboxProxyRoutes(app2) {
@@ -10884,7 +10902,7 @@ function registerSandboxProxyRoutes(app2) {
       }
       const workspaceId = request.headers["x-workspace-id"];
       const projectId = request.headers["x-project-id"];
-      const sandboxManager = (0, import_core23.getSandBoxManager)();
+      const sandboxManager = (0, import_core24.getSandBoxManager)();
       const sandbox = await sandboxManager.getSandboxFromConfig({
         assistant_id: assistantId,
         thread_id: threadId,
@@ -10932,7 +10950,7 @@ function registerSandboxProxyRoutes(app2) {
       }
       const workspaceId = request.headers["x-workspace-id"];
       const projectId = request.headers["x-project-id"];
-      const sandboxManager = (0, import_core23.getSandBoxManager)();
+      const sandboxManager = (0, import_core24.getSandBoxManager)();
       const sandbox = await sandboxManager.getSandboxFromConfig({
         assistant_id: assistantId,
         thread_id: threadId,
@@ -10968,9 +10986,9 @@ var fs4 = __toESM(require("fs/promises"));
 var path4 = __toESM(require("path"));
 var import_fs = require("fs");
 var os2 = __toESM(require("os"));
-var import_core27 = require("@axiom-lattice/core");
 var import_core28 = require("@axiom-lattice/core");
 var import_core29 = require("@axiom-lattice/core");
+var import_core30 = require("@axiom-lattice/core");
 var import_uuid3 = require("uuid");
 init_mime();
 init_http_range();
@@ -10979,12 +10997,12 @@ init_workspace_file_service();
 init_path_containment();
 
 // src/services/collaboration/RoomCoordinatorProvisioner.ts
-var import_core25 = require("@axiom-lattice/core");
+var import_core26 = require("@axiom-lattice/core");
 var ROOM_COORDINATOR_KEY = "room-coordinator";
 var ROOM_COORDINATOR_ASSISTANT_INPUT = {
   name: "Room Coordinator",
   description: "Coordinates project room conversations and organizes room work.",
-  graphDefinition: import_core25.roomCoordinatorConfig
+  graphDefinition: import_core26.roomCoordinatorConfig
 };
 function needsConfigRepair(assistant) {
   const graph = assistant.graphDefinition;
@@ -11029,7 +11047,7 @@ var RoomCoordinatorProvisioner = class {
 var import_node_crypto = require("crypto");
 
 // src/services/collaboration/ProjectMutationMutex.ts
-var import_core26 = require("@axiom-lattice/core");
+var import_core27 = require("@axiom-lattice/core");
 
 // src/services/collaboration/RoomPresenceThread.ts
 var ROOM_PRESENCE_METADATA_KEYS = ["source", "kind", "workspaceId", "projectId", "roomId", "membershipId", "assistantId"];
@@ -11063,7 +11081,7 @@ var RoomCoordinatorEnsurer = class {
   /** Creates the ensurer from explicitly injected stores and provisioner. */
   constructor(deps) {
     this.deps = deps;
-    this.mutex = deps.mutationMutex ?? import_core26.projectMutationMutex;
+    this.mutex = deps.mutationMutex ?? import_core27.projectMutationMutex;
     this.idFactory = deps.idFactory ?? import_node_crypto.randomUUID;
   }
   /**
@@ -11350,13 +11368,13 @@ function createProjectCollaborationInitializer(deps) {
 var WorkspaceController = class {
   constructor(projectCollaboration) {
     this.projectCollaboration = projectCollaboration;
-    this.workspaceStore = (0, import_core27.getStoreLattice)("default", "workspace").store;
-    this.projectStore = (0, import_core27.getStoreLattice)("default", "project").store;
-    const roomStore = (0, import_core27.getStoreLattice)("default", "projectRoom").store;
-    const botMembershipStore = (0, import_core27.getStoreLattice)("default", "projectBotMembership").store;
-    const assistantStore = (0, import_core27.getStoreLattice)("default", "assistant").store;
-    const threadStore = (0, import_core27.getStoreLattice)("default", "thread").store;
-    const tenantStore = (0, import_core27.getStoreLattice)("default", "tenant").store;
+    this.workspaceStore = (0, import_core28.getStoreLattice)("default", "workspace").store;
+    this.projectStore = (0, import_core28.getStoreLattice)("default", "project").store;
+    const roomStore = (0, import_core28.getStoreLattice)("default", "projectRoom").store;
+    const botMembershipStore = (0, import_core28.getStoreLattice)("default", "projectBotMembership").store;
+    const assistantStore = (0, import_core28.getStoreLattice)("default", "assistant").store;
+    const threadStore = (0, import_core28.getStoreLattice)("default", "thread").store;
+    const tenantStore = (0, import_core28.getStoreLattice)("default", "tenant").store;
     const coordinatorProvisioner = new RoomCoordinatorProvisioner({
       getAssistantById: assistantStore.getAssistantById.bind(assistantStore),
       createAssistant: assistantStore.createAssistant.bind(assistantStore),
@@ -11633,7 +11651,7 @@ var WorkspaceController = class {
     }
     console.log(`[getBackend] storageType=${workspace.storageType} filePath=${filePath}`);
     if (workspace.storageType === "sandbox") {
-      const sandboxManager = (0, import_core29.getSandBoxManager)();
+      const sandboxManager = (0, import_core30.getSandBoxManager)();
       const volumeConfig = {
         assistant_id: assistantId || "",
         thread_id: "",
@@ -11651,7 +11669,7 @@ var WorkspaceController = class {
       const sandbox = await sandboxManager.getSandboxFromConfig(volumeConfig);
       console.log(`[getBackend] sandbox acquired, name=${sandbox.name || "unknown"}`);
       return {
-        backend: new import_core28.SandboxFilesystem({
+        backend: new import_core29.SandboxFilesystem({
           sandboxInstance: sandbox
         }),
         workspace
@@ -11664,7 +11682,7 @@ var WorkspaceController = class {
     );
     console.log(`[getBackend] using FilesystemBackend rootDir=${rootDir}`);
     return {
-      backend: new import_core28.FilesystemBackend({
+      backend: new import_core29.FilesystemBackend({
         rootDir,
         virtualMode: true
       }),
@@ -11683,7 +11701,7 @@ var WorkspaceController = class {
       const { workspace } = await this.getBackend(tenantId, workspaceId, projectId, assistantId);
       const resolvedPath = filePath;
       if (workspace.storageType === "sandbox") {
-        const sandboxManager = (0, import_core29.getSandBoxManager)();
+        const sandboxManager = (0, import_core30.getSandBoxManager)();
         const volumeConfig = {
           assistant_id: assistantId || "",
           thread_id: "",
@@ -11744,7 +11762,7 @@ var WorkspaceController = class {
         throw new FolderDownloadError(404, "PROJECT_NOT_FOUND", "Project not found");
       }
       if (storedWorkspace.storageType === "sandbox") {
-        const sandboxManager = (0, import_core29.getSandBoxManager)();
+        const sandboxManager = (0, import_core30.getSandBoxManager)();
         const volumeConfig = {
           assistant_id: assistantId || "",
           thread_id: "",
@@ -11810,7 +11828,7 @@ var WorkspaceController = class {
           throw new FolderDownloadError(400, "NOT_A_FOLDER", "Path is not a folder");
         }
       } else if (folderPath) {
-        const sandboxManager = (0, import_core29.getSandBoxManager)();
+        const sandboxManager = (0, import_core30.getSandBoxManager)();
         const volumeConfig = {
           assistant_id: assistantId || "",
           thread_id: "",
@@ -12025,7 +12043,7 @@ var WorkspaceController = class {
       const { workspace } = await this.getBackend(tenantId, workspaceId, projectId, assistantId);
       const resolvedPath = filePath;
       if (workspace.storageType === "sandbox") {
-        const sandboxManager = (0, import_core29.getSandBoxManager)();
+        const sandboxManager = (0, import_core30.getSandBoxManager)();
         const volumeConfig = {
           assistant_id: assistantId || "",
           thread_id: "",
@@ -12517,8 +12535,8 @@ var ProjectAccessService = class {
 };
 
 // src/controllers/database-configs.ts
-var import_core30 = require("@axiom-lattice/core");
-var import_crypto6 = require("crypto");
+var import_core31 = require("@axiom-lattice/core");
+var import_crypto5 = require("crypto");
 function getTenantId9(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) {
@@ -12529,7 +12547,7 @@ function getTenantId9(request) {
 async function getDatabaseConfigList(request, reply) {
   const tenantId = getTenantId9(request);
   try {
-    const storeLattice = (0, import_core30.getStoreLattice)("default", "database");
+    const storeLattice = (0, import_core31.getStoreLattice)("default", "database");
     const store2 = storeLattice.store;
     const configs = await store2.getAllConfigs(tenantId);
     console.log("Backend: getAllConfigs returned:", configs);
@@ -12560,7 +12578,7 @@ async function getDatabaseConfig(request, reply) {
   const tenantId = getTenantId9(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core30.getStoreLattice)("default", "database");
+    const storeLattice = (0, import_core31.getStoreLattice)("default", "database");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -12586,7 +12604,7 @@ async function createDatabaseConfig(request, reply) {
   const tenantId = getTenantId9(request);
   const body = request.body;
   try {
-    const storeLattice = (0, import_core30.getStoreLattice)("default", "database");
+    const storeLattice = (0, import_core31.getStoreLattice)("default", "database");
     const store2 = storeLattice.store;
     const existing = await store2.getConfigByKey(tenantId, body.key);
     if (existing) {
@@ -12596,10 +12614,10 @@ async function createDatabaseConfig(request, reply) {
         message: "Database configuration with this key already exists"
       };
     }
-    const id3 = body.id || (0, import_crypto6.randomUUID)();
+    const id3 = body.id || (0, import_crypto5.randomUUID)();
     const config = await store2.createConfig(tenantId, id3, body);
     try {
-      import_core30.sqlDatabaseManager.registerDatabase(tenantId, config.key, config.config);
+      import_core31.sqlDatabaseManager.registerDatabase(tenantId, config.key, config.config);
     } catch (error) {
       console.warn("Failed to auto-register database:", error);
     }
@@ -12622,7 +12640,7 @@ async function updateDatabaseConfig(request, reply) {
   const { key } = request.params;
   const updates = request.body;
   try {
-    const storeLattice = (0, import_core30.getStoreLattice)("default", "database");
+    const storeLattice = (0, import_core31.getStoreLattice)("default", "database");
     const store2 = storeLattice.store;
     const existing = await store2.getConfigByKey(tenantId, key);
     if (!existing) {
@@ -12641,7 +12659,7 @@ async function updateDatabaseConfig(request, reply) {
     }
     if (updates.config) {
       try {
-        import_core30.sqlDatabaseManager.registerDatabase(tenantId, updated.key, updated.config);
+        import_core31.sqlDatabaseManager.registerDatabase(tenantId, updated.key, updated.config);
       } catch (error) {
         console.warn("Failed to re-register database:", error);
       }
@@ -12663,7 +12681,7 @@ async function deleteDatabaseConfig(request, reply) {
   const tenantId = getTenantId9(request);
   const { keyOrId } = request.params;
   try {
-    const storeLattice = (0, import_core30.getStoreLattice)("default", "database");
+    const storeLattice = (0, import_core31.getStoreLattice)("default", "database");
     const store2 = storeLattice.store;
     console.log("Delete request - keyOrId:", keyOrId);
     let config = await store2.getConfigByKey(tenantId, keyOrId);
@@ -12690,8 +12708,8 @@ async function deleteDatabaseConfig(request, reply) {
       };
     }
     try {
-      if (import_core30.sqlDatabaseManager.hasDatabase(tenantId, configKey)) {
-        await import_core30.sqlDatabaseManager.removeDatabase(tenantId, configKey);
+      if (import_core31.sqlDatabaseManager.hasDatabase(tenantId, configKey)) {
+        await import_core31.sqlDatabaseManager.removeDatabase(tenantId, configKey);
       }
     } catch (error) {
       console.warn("Failed to remove from SqlDatabaseManager:", error);
@@ -12712,7 +12730,7 @@ async function testDatabaseConnection(request, reply) {
   const tenantId = getTenantId9(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core30.getStoreLattice)("default", "database");
+    const storeLattice = (0, import_core31.getStoreLattice)("default", "database");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -12723,16 +12741,16 @@ async function testDatabaseConnection(request, reply) {
       };
     }
     const testKey = `__test_${key}_${Date.now()}`;
-    import_core30.sqlDatabaseManager.registerDatabase(tenantId, testKey, config.config);
+    import_core31.sqlDatabaseManager.registerDatabase(tenantId, testKey, config.config);
     const startTime = Date.now();
-    const db = await import_core30.sqlDatabaseManager.getDatabase(tenantId, testKey);
+    const db = await import_core31.sqlDatabaseManager.getDatabase(tenantId, testKey);
     try {
       await db.connect();
       await db.listTables();
       const latency = Date.now() - startTime;
       await new Promise((resolve4) => setTimeout(resolve4, 100));
       await db.disconnect();
-      await import_core30.sqlDatabaseManager.removeDatabase(tenantId, testKey);
+      await import_core31.sqlDatabaseManager.removeDatabase(tenantId, testKey);
       return {
         success: true,
         message: "Connection test successful",
@@ -12744,7 +12762,7 @@ async function testDatabaseConnection(request, reply) {
     } catch (error) {
       try {
         await db.disconnect();
-        await import_core30.sqlDatabaseManager.removeDatabase(tenantId, testKey);
+        await import_core31.sqlDatabaseManager.removeDatabase(tenantId, testKey);
       } catch {
       }
       return {
@@ -12796,8 +12814,8 @@ function registerDatabaseConfigRoutes(app2) {
 }
 
 // src/controllers/metrics-configs.ts
-var import_core31 = require("@axiom-lattice/core");
-var import_crypto7 = require("crypto");
+var import_core32 = require("@axiom-lattice/core");
+var import_crypto6 = require("crypto");
 function getTenantId10(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) {
@@ -12808,7 +12826,7 @@ function getTenantId10(request) {
 async function getMetricsServerConfigList(request, reply) {
   const tenantId = getTenantId10(request);
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const configs = await store2.getAllConfigs(tenantId);
     return {
@@ -12835,7 +12853,7 @@ async function getMetricsServerConfig(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -12861,7 +12879,7 @@ async function createMetricsServerConfig(request, reply) {
   const tenantId = getTenantId10(request);
   const body = request.body;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const existing = await store2.getConfigByKey(tenantId, body.key);
     if (existing) {
@@ -12878,7 +12896,7 @@ async function createMetricsServerConfig(request, reply) {
         message: "selectedDataSources is required for semantic metrics servers"
       };
     }
-    const id3 = body.id || (0, import_crypto7.randomUUID)();
+    const id3 = body.id || (0, import_crypto6.randomUUID)();
     const configData = {
       key: body.key,
       name: body.name,
@@ -12890,7 +12908,7 @@ async function createMetricsServerConfig(request, reply) {
     };
     const config = await store2.createConfig(tenantId, id3, configData);
     try {
-      import_core31.metricsServerManager.registerServer(tenantId, config.key, config.config);
+      import_core32.metricsServerManager.registerServer(tenantId, config.key, config.config);
     } catch (error) {
       console.warn("Failed to auto-register metrics server:", error);
     }
@@ -12913,7 +12931,7 @@ async function updateMetricsServerConfig(request, reply) {
   const { key } = request.params;
   const updates = request.body;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const existing = await store2.getConfigByKey(tenantId, key);
     if (!existing) {
@@ -12941,7 +12959,7 @@ async function updateMetricsServerConfig(request, reply) {
     }
     if (updates.config) {
       try {
-        import_core31.metricsServerManager.registerServer(tenantId, updated.key, updated.config);
+        import_core32.metricsServerManager.registerServer(tenantId, updated.key, updated.config);
       } catch (error) {
         console.warn("Failed to re-register metrics server:", error);
       }
@@ -12963,7 +12981,7 @@ async function deleteMetricsServerConfig(request, reply) {
   const tenantId = getTenantId10(request);
   const { keyOrId } = request.params;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     let config = await store2.getConfigByKey(tenantId, keyOrId);
     let configKey = keyOrId;
@@ -12988,8 +13006,8 @@ async function deleteMetricsServerConfig(request, reply) {
       };
     }
     try {
-      if (import_core31.metricsServerManager.hasServer(tenantId, configKey)) {
-        import_core31.metricsServerManager.removeServer(tenantId, configKey);
+      if (import_core32.metricsServerManager.hasServer(tenantId, configKey)) {
+        import_core32.metricsServerManager.removeServer(tenantId, configKey);
       }
     } catch (error) {
       console.warn("Failed to remove from MetricsServerManager:", error);
@@ -13010,7 +13028,7 @@ async function testMetricsServerConnection(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13021,11 +13039,11 @@ async function testMetricsServerConnection(request, reply) {
       };
     }
     const testKey = `__test_${key}_${Date.now()}`;
-    import_core31.metricsServerManager.registerServer(tenantId, testKey, config.config);
+    import_core32.metricsServerManager.registerServer(tenantId, testKey, config.config);
     try {
-      const client = await import_core31.metricsServerManager.getClient(tenantId, testKey);
+      const client = await import_core32.metricsServerManager.getClient(tenantId, testKey);
       const result = await client.testConnection();
-      import_core31.metricsServerManager.removeServer(tenantId, testKey);
+      import_core32.metricsServerManager.removeServer(tenantId, testKey);
       return {
         success: true,
         message: result.connected ? "Connection test successful" : "Connection test failed",
@@ -13033,7 +13051,7 @@ async function testMetricsServerConnection(request, reply) {
       };
     } catch (error) {
       try {
-        import_core31.metricsServerManager.removeServer(tenantId, testKey);
+        import_core32.metricsServerManager.removeServer(tenantId, testKey);
       } catch {
       }
       return {
@@ -13061,7 +13079,7 @@ async function listAvailableMetrics(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13071,10 +13089,10 @@ async function listAvailableMetrics(request, reply) {
         message: "Metrics server configuration not found"
       };
     }
-    if (!import_core31.metricsServerManager.hasServer(tenantId, key)) {
-      import_core31.metricsServerManager.registerServer(tenantId, key, config.config);
+    if (!import_core32.metricsServerManager.hasServer(tenantId, key)) {
+      import_core32.metricsServerManager.registerServer(tenantId, key, config.config);
     }
-    const client = await import_core31.metricsServerManager.getClient(tenantId, key);
+    const client = await import_core32.metricsServerManager.getClient(tenantId, key);
     const metrics = await client.listMetrics();
     return {
       success: true,
@@ -13100,7 +13118,7 @@ async function queryMetricsData(request, reply) {
   const { key } = request.params;
   const { metricName, startTime, endTime, step, labels } = request.body;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13117,10 +13135,10 @@ async function queryMetricsData(request, reply) {
         message: "metricName is required"
       };
     }
-    if (!import_core31.metricsServerManager.hasServer(tenantId, key)) {
-      import_core31.metricsServerManager.registerServer(tenantId, key, config.config);
+    if (!import_core32.metricsServerManager.hasServer(tenantId, key)) {
+      import_core32.metricsServerManager.registerServer(tenantId, key, config.config);
     }
-    const client = await import_core31.metricsServerManager.getClient(tenantId, key);
+    const client = await import_core32.metricsServerManager.getClient(tenantId, key);
     const result = await client.queryMetricData(metricName, {
       startTime,
       endTime,
@@ -13147,7 +13165,7 @@ async function getDataSources(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13165,7 +13183,7 @@ async function getDataSources(request, reply) {
       };
     }
     const semanticConfig = config.config;
-    const client = new import_core31.SemanticMetricsClient(semanticConfig);
+    const client = new import_core32.SemanticMetricsClient(semanticConfig);
     const allDatasources = await client.getDataSources();
     const selectedIds = semanticConfig.selectedDataSources || [];
     const filteredDatasources = selectedIds.length > 0 ? allDatasources.filter((ds) => selectedIds.includes(String(ds.id))) : allDatasources;
@@ -13188,7 +13206,7 @@ async function getDatasourceMetrics(request, reply) {
   const tenantId = getTenantId10(request);
   const { key, datasourceId } = request.params;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13206,7 +13224,7 @@ async function getDatasourceMetrics(request, reply) {
       };
     }
     const semanticConfig = config.config;
-    const client = new import_core31.SemanticMetricsClient(semanticConfig);
+    const client = new import_core32.SemanticMetricsClient(semanticConfig);
     const metrics = await client.getDatasourceMetrics(datasourceId);
     return {
       success: true,
@@ -13226,7 +13244,7 @@ async function querySemanticMetrics(request, reply) {
   const { key } = request.params;
   const body = request.body;
   try {
-    const storeLattice = (0, import_core31.getStoreLattice)("default", "metrics");
+    const storeLattice = (0, import_core32.getStoreLattice)("default", "metrics");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13251,7 +13269,7 @@ async function querySemanticMetrics(request, reply) {
       };
     }
     const semanticConfig = config.config;
-    const client = new import_core31.SemanticMetricsClient(semanticConfig);
+    const client = new import_core32.SemanticMetricsClient(semanticConfig);
     const result = await client.semanticQuery(body);
     const columnNames = result.columns.map((col) => col.name);
     const allDataPoints = [];
@@ -13311,7 +13329,7 @@ async function testSemanticDataSources(request, reply) {
       password: body.password,
       headers: body.headers
     };
-    const client = new import_core31.SemanticMetricsClient(testConfig);
+    const client = new import_core32.SemanticMetricsClient(testConfig);
     const datasources = await client.getDataSources();
     return {
       success: true,
@@ -13347,7 +13365,7 @@ async function testDatasourceMetrics(request, reply) {
       password: body.password,
       headers: body.headers
     };
-    const client = new import_core31.SemanticMetricsClient(testConfig);
+    const client = new import_core32.SemanticMetricsClient(testConfig);
     const metrics = await client.getDatasourceMetrics(datasourceId);
     return {
       success: true,
@@ -13379,13 +13397,13 @@ function registerMetricsServerConfigRoutes(app2) {
 }
 
 // src/controllers/connections.ts
-var import_core33 = require("@axiom-lattice/core");
+var import_core34 = require("@axiom-lattice/core");
 var import_zod2 = require("zod");
 
 // src/services/plugins/connectionSecretFields.ts
-var import_core32 = require("@axiom-lattice/core");
+var import_core33 = require("@axiom-lattice/core");
 function secretFieldsForConnection(plugin) {
-  const keys2 = (0, import_core32.connectionSecretFields)(plugin);
+  const keys2 = (0, import_core33.connectionSecretFields)(plugin);
   return keys2.length > 0 ? keys2 : void 0;
 }
 
@@ -13413,7 +13431,7 @@ async function getTenantPlugin(request, type) {
 }
 async function resolveConfig(type, body, tenantId) {
   if (body.key) {
-    const entry = await import_core33.ConnectionRegistry.get(type, body.key, tenantId);
+    const entry = await import_core34.ConnectionRegistry.get(type, body.key, tenantId);
     if (!entry) throw { status: 404, error: `Connection "${body.key}" not found` };
     return entry.config;
   }
@@ -13424,7 +13442,7 @@ function connectionRoutes(fastify2) {
   fastify2.get("/api/connections", async (request, reply) => {
     const { type } = request.query;
     if (!type) return reply.status(400).send({ error: "query 'type' required" });
-    const entries = await import_core33.ConnectionRegistry.list(type, getTenant(request));
+    const entries = await import_core34.ConnectionRegistry.list(type, getTenant(request));
     return reply.send({
       success: true,
       data: { records: entries, total: entries.length }
@@ -13433,7 +13451,7 @@ function connectionRoutes(fastify2) {
   fastify2.post("/api/connections", async (request, reply) => {
     const parsed = createBody.parse(request.body);
     const plugin = await getTenantPlugin(request, parsed.type);
-    const entry = await import_core33.ConnectionRegistry.create({
+    const entry = await import_core34.ConnectionRegistry.create({
       tenantId: getTenant(request),
       type: parsed.type,
       key: parsed.key,
@@ -13453,7 +13471,7 @@ function connectionRoutes(fastify2) {
     const { key } = request.params;
     const body = request.body;
     const tenantId = getTenant(request);
-    const existing = await import_core33.ConnectionRegistry.get(type, key, tenantId);
+    const existing = await import_core34.ConnectionRegistry.get(type, key, tenantId);
     if (!existing) return reply.status(404).send({ error: "not found" });
     const plugin = await getTenantPlugin(request, type);
     const updates = {};
@@ -13463,7 +13481,7 @@ function connectionRoutes(fastify2) {
       updates.config = { ...existing.config, ...body.config };
       updates.secretFields = secretFieldsForConnection(plugin);
     }
-    const entry = await import_core33.ConnectionRegistry.update(tenantId, type, key, updates);
+    const entry = await import_core34.ConnectionRegistry.update(tenantId, type, key, updates);
     return reply.send({
       success: true,
       data: entry
@@ -13473,7 +13491,7 @@ function connectionRoutes(fastify2) {
     const { type } = request.query;
     if (!type) return reply.status(400).send({ error: "query 'type' required" });
     const { key } = request.params;
-    const ok = await import_core33.ConnectionRegistry.delete(getTenant(request), type, key);
+    const ok = await import_core34.ConnectionRegistry.delete(getTenant(request), type, key);
     return reply.send({ success: ok });
   });
   fastify2.post("/api/connections/test", async (request, reply) => {
@@ -13534,8 +13552,8 @@ function connectionRoutes(fastify2) {
 }
 
 // src/controllers/mcp-configs.ts
-var import_core34 = require("@axiom-lattice/core");
-var import_crypto8 = require("crypto");
+var import_core35 = require("@axiom-lattice/core");
+var import_crypto7 = require("crypto");
 
 // src/services/mcpConfigSync.ts
 var MCP_CONFIG_CHANGED_TOPIC = "mcp-config-changed";
@@ -13583,15 +13601,15 @@ function getTenantId11(request) {
 function broadcastMcpConfigChanged(tenantId, serverKey) {
   if (!tenantId || !serverKey) return;
   try {
-    const outbox = (0, import_core34.getStoreLattice)("default", "outbox").store;
-    void publishMcpConfigChanged(outbox, (0, import_core34.getReplicaId)(), tenantId, serverKey);
+    const outbox = (0, import_core35.getStoreLattice)("default", "outbox").store;
+    void publishMcpConfigChanged(outbox, (0, import_core35.getReplicaId)(), tenantId, serverKey);
   } catch {
   }
 }
 async function getMcpServerConfigList(request, reply) {
   const tenantId = getTenantId11(request);
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const configs = await store2.getAllConfigs(tenantId);
     return {
@@ -13618,7 +13636,7 @@ async function getMcpServerConfig(request, reply) {
   const tenantId = getTenantId11(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13644,7 +13662,7 @@ async function createMcpServerConfig(request, reply) {
   const tenantId = getTenantId11(request);
   const body = request.body;
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const existing = await store2.getConfigByKey(tenantId, body.key);
     if (existing) {
@@ -13654,7 +13672,7 @@ async function createMcpServerConfig(request, reply) {
         message: "MCP server configuration with this key already exists"
       };
     }
-    const id3 = body.id || (0, import_crypto8.randomUUID)();
+    const id3 = body.id || (0, import_crypto7.randomUUID)();
     const config = await store2.createConfig(tenantId, id3, body);
     try {
       await connectAndRegisterTools(config);
@@ -13685,7 +13703,7 @@ async function updateMcpServerConfig(request, reply) {
   const { key } = request.params;
   const updates = request.body;
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const existing = await store2.getConfigByKey(tenantId, key);
     if (!existing) {
@@ -13707,13 +13725,13 @@ async function updateMcpServerConfig(request, reply) {
     }
     if (configChanged) {
       try {
-        const connection = (0, import_core34.convertToConnection)(updated.config);
-        import_core34.mcpManager.registerServer(tenantId, key, connection, {
+        const connection = (0, import_core35.convertToConnection)(updated.config);
+        import_core35.mcpManager.registerServer(tenantId, key, connection, {
           timeoutMs: updated.config.timeout,
           maxAttempts: updated.config.retryAttempts
         });
-        await import_core34.mcpManager.ensureConnected(tenantId, key);
-        await import_core34.mcpManager.registerToolsToToolLattice(tenantId, key, updated.selectedTools);
+        await import_core35.mcpManager.ensureConnected(tenantId, key);
+        await import_core35.mcpManager.registerToolsToToolLattice(tenantId, key, updated.selectedTools);
         await store2.updateConfig(tenantId, existing.id, { status: "connected" });
         updated.status = "connected";
       } catch (error) {
@@ -13721,16 +13739,16 @@ async function updateMcpServerConfig(request, reply) {
         await store2.updateConfig(tenantId, existing.id, { status: "error" });
         updated.status = "error";
       }
-    } else if (toolsChanged && import_core34.mcpManager.hasServer(tenantId, key)) {
+    } else if (toolsChanged && import_core35.mcpManager.hasServer(tenantId, key)) {
       try {
-        await import_core34.mcpManager.registerToolsToToolLattice(tenantId, key, updated.selectedTools);
+        await import_core35.mcpManager.registerToolsToToolLattice(tenantId, key, updated.selectedTools);
       } catch (error) {
         console.warn("Failed to re-register MCP tools:", error);
       }
     }
-    if (statusChanged && updated.status !== "connected" && import_core34.mcpManager.hasServer(tenantId, key)) {
+    if (statusChanged && updated.status !== "connected" && import_core35.mcpManager.hasServer(tenantId, key)) {
       try {
-        await import_core34.mcpManager.removeServer(tenantId, key);
+        await import_core35.mcpManager.removeServer(tenantId, key);
       } catch (error) {
         console.warn("Failed to remove MCP server:", error);
       }
@@ -13755,7 +13773,7 @@ async function deleteMcpServerConfig(request, reply) {
   const tenantId = getTenantId11(request);
   const { keyOrId } = request.params;
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     let config = await store2.getConfigByKey(tenantId, keyOrId);
     let configKey = keyOrId;
@@ -13773,8 +13791,8 @@ async function deleteMcpServerConfig(request, reply) {
       };
     }
     try {
-      if (import_core34.mcpManager.hasServer(tenantId, configKey)) {
-        await import_core34.mcpManager.removeServer(tenantId, configKey);
+      if (import_core35.mcpManager.hasServer(tenantId, configKey)) {
+        await import_core35.mcpManager.removeServer(tenantId, configKey);
       }
     } catch (error) {
       console.warn("Failed to remove from MCP manager:", error);
@@ -13803,7 +13821,7 @@ async function testMcpServerConnection(request, reply) {
   const tenantId = getTenantId11(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13815,8 +13833,8 @@ async function testMcpServerConnection(request, reply) {
     }
     try {
       const testKey = `__test_${key}_${Date.now()}`;
-      const connection = (0, import_core34.convertToConnection)(config.config);
-      const { latency } = await import_core34.McpLatticeManager.testConnection(testKey, connection);
+      const connection = (0, import_core35.convertToConnection)(config.config);
+      const { latency } = await import_core35.McpLatticeManager.testConnection(testKey, connection);
       return {
         success: true,
         message: "Connection test successful",
@@ -13851,7 +13869,7 @@ async function listMcpServerTools(request, reply) {
   const tenantId = getTenantId11(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13861,7 +13879,7 @@ async function listMcpServerTools(request, reply) {
         message: "MCP server configuration not found"
       };
     }
-    const wasConnected = import_core34.mcpManager.isServerConnected(tenantId, key);
+    const wasConnected = import_core35.mcpManager.isServerConnected(tenantId, key);
     if (!wasConnected) {
       await connectAndRegisterTools(config);
     }
@@ -13872,7 +13890,7 @@ async function listMcpServerTools(request, reply) {
     if (!wasConnected || statusStale) {
       broadcastMcpConfigChanged(tenantId, key);
     }
-    const tools = await import_core34.mcpManager.getServerTools(tenantId, key);
+    const tools = await import_core35.mcpManager.getServerTools(tenantId, key);
     return {
       success: true,
       message: "Tools retrieved successfully",
@@ -13892,7 +13910,7 @@ async function connectMcpServer(request, reply) {
   const tenantId = getTenantId11(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13914,7 +13932,7 @@ async function connectMcpServer(request, reply) {
     };
   } catch (error) {
     console.error("Failed to connect MCP server:", error);
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (config) {
@@ -13931,7 +13949,7 @@ async function disconnectMcpServer(request, reply) {
   const tenantId = getTenantId11(request);
   const { key } = request.params;
   try {
-    const storeLattice = (0, import_core34.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core35.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     const config = await store2.getConfigByKey(tenantId, key);
     if (!config) {
@@ -13941,8 +13959,8 @@ async function disconnectMcpServer(request, reply) {
         message: "MCP server configuration not found"
       };
     }
-    if (import_core34.mcpManager.hasServer(tenantId, key)) {
-      await import_core34.mcpManager.removeServer(tenantId, key);
+    if (import_core35.mcpManager.hasServer(tenantId, key)) {
+      await import_core35.mcpManager.removeServer(tenantId, key);
     }
     const updated = await store2.updateConfig(tenantId, config.id, {
       status: "disconnected"
@@ -13972,8 +13990,8 @@ async function testMcpServerTools(request, reply) {
       };
     }
     const testKey = `__test_${Date.now()}`;
-    const connection = (0, import_core34.convertToConnection)(body.config);
-    const { tools } = await import_core34.McpLatticeManager.testConnection(testKey, connection);
+    const connection = (0, import_core35.convertToConnection)(body.config);
+    const { tools } = await import_core35.McpLatticeManager.testConnection(testKey, connection);
     return {
       success: true,
       message: "Tools retrieved successfully",
@@ -13990,14 +14008,14 @@ async function testMcpServerTools(request, reply) {
   }
 }
 async function connectAndRegisterTools(config) {
-  const connection = (0, import_core34.convertToConnection)(config.config);
-  import_core34.mcpManager.registerServer(config.tenantId, config.key, connection, {
+  const connection = (0, import_core35.convertToConnection)(config.config);
+  import_core35.mcpManager.registerServer(config.tenantId, config.key, connection, {
     timeoutMs: config.config.timeout,
     maxAttempts: config.config.retryAttempts,
     selectedTools: config.selectedTools
   });
-  await import_core34.mcpManager.ensureConnected(config.tenantId, config.key);
-  await import_core34.mcpManager.registerToolsToToolLattice(
+  await import_core35.mcpManager.ensureConnected(config.tenantId, config.key);
+  await import_core35.mcpManager.registerToolsToToolLattice(
     config.tenantId,
     config.key,
     config.selectedTools
@@ -14018,7 +14036,7 @@ function registerMcpServerConfigRoutes(app2) {
 
 // src/routes/mcp-apps.ts
 var import_protocols6 = require("@axiom-lattice/protocols");
-var import_core36 = require("@axiom-lattice/core");
+var import_core37 = require("@axiom-lattice/core");
 
 // src/services/mcp-ui/UiResourceResolver.ts
 var import_node_crypto5 = require("crypto");
@@ -14074,6 +14092,17 @@ var UiResourceResolver = class {
   async invalidate(tenantId, ref) {
     await this.deps.store.delete(this.fullKey(tenantId, ref));
   }
+  /**
+   * Evict every cached plugin UI resource for a tenant.
+   *
+   * @param tenantId Tenant whose plugin UI resources to drop.
+   * @remarks Called when a tenant's plugin catalog changes so an edited
+   * `ui/*.html` is re-fetched instead of being served from the TTL cache
+   * (which is keyed by ref identity, not content).
+   */
+  async invalidateTenantPlugins(tenantId) {
+    await this.deps.store.deleteByPrefix(`${tenantId}\0plugin\0`);
+  }
   async fetchAndCache(tenantId, ref, key, cached) {
     try {
       const fresh = ref.kind === "mcp" ? await this.deps.fetchMcp(tenantId, ref.serverKey, ref.resourceUri) : await this.deps.fetchPlugin(tenantId, ref.pluginType, ref.resource);
@@ -14393,26 +14422,31 @@ function createDefaultPluginBackend() {
   return {
     resolvePlugin: (tenantId, type) => resolveTenantPluginByType(tenantId, type),
     catalog: {
-      readPluginFile: (tenantId, pluginType, relPath) => (0, import_core36.getSandboxPluginCatalog)().readPluginFile(tenantId, pluginType, relPath),
-      getValidatedManifest: (tenantId, pluginType) => (0, import_core36.getSandboxPluginCatalog)().getValidatedManifest(tenantId, pluginType),
-      getExecutor: () => (0, import_core36.getSandboxPluginCatalog)().getExecutor()
+      readPluginFile: (tenantId, pluginType, relPath) => (0, import_core37.getSandboxPluginCatalog)().readPluginFile(tenantId, pluginType, relPath),
+      getValidatedManifest: (tenantId, pluginType) => (0, import_core37.getSandboxPluginCatalog)().getValidatedManifest(tenantId, pluginType),
+      getExecutor: () => (0, import_core37.getSandboxPluginCatalog)().getExecutor()
     }
   };
 }
+var uiResourceResolverSingleton;
+function getMcpUiResourceResolver() {
+  return uiResourceResolverSingleton;
+}
 function resolveMcpAppDeps(pluginBackend = createDefaultPluginBackend()) {
   const uiResourceResolver = new UiResourceResolver({
     store: new InMemoryMcpUiResourceCacheStore(),
-    fetchMcp: (tenantId, serverKey, resourceUri) => import_core36.mcpManager.readUiResource(tenantId, serverKey, resourceUri),
+    fetchMcp: (tenantId, serverKey, resourceUri) => import_core37.mcpManager.readUiResource(tenantId, serverKey, resourceUri),
     fetchPlugin: (tenantId, pluginType, resource) => fetchPluginUiResource(pluginBackend, tenantId, pluginType, resource)
   });
+  uiResourceResolverSingleton = uiResourceResolver;
   return {
     resolveUiResource: (tenantId, ref) => uiResourceResolver.resolve(tenantId, ref),
-    callTool: (tenantId, ref, name, args, context) => ref.kind === "mcp" ? import_core36.mcpManager.callServerTool(tenantId, ref.serverKey, name, args) : callPluginTool(pluginBackend, tenantId, ref, name, args, context),
+    callTool: (tenantId, ref, name, args, context) => ref.kind === "mcp" ? import_core37.mcpManager.callServerTool(tenantId, ref.serverKey, name, args) : callPluginTool(pluginBackend, tenantId, ref, name, args, context),
     // Plugin refs reach these only after `tools/call`; the handler treats the
     // rejection as an unsupported method (403). The branches are live because
     // the pure handler deliberately delegates method policy to the deps.
-    readResource: (tenantId, ref, uri) => ref.kind === "mcp" ? import_core36.mcpManager.readServerResource(tenantId, ref.serverKey, uri) : Promise.reject(new PluginMethodNotSupportedError("resources/read")),
-    listTools: (tenantId, ref) => ref.kind === "mcp" ? import_core36.mcpManager.getAvailableTools(tenantId, ref.serverKey) : Promise.reject(new PluginMethodNotSupportedError("tools/list"))
+    readResource: (tenantId, ref, uri) => ref.kind === "mcp" ? import_core37.mcpManager.readServerResource(tenantId, ref.serverKey, uri) : Promise.reject(new PluginMethodNotSupportedError("resources/read")),
+    listTools: (tenantId, ref) => ref.kind === "mcp" ? import_core37.mcpManager.getAvailableTools(tenantId, ref.serverKey) : Promise.reject(new PluginMethodNotSupportedError("tools/list"))
   };
 }
 function firstHeader(request, name) {
@@ -14456,12 +14490,12 @@ function registerMcpAppRoutes(fastify2) {
 }
 
 // src/controllers/eval.ts
-var import_core38 = require("@axiom-lattice/core");
+var import_core39 = require("@axiom-lattice/core");
 var import_uuid5 = require("uuid");
 
 // src/services/eval-runner.ts
 var import_events = require("events");
-var import_core37 = require("@axiom-lattice/core");
+var import_core38 = require("@axiom-lattice/core");
 var import_uuid4 = require("uuid");
 var TERMINAL_PERSIST_ATTEMPTS = 2;
 function mapLogs(logs) {
@@ -14571,14 +14605,14 @@ var EvalRunner = class {
     const judgeModelKey = judgeCfg.modelKey || "";
     let resolvedJudgeModelKey;
     if (judgeModelKey) {
-      if (!await (0, import_core37.hasModelLatticeForTenant)(tenantId, judgeModelKey)) {
+      if (!await (0, import_core38.hasModelLatticeForTenant)(tenantId, judgeModelKey)) {
         throw new Error(`Judge model "${judgeModelKey}" is not registered`);
       }
       resolvedJudgeModelKey = judgeModelKey;
     } else {
       resolvedJudgeModelKey = "default";
-      if (!await (0, import_core37.hasModelLatticeForTenant)(tenantId, resolvedJudgeModelKey)) {
-        const models = (0, import_core37.listModelLatticesForTenant)(tenantId);
+      if (!await (0, import_core38.hasModelLatticeForTenant)(tenantId, resolvedJudgeModelKey)) {
+        const models = (0, import_core38.listModelLatticesForTenant)(tenantId);
         resolvedJudgeModelKey = models[0]?.key ?? "";
         if (!resolvedJudgeModelKey) {
           throw new Error("No model registered \u2014 cannot run eval without a judge model");
@@ -14684,7 +14718,7 @@ var EvalRunner = class {
     };
     const runPromise = (async () => {
       try {
-        const evalProject = new import_core37.LatticeEvalProject(projectConfig, onCaseComplete);
+        const evalProject = new import_core38.LatticeEvalProject(projectConfig, onCaseComplete);
         const calibration = await evalProject.calibrateJudge();
         if (!calibration.ok && !calibration.bypassed) {
           throw new Error(`Judge calibration failed: ${calibration.reason}`);
@@ -14788,7 +14822,7 @@ var EvalRunner = class {
     return ctx !== void 0 && !ctx.terminal.workerSettled && (tenantId === void 0 || ctx.tenantId === tenantId);
   }
   getEvalStore() {
-    return (0, import_core37.getStoreLattice)("default", "eval").store;
+    return (0, import_core38.getStoreLattice)("default", "eval").store;
   }
   releaseProjectLease(leaseKey, leaseToken) {
     if (this.projectLeases.get(leaseKey) === leaseToken) this.projectLeases.delete(leaseKey);
@@ -14805,7 +14839,7 @@ function getTenantId12(request) {
   return request.headers["x-tenant-id"] || "default";
 }
 function getEvalStore() {
-  return (0, import_core38.getStoreLattice)("default", "eval").store;
+  return (0, import_core39.getStoreLattice)("default", "eval").store;
 }
 async function getOwnedSuite(store2, tenantId, projectId, suiteId) {
   const project = await store2.getProjectById(tenantId, projectId);
@@ -14836,7 +14870,7 @@ async function createProject(request, reply) {
     const judgeCfg = data.judgeModelConfig || {};
     const modelKey2 = judgeCfg.modelKey || "";
     if (modelKey2) {
-      if (!await (0, import_core38.hasModelLatticeForTenant)(tenantId, modelKey2)) {
+      if (!await (0, import_core39.hasModelLatticeForTenant)(tenantId, modelKey2)) {
         return reply.status(400).send({ success: false, message: `Judge model "${modelKey2}" is not registered` });
       }
     }
@@ -14882,7 +14916,7 @@ async function listProjects(request, reply) {
     let projects = await store2.getProjectsByTenant(tenantId);
     if (projects.length === 0) {
       try {
-        const models = import_core38.modelLatticeManager.getAllLattices();
+        const models = import_core39.modelLatticeManager.getAllLattices();
         const first = models[0];
         const judgeModel = first ? { modelKey: first.key } : {};
         const host = request.hostname || "localhost";
@@ -14950,7 +14984,7 @@ async function updateProject(request, reply) {
       const judgeCfg = body.judgeModelConfig || {};
       const modelKey2 = judgeCfg.modelKey || "";
       if (modelKey2) {
-        if (!import_core38.modelLatticeManager.hasLattice(modelKey2)) {
+        if (!import_core39.modelLatticeManager.hasLattice(modelKey2)) {
           return reply.status(400).send({ success: false, message: `Judge model "${modelKey2}" is not registered` });
         }
       }
@@ -15332,11 +15366,11 @@ data: ${JSON.stringify(event.data)}
 }
 
 // src/controllers/users.ts
-var import_core39 = require("@axiom-lattice/core");
+var import_core40 = require("@axiom-lattice/core");
 var import_uuid6 = require("uuid");
 var UsersController = class {
   constructor() {
-    this.userStore = (0, import_core39.getStoreLattice)("default", "user").store;
+    this.userStore = (0, import_core40.getStoreLattice)("default", "user").store;
   }
   async listUsers(request, reply) {
     const { email } = request.query;
@@ -15414,11 +15448,11 @@ function registerUserRoutes(app2) {
 }
 
 // src/controllers/tenants.ts
-var import_core40 = require("@axiom-lattice/core");
+var import_core41 = require("@axiom-lattice/core");
 var import_uuid7 = require("uuid");
 var TenantsController = class {
   constructor() {
-    this.tenantStore = (0, import_core40.getStoreLattice)("default", "tenant").store;
+    this.tenantStore = (0, import_core41.getStoreLattice)("default", "tenant").store;
   }
   // ==================== Tenant CRUD ====================
   async listTenants(request, reply) {
@@ -15482,7 +15516,7 @@ function registerTenantRoutes(app2) {
 }
 
 // src/controllers/auth.ts
-var import_core41 = require("@axiom-lattice/core");
+var import_core42 = require("@axiom-lattice/core");
 var import_uuid8 = require("uuid");
 var import_node_crypto6 = require("crypto");
 var defaultAuthConfig = {
@@ -15492,9 +15526,9 @@ var defaultAuthConfig = {
 };
 var AuthController = class {
   constructor(config = {}) {
-    this.userStore = (0, import_core41.getStoreLattice)("default", "user").store;
-    this.tenantStore = (0, import_core41.getStoreLattice)("default", "tenant").store;
-    this.userTenantLinkStore = (0, import_core41.getStoreLattice)("default", "userTenantLink").store;
+    this.userStore = (0, import_core42.getStoreLattice)("default", "user").store;
+    this.tenantStore = (0, import_core42.getStoreLattice)("default", "tenant").store;
+    this.userTenantLinkStore = (0, import_core42.getStoreLattice)("default", "userTenantLink").store;
     this.config = { ...defaultAuthConfig, ...config };
   }
   async register(request, reply) {
@@ -15653,7 +15687,7 @@ var AuthController = class {
       const linkMeta = link?.metadata || {};
       let personalAssistant = null;
       if (linkMeta.personalAssistantId) {
-        const assistantStore = (0, import_core41.getStoreLattice)("default", "assistant").store;
+        const assistantStore = (0, import_core42.getStoreLattice)("default", "assistant").store;
         const exists = await assistantStore.hasAssistant(tenantId, linkMeta.personalAssistantId);
         if (exists) {
           personalAssistant = {
@@ -16170,7 +16204,7 @@ var larkChannelAdapter = {
 };
 
 // src/channels/lark/verification.ts
-var import_crypto9 = __toESM(require("crypto"));
+var import_crypto8 = __toESM(require("crypto"));
 function parseLarkRequestBody(body, encryptKey) {
   const parsed = body || {};
   if (encryptKey && typeof parsed.encrypt === "string") {
@@ -16179,11 +16213,11 @@ function parseLarkRequestBody(body, encryptKey) {
   return parsed;
 }
 function decryptLarkPayload(encryptKey, encryptedPayload) {
-  const key = import_crypto9.default.createHash("sha256").update(encryptKey).digest();
+  const key = import_crypto8.default.createHash("sha256").update(encryptKey).digest();
   const buffer = Buffer.from(encryptedPayload, "base64");
   const iv = buffer.subarray(0, 16);
   const ciphertext = buffer.subarray(16);
-  const decipher = import_crypto9.default.createDecipheriv("aes-256-cbc", key, iv);
+  const decipher = import_crypto8.default.createDecipheriv("aes-256-cbc", key, iv);
   const plaintext = Buffer.concat([
     decipher.update(ciphertext),
     decipher.final()
@@ -16220,13 +16254,13 @@ function verifyLarkRequestSignature(request, config) {
     return false;
   }
   const content = timestamp + nonce + config.encryptKey + JSON.stringify(request.body ?? {});
-  const expected = import_crypto9.default.createHash("sha256").update(content).digest("hex");
+  const expected = import_crypto8.default.createHash("sha256").update(content).digest("hex");
   const expectedBuffer = Buffer.from(expected, "utf8");
   const actualBuffer = Buffer.from(signature, "utf8");
   if (actualBuffer.length !== expectedBuffer.length) {
     return false;
   }
-  return import_crypto9.default.timingSafeEqual(actualBuffer, expectedBuffer);
+  return import_crypto8.default.timingSafeEqual(actualBuffer, expectedBuffer);
 }
 
 // src/channels/lark/controller.ts
@@ -16348,9 +16382,9 @@ function registerChannelRoutes(app2, dependencies) {
 }
 
 // src/controllers/channel-installations.ts
-var import_crypto10 = require("crypto");
+var import_crypto9 = require("crypto");
 var import_protocols7 = require("@axiom-lattice/protocols");
-var import_core42 = require("@axiom-lattice/core");
+var import_core43 = require("@axiom-lattice/core");
 var _adapterRegistry;
 var _router;
 function setChannelControllerDeps(deps) {
@@ -16481,7 +16515,7 @@ function snapshotPlainObject(value) {
   }
 }
 async function getInstallationStore() {
-  const store2 = (0, import_core42.getStoreLattice)("default", "channelInstallation").store;
+  const store2 = (0, import_core43.getStoreLattice)("default", "channelInstallation").store;
   if (store2) return store2;
   const { PostgreSQLChannelInstallationStore } = await import("@axiom-lattice/pg-stores");
   const databaseUrl = process.env.DATABASE_URL;
@@ -16557,7 +16591,7 @@ async function createChannelInstallation(request, reply) {
       };
     }
     const store2 = await getInstallationStore();
-    const installationId = (0, import_crypto10.randomUUID)();
+    const installationId = (0, import_crypto9.randomUUID)();
     const createInput = {
       channel: body.channel,
       name: body.name,
@@ -16797,7 +16831,7 @@ function registerChannelInstallationRoutes(app2) {
 
 // src/controllers/channel-bindings.ts
 var import_protocols8 = require("@axiom-lattice/protocols");
-var import_core43 = require("@axiom-lattice/core");
+var import_core44 = require("@axiom-lattice/core");
 function getTenantId14(request) {
   const userTenantId = request.user?.tenantId;
   if (typeof userTenantId === "string" && userTenantId) return userTenantId;
@@ -16855,7 +16889,7 @@ function snapshotPublicUpdate(value) {
   return body;
 }
 function getInstallationStore2() {
-  return (0, import_core43.getStoreLattice)("default", "channelInstallation").store;
+  return (0, import_core44.getStoreLattice)("default", "channelInstallation").store;
 }
 async function isValidPublicInstallation(tenantId, channelInstallationId, channel) {
   const installation = await getInstallationStore2().getInstallationById(channelInstallationId);
@@ -16874,7 +16908,7 @@ async function getBindingList(request, _reply) {
   const tenantId = getTenantId14(request);
   const { channel, agentId, channelInstallationId, limit, offset } = request.query;
   try {
-    const registry = (0, import_core43.getBindingRegistry)();
+    const registry = (0, import_core44.getBindingRegistry)();
     const bindings = await registry.list({
       channel,
       agentId,
@@ -16893,7 +16927,7 @@ async function getBindingList(request, _reply) {
 async function getBinding(request, reply) {
   const tenantId = getTenantId14(request);
   try {
-    const registry = (0, import_core43.getBindingRegistry)();
+    const registry = (0, import_core44.getBindingRegistry)();
     const binding = await registry.findById(tenantId, request.params.id);
     if (!binding || isInternalBinding(binding)) {
       reply.status(404);
@@ -16915,7 +16949,7 @@ async function createBinding(request, reply) {
       input.channelInstallationId,
       input.channel
     )) return invalidPublicInstallation(reply);
-    const registry = (0, import_core43.getBindingRegistry)();
+    const registry = (0, import_core44.getBindingRegistry)();
     const binding = await registry.create({ ...input, tenantId });
     reply.status(201);
     return { success: true, message: "Binding created", data: binding };
@@ -16932,7 +16966,7 @@ async function createBinding(request, reply) {
 async function updateBinding(request, reply) {
   try {
     const tenantId = getTenantId14(request);
-    const registry = (0, import_core43.getBindingRegistry)();
+    const registry = (0, import_core44.getBindingRegistry)();
     const existing = await registry.findById(tenantId, request.params.id);
     if (!existing || isInternalBinding(existing)) {
       reply.status(404);
@@ -16959,7 +16993,7 @@ async function updateBinding(request, reply) {
 async function deleteBinding(request, reply) {
   try {
     const tenantId = getTenantId14(request);
-    const registry = (0, import_core43.getBindingRegistry)();
+    const registry = (0, import_core44.getBindingRegistry)();
     const existing = await registry.findById(tenantId, request.params.id);
     if (!existing || isInternalBinding(existing)) {
       reply.status(404);
@@ -16981,7 +17015,7 @@ async function resolveBinding(request, _reply) {
     return { success: false, message: "No binding found", data: null };
   }
   try {
-    const registry = (0, import_core43.getBindingRegistry)();
+    const registry = (0, import_core44.getBindingRegistry)();
     const binding = await registry.resolve({ channel, senderId, channelInstallationId, tenantId });
     if (!binding) {
       return { success: false, message: "No binding found", data: null };
@@ -17004,7 +17038,7 @@ function registerChannelBindingRoutes(app2) {
 }
 
 // src/controllers/menu-items.ts
-var import_core44 = require("@axiom-lattice/core");
+var import_core45 = require("@axiom-lattice/core");
 function getTenantId15(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) return userTenantId;
@@ -17016,7 +17050,7 @@ function errorMessage(err) {
 async function getMenuItemList(request, _reply) {
   const tenantId = getTenantId15(request);
   try {
-    const registry = (0, import_core44.getMenuRegistry)();
+    const registry = (0, import_core45.getMenuRegistry)();
     const items = await registry.list({ tenantId, menuTarget: request.query.menuTarget });
     return { success: true, message: "Menu items retrieved", data: { records: items, total: items.length } };
   } catch (error) {
@@ -17028,7 +17062,7 @@ async function getMenuItemList(request, _reply) {
 async function getMenuItem(request, reply) {
   const tenantId = getTenantId15(request);
   try {
-    const registry = (0, import_core44.getMenuRegistry)();
+    const registry = (0, import_core45.getMenuRegistry)();
     const item = await registry.getById(request.params.id);
     if (!item || item.tenantId !== tenantId) {
       reply.status(404);
@@ -17045,7 +17079,7 @@ async function getMenuItem(request, reply) {
 async function createMenuItem(request, reply) {
   const tenantId = getTenantId15(request);
   try {
-    const registry = (0, import_core44.getMenuRegistry)();
+    const registry = (0, import_core45.getMenuRegistry)();
     const item = await registry.create({ ...request.body, tenantId });
     reply.status(201);
     return { success: true, message: "Menu item created", data: item };
@@ -17059,7 +17093,7 @@ async function createMenuItem(request, reply) {
 async function updateMenuItem(request, reply) {
   try {
     const tenantId = getTenantId15(request);
-    const registry = (0, import_core44.getMenuRegistry)();
+    const registry = (0, import_core45.getMenuRegistry)();
     const existing = await registry.getById(request.params.id);
     if (!existing || existing.tenantId !== tenantId) {
       reply.status(404);
@@ -17077,7 +17111,7 @@ async function updateMenuItem(request, reply) {
 async function deleteMenuItem(request, reply) {
   try {
     const tenantId = getTenantId15(request);
-    const registry = (0, import_core44.getMenuRegistry)();
+    const registry = (0, import_core45.getMenuRegistry)();
     const existing = await registry.getById(request.params.id);
     if (!existing || existing.tenantId !== tenantId) {
       reply.status(404);
@@ -17277,7 +17311,7 @@ function registerA2ABridgeRoutes(app2) {
 }
 
 // src/routes/stt.ts
-var import_core45 = require("@axiom-lattice/core");
+var import_core46 = require("@axiom-lattice/core");
 var ALLOWED_AUDIO_FORMATS = /* @__PURE__ */ new Set([
   "webm",
   "wav",
@@ -17290,7 +17324,7 @@ var ALLOWED_AUDIO_FORMATS = /* @__PURE__ */ new Set([
 var MAX_AUDIO_FILE_SIZE = 25 * 1024 * 1024;
 var registerSTTRoutes = (app2) => {
   app2.get("/api/stt/models", async (_request, reply) => {
-    const models = import_core45.sttModelLatticeManager.getAllSTTModelInfo();
+    const models = import_core46.sttModelLatticeManager.getAllSTTModelInfo();
     return reply.send({ models });
   });
   app2.post(
@@ -17333,7 +17367,7 @@ var registerSTTRoutes = (app2) => {
       try {
         let client;
         try {
-          client = (0, import_core45.getSTTClient)(modelKey2);
+          client = (0, import_core46.getSTTClient)(modelKey2);
         } catch {
           return reply.status(404).send({ error: `STT model "${modelKey2}" not found` });
         }
@@ -17355,7 +17389,7 @@ var registerSTTRoutes = (app2) => {
 };
 
 // src/controllers/local-a2a.ts
-var import_core46 = require("@axiom-lattice/core");
+var import_core47 = require("@axiom-lattice/core");
 var import_protocols9 = require("@axiom-lattice/protocols");
 function getTenantId16(request) {
   const userTenantId = request.user?.tenantId;
@@ -17369,7 +17403,7 @@ function getLocalRuntime(assistant) {
   return graphDefinition.localRuntime;
 }
 async function getLocalA2AAssistants(tenantId) {
-  const storeLattice = (0, import_core46.getStoreLattice)("default", "assistant");
+  const storeLattice = (0, import_core47.getStoreLattice)("default", "assistant");
   const assistants = await storeLattice.store.getAllAssistants(tenantId);
   const results = [];
   for (const assistant of assistants) {
@@ -17381,7 +17415,7 @@ async function getLocalA2AAssistants(tenantId) {
   return results;
 }
 async function getLocalA2AAssistant(tenantId, assistantId) {
-  const storeLattice = (0, import_core46.getStoreLattice)("default", "assistant");
+  const storeLattice = (0, import_core47.getStoreLattice)("default", "assistant");
   const assistant = await storeLattice.store.getAssistantById(tenantId, assistantId);
   if (!assistant) return null;
   const runtime = getLocalRuntime(assistant);
@@ -17623,11 +17657,11 @@ function registerTaskRoutes(app2, controller) {
 }
 
 // src/routes/index.ts
-var import_core57 = require("@axiom-lattice/core");
+var import_core58 = require("@axiom-lattice/core");
 
 // src/controllers/tasks.ts
 var import_protocols13 = require("@axiom-lattice/protocols");
-var import_core48 = require("@axiom-lattice/core");
+var import_core49 = require("@axiom-lattice/core");
 
 // src/services/collaboration/ProjectTaskThreadService.ts
 var import_protocols11 = require("@axiom-lattice/protocols");
@@ -17947,7 +17981,7 @@ var import_node_crypto9 = require("crypto");
 
 // src/services/collaboration/ProjectTaskExecutionService.ts
 var import_node_crypto8 = require("crypto");
-var import_core47 = require("@axiom-lattice/core");
+var import_core48 = require("@axiom-lattice/core");
 var import_protocols12 = require("@axiom-lattice/protocols");
 init_projectTaskScope();
 
@@ -18011,7 +18045,7 @@ var ProjectTaskExecutionService = class {
     if (!Number.isFinite(options.lifecycleSettlementTimeoutMs) || options.lifecycleSettlementTimeoutMs <= 0) {
       throw new Error("Project task lifecycle settlement timeout must be positive");
     }
-    this.runBridge = (0, import_core47.createTaskRunBridge)({ lifecycle: this.deps.lifecycle });
+    this.runBridge = (0, import_core48.createTaskRunBridge)({ lifecycle: this.deps.lifecycle });
   }
   /** Validates, atomically starts, dispatches, and settles a pending Project Task. */
   async start(input, signal) {
@@ -18214,15 +18248,15 @@ var ProjectTaskExecutionService = class {
         settlement.cleanup();
         return { kind: "deferred", task: input.task, thread: input.thread, messageId: input.inputMessageId };
       }
-      if (resumed.status === import_core47.ThreadStatus.INTERRUPTED && settlement.tryClaim()) {
+      if (resumed.status === import_core48.ThreadStatus.INTERRUPTED && settlement.tryClaim()) {
         settlement.cleanup();
         const outcome2 = await this.settleInterruptedEvent(input.task, input.thread, input.inputMessageId);
         settlement.resolve(outcome2);
         return outcome2;
       }
-      if ((resumed.status === import_core47.ThreadStatus.IDLE || resumed.status === import_core47.ThreadStatus.ERROR) && settlement.tryClaim()) {
+      if ((resumed.status === import_core48.ThreadStatus.IDLE || resumed.status === import_core48.ThreadStatus.ERROR) && settlement.tryClaim()) {
         settlement.cleanup();
-        const reason = resumed.status === import_core47.ThreadStatus.IDLE ? "Project task execution ended without lifecycle transition" : "Recovered Agent execution is in error state";
+        const reason = resumed.status === import_core48.ThreadStatus.IDLE ? "Project task execution ended without lifecycle transition" : "Recovered Agent execution is in error state";
         const outcome2 = await this.settleEndedRecovery(input, reason);
         settlement.resolve(outcome2);
         return outcome2;
@@ -19292,7 +19326,7 @@ function withErrors(handler) {
       if (error instanceof HttpTaskError) return reply.code(error.statusCode).send({ success: false, code: error.code, error: error.message });
       if (error instanceof TaskCommandError) return reply.code(error.statusCode).send({ success: false, code: error.code, error: error.message });
       if (error instanceof ProjectCollaborationError) return reply.code(error.statusCode).send({ success: false, code: error.code, error: error.message });
-      if (error instanceof import_core48.ProjectTaskOwnerPolicyError) return reply.code(403).send({ success: false, code: error.code, error: error.message });
+      if (error instanceof import_core49.ProjectTaskOwnerPolicyError) return reply.code(403).send({ success: false, code: error.code, error: error.message });
       if (error instanceof ProjectTaskThreadError) return reply.code(409).send({ success: false, code: error.code, error: error.message });
       request.log.error({ error }, "Task route failed");
       return reply.code(500).send({ success: false, code: "TASK_INTERNAL_ERROR", error: "Task operation failed" });
@@ -19369,7 +19403,7 @@ async function validateReferences(store2, task, parentId, dependencies) {
   }
 }
 function createTaskController(deps) {
-  const mutationMutex = deps.projectMutationMutex ?? import_core26.projectMutationMutex;
+  const mutationMutex = deps.projectMutationMutex ?? import_core27.projectMutationMutex;
   const authorize = async (request, projectId, capability2) => deps.access.requireProjectAccess({
     tenantId: getTenantId17(request),
     userId: getUserId4(request),
@@ -19933,7 +19967,7 @@ var import_zod6 = require("zod");
 // src/services/agent-web-app/AgentWebAppRuntimeService.ts
 var import_node_crypto10 = require("crypto");
 var import_protocols14 = require("@axiom-lattice/protocols");
-var import_core49 = require("@axiom-lattice/core");
+var import_core50 = require("@axiom-lattice/core");
 init_task_file_refs();
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -20104,12 +20138,12 @@ var AgentWebAppRuntimeService = class {
     const runtime = await this.resolveRuntime(webAppId, selection);
     await this.requireOwnedThread(runtime, userId, threadId);
     if (process.env.AXIOM_REPLICA_ID) {
-      const owner = await (0, import_core49.getThreadRunOwner)({
+      const owner = await (0, import_core50.getThreadRunOwner)({
         tenantId: runtime.webApp.tenantId,
         assistantId: runtime.webApp.assistantId,
         threadId
       });
-      if (owner && owner !== (0, import_core49.getReplicaId)()) {
+      if (owner && owner !== (0, import_core50.getReplicaId)()) {
         return {
           stream: (async function* () {
             yield (0, import_protocols14.buildAffinityMissChunk)(owner, threadId);
@@ -20462,7 +20496,7 @@ async function verifyWebAppToken(token, issuer, options = {}) {
 
 // src/routes/agent-web-app-runtime.ts
 var import_protocols15 = require("@axiom-lattice/protocols");
-var import_core50 = require("@axiom-lattice/core");
+var import_core51 = require("@axiom-lattice/core");
 var idSchema = import_zod6.z.string().min(1).max(128);
 var paramsSchema = import_zod6.z.object({ webAppId: idSchema }).strict();
 var threadParamsSchema = import_zod6.z.object({ webAppId: idSchema, threadId: idSchema }).strict();
@@ -20896,7 +20930,7 @@ function registerAgentWebAppRuntimeRoutes(app2, deps) {
           if (!threadId) throw new AgentWebAppRuntimeError("INVALID_REQUEST", 400, "thread_id is required");
           const content = body.messages.map((message) => message.content).join("\n");
           const { messageId } = await deps.service.enqueueMessage(webAppId, identity.userId, threadId, content, { projectId: body.projectId, modelKey: body.modelKey });
-          reply.header(import_protocols15.REPLICA_HEADER, (0, import_core50.getReplicaId)());
+          reply.header(import_protocols15.REPLICA_HEADER, (0, import_core51.getReplicaId)());
           for (const [name, value] of Object.entries((0, import_protocols15.affinityEchoHeaders)(request.headers[import_protocols15.AGENT_AFFINITY_HEADER]))) {
             reply.header(name, value);
           }
@@ -20982,7 +21016,7 @@ function beginSse(reply, request) {
     "X-Accel-Buffering": "no",
     "Access-Control-Allow-Origin": "*",
     "Access-Control-Expose-Headers": `${import_protocols15.REPLICA_HEADER}, ${import_protocols15.AFFINITY_ECHO_HEADER}`,
-    [import_protocols15.REPLICA_HEADER]: (0, import_core50.getReplicaId)(),
+    [import_protocols15.REPLICA_HEADER]: (0, import_core51.getReplicaId)(),
     ...(0, import_protocols15.affinityEchoHeaders)(request.headers[import_protocols15.AGENT_AFFINITY_HEADER])
   });
 }
@@ -21219,7 +21253,7 @@ var import_zod9 = require("zod");
 
 // src/services/capability/CapabilityBundleService.ts
 var import_zod8 = require("zod");
-var import_core51 = require("@axiom-lattice/core");
+var import_core52 = require("@axiom-lattice/core");
 var CapabilityBundleServiceError = class extends Error {
   constructor(code, message, statusCode) {
     super(message);
@@ -21260,7 +21294,7 @@ function projectBundleIds(config) {
   return [...value];
 }
 function issue(error) {
-  if (error instanceof import_core51.CapabilityBundleMergeError || error instanceof import_core51.CapabilityBundleValidationError) return { code: error instanceof import_core51.CapabilityBundleValidationError && error.code === "CAPABILITY_BUNDLE_INVALID_CONFIG" ? "INVALID_BUNDLE_CONFIG" : error.code, message: error.message, bundleId: error instanceof import_core51.CapabilityBundleMergeError ? error.bundleId : void 0, capabilityType: error.capabilityType, fieldPath: error.fieldPath };
+  if (error instanceof import_core52.CapabilityBundleMergeError || error instanceof import_core52.CapabilityBundleValidationError) return { code: error instanceof import_core52.CapabilityBundleValidationError && error.code === "CAPABILITY_BUNDLE_INVALID_CONFIG" ? "INVALID_BUNDLE_CONFIG" : error.code, message: error.message, bundleId: error instanceof import_core52.CapabilityBundleMergeError ? error.bundleId : void 0, capabilityType: error.capabilityType, fieldPath: error.fieldPath };
   return { code: "CAPABILITY_BUNDLE_CONFIGURATION_ERROR", message: error instanceof Error ? error.message : "Invalid capability bundle configuration" };
 }
 var CapabilityBundleService = class {
@@ -21273,7 +21307,7 @@ var CapabilityBundleService = class {
     const errors = [];
     for (const value of values) {
       try {
-        (0, import_core51.validateCapabilityBundleInput)(value);
+        (0, import_core52.validateCapabilityBundleInput)(value);
         bundles.push(value);
       } catch {
         errors.push({ bundleId: value.id, code: "INVALID_BUNDLE_CONFIG", message: "Capability bundle record is invalid" });
@@ -21285,7 +21319,7 @@ var CapabilityBundleService = class {
     const value = await this.deps.bundleStore.getById(tenantId, id3);
     if (!value) throw new CapabilityBundleServiceError("BUNDLE_NOT_FOUND", "Capability bundle not found", 404);
     try {
-      (0, import_core51.validateCapabilityBundleInput)(value);
+      (0, import_core52.validateCapabilityBundleInput)(value);
     } catch {
       throw new CapabilityBundleServiceError("INVALID_BUNDLE_CONFIG", "Capability bundle record is invalid", 422);
     }
@@ -21293,7 +21327,7 @@ var CapabilityBundleService = class {
   }
   async create(tenantId, input) {
     rejectStableKey(input);
-    (0, import_core51.validateCapabilityBundleInput)(input);
+    (0, import_core52.validateCapabilityBundleInput)(input);
     const value = input;
     const name = value.name.trim();
     const base = slugify(name);
@@ -21304,10 +21338,10 @@ var CapabilityBundleService = class {
       let suffix = 2;
       while (keys2.has(key)) key = `${base}-${suffix++}`;
       const normalized = { ...value, key, name };
-      (0, import_core51.validateCapabilityBundleInput)(normalized);
+      (0, import_core52.validateCapabilityBundleInput)(normalized);
       try {
         const result = await this.deps.bundleStore.create(tenantId, normalized);
-        (0, import_core51.validateCapabilityBundleInput)(result);
+        (0, import_core52.validateCapabilityBundleInput)(result);
         return result;
       } catch (error) {
         if (!isDuplicate(error)) throw error;
@@ -21318,16 +21352,16 @@ var CapabilityBundleService = class {
   }
   async update(tenantId, id3, input) {
     rejectStableKey(input);
-    (0, import_core51.validateCapabilityBundleInput)(input, { partial: true });
+    (0, import_core52.validateCapabilityBundleInput)(input, { partial: true });
     if (!input || typeof input !== "object" || Array.isArray(input) || typeof input.expectedUpdatedAt !== "string" || !input.expectedUpdatedAt.trim()) throw new CapabilityBundleServiceError("INVALID_BUNDLE_CONFIG", "expectedUpdatedAt is required for capability bundle updates", 400);
     const value = input;
     const normalized = { ...value, ...value.name === void 0 ? {} : { name: value.name.trim() }, ...Object.prototype.hasOwnProperty.call(value, "description") ? { description: value.description?.trim() || void 0 } : {} };
-    (0, import_core51.validateCapabilityBundleInput)(normalized, { partial: true });
+    (0, import_core52.validateCapabilityBundleInput)(normalized, { partial: true });
     try {
       const result = await this.deps.bundleStore.update(tenantId, id3, normalized);
       if (!result) throw new CapabilityBundleServiceError("BUNDLE_NOT_FOUND", "Capability bundle not found", 404);
       if ("status" in result && result.status === "conflict") throw new CapabilityBundleServiceError("BUNDLE_CONFLICT", "Capability bundle changed after it was loaded; reload before saving", 409);
-      (0, import_core51.validateCapabilityBundleInput)(result);
+      (0, import_core52.validateCapabilityBundleInput)(result);
       return result;
     } catch (error) {
       if (error instanceof CapabilityBundleServiceError) throw error;
@@ -21362,8 +21396,8 @@ var CapabilityBundleService = class {
     if (missing.length > 0) return { bundleIds: ids, capabilities: [], overrides: [], sources: [], warnings: [], errors: missing.map((id3) => ({ code: "BUNDLE_NOT_FOUND", message: `Persisted capability bundle '${id3}' is missing`, bundleId: id3 })), revision: "" };
     try {
       const ordered = ids.map((id3) => byId.get(id3));
-      ordered.forEach((bundle) => (0, import_core51.validateCapabilityBundleInput)(bundle));
-      return (0, import_core51.mergeCapabilityBundles)(ordered);
+      ordered.forEach((bundle) => (0, import_core52.validateCapabilityBundleInput)(bundle));
+      return (0, import_core52.mergeCapabilityBundles)(ordered);
     } catch (error) {
       return { bundleIds: ids, capabilities: [], overrides: [], sources: [], warnings: [], errors: [issue(error)], revision: "" };
     }
@@ -21396,7 +21430,7 @@ var CapabilityBundleService = class {
     return ids.map((id3) => {
       const value = byId.get(id3);
       if (!value) throw new CapabilityBundleServiceError("BUNDLE_NOT_FOUND", "Capability bundle not found", 404);
-      (0, import_core51.validateCapabilityBundleInput)(value);
+      (0, import_core52.validateCapabilityBundleInput)(value);
       return value;
     });
   }
@@ -21411,7 +21445,7 @@ var CapabilityBundleService = class {
         continue;
       }
       try {
-        (0, import_core51.validateCapabilityBundleInput)(bundle);
+        (0, import_core52.validateCapabilityBundleInput)(bundle);
         valid.push(bundle);
       } catch (error) {
         errors.push({ ...issue(error), bundleId: id3 });
@@ -21419,7 +21453,7 @@ var CapabilityBundleService = class {
     }
     let preview;
     try {
-      preview = (0, import_core51.mergeCapabilityBundles)(valid);
+      preview = (0, import_core52.mergeCapabilityBundles)(valid);
     } catch (error) {
       preview = { bundleIds: ids, capabilities: [], overrides: [], sources: [], warnings: [], errors: [issue(error)], revision: "" };
     }
@@ -21571,7 +21605,7 @@ var import_zod11 = require("zod");
 // src/services/model-provider/ModelProviderService.ts
 var import_node_crypto14 = require("crypto");
 var import_protocols16 = require("@axiom-lattice/protocols");
-var import_core52 = require("@axiom-lattice/core");
+var import_core53 = require("@axiom-lattice/core");
 
 // src/services/model-provider/errors.ts
 var ModelProviderServiceError = class extends Error {
@@ -22327,9 +22361,9 @@ var ModelProviderService = class {
    */
   buildLlmConfig(provider, model) {
     try {
-      return (0, import_core52.buildModelLlmConfig)(provider, model);
+      return (0, import_core53.buildModelLlmConfig)(provider, model);
     } catch (error) {
-      if (error instanceof import_core52.UnsupportedModelProviderError) {
+      if (error instanceof import_core53.UnsupportedModelProviderError) {
         throw new ModelProviderServiceError(
           "UNSUPPORTED_PROTOCOL",
           400,
@@ -22458,9 +22492,9 @@ var ModelProviderService = class {
    */
   async assertSafeUrl(baseURL) {
     try {
-      await (0, import_core52.assertSafeUpstreamUrl)(baseURL);
+      await (0, import_core53.assertSafeUpstreamUrl)(baseURL);
     } catch (error) {
-      if (error instanceof import_core52.UnsafeUpstreamUrlError) {
+      if (error instanceof import_core53.UnsafeUpstreamUrlError) {
         throw new ModelProviderServiceError(
           unsafeReasonToErrorCode[error.reason],
           400,
@@ -22930,7 +22964,7 @@ var ProjectMembershipService = class {
   constructor(deps) {
     this.deps = deps;
     this.idFactory = deps.idFactory ?? import_node_crypto16.randomUUID;
-    this.mutationMutex = deps.projectMutationMutex ?? import_core26.projectMutationMutex;
+    this.mutationMutex = deps.projectMutationMutex ?? import_core27.projectMutationMutex;
   }
   async list(actor3) {
     await this.deps.accessService.requireRosterAccess(actor3);
@@ -23083,7 +23117,7 @@ var ProjectRosterService = class {
   constructor(deps) {
     this.deps = deps;
     this.idFactory = deps.idFactory ?? import_node_crypto17.randomUUID;
-    this.mutationMutex = deps.projectMutationMutex ?? import_core26.projectMutationMutex;
+    this.mutationMutex = deps.projectMutationMutex ?? import_core27.projectMutationMutex;
   }
   /**
    * Lists the bot members visible to a project reader.
@@ -24256,7 +24290,7 @@ async function execute(reply, operation) {
 // src/routes/cospace.ts
 var import_node_crypto20 = require("crypto");
 var import_zod15 = require("zod");
-var import_core53 = require("@axiom-lattice/core");
+var import_core54 = require("@axiom-lattice/core");
 var import_protocols19 = require("@axiom-lattice/protocols");
 var CoSpaceAuthError = class extends Error {
   constructor() {
@@ -24441,14 +24475,14 @@ function registerCoSpaceRoutes(app2, deps) {
         }
         let projectId;
         if (body.type === "human") {
-          projectId = (0, import_core53.generateDirectHumanProjectId)(
+          projectId = (0, import_core54.generateDirectHumanProjectId)(
             actor3.tenantId,
             params.workspaceId,
             actor3.userId,
             body.targetUserId
           );
         } else {
-          projectId = (0, import_core53.generateDirectBotProjectId)(
+          projectId = (0, import_core54.generateDirectBotProjectId)(
             actor3.tenantId,
             params.workspaceId,
             actor3.userId,
@@ -24655,7 +24689,7 @@ function registerCoSpaceRoutes(app2, deps) {
         );
         const bots = [];
         for (const assistant of assistants) {
-          const directProjectId = (0, import_core53.generateDirectBotProjectId)(
+          const directProjectId = (0, import_core54.generateDirectBotProjectId)(
             actor3.tenantId,
             params.workspaceId,
             actor3.userId,
@@ -24717,7 +24751,7 @@ function registerCoSpaceRoutes(app2, deps) {
           if (link.userId === actor3.userId) continue;
           const user = await deps.userStore.getUserById(link.userId);
           if (!user) continue;
-          const directProjectId = (0, import_core53.generateDirectHumanProjectId)(
+          const directProjectId = (0, import_core54.generateDirectHumanProjectId)(
             actor3.tenantId,
             params.workspaceId,
             actor3.userId,
@@ -25546,7 +25580,7 @@ function createRoomMessageRetentionJob(input) {
 
 // src/services/collaboration/ProjectTaskExecutionMutex.ts
 var import_protocols22 = require("@axiom-lattice/protocols");
-var import_core54 = require("@axiom-lattice/core");
+var import_core55 = require("@axiom-lattice/core");
 var MACHINE_LEASE_OPTIONS = { ttlMs: 6e4, acquireTimeoutMs: 9e4, retryDelayMs: 100 };
 function machineKey(scope) {
   const snapshot = (0, import_protocols22.snapshotExactRecord)(scope, ["tenantId", "assistantId", "projectId"]);
@@ -25574,9 +25608,9 @@ var ProjectTaskExecutionMutex = class {
     const leaseKey = `project-task-machine:${encodeURIComponent(scope.tenantId)}:${encodeURIComponent(scope.assistantId)}:${encodeURIComponent(scope.projectId)}`;
     await this.acquire(key, signal);
     try {
-      const store2 = (0, import_core54.getCoordinationLeaseStore)();
+      const store2 = (0, import_core55.getCoordinationLeaseStore)();
       if (!store2) return await operation();
-      return await (0, import_core54.withLease)(store2, leaseKey, (0, import_core54.getReplicaId)(), operation, MACHINE_LEASE_OPTIONS);
+      return await (0, import_core55.withLease)(store2, leaseKey, (0, import_core55.getReplicaId)(), operation, MACHINE_LEASE_OPTIONS);
     } finally {
       this.release(key);
     }
@@ -25677,7 +25711,7 @@ var TaskInterruptCardProjector = class {
 
 // src/services/collaboration/ProjectTaskObserver.ts
 var import_node_crypto22 = require("crypto");
-var import_core55 = require("@axiom-lattice/core");
+var import_core56 = require("@axiom-lattice/core");
 var import_protocols23 = require("@axiom-lattice/protocols");
 
 // src/services/collaboration/projectTaskDispatchMarker.ts
@@ -25714,7 +25748,7 @@ var ProjectTaskObserver = class {
         throw new Error(`Invalid Project task observer bound: ${name}`);
       }
     }
-    this.runBridge = (0, import_core55.createTaskRunBridge)({ lifecycle: this.deps.lifecycle });
+    this.runBridge = (0, import_core56.createTaskRunBridge)({ lifecycle: this.deps.lifecycle });
   }
   /** Fire-and-forget notifier adapter that never waits for observer work or machine acquisition. */
   async listener(event) {
@@ -26930,7 +26964,7 @@ function isRecord3(value) {
 init_projectTaskScope();
 
 // src/services/collaboration/ProjectRoomRealtimeRuntime.ts
-var import_core56 = require("@axiom-lattice/core");
+var import_core57 = require("@axiom-lattice/core");
 
 // src/services/collaboration/ProjectRoomEventBroker.ts
 var import_node_crypto24 = require("crypto");
@@ -27705,7 +27739,7 @@ function createProjectRoomRealtimeRuntime(deps) {
     broker,
     publisher,
     subscriber,
-    subscribe: (listener) => import_core56.taskLifecycleNotifier.subscribe(listener),
+    subscribe: (listener) => import_core57.taskLifecycleNotifier.subscribe(listener),
     log: deps.log,
     shutdownTimeoutMs: deps.shutdownTimeoutMs
   });
@@ -28442,35 +28476,35 @@ function hookErrorMessage(error) {
 function wrapReassignmentThreadError(error) {
   if (error instanceof ProjectTaskThreadError) {
     if (error.code === "PROJECT_TASK_THREAD_SCOPE_INVALID") {
-      return new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", error.message, {
+      return new import_core58.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", error.message, {
         hint: "Project task, room, or roster scope changed; re-read the task and retry."
       });
     }
     if (error.code === "PROJECT_TASK_THREAD_OWNER_INVALID") {
-      return new import_core57.ManagedTaskStartError("TASK_REASSIGN_NO_CHANGE", error.message, {
+      return new import_core58.ManagedTaskStartError("TASK_REASSIGN_NO_CHANGE", error.message, {
         hint: "The target already owns this task; re-read before dispatching."
       });
     }
-    return new import_core57.ManagedTaskStartError("TASK_THREAD_CONFLICT", error.message, {
+    return new import_core58.ManagedTaskStartError("TASK_THREAD_CONFLICT", error.message, {
       hint: "Task Thread changed concurrently; re-read the task and retry."
     });
   }
-  return new import_core57.ManagedTaskStartError("TASK_EXECUTION_ENQUEUE_FAILED", hookErrorMessage(error), {
+  return new import_core58.ManagedTaskStartError("TASK_EXECUTION_ENQUEUE_FAILED", hookErrorMessage(error), {
     hint: "Re-read the task and retry the dispatch."
   });
 }
 function wrapReassignmentAuthorizationError(error) {
-  if (error instanceof import_core57.ProjectTaskOwnerPolicyError) {
+  if (error instanceof import_core58.ProjectTaskOwnerPolicyError) {
     if (error.code === "PROJECT_TASK_CALLER_INACTIVE") {
-      return new import_core57.ManagedTaskStartError("PROJECT_TASK_CALLER_INACTIVE", error.message, {
+      return new import_core58.ManagedTaskStartError("PROJECT_TASK_CALLER_INACTIVE", error.message, {
         hint: "Dispatch from an active Project Room member bot."
       });
     }
-    return new import_core57.ManagedTaskStartError("PROJECT_TASK_OWNER_INACTIVE", error.message, {
+    return new import_core58.ManagedTaskStartError("PROJECT_TASK_OWNER_INACTIVE", error.message, {
       hint: "Dispatch to an active bot in this Project's roster."
     });
   }
-  return new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", hookErrorMessage(error), {
+  return new import_core58.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", hookErrorMessage(error), {
     hint: "Re-read the task and roster, then retry the dispatch."
   });
 }
@@ -28499,43 +28533,43 @@ async function transferGovernedDispatchOwner(task, options, deps) {
   const agentId = options?.agentId;
   if (!agentId || agentId === task.ownerId) return void 0;
   if (!task.workspaceId || !task.projectId) {
-    throw new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Task is not governed by a Project lifecycle.", {
+    throw new import_core58.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Task is not governed by a Project lifecycle.", {
       hint: "Dispatch governed tasks from a trusted Project run; ordinary tasks execute immediately."
     });
   }
   return deps.mutex.runExclusive({ tenantId: task.tenantId, projectId: task.projectId }, async () => {
     const current = await deps.tasks.getById(task.tenantId, task.id);
     if (!current || !isProjectLifecycleTask(current) || current.workspaceId !== task.workspaceId || current.projectId !== task.projectId) {
-      throw new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Task is no longer a Project lifecycle task.", {
+      throw new import_core58.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Task is no longer a Project lifecycle task.", {
         hint: "Re-read the task and confirm it still belongs to this Project before dispatching."
       });
     }
     if (current.ownerType !== "agent") {
-      throw new import_core57.ManagedTaskStartError("AGENT_TASK_REQUIRED", "Project task owner must be an Agent.", {
+      throw new import_core58.ManagedTaskStartError("AGENT_TASK_REQUIRED", "Project task owner must be an Agent.", {
         hint: "Assign the task to an Agent before dispatching."
       });
     }
     if (current.status !== "pending") {
-      throw new import_core57.ManagedTaskStartError("TASK_NOT_DISPATCHABLE", "Only a `pending` Project task can be dispatched.", {
+      throw new import_core58.ManagedTaskStartError("TASK_NOT_DISPATCHABLE", "Only a `pending` Project task can be dispatched.", {
         hint: `This task is '${current.status}'. Resolve it or create a new task before dispatching.`
       });
     }
     if (agentId === current.ownerId) return current;
     const room = await deps.rooms.getMainRoom(current.tenantId, current.projectId);
     if (!room || room.tenantId !== current.tenantId || room.workspaceId !== current.workspaceId || room.projectId !== current.projectId || room.type !== "main") {
-      throw new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Project main room is unavailable.", {
+      throw new import_core58.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Project main room is unavailable.", {
         hint: "Open or repair the Project Room before dispatching."
       });
     }
     const target = await deps.botMemberships.findByAssistant(current.tenantId, current.projectId, agentId);
     if (!target || target.status !== "active" || target.tenantId !== current.tenantId || target.workspaceId !== current.workspaceId || target.projectId !== current.projectId || target.assistantId !== agentId || target.roomId !== room.id) {
-      throw new import_core57.ManagedTaskStartError("PROJECT_TASK_OWNER_INACTIVE", "Target Project task owner is not active in the exact roster.", {
+      throw new import_core58.ManagedTaskStartError("PROJECT_TASK_OWNER_INACTIVE", "Target Project task owner is not active in the exact roster.", {
         hint: "Dispatch to an active bot in this Project's roster."
       });
     }
     const caller = options?.callerMembershipId ? await deps.botMemberships.findById(current.tenantId, options.callerMembershipId) : null;
     if (!caller || !options?.callerAssistantId || caller.id !== options.callerMembershipId || caller.assistantId !== options.callerAssistantId || caller.status !== "active" || caller.tenantId !== current.tenantId || caller.workspaceId !== current.workspaceId || caller.projectId !== current.projectId || caller.roomId !== room.id) {
-      throw new import_core57.ManagedTaskStartError("PROJECT_TASK_CALLER_INACTIVE", "Current Project task caller is not active in the exact roster.", {
+      throw new import_core58.ManagedTaskStartError("PROJECT_TASK_CALLER_INACTIVE", "Current Project task caller is not active in the exact roster.", {
         hint: "Dispatch from an active Project Room member bot."
       });
     }
@@ -28570,7 +28604,7 @@ async function transferGovernedDispatchOwner(task, options, deps) {
       actor: `agent:${caller.assistantId}`
     });
     if (!result.success) {
-      throw new import_core57.ManagedTaskStartError(result.code, result.error, {
+      throw new import_core58.ManagedTaskStartError(result.code, result.error, {
         hint: result.hint ?? reassignmentFailureHint(result.code),
         ...result.retryable !== void 0 ? { retryable: result.retryable } : {}
       });
@@ -28581,25 +28615,25 @@ async function transferGovernedDispatchOwner(task, options, deps) {
 function broadcastModelProviderChanged(tenantId, providerId2) {
   if (!tenantId) return;
   try {
-    const outbox = (0, import_core57.getStoreLattice)("default", "outbox").store;
-    void publishModelProviderChanged(outbox, (0, import_core57.getReplicaId)(), tenantId, providerId2);
+    const outbox = (0, import_core58.getStoreLattice)("default", "outbox").store;
+    void publishModelProviderChanged(outbox, (0, import_core58.getReplicaId)(), tenantId, providerId2);
   } catch {
   }
 }
 var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
-  const webAppStore = (0, import_core57.getStoreLattice)("default", "agentWebApp").store;
-  const assistantStore = (0, import_core57.getStoreLattice)("default", "assistant").store;
-  const projectStore = (0, import_core57.getStoreLattice)("default", "project").store;
-  const projectMembershipStore = (0, import_core57.getStoreLattice)("default", "projectMembership").store;
-  const userTenantLinkStore = (0, import_core57.getStoreLattice)("default", "userTenantLink").store;
-  const projectRoomStore = (0, import_core57.getStoreLattice)("default", "projectRoom").store;
-  const projectBotMembershipStore = (0, import_core57.getStoreLattice)("default", "projectBotMembership").store;
-  const projectRoomMessageStore = (0, import_core57.getStoreLattice)("default", "projectRoomMessage").store;
-  const projectRoomReadStateStore = (0, import_core57.getStoreLattice)("default", "projectRoomReadState").store;
-  const userPushSubscriptionStore = (0, import_core57.getStoreLattice)("default", "userPushSubscription").store;
-  const threadStore = (0, import_core57.getStoreLattice)("default", "thread").store;
-  const taskStore = (0, import_core57.getStoreLattice)("default", "task").store;
-  const taskWorkItemStore = (0, import_core57.getStoreLattice)("default", "taskWorkItem").store;
+  const webAppStore = (0, import_core58.getStoreLattice)("default", "agentWebApp").store;
+  const assistantStore = (0, import_core58.getStoreLattice)("default", "assistant").store;
+  const projectStore = (0, import_core58.getStoreLattice)("default", "project").store;
+  const projectMembershipStore = (0, import_core58.getStoreLattice)("default", "projectMembership").store;
+  const userTenantLinkStore = (0, import_core58.getStoreLattice)("default", "userTenantLink").store;
+  const projectRoomStore = (0, import_core58.getStoreLattice)("default", "projectRoom").store;
+  const projectBotMembershipStore = (0, import_core58.getStoreLattice)("default", "projectBotMembership").store;
+  const projectRoomMessageStore = (0, import_core58.getStoreLattice)("default", "projectRoomMessage").store;
+  const projectRoomReadStateStore = (0, import_core58.getStoreLattice)("default", "projectRoomReadState").store;
+  const userPushSubscriptionStore = (0, import_core58.getStoreLattice)("default", "userPushSubscription").store;
+  const threadStore = (0, import_core58.getStoreLattice)("default", "thread").store;
+  const taskStore = (0, import_core58.getStoreLattice)("default", "task").store;
+  const taskWorkItemStore = (0, import_core58.getStoreLattice)("default", "taskWorkItem").store;
   const projectTaskEnabled = options.projectTaskEnabled ?? process.env.AXIOM_PROJECT_TASK_EXECUTION_ENABLED !== "false";
   const accessService = new ProjectAccessService({ projectStore, membershipStore: projectMembershipStore, userTenantLinkStore });
   const realtimeMode = resolveProjectRoomRealtimeMode();
@@ -28665,7 +28699,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     updateAssistant: assistantStore.updateAssistant.bind(assistantStore)
   });
   const resolveCoordinatorMentionName = async (tenantId) => {
-    const tenant2 = await (0, import_core57.getStoreLattice)("default", "tenant").store.getTenantById(tenantId);
+    const tenant2 = await (0, import_core58.getStoreLattice)("default", "tenant").store.getTenantById(tenantId);
     const value = tenant2?.metadata?.coordinatorMentionName;
     return typeof value === "string" && value.length > 0 ? value : void 0;
   };
@@ -28683,7 +28717,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     ensureCoordinator: (scope) => coordinatorEnsurer.ensure(scope),
     log: realtimeLog
   });
-  const membershipService = new ProjectMembershipService({ membershipStore: projectMembershipStore, userTenantLinkStore, accessService, projectMutationMutex: import_core57.projectMutationMutex, roomStore: projectRoomStore, realtime, onRealtimeFailure: realtime && channelDeps?.warn ? ({ code, membershipId }) => channelDeps.warn?.("project-room:membership-realtime-failed", { code, membershipId }) : void 0 });
+  const membershipService = new ProjectMembershipService({ membershipStore: projectMembershipStore, userTenantLinkStore, accessService, projectMutationMutex: import_core58.projectMutationMutex, roomStore: projectRoomStore, realtime, onRealtimeFailure: realtime && channelDeps?.warn ? ({ code, membershipId }) => channelDeps.warn?.("project-room:membership-realtime-failed", { code, membershipId }) : void 0 });
   const rosterService = new ProjectRosterService({
     accessService,
     roomService,
@@ -28695,7 +28729,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     assistantStore,
     taskStore,
     bindingLifecycle,
-    projectMutationMutex: import_core57.projectMutationMutex,
+    projectMutationMutex: import_core58.projectMutationMutex,
     realtime,
     onRealtimeFailure: realtime && channelDeps?.warn ? ({ code, membershipId }) => channelDeps.warn?.("project-room:roster-realtime-failed", { code, membershipId }) : void 0
   });
@@ -28770,9 +28804,9 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
   }
   if (projectTaskComposition) app2.addHook("onClose", async () => projectTaskComposition.lease.release());
   const taskThreadService = projectTaskComposition?.lease.runtime.threads ?? new ProjectTaskThreadService({ threads: threadStore, idFactory: import_node_crypto26.randomUUID });
-  const taskLifecycle = projectTaskComposition?.lease.runtime.lifecycle ?? (0, import_core57.createTaskLifecycleService)({ taskStore, workItemStore: taskWorkItemStore });
-  const reassignmentAuthorizer = (0, import_core57.createProjectTaskReassignmentAuthorizer)(
-    new import_core57.ProjectTaskOwnerPolicy(projectBotMembershipStore),
+  const taskLifecycle = projectTaskComposition?.lease.runtime.lifecycle ?? (0, import_core58.createTaskLifecycleService)({ taskStore, workItemStore: taskWorkItemStore });
+  const reassignmentAuthorizer = (0, import_core58.createProjectTaskReassignmentAuthorizer)(
+    new import_core58.ProjectTaskOwnerPolicy(projectBotMembershipStore),
     (input) => validateReassignmentThread(threadStore, input)
   );
   const taskCommandService = new TaskCommandService({
@@ -28781,7 +28815,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     lifecycle: taskLifecycle,
     execution: projectTaskComposition?.lease.runtime.execution,
     threads: taskThreadService,
-    agents: { getAgent: (params) => import_core57.agentInstanceManager.getAgent(params) },
+    agents: { getAgent: (params) => import_core58.agentInstanceManager.getAgent(params) },
     taskScope: (task) => resolveCommandTaskScope(task, {
       rooms: projectRoomStore,
       bots: projectBotMembershipStore,
@@ -28798,7 +28832,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       return membership !== null && membership.projectId === projectId ? membership : null;
     },
     getThreadStatus: async ({ tenantId, assistantId, threadId, workspaceId, projectId }) => {
-      const agent = import_core57.agentInstanceManager.getAgent({
+      const agent = import_core58.agentInstanceManager.getAgent({
         tenant_id: tenantId,
         assistant_id: assistantId,
         thread_id: threadId,
@@ -28808,7 +28842,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       return String(await agent.getRunStatus());
     },
     getThreadState: async ({ tenantId, assistantId, threadId, workspaceId, projectId }) => {
-      const agent = import_core57.agentInstanceManager.getAgent({
+      const agent = import_core58.agentInstanceManager.getAgent({
         tenant_id: tenantId,
         assistant_id: assistantId,
         thread_id: threadId,
@@ -28817,7 +28851,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       });
       return agent.getCurrentState();
     },
-    dispatcher: (0, import_core57.createTrustedAgentMessageDispatcher)((scope) => import_core57.agentInstanceManager.getAgent(scope)),
+    dispatcher: (0, import_core58.createTrustedAgentMessageDispatcher)((scope) => import_core58.agentInstanceManager.getAgent(scope)),
     projects: projectStore,
     tasks: taskStore,
     execution: projectTaskComposition?.lease.runtime.execution
@@ -28852,7 +28886,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     readStateService,
     interruptService: roomInterruptService,
     userDirectory: {
-      getUserById: (id3) => (0, import_core57.getStoreLattice)("default", "user").store.getUserById(id3).then((u) => u ? { name: u.name } : null)
+      getUserById: (id3) => (0, import_core58.getStoreLattice)("default", "user").store.getUserById(id3).then((u) => u ? { name: u.name } : null)
     }
   });
   registerProjectRosterRoutes(app2, { service: rosterService });
@@ -28863,7 +28897,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       createProject: projectStore.createProject.bind(projectStore)
     },
     workspaceStore: {
-      getWorkspaceById: (tenantId, id3) => (0, import_core57.getStoreLattice)("default", "workspace").store.getWorkspaceById(tenantId, id3)
+      getWorkspaceById: (tenantId, id3) => (0, import_core58.getStoreLattice)("default", "workspace").store.getWorkspaceById(tenantId, id3)
     },
     membershipStore: {
       list: projectMembershipStore.list.bind(projectMembershipStore),
@@ -28886,7 +28920,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       getUsersByTenant: userTenantLinkStore.getUsersByTenant.bind(userTenantLinkStore)
     },
     userStore: {
-      getUserById: (id3) => (0, import_core57.getStoreLattice)("default", "user").store.getUserById(id3).then((u) => u ? { id: u.id, name: u.name, email: u.email } : null)
+      getUserById: (id3) => (0, import_core58.getStoreLattice)("default", "user").store.getUserById(id3).then((u) => u ? { id: u.id, name: u.name, email: u.email } : null)
     },
     assistantStore: {
       getAssistantById: assistantStore.getAssistantById.bind(assistantStore),
@@ -28908,26 +28942,26 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     }
   });
   registerCapabilityBundleRoutes(app2, new CapabilityBundleController({
-    bundleStore: (0, import_core57.getStoreLattice)("default", "capabilityBundle").store,
+    bundleStore: (0, import_core58.getStoreLattice)("default", "capabilityBundle").store,
     projectStore
   }, { authRequired: process.env.AUTH_REQUIRED === "true" }));
   const modelProviderController = new ModelProviderController({
-    providerStore: (0, import_core57.getStoreLattice)("default", "modelProvider").store,
+    providerStore: (0, import_core58.getStoreLattice)("default", "modelProvider").store,
     userTenantLinkStore,
     registry: {
-      register: (tenantId, modelKey2, config) => import_core57.modelLatticeManager.registerLatticeWithTenant(tenantId, modelKey2, config),
-      has: (tenantId, modelKey2) => import_core57.modelLatticeManager.hasLatticeWithTenant(tenantId, modelKey2),
-      remove: (tenantId, modelKey2) => import_core57.modelLatticeManager.removeLatticeWithTenant(tenantId, modelKey2),
+      register: (tenantId, modelKey2, config) => import_core58.modelLatticeManager.registerLatticeWithTenant(tenantId, modelKey2, config),
+      has: (tenantId, modelKey2) => import_core58.modelLatticeManager.hasLatticeWithTenant(tenantId, modelKey2),
+      remove: (tenantId, modelKey2) => import_core58.modelLatticeManager.removeLatticeWithTenant(tenantId, modelKey2),
       listRegistered: (tenantId) => (
         // The config comes along so the catalog can name these rows: a bare
         // registry key is not something to offer a user. Same call the legacy
         // `GET /api/models` made.
-        import_core57.modelLatticeManager.getAllLatticesByTenant(tenantId).map((lattice) => ({
+        import_core58.modelLatticeManager.getAllLatticesByTenant(tenantId).map((lattice) => ({
           modelKey: lattice.key,
           config: lattice.client.getConfig()
         }))
       ),
-      forgetTenantDefaultMiss: (tenantId) => import_core57.modelLatticeManager.forgetTenantDefaultMiss(tenantId)
+      forgetTenantDefaultMiss: (tenantId) => import_core58.modelLatticeManager.forgetTenantDefaultMiss(tenantId)
     },
     onChanged: (tenantId, providerId2) => broadcastModelProviderChanged(tenantId, providerId2)
   }, { authRequired: process.env.AUTH_REQUIRED === "true" });
@@ -28939,11 +28973,11 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       assistantStore,
       projectStore,
       modelRegistry: {
-        has: (tenantId, key) => (0, import_core57.hasModelLatticeForTenant)(tenantId, key)
+        has: (tenantId, key) => (0, import_core58.hasModelLatticeForTenant)(tenantId, key)
       },
       configuredAgentResolver: createConfiguredAgentResolver({
-        hydrate: (tenantId) => import_core57.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
-        has: (tenantId, assistantId) => import_core57.agentLatticeManager.hasAgentLatticeWithTenant(tenantId, assistantId)
+        hydrate: (tenantId) => import_core58.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
+        has: (tenantId, assistantId) => import_core58.agentLatticeManager.hasAgentLatticeWithTenant(tenantId, assistantId)
       })
     })
   });
@@ -28980,28 +29014,28 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       },
       tasks: taskStore,
       workItems: taskWorkItemStore,
-      projectMutationMutex: import_core57.projectMutationMutex,
+      projectMutationMutex: import_core58.projectMutationMutex,
       ...projectTaskComposition ? { commands: taskCommandService } : {}
     }),
     service: new AgentWebAppRuntimeService({
       webAppStore,
-      threadStore: (0, import_core57.getStoreLattice)("default", "thread").store,
+      threadStore: (0, import_core58.getStoreLattice)("default", "thread").store,
       projectStore,
       assistantResolver: {
         resolve: async (tenantId, assistantId) => {
           const stored = await assistantStore.getAssistantById(tenantId, assistantId);
           if (stored) return { id: stored.id, name: stored.name, description: stored.description };
-          await import_core57.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId);
-          const config = import_core57.agentLatticeManager.getAgentConfigWithTenant(tenantId, assistantId);
+          await import_core58.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId);
+          const config = import_core58.agentLatticeManager.getAgentConfigWithTenant(tenantId, assistantId);
           return config ? { id: assistantId, name: config.name, description: config.description } : null;
         }
       },
       modelRegistry: {
-        has: (tenantId, key) => (0, import_core57.hasModelLatticeForTenant)(tenantId, key),
-        label: async (tenantId, key) => (await (0, import_core57.resolveModelLatticeForTenant)(tenantId, key))?.client.getConfig().displayName ?? key
+        has: (tenantId, key) => (0, import_core58.hasModelLatticeForTenant)(tenantId, key),
+        label: async (tenantId, key) => (await (0, import_core58.resolveModelLatticeForTenant)(tenantId, key))?.client.getConfig().displayName ?? key
       },
       messageReader: {
-        getCurrentMessages: ({ tenantId, assistantId, threadId, workspaceId, projectId }) => import_core57.agentInstanceManager.getAgentForRead({
+        getCurrentMessages: ({ tenantId, assistantId, threadId, workspaceId, projectId }) => import_core58.agentInstanceManager.getAgentForRead({
           tenant_id: tenantId,
           assistant_id: assistantId,
           thread_id: threadId,
@@ -29010,7 +29044,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
         }).getCurrentMessages()
       },
       agentResolver: {
-        getAgent: ({ tenantId, assistantId, threadId, workspaceId, projectId }) => import_core57.agentInstanceManager.getAgent({
+        getAgent: ({ tenantId, assistantId, threadId, workspaceId, projectId }) => import_core58.agentInstanceManager.getAgent({
           tenant_id: tenantId,
           assistant_id: assistantId,
           thread_id: threadId,
@@ -29028,8 +29062,8 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
         if (webApp.tenantId !== preview.tenantId) return false;
         const assistant = await assistantStore.getAssistantById(preview.tenantId, webApp.assistantId);
         if (assistant) return !assistant.ownerUserId || assistant.ownerUserId === preview.userId;
-        await import_core57.agentLatticeManager.initializeStoredAssistantsForTenant(preview.tenantId);
-        return import_core57.agentLatticeManager.hasAgentLatticeWithTenant(preview.tenantId, webApp.assistantId);
+        await import_core58.agentLatticeManager.initializeStoredAssistantsForTenant(preview.tenantId);
+        return import_core58.agentLatticeManager.hasAgentLatticeWithTenant(preview.tenantId, webApp.assistantId);
       }
     })
   });
@@ -29086,14 +29120,14 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
   app2.post("/api/personal-assistant", createPersonalAssistant);
   app2.get("/api/personal-assistant", getPersonalAssistant);
   app2.delete("/api/personal-assistant", deletePersonalAssistant);
-  import_core57.executionAuthorityRegistry.register({
+  import_core58.executionAuthorityRegistry.register({
     id: "project-lifecycle",
     matches: isProjectLifecycleTask,
     code: "PROJECT_TASK_EXECUTION_MANAGED",
     message: "Project tasks are executed by the durable Project queue runtime",
     onManagedStart: async (task, options2) => {
       if (!projectTaskComposition && options2?.agentId && options2.agentId !== task.ownerId) {
-        throw new import_core57.ManagedTaskStartError(
+        throw new import_core58.ManagedTaskStartError(
           "PROJECT_TASK_RUNTIME_UNAVAILABLE",
           "Project task ownership transfer requires the Project task runtime.",
           { hint: "Project task execution is disabled; enable the Project task runtime or dispatch to the current owner." }
@@ -29106,7 +29140,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
         threads: taskThreadService,
         reassignmentAuthorizer,
         lifecycle: taskLifecycle,
-        mutex: import_core57.projectMutationMutex
+        mutex: import_core58.projectMutationMutex
       }) : void 0;
       const admitted = transferred ?? task;
       if (!admitted.workspaceId || !admitted.projectId) return;
@@ -29114,7 +29148,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
         context: withExecutionRequest(admitted.context, (/* @__PURE__ */ new Date()).toISOString())
       }).catch(() => null);
       const eventTask = markerUpdated ?? admitted;
-      void import_core57.projectTaskAdmissionNotifier.publish({
+      void import_core58.projectTaskAdmissionNotifier.publish({
         tenantId: eventTask.tenantId,
         workspaceId: eventTask.workspaceId,
         projectId: eventTask.projectId,
@@ -29128,7 +29162,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     access: accessService,
     tasks: taskStore,
     workItems: taskWorkItemStore,
-    projectMutationMutex: import_core57.projectMutationMutex,
+    projectMutationMutex: import_core58.projectMutationMutex,
     commands: taskCommandService,
     readableProjects: async ({ tenantId, userId, workspaceId }) => {
       const projects = await projectStore.getProjectsByWorkspace(tenantId, workspaceId);
@@ -29375,10 +29409,6 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     "/api/tenants/:tenantId/export/entities",
     previewEntities
   );
-  app2.get(
-    "/api/tenants/:tenantId/export/:jobId/download",
-    downloadExport
-  );
   app2.post(
     "/api/tenants/:tenantId/import/preview",
     importPreview
@@ -29411,9 +29441,9 @@ function tryCreateProjectTaskRuntime(input) {
   let stores;
   try {
     stores = {
-      tenants: (0, import_core57.getStoreLattice)("default", "tenant").store,
-      workspaces: (0, import_core57.getStoreLattice)("default", "workspace").store,
-      queue: (0, import_core57.getStoreLattice)("default", "threadMessageQueue").store
+      tenants: (0, import_core58.getStoreLattice)("default", "tenant").store,
+      workspaces: (0, import_core58.getStoreLattice)("default", "workspace").store,
+      queue: (0, import_core58.getStoreLattice)("default", "threadMessageQueue").store
     };
     const missing = missingRuntimeMethod(input, stores);
     if (missing) return { reason: missing };
@@ -29445,7 +29475,7 @@ function createRuntime(input, stores, log2) {
   const controller = new AbortController();
   const mutex = new ProjectTaskExecutionMutex();
   const threads = new ProjectTaskThreadService({ threads: input.threadStore, idFactory: import_node_crypto26.randomUUID });
-  const lifecycle = (0, import_core57.createTaskLifecycleService)({ taskStore: input.taskStore, workItemStore: input.taskWorkItemStore });
+  const lifecycle = (0, import_core58.createTaskLifecycleService)({ taskStore: input.taskStore, workItemStore: input.taskWorkItemStore });
   const projection = new RoomProjectionService({
     messages: input.projectRoomMessageStore,
     events: input.taskWorkItemStore,
@@ -29455,7 +29485,7 @@ function createRuntime(input, stores, log2) {
     realtime: input.realtime,
     idFactory: import_node_crypto26.randomUUID
   });
-  const agentFor = (task, thread) => import_core57.agentInstanceManager.getAgent({
+  const agentFor = (task, thread) => import_core58.agentInstanceManager.getAgent({
     tenant_id: task.tenantId,
     assistant_id: task.ownerId,
     thread_id: thread.id,
@@ -29470,7 +29500,7 @@ function createRuntime(input, stores, log2) {
       bots: input.projectBotMembershipStore,
       threads,
       lifecycle,
-      dispatcher: (0, import_core57.createTrustedAgentMessageDispatcher)((scope) => import_core57.agentInstanceManager.getAgent(scope)),
+      dispatcher: (0, import_core58.createTrustedAgentMessageDispatcher)((scope) => import_core58.agentInstanceManager.getAgent(scope)),
       queue: stores.queue,
       agentFor,
       ...input.ensurePublicOwner === void 0 ? {} : { ensurePublicOwner: input.ensurePublicOwner },
@@ -29501,8 +29531,8 @@ function createRuntime(input, stores, log2) {
   const taskLifecycleListener = ((event) => {
     void observer.listener(event);
   });
-  const unsubscribe = import_core57.taskLifecycleNotifier.subscribe(taskLifecycleListener);
-  const unsubscribeAdmission = import_core57.projectTaskAdmissionNotifier.subscribe((event, signal) => {
+  const unsubscribe = import_core58.taskLifecycleNotifier.subscribe(taskLifecycleListener);
+  const unsubscribeAdmission = import_core58.projectTaskAdmissionNotifier.subscribe((event, signal) => {
     observer.admit(event, signal);
   });
   let reconciliationWork;
@@ -29653,12 +29683,12 @@ function registerResourceRoutes(app2, controller) {
 }
 
 // src/export_registrations/index.ts
-var import_core69 = require("@axiom-lattice/core");
+var import_core70 = require("@axiom-lattice/core");
 
 // src/export_registrations/skill.registration.ts
-var import_core59 = require("@axiom-lattice/core");
+var import_core60 = require("@axiom-lattice/core");
 function getStore(context) {
-  return new import_core59.SandboxSkillStore({
+  return new import_core60.SandboxSkillStore({
     workspaceId: context?.workspaceId,
     projectId: context?.projectId
   });
@@ -29676,7 +29706,7 @@ var skillRegistration = {
   async listForExport(tenantId, context) {
     const store2 = getStore(context);
     const skills = await store2.getAllSkills(tenantId, toStoreContext(context));
-    return skills.filter((s) => !(0, import_core59.isBuiltInSkill)(s.id)).map((s) => ({
+    return skills.filter((s) => !(0, import_core60.isBuiltInSkill)(s.id)).map((s) => ({
       _exportId: "",
       data: {
         id: s.id,
@@ -29741,7 +29771,7 @@ var skillRegistration = {
     const insertions = [];
     for (const entity of entities) {
       const id3 = entity.data.id;
-      if ((0, import_core59.isBuiltInSkill)(id3)) continue;
+      if ((0, import_core60.isBuiltInSkill)(id3)) continue;
       if (existingIds.has(id3)) {
         conflicts.push({
           _exportId: entity._exportId,
@@ -29800,9 +29830,9 @@ var skillRegistration = {
 };
 
 // src/export_registrations/agent.registration.ts
-var import_core60 = require("@axiom-lattice/core");
+var import_core61 = require("@axiom-lattice/core");
 function getStore2() {
-  return (0, import_core60.getStoreLattice)("default", "assistant").store;
+  return (0, import_core61.getStoreLattice)("default", "assistant").store;
 }
 var agentRegistration = {
   entityType: "agent",
@@ -29882,9 +29912,9 @@ var agentRegistration = {
 };
 
 // src/export_registrations/database-config.registration.ts
-var import_core61 = require("@axiom-lattice/core");
+var import_core62 = require("@axiom-lattice/core");
 function getStore3() {
-  return (0, import_core61.getStoreLattice)("default", "database").store;
+  return (0, import_core62.getStoreLattice)("default", "database").store;
 }
 var databaseConfigRegistration = {
   entityType: "database_config",
@@ -29964,9 +29994,9 @@ var databaseConfigRegistration = {
 };
 
 // src/export_registrations/metrics-config.registration.ts
-var import_core62 = require("@axiom-lattice/core");
+var import_core63 = require("@axiom-lattice/core");
 function getStore4() {
-  return (0, import_core62.getStoreLattice)("default", "metrics").store;
+  return (0, import_core63.getStoreLattice)("default", "metrics").store;
 }
 var metricsConfigRegistration = {
   entityType: "metrics_config",
@@ -30046,9 +30076,9 @@ var metricsConfigRegistration = {
 };
 
 // src/export_registrations/mcp-config.registration.ts
-var import_core63 = require("@axiom-lattice/core");
+var import_core64 = require("@axiom-lattice/core");
 function getStore5() {
-  return (0, import_core63.getStoreLattice)("default", "mcp").store;
+  return (0, import_core64.getStoreLattice)("default", "mcp").store;
 }
 var mcpConfigRegistration = {
   entityType: "mcp_config",
@@ -30131,9 +30161,9 @@ var mcpConfigRegistration = {
 };
 
 // src/export_registrations/connection.registration.ts
-var import_core64 = require("@axiom-lattice/core");
+var import_core65 = require("@axiom-lattice/core");
 function getStore6() {
-  return (0, import_core64.getStoreLattice)("default", "connection").store;
+  return (0, import_core65.getStoreLattice)("default", "connection").store;
 }
 async function listAllConnections(tenantId) {
   const store2 = getStore6();
@@ -30218,9 +30248,9 @@ var connectionRegistration = {
 };
 
 // src/export_registrations/collection.registration.ts
-var import_core65 = require("@axiom-lattice/core");
+var import_core66 = require("@axiom-lattice/core");
 function getStore7() {
-  return (0, import_core65.getStoreLattice)("default", "collection").store;
+  return (0, import_core66.getStoreLattice)("default", "collection").store;
 }
 var collectionRegistration = {
   entityType: "collection",
@@ -30291,8 +30321,8 @@ var collectionRegistration = {
 };
 
 // src/export_registrations/channel-installation.registration.ts
-var import_core66 = require("@axiom-lattice/core");
-var import_crypto11 = require("crypto");
+var import_core67 = require("@axiom-lattice/core");
+var import_crypto10 = require("crypto");
 var UUID_PATTERN2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var PUBLIC_CHANNELS = /* @__PURE__ */ new Set(["lark", "email", "slack", "wechat", "wecom"]);
 function isPublicChannel(channel) {
@@ -30328,7 +30358,7 @@ function validateImportData(data) {
   };
 }
 function getStore8() {
-  return (0, import_core66.getStoreLattice)("default", "channelInstallation").store;
+  return (0, import_core67.getStoreLattice)("default", "channelInstallation").store;
 }
 function getOverwriteError(tenantId, incomingChannel, existing) {
   if (!existing) return "Channel installation overwrite target must exist";
@@ -30454,7 +30484,7 @@ var channelInstallationRegistration = {
       }
       id3 = sourceId;
     } else {
-      id3 = (0, import_crypto11.randomUUID)();
+      id3 = (0, import_crypto10.randomUUID)();
     }
     await store2.createInstallation(tenantId, id3, createInput);
     return { newId: id3 };
@@ -30462,9 +30492,9 @@ var channelInstallationRegistration = {
 };
 
 // src/export_registrations/menu.registration.ts
-var import_core67 = require("@axiom-lattice/core");
+var import_core68 = require("@axiom-lattice/core");
 function getStore9() {
-  return (0, import_core67.getStoreLattice)("default", "menu").store;
+  return (0, import_core68.getStoreLattice)("default", "menu").store;
 }
 var menuRegistration = {
   entityType: "menu",
@@ -30542,9 +30572,9 @@ var menuRegistration = {
 };
 
 // src/export_registrations/eval.registration.ts
-var import_core68 = require("@axiom-lattice/core");
+var import_core69 = require("@axiom-lattice/core");
 function getStore10() {
-  return (0, import_core68.getStoreLattice)("default", "eval").store;
+  return (0, import_core69.getStoreLattice)("default", "eval").store;
 }
 var evalRegistration = {
   entityType: "eval",
@@ -30870,7 +30900,7 @@ var evalRegistration = {
 
 // src/export_registrations/index.ts
 function registerAllBuiltinEntities() {
-  const registry = import_core69.ExportableEntityRegistry.getInstance();
+  const registry = import_core70.ExportableEntityRegistry.getInstance();
   registry.register(skillRegistration);
   registry.register(agentRegistration);
   registry.register(databaseConfigRegistration);
@@ -31001,7 +31031,7 @@ function createAuditLoggerMiddleware() {
 }
 
 // src/index.ts
-var import_core97 = require("@axiom-lattice/core");
+var import_core98 = require("@axiom-lattice/core");
 
 // src/channels/wecom/WecomChannelAdapter.ts
 var import_node_crypto27 = require("crypto");
@@ -31040,6 +31070,25 @@ var wecomConfigSchema = import_zod17.z.object({
 var RECONNECT_BASE_MS = 5e3;
 var RECONNECT_MAX_MS = 6e4;
 var activeConnections2 = /* @__PURE__ */ new Map();
+var streamIdsByReqId = /* @__PURE__ */ new Map();
+var MAX_TRACKED_STREAMS = 1e3;
+function streamKeyOf(replyTarget) {
+  const frame = replyTarget.rawTarget.frame;
+  return frame?.headers?.req_id ?? replyTarget.channelInstallationId;
+}
+function streamIdFor(replyTarget) {
+  const key = streamKeyOf(replyTarget);
+  let streamId = streamIdsByReqId.get(key);
+  if (!streamId) {
+    streamId = (0, import_node_crypto27.randomUUID)();
+    streamIdsByReqId.set(key, streamId);
+    if (streamIdsByReqId.size > MAX_TRACKED_STREAMS) {
+      const oldest = streamIdsByReqId.keys().next().value;
+      if (oldest !== void 0) streamIdsByReqId.delete(oldest);
+    }
+  }
+  return streamId;
+}
 var wecomChannelAdapter = {
   channel: "wecom",
   configSchema: wecomConfigSchema,
@@ -31081,14 +31130,41 @@ var wecomChannelAdapter = {
       });
       return;
     }
+    const key = streamKeyOf(replyTarget);
     connection.client.reply(replyTarget.rawTarget.frame, {
       msgtype: "stream",
       stream: {
-        id: (0, import_node_crypto27.randomUUID)(),
+        id: streamIdFor(replyTarget),
         finish: true,
         content: message.text
       }
     });
+    streamIdsByReqId.delete(key);
+  },
+  /**
+   * 流式回复：同一入站消息复用同一个 `stream.id`，增量刷新内容。
+   *
+   * 微信的 `stream` 是"刷新语义"（`content` 为累计全文），所以 `text` 直接用
+   * 调用方给的累计值即可。失败只记日志，不打断派发链路（最终由 `reply:ready`
+   * 的那次 `done: true` 兜底）。
+   */
+  async sendStreamChunk(replyTarget, chunk, installation) {
+    const connection = activeConnections2.get(installation.id);
+    if (!connection) {
+      logger6.warn("WeCom bot not connected, cannot stream reply", {
+        installationId: installation.id
+      });
+      return;
+    }
+    connection.client.reply(replyTarget.rawTarget.frame, {
+      msgtype: "stream",
+      stream: {
+        id: streamIdFor(replyTarget),
+        finish: chunk.done,
+        content: chunk.text
+      }
+    });
+    if (chunk.done) streamIdsByReqId.delete(streamKeyOf(replyTarget));
   },
   resolveThreadId(message, binding) {
     const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
@@ -31258,7 +31334,7 @@ var configureSwagger = async (app2, customSwaggerConfig, customSwaggerUiConfig)
 
 // src/services/agent_task_consumer.ts
 var import_node_crypto28 = require("crypto");
-var import_core70 = require("@axiom-lattice/core");
+var import_core71 = require("@axiom-lattice/core");
 var import_protocols32 = require("@axiom-lattice/protocols");
 var handleAgentTask = async (taskRequest, retryCount = 0) => {
   const {
@@ -31278,7 +31354,7 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
       `\u5F00\u59CB\u5904\u7406\u4EFB\u52A1 [assistant_id: ${assistant_id}, thread_id: ${thread_id}]`
     );
     const scope = (0, import_protocols32.resolveRunScope)(runConfig);
-    const agent = import_core70.agentInstanceManager.getAgent({ assistant_id, thread_id, tenant_id, workspace_id: scope.workspaceId, project_id: scope.projectId, custom_run_config: runConfig });
+    const agent = import_core71.agentInstanceManager.getAgent({ assistant_id, thread_id, tenant_id, workspace_id: scope.workspaceId, project_id: scope.projectId, custom_run_config: runConfig });
     if (callback_event) {
       const callbackEvent = callback_event;
       const messageId = typeof input?.id === "string" && input.id !== "" ? input.id : (0, import_node_crypto28.randomUUID)();
@@ -31299,13 +31375,13 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
       const onCompleted = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core70.eventBus.publish(callbackEvent, {
+          import_core71.eventBus.publish(callbackEvent, {
             success: true,
             state: evt.state
           });
           if (main_thread_id && main_tenant_id) {
             try {
-              const mainAgent = import_core70.agentInstanceManager.getAgent({
+              const mainAgent = import_core71.agentInstanceManager.getAgent({
                 assistant_id: main_assistant_id ?? assistant_id,
                 thread_id: main_thread_id,
                 tenant_id: main_tenant_id,
@@ -31338,7 +31414,7 @@ ${summary}`
       const onInterrupted = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core70.eventBus.publish(callbackEvent, {
+          import_core71.eventBus.publish(callbackEvent, {
             success: true,
             state: evt.state
           });
@@ -31347,7 +31423,7 @@ ${summary}`
       const onFailed = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core70.eventBus.publish(callbackEvent, {
+          import_core71.eventBus.publish(callbackEvent, {
             success: false,
             error: evt?.error instanceof Error ? evt.error.message : typeof evt?.error === "string" ? evt.error : "Agent execution failed"
           });
@@ -31362,13 +31438,13 @@ ${summary}`
       agent.subscribe("message:interrupted", onInterrupted);
       agent.subscribe("message:failed", onFailed);
       try {
-        await agent.addMessage({ input: { ...input, id: messageId }, command, custom_run_config: runConfig }, import_core70.QueueMode.STEER);
+        await agent.addMessage({ input: { ...input, id: messageId }, command, custom_run_config: runConfig }, import_core71.QueueMode.STEER);
       } catch (error) {
         dispose();
         throw error;
       }
     } else {
-      await agent.addMessage({ input, command, custom_run_config: runConfig }, import_core70.QueueMode.STEER);
+      await agent.addMessage({ input, command, custom_run_config: runConfig }, import_core71.QueueMode.STEER);
     }
     return true;
   } catch (error) {
@@ -31387,7 +31463,7 @@ ${summary}`
       return handleAgentTask(taskRequest, nextRetryCount);
     }
     if (callback_event) {
-      import_core70.eventBus.publish(callback_event, {
+      import_core71.eventBus.publish(callback_event, {
         success: false,
         error: error instanceof Error ? error.message : String(error)
       });
@@ -31424,7 +31500,7 @@ var _AgentTaskConsumer = class _AgentTaskConsumer {
    * 初始化事件监听和队列轮询
    */
   initialize() {
-    import_core70.eventBus.subscribe(import_core70.AGENT_TASK_EVENT, this.trigger_agent_task.bind(this));
+    import_core71.eventBus.subscribe(import_core71.AGENT_TASK_EVENT, this.trigger_agent_task.bind(this));
     this.startPollingQueue();
     console.log("Agent\u4EFB\u52A1\u6D88\u8D39\u8005\u5DF2\u542F\u52A8\u5E76\u76D1\u542C\u4EFB\u52A1\u4E8B\u4EF6\u548C\u961F\u5217");
   }
@@ -31543,7 +31619,7 @@ var _AgentTaskConsumer = class _AgentTaskConsumer {
     handleAgentTask(taskRequest).catch((error) => {
       console.error("\u5904\u7406Agent\u4EFB\u52A1\u65F6\u53D1\u751F\u672A\u6355\u83B7\u7684\u9519\u8BEF:", error);
       if (taskRequest.callback_event) {
-        import_core70.eventBus.publish(taskRequest.callback_event, {
+        import_core71.eventBus.publish(taskRequest.callback_event, {
           success: false,
           error: error instanceof Error ? error.message : String(error)
         });
@@ -31592,15 +31668,15 @@ function createGracefulShutdown(options) {
 }
 
 // src/index.ts
-var import_core98 = require("@axiom-lattice/core");
+var import_core99 = require("@axiom-lattice/core");
 
 // src/channels/ChannelInfrastructure.ts
-var import_core72 = require("@axiom-lattice/core");
+var import_core73 = require("@axiom-lattice/core");
 
 // src/router/MessageRouter.ts
-var import_core71 = require("@axiom-lattice/core");
+var import_core72 = require("@axiom-lattice/core");
 var import_protocols33 = require("@axiom-lattice/protocols");
-var import_crypto12 = require("crypto");
+var import_crypto11 = require("crypto");
 var BindingNotFoundError = class extends Error {
   constructor(message) {
     super(message);
@@ -31613,6 +31689,15 @@ var ChannelInstallationNotFoundError = class extends Error {
     this.name = "ChannelInstallationNotFoundError";
   }
 };
+var DEFAULT_STREAM_PLACEHOLDER = "\u6B63\u5728\u5904\u7406\u2026";
+function streamPlaceholderFor(installation) {
+  const config = installation?.config;
+  if (config !== null && typeof config === "object" && !Array.isArray(config)) {
+    const value = config.streamPlaceholder;
+    if (typeof value === "string") return value;
+  }
+  return DEFAULT_STREAM_PLACEHOLDER;
+}
 var InvalidChannelInstallationError = class extends Error {
   constructor(message = "Channel installation is not valid for this message") {
     super(message);
@@ -31710,7 +31795,7 @@ function correlatedRoomReplyTarget(replyTarget, inputMessageId) {
     }
   };
 }
-var MessageRouter = class {
+var _MessageRouter = class _MessageRouter {
   constructor(config) {
     this.replySubscriptions = /* @__PURE__ */ new Set();
     /** Recent answer-by-message resumes per presence thread (first answer wins). */
@@ -31884,7 +31969,7 @@ var MessageRouter = class {
             channel: message.channel,
             adapterChannel: adapter.channel
           }, "Thread resolved by adapter strategy");
-          const threadStore = (0, import_core71.getStoreLattice)("default", "thread").store;
+          const threadStore = (0, import_core72.getStoreLattice)("default", "thread").store;
           try {
             await threadStore.createThread(
               tenantId,
@@ -31921,8 +32006,8 @@ var MessageRouter = class {
           }
         }
         if (!threadId) {
-          const threadStore = (0, import_core71.getStoreLattice)("default", "thread").store;
-          const newThreadId = (0, import_crypto12.randomUUID)();
+          const threadStore = (0, import_core72.getStoreLattice)("default", "thread").store;
+          const newThreadId = (0, import_crypto11.randomUUID)();
           console.log({
             event: "dispatch:thread:create",
             agentId,
@@ -31961,14 +32046,14 @@ var MessageRouter = class {
           senderId: message.sender.id,
           contentLength: message.content.text.length
         }, "Dispatching to agent");
-        const agent = import_core71.agentInstanceManager.getAgent({
+        const agent = import_core72.agentInstanceManager.getAgent({
           tenant_id: tenantId,
           assistant_id: agentId,
           thread_id: threadId,
           workspace_id: binding?.workspaceId || "",
           project_id: binding?.projectId || ""
         });
-        const inputMessageId = (0, import_crypto12.randomUUID)();
+        const inputMessageId = (0, import_crypto11.randomUUID)();
         const replyTarget = internalRoom ? correlatedRoomReplyTarget(message.replyTarget, inputMessageId) : message.replyTarget;
         const replyAdapter = replyTarget ? this.adapterRegistry.get(replyTarget.adapterChannel) : void 0;
         if (options.trustedMessageOptions && (!this.trustedDispatcher || !replyTarget || !replyAdapter)) {
@@ -32013,6 +32098,7 @@ var MessageRouter = class {
           },
           ...resumeCommand ? { command: resumeCommand } : {}
         };
+        const streamState = { finished: false };
         let cleanupReplySubscription;
         if (replyTarget && replyAdapter) {
           let cleaned = false;
@@ -32023,10 +32109,11 @@ var MessageRouter = class {
             if (cleaned || !event.consumedInputMessageIds.includes(inputMessageId)) return;
             cleanup();
             if (event.inputMessageId !== inputMessageId) return;
-            void replyAdapter.sendReply(replyTarget, {
+            const delivery = replyAdapter.sendStreamChunk ? streamState.finished ? void 0 : replyAdapter.sendStreamChunk(replyTarget, { text: event.outputText, done: true }, installation) : replyAdapter.sendReply(replyTarget, {
               text: event.outputText,
               metadata: { inputMessageId, outputMessageId: event.outputMessageId }
-            }, installation).catch((error) => console.error({ event: "dispatch:reply:failed", error }));
+            }, installation);
+            void delivery?.catch((error) => console.error({ event: "dispatch:reply:failed", error }));
           };
           const timer = setTimeout(() => {
             console.warn({
@@ -32088,6 +32175,16 @@ var MessageRouter = class {
           cleanupReplySubscription?.();
           throw error;
         }
+        if (addResult && replyTarget && replyAdapter?.sendStreamChunk) {
+          void this.streamAgentOutputToChannel({
+            agent,
+            adapter: replyAdapter,
+            replyTarget,
+            installation,
+            inputMessageId,
+            state: streamState
+          });
+        }
         console.log({
           event: "dispatch:complete",
           agentId,
@@ -32123,6 +32220,64 @@ var MessageRouter = class {
     };
     return dispatch(0);
   }
+  /**
+   * 消费 agent 的逐块输出，把**中途**内容推给支持流式的渠道适配器。
+   *
+   * @remarks
+   * 纯加法、best-effort：不抛错，也**不发最终内容** —— 最终由
+   * `reply:ready` → `sendStreamChunk({ done: true })` 收尾。未实现
+   * `sendStreamChunk` 的适配器不会走到这里，行为完全不变。
+   */
+  async streamAgentOutputToChannel(input) {
+    const { agent, adapter, replyTarget, installation, inputMessageId, state } = input;
+    const send = adapter.sendStreamChunk;
+    if (!send) return;
+    let started = false;
+    let accumulated = "";
+    let lastSentText = "";
+    let lastSentAt = 0;
+    let sent = 0;
+    const warn = (event, error) => console.warn({ event, inputMessageId, error: error instanceof Error ? error.message : String(error) });
+    const push = (text, done) => send.call(adapter, replyTarget, { text, done }, installation).catch((error) => warn("dispatch:stream:failed", error));
+    const placeholder = streamPlaceholderFor(installation);
+    try {
+      if (placeholder) await push(placeholder, false);
+      const stream = agent.chunkStream(inputMessageId, []);
+      for await (const chunk of stream) {
+        if (!started) {
+          if (chunk?.type === import_protocols33.MessageChunkTypes.HUMAN && chunk?.data?.id === inputMessageId) {
+            started = true;
+          }
+          continue;
+        }
+        if (chunk?.type === import_protocols33.MessageChunkTypes.MESSAGE_COMPLETED || chunk?.type === import_protocols33.MessageChunkTypes.MESSAGE_FAILED || chunk?.type === import_protocols33.MessageChunkTypes.INTERRUPT) {
+          if (chunk.type !== import_protocols33.MessageChunkTypes.MESSAGE_COMPLETED) {
+            const text2 = accumulated || placeholder;
+            if (text2) {
+              await push(text2, true);
+              state.finished = true;
+            }
+          }
+          break;
+        }
+        if (chunk?.type !== import_protocols33.MessageChunkTypes.AI) continue;
+        const text = typeof chunk.data?.content === "string" ? chunk.data.content : void 0;
+        if (!text) continue;
+        accumulated += text;
+        if (accumulated === lastSentText) continue;
+        const now = Date.now();
+        if (sent >= _MessageRouter.MAX_STREAM_CHUNKS || now - lastSentAt < _MessageRouter.STREAM_CHUNK_INTERVAL_MS) {
+          continue;
+        }
+        lastSentAt = now;
+        lastSentText = accumulated;
+        sent += 1;
+        await push(accumulated, false);
+      }
+    } catch (error) {
+      warn("dispatch:stream:error", error);
+    }
+  }
   /**
    * Projects a pending HITL interrupt into the room as an independent bot message.
    *
@@ -32146,6 +32301,10 @@ var MessageRouter = class {
     }
   }
 };
+/** 流式中途刷新的节流间隔与上限（微信单会话 30 条/分钟，留余量）。 */
+_MessageRouter.STREAM_CHUNK_INTERVAL_MS = 800;
+_MessageRouter.MAX_STREAM_CHUNKS = 60;
+var MessageRouter = _MessageRouter;
 
 // src/channels/room/RoomChannelAdapter.ts
 var import_zod18 = require("zod");
@@ -32247,7 +32406,7 @@ function createChannelInfrastructure(deps) {
       onMessageCommitted: deps.onMessageCommitted ?? (deps.realtime ? (message) => deps.realtime?.messageCreated(message) : void 0),
       onCallbackFailure: (event) => deps.warn("project-room:message-commit-callback-failed", event)
     };
-    deps.adapterRegistry.register(createRoomChannelAdapter(new import_core72.RoomAgentMessageService(writerDeps)));
+    deps.adapterRegistry.register(createRoomChannelAdapter(new import_core73.RoomAgentMessageService(writerDeps)));
   } catch (error) {
     deps.warn("Room channel unavailable", { error: error instanceof Error ? error.message : String(error) });
   }
@@ -32268,11 +32427,11 @@ async function prepareProjectTaskRuntime(runtime, log2) {
 }
 
 // src/services/plugins/PluginDeploymentRuntimeStartup.ts
-var import_core74 = require("@axiom-lattice/core");
+var import_core75 = require("@axiom-lattice/core");
 
 // src/services/plugins/PluginDeploymentService.ts
 var import_node_crypto30 = require("crypto");
-var import_core73 = require("@axiom-lattice/core");
+var import_core74 = require("@axiom-lattice/core");
 
 // src/services/plugins/pluginDeploymentNaming.ts
 var import_node_crypto29 = require("crypto");
@@ -32290,7 +32449,7 @@ function pluginSandboxName(tenantId, pluginType) {
 }
 
 // src/services/plugins/PluginDeploymentService.ts
-var PLUGIN_HOST_SERVER_PATH = `${import_core73.PLUGIN_HOST_DIR}/server.js`;
+var PLUGIN_HOST_SERVER_PATH = `${import_core74.PLUGIN_HOST_DIR}/server.js`;
 var DEFAULT_PLUGIN_IDLE_TIMEOUT_MS = 15 * 60 * 1e3;
 var DEFAULT_PLUGIN_HEALTH_TIMEOUT_MS = 3e4;
 var DEFAULT_PLUGIN_HEALTH_POLL_INTERVAL_MS = 500;
@@ -32329,7 +32488,7 @@ var PluginDeploymentService = class {
     this.catalog = deps.catalog;
     this.installPluginHost = deps.installPluginHost;
     this.lease = deps.lease;
-    this.registry = deps.registry ?? new import_core73.PluginDeploymentRuntimeRegistry({ now: deps.clock ?? Date.now });
+    this.registry = deps.registry ?? new import_core74.PluginDeploymentRuntimeRegistry({ now: deps.clock ?? Date.now });
     this.now = deps.clock ?? Date.now;
     this.logger = deps.logger ?? { info: () => void 0 };
     this.limits = deps.limits ?? {};
@@ -33046,7 +33205,7 @@ function startPluginDeploymentRuntime(options) {
     );
     return { reconcile: Promise.resolve(), dispose: async () => void 0 };
   }
-  const register = options.register ?? ((service3) => (0, import_core74.setPluginDeploymentService)(service3));
+  const register = options.register ?? ((service3) => (0, import_core75.setPluginDeploymentService)(service3));
   const setIntervalFn = options.setIntervalFn ?? setInterval;
   const clearIntervalFn = options.clearIntervalFn ?? clearInterval;
   const watchdogIntervalMs = options.watchdogIntervalMs ?? DEFAULT_PLUGIN_WATCHDOG_INTERVAL_MS;
@@ -33190,51 +33349,6 @@ function errorMessage5(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
-// src/services/multiReplicaReadiness.ts
-var import_core75 = require("@axiom-lattice/core");
-var SHARED_STORE_KINDS = [
-  "lease",
-  "outbox",
-  "threadMessageQueue",
-  "task",
-  "taskWorkItem",
-  "channelInstallation"
-];
-function storeClassName(kind) {
-  try {
-    return (0, import_core75.getStoreLattice)("default", kind).store.constructor?.name;
-  } catch {
-    return void 0;
-  }
-}
-function warnMultiReplicaReadiness(logger9) {
-  if (typeof process.env.AXIOM_REPLICA_ID !== "string" || process.env.AXIOM_REPLICA_ID.trim() === "") return;
-  for (const kind of SHARED_STORE_KINDS) {
-    const name = storeClassName(kind);
-    if (name === void 0 || !name.startsWith("InMemory")) continue;
-    logger9.warn(`Multi-replica: store '${kind}' is ${name} (not shared); configure a shared store`, {
-      phase: "multi_replica_readiness",
-      store: kind
-    });
-  }
-  if (!process.env.AUTH_TOKEN_SECRET?.trim() && !process.env.JWT_SECRET?.trim()) {
-    logger9.warn(
-      "Multi-replica: AUTH_TOKEN_SECRET/JWT_SECRET unset; console sessions are signed per-process and will not verify across replicas",
-      { phase: "multi_replica_readiness", env: "AUTH_TOKEN_SECRET" }
-    );
-  }
-  if (!process.env.LATTICE_ENCRYPTION_KEY?.trim()) {
-    logger9.warn(
-      "Multi-replica: LATTICE_ENCRYPTION_KEY unset; stored credentials use the shared dev default and may not decrypt across differing keys",
-      { phase: "multi_replica_readiness", env: "LATTICE_ENCRYPTION_KEY" }
-    );
-  }
-  logger9.warn(
-    "Multi-replica: agent run SSE and resume_stream are process-local; route a thread's follow-up runs to the replica streaming it (sticky routing) or share the stream/queue state",
-    { phase: "multi_replica_readiness", feature: "agent-run-sse" }
-  );
-}
-
 // src/services/OutboxRetentionJob.ts
 var HOUR_MS = 60 * 60 * 1e3;
 var DEFAULT_INTERVAL_MS2 = 6 * HOUR_MS;
@@ -33374,15 +33488,15 @@ var DEFAULT_LOGGER_CONFIG = {
 var loggerLattice = initializeLogger(DEFAULT_LOGGER_CONFIG);
 var logger8 = loggerLattice.client;
 function initializeLogger(config) {
-  if (import_core98.loggerLatticeManager.hasLattice("default")) {
-    import_core98.loggerLatticeManager.removeLattice("default");
+  if (import_core99.loggerLatticeManager.hasLattice("default")) {
+    import_core99.loggerLatticeManager.removeLattice("default");
   }
-  (0, import_core98.registerLoggerLattice)("default", config);
-  return (0, import_core98.getLoggerLattice)("default");
+  (0, import_core99.registerLoggerLattice)("default", config);
+  return (0, import_core99.getLoggerLattice)("default");
 }
 var app = (0, import_fastify.default)({
   logger: false,
-  bodyLimit: Number(process.env.BODY_LIMIT) || 50 * 1024 * 1024,
+  bodyLimit: Number(process.env.BODY_LIMIT) || 100 * 1024 * 1024,
   // Composite subagent thread IDs ({mainThread}____{assistant}-general-purpose_{toolCallId})
   // can exceed the 100-char default, which makes the router 404 before any
   // handler runs. Allow the longest IDs the conventions can produce.
@@ -33445,7 +33559,7 @@ app.register(import_cors.default, {
 app.register(import_sensible.default);
 app.register(import_multipart.default, {
   limits: {
-    fileSize: Number(process.env.BODY_LIMIT) || 50 * 1024 * 1024
+    fileSize: Number(process.env.BODY_LIMIT) || 100 * 1024 * 1024
   }
 });
 app.register(import_websocket.default);
@@ -33476,7 +33590,7 @@ app.setErrorHandler((error, request, reply) => {
 var shutdownHandlersInstalled = false;
 function getConfiguredSandboxProvider() {
   const sandboxProviderType = process.env.SANDBOX_PROVIDER_TYPE || "microsandbox-remote";
-  return (0, import_core98.createSandboxProvider)({
+  return (0, import_core99.createSandboxProvider)({
     type: sandboxProviderType,
     remoteBaseURL: process.env.SANDBOX_BASE_URL,
     microsandboxServiceBaseURL: process.env.MICROSANDBOX_SERVICE_BASE_URL,
@@ -33492,7 +33606,7 @@ function getConfiguredSandboxProvider() {
 }
 async function restoreMcpConnections() {
   try {
-    const storeLattice = (0, import_core98.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core99.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     if (!store2) {
       logger8.info("MCP store not configured, skipping connection restoration");
@@ -33505,8 +33619,8 @@ async function restoreMcpConnections() {
     logger8.info(`Restoring ${configs.length} MCP server connections...`);
     const deps = {
       store: store2,
-      manager: import_core98.mcpManager,
-      convertToConnection: import_core98.convertToConnection
+      manager: import_core99.mcpManager,
+      convertToConnection: import_core99.convertToConnection
     };
     const results = await Promise.allSettled(
       configs.map(
@@ -33547,9 +33661,9 @@ var start = async (config) => {
     let projectRoomRealtimeRuntime;
     if (projectRoomRealtimeMode === "single-gateway") {
       projectRoomRealtimeRuntime = createProjectRoomRealtimeRuntime({
-        tasks: (0, import_core98.getStoreLattice)("default", "task").store,
-        rooms: (0, import_core98.getStoreLattice)("default", "projectRoom").store,
-        memberships: (0, import_core98.getStoreLattice)("default", "projectBotMembership").store,
+        tasks: (0, import_core99.getStoreLattice)("default", "task").store,
+        rooms: (0, import_core99.getStoreLattice)("default", "projectRoom").store,
+        memberships: (0, import_core99.getStoreLattice)("default", "projectBotMembership").store,
         log: { warn: (message, context) => logger8.warn(message, context) }
       });
     }
@@ -33562,8 +33676,8 @@ var start = async (config) => {
     try {
       const infrastructure = createChannelInfrastructure({
         adapterRegistry,
-        getStore: ((kind) => (0, import_core98.getStoreLattice)("default", kind).store),
-        trustedDispatcher: (0, import_core98.createTrustedAgentMessageDispatcher)((scope) => import_core98.agentInstanceManager.getAgent(scope)),
+        getStore: ((kind) => (0, import_core99.getStoreLattice)("default", kind).store),
+        trustedDispatcher: (0, import_core99.createTrustedAgentMessageDispatcher)((scope) => import_core99.agentInstanceManager.getAgent(scope)),
         middlewares: [
           createDeduplicationMiddleware(),
           createRateLimitMiddleware(),
@@ -33574,7 +33688,7 @@ var start = async (config) => {
       });
       const bindingStore = infrastructure.bindingRegistry;
       const installationStore = infrastructure.installationStore;
-      (0, import_core97.setBindingRegistry)(bindingStore);
+      (0, import_core98.setBindingRegistry)(bindingStore);
       const router = infrastructure.router;
       app.addHook("onClose", async () => router.dispose());
       channelDeps = {
@@ -33590,10 +33704,10 @@ var start = async (config) => {
         error: err instanceof Error ? err.message : String(err)
       });
     }
-    (0, import_core97.setEvalRunService)(evalRunner);
+    (0, import_core98.setEvalRunService)(evalRunner);
     try {
-      const menuStore = (0, import_core98.getStoreLattice)("default", "menu").store;
-      (0, import_core97.setMenuRegistry)(menuStore);
+      const menuStore = (0, import_core99.getStoreLattice)("default", "menu").store;
+      (0, import_core98.setMenuRegistry)(menuStore);
       logger8.info("Menu registry initialized");
     } catch {
     }
@@ -33610,10 +33724,10 @@ var start = async (config) => {
       const { A2AAuthService: A2AAuthService2, parseEnvKeys: parseEnvKeys2 } = await Promise.resolve().then(() => (init_A2AAuthService(), A2AAuthService_exports));
       const { registerA2AStandardRoutes: registerA2AStandardRoutes2 } = await Promise.resolve().then(() => (init_a2a_standard(), a2a_standard_exports));
       const a2a = await Promise.resolve().then(() => (init_a2a(), a2a_exports));
-      const a2aKeyStore = (0, import_core98.getStoreLattice)("default", "a2aApiKey").store;
-      const assistantStore = (0, import_core98.getStoreLattice)("default", "assistant").store;
-      const projectStore = (0, import_core98.getStoreLattice)("default", "project").store;
-      const taskStore = (0, import_core98.getStoreLattice)("default", "task").store;
+      const a2aKeyStore = (0, import_core99.getStoreLattice)("default", "a2aApiKey").store;
+      const assistantStore = (0, import_core99.getStoreLattice)("default", "assistant").store;
+      const projectStore = (0, import_core99.getStoreLattice)("default", "project").store;
+      const taskStore = (0, import_core99.getStoreLattice)("default", "task").store;
       const authService = new A2AAuthService2({
         keyStore: a2aKeyStore,
         assistantStore,
@@ -33653,8 +33767,8 @@ var start = async (config) => {
       const { CollectionService: CollectionService2 } = await Promise.resolve().then(() => (init_collection_service(), collection_service_exports));
       openLattice2.register(createKbProvider2(new CollectionService2()));
       openLattice2.register(createOpenSandboxProvider2());
-      const threadStore = (0, import_core98.getStoreLattice)("default", "thread").store;
-      const assistantStore = (0, import_core98.getStoreLattice)("default", "assistant").store;
+      const threadStore = (0, import_core99.getStoreLattice)("default", "thread").store;
+      const assistantStore = (0, import_core99.getStoreLattice)("default", "assistant").store;
       openLattice2.register(
         createAgentProvider2({
           threadStore,
@@ -33699,15 +33813,15 @@ var start = async (config) => {
         error: err instanceof Error ? err.message : String(err)
       });
     }
-    if (!import_core98.sandboxLatticeManager.hasLattice("default")) {
-      import_core98.sandboxLatticeManager.registerLattice("default", getConfiguredSandboxProvider());
+    if (!import_core99.sandboxLatticeManager.hasLattice("default")) {
+      import_core99.sandboxLatticeManager.registerLattice("default", getConfiguredSandboxProvider());
       logger8.info("Registered sandbox manager from env configuration");
     }
     if (isPluginDeploymentRuntimeEnabled()) {
       try {
-        const pluginDeploymentStore = (0, import_core98.getStoreLattice)("default", "pluginDeployment").store;
-        const tenantStore = (0, import_core98.getStoreLattice)("default", "tenant").store;
-        const leaseStore2 = (0, import_core98.getStoreLattice)("default", "lease").store;
+        const pluginDeploymentStore = (0, import_core99.getStoreLattice)("default", "pluginDeployment").store;
+        const tenantStore = (0, import_core99.getStoreLattice)("default", "tenant").store;
+        const leaseStore2 = (0, import_core99.getStoreLattice)("default", "lease").store;
         const listAllDeployments = async () => {
           const tenants = await tenantStore.getAllTenants();
           const lists = await Promise.all(
@@ -33720,9 +33834,9 @@ var start = async (config) => {
         const pluginDeploymentRuntime = startPluginDeploymentRuntime({
           wiring: {
             store: pluginDeploymentStore,
-            sandboxManager: (0, import_core98.getSandBoxManager)(),
-            catalog: (0, import_core98.getSandboxPluginCatalog)(),
-            installPluginHost: import_core98.installPluginHost,
+            sandboxManager: (0, import_core99.getSandBoxManager)(),
+            catalog: (0, import_core99.getSandboxPluginCatalog)(),
+            installPluginHost: import_core99.installPluginHost,
             limits: readPluginDeploymentLimits(),
             serviceKey: process.env.MICROSANDBOX_API_KEY,
             listAllDeployments,
@@ -33734,7 +33848,7 @@ var start = async (config) => {
             }
           },
           lease: leaseStore2,
-          holder: (0, import_core98.getReplicaId)(),
+          holder: (0, import_core99.getReplicaId)(),
           logger: logger8
         });
         app.addHook("onClose", async () => {
@@ -33749,11 +33863,11 @@ var start = async (config) => {
     }
     try {
       const { ResourceController: ResourceController2 } = await Promise.resolve().then(() => (init_resources(), resources_exports));
-      const sharedResourceStore = (0, import_core98.getStoreLattice)("default", "sharedResource").store;
-      const cache2 = new import_core98.TokenCache();
+      const sharedResourceStore = (0, import_core99.getStoreLattice)("default", "sharedResource").store;
+      const cache2 = new import_core99.TokenCache();
       const resourceController = new ResourceController2({
         store: sharedResourceStore,
-        sandboxManager: import_core98.sandboxLatticeManager,
+        sandboxManager: import_core99.sandboxLatticeManager,
         cache: cache2,
         logger: logger8
       });
@@ -33766,13 +33880,13 @@ var start = async (config) => {
     }
     if (channelDeps && process.env.CHANNELS_ENABLED !== "false") {
       try {
-        const channelLeader = new import_core98.ChannelConnectionLeader({
-          leaseStore: (0, import_core98.getStoreLattice)("default", "lease").store,
-          owner: (0, import_core98.getReplicaId)(),
-          connect: () => (0, import_core98.connectAllChannels)((channel) => adapterRegistry.get(channel), {
+        const channelLeader = new import_core99.ChannelConnectionLeader({
+          leaseStore: (0, import_core99.getStoreLattice)("default", "lease").store,
+          owner: (0, import_core99.getReplicaId)(),
+          connect: () => (0, import_core99.connectAllChannels)((channel) => adapterRegistry.get(channel), {
             deps: { router: channelDeps.router }
           }),
-          disconnect: () => (0, import_core98.disconnectAllChannels)((channel) => adapterRegistry.get(channel)),
+          disconnect: () => (0, import_core99.disconnectAllChannels)((channel) => adapterRegistry.get(channel)),
           log: { warn: (message, context) => logger8.warn(message, context) }
         });
         app.addHook("onClose", async () => {
@@ -33786,40 +33900,43 @@ var start = async (config) => {
       }
     }
     const target_port = config?.port || Number(process.env.PORT) || 4001;
-    (0, import_core98.configureCoordinationLeaseStore)((0, import_core98.getStoreLattice)("default", "lease").store);
-    const outboxStore = (0, import_core98.getStoreLattice)("default", "outbox").store;
-    import_core98.taskLifecycleNotifier.setOutbox(outboxStore);
-    import_core98.projectTaskAdmissionNotifier.setOutbox(outboxStore);
-    (0, import_core98.configurePluginCatalogSync)({ outbox: outboxStore, owner: (0, import_core98.getReplicaId)() });
+    (0, import_core99.configureCoordinationLeaseStore)((0, import_core99.getStoreLattice)("default", "lease").store);
+    const outboxStore = (0, import_core99.getStoreLattice)("default", "outbox").store;
+    import_core99.taskLifecycleNotifier.setOutbox(outboxStore);
+    import_core99.projectTaskAdmissionNotifier.setOutbox(outboxStore);
+    (0, import_core99.configurePluginCatalogSync)({ outbox: outboxStore, owner: (0, import_core99.getReplicaId)() });
     bridgeAssistantEvents(
-      (event, cb) => import_core98.eventBus.subscribe(event, cb),
+      (event, cb) => import_core99.eventBus.subscribe(event, cb),
       outboxStore,
-      (0, import_core98.getReplicaId)()
+      (0, import_core99.getReplicaId)()
     );
     if (projectRoomRealtimeRuntime) {
       projectRoomRealtimeRuntime.broker.setBroadcastHook((scope, serialized, sourceKey) => {
-        void publishRoomEvent(outboxStore, (0, import_core98.getReplicaId)(), scope, serialized, sourceKey);
+        void publishRoomEvent(outboxStore, (0, import_core99.getReplicaId)(), scope, serialized, sourceKey);
       });
     }
-    const outboxPoller = new import_core98.OutboxPoller({
+    const outboxPoller = new import_core99.OutboxPoller({
       store: outboxStore,
-      owner: (0, import_core98.getReplicaId)(),
+      owner: (0, import_core99.getReplicaId)(),
       handlers: {
-        "task-lifecycle": (payload) => import_core98.taskLifecycleNotifier.deliverFromOutbox(payload),
-        "project-task-admission": (payload) => import_core98.projectTaskAdmissionNotifier.deliverFromOutbox(payload),
+        "task-lifecycle": (payload) => import_core99.taskLifecycleNotifier.deliverFromOutbox(payload),
+        "project-task-admission": (payload) => import_core99.projectTaskAdmissionNotifier.deliverFromOutbox(payload),
         [ROOM_EVENT_TOPIC]: async (payload) => {
           if (projectRoomRealtimeRuntime) ingestRoomEvent(payload, projectRoomRealtimeRuntime.broker);
         },
-        "assistant-changed": (payload) => handleAssistantChanged(payload, (tenantId) => import_core98.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId)),
+        "assistant-changed": (payload) => handleAssistantChanged(payload, (tenantId) => import_core99.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId)),
         [A2A_KEY_CHANGED_TOPIC]: (payload) => handleA2AKeyChanged(payload, () => refreshStoreKeyMap()),
         [MCP_CONFIG_CHANGED_TOPIC]: (payload) => reconcileMcpConfigChange(payload, {
-          store: (0, import_core98.getStoreLattice)("default", "mcp").store,
-          manager: import_core98.mcpManager,
-          convertToConnection: import_core98.convertToConnection
+          store: (0, import_core99.getStoreLattice)("default", "mcp").store,
+          manager: import_core99.mcpManager,
+          convertToConnection: import_core99.convertToConnection
         }),
-        [import_core98.PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
+        [import_core99.PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
           const tenantId = payload?.tenantId;
-          if (typeof tenantId === "string" && tenantId.length > 0) (0, import_core98.getSandboxPluginCatalog)().invalidate(tenantId);
+          if (typeof tenantId === "string" && tenantId.length > 0) {
+            (0, import_core99.getSandboxPluginCatalog)().invalidate(tenantId);
+            await getMcpUiResourceResolver()?.invalidateTenantPlugins(tenantId);
+          }
         },
         [MODEL_PROVIDER_CHANGED_TOPIC]: async (payload) => {
           const controller = routes.modelProviderController;
@@ -33834,7 +33951,7 @@ var start = async (config) => {
     } catch (err) {
       logger8.warn("Outbox poller failed to start", { error: err instanceof Error ? err.message : String(err) });
     }
-    const leaseStore = (0, import_core98.getStoreLattice)("default", "lease").store;
+    const leaseStore = (0, import_core99.getStoreLattice)("default", "lease").store;
     if (leaseStore.constructor?.name === "InMemoryLeaseStore") {
       logger8.warn(
         "Startup recovery leader gate uses a non-distributed lease store (per-process only); configure a shared 'lease' store for multi-replica deployments",
@@ -33842,7 +33959,7 @@ var start = async (config) => {
       );
     }
     warnMultiReplicaReadiness(logger8);
-    const startup = await (0, import_core98.runAsLeader)(leaseStore, "startup-recovery", async () => {
+    const startup = await (0, import_core99.runAsLeader)(leaseStore, "startup-recovery", async () => {
       if (routes.projectTaskRuntime) {
         await prepareProjectTaskRuntime(routes.projectTaskRuntime, logger8);
       }
@@ -33851,9 +33968,9 @@ var start = async (config) => {
           const { createOrphanRecoveryRuntime: createOrphanRecoveryRuntime2 } = await Promise.resolve().then(() => (init_OrphanRecoveryRuntime(), OrphanRecoveryRuntime_exports));
           const { createRecoveryCallerDeps: createRecoveryCallerDeps2 } = await Promise.resolve().then(() => (init_RecoveryCallerDeps(), RecoveryCallerDeps_exports));
           const runtime = createOrphanRecoveryRuntime2({
-            taskStore: (0, import_core98.getStoreLattice)("default", "task").store,
-            workItemStore: (0, import_core98.getStoreLattice)("default", "taskWorkItem").store,
-            tenantStore: (0, import_core98.getStoreLattice)("default", "tenant").store,
+            taskStore: (0, import_core99.getStoreLattice)("default", "task").store,
+            workItemStore: (0, import_core99.getStoreLattice)("default", "taskWorkItem").store,
+            tenantStore: (0, import_core99.getStoreLattice)("default", "tenant").store,
             ...createRecoveryCallerDeps2(),
             log: logger8
           });
@@ -33862,9 +33979,9 @@ var start = async (config) => {
           logger8.warn("Task orphan recovery failed", { error: err instanceof Error ? err.message : String(err) });
         }
       }
-      if (import_core98.scheduleLatticeManager.hasLattice("default")) {
+      if (import_core99.scheduleLatticeManager.hasLattice("default")) {
         try {
-          const restored = await import_core98.scheduleLatticeManager.getScheduleLattice("default").restore();
+          const restored = await import_core99.scheduleLatticeManager.getScheduleLattice("default").restore();
           logger8.info("Scheduled tasks restored", { phase: "startup_recovery", restored });
         } catch (err) {
           logger8.warn("Scheduled task restore failed", {
@@ -33907,7 +34024,7 @@ var start = async (config) => {
         steps: [
           async () => {
             await Promise.all(
-              import_core98.agentInstanceManager.getAllAgents().map((agent) => agent.abort().catch(() => void 0))
+              import_core99.agentInstanceManager.getAllAgents().map((agent) => agent.abort().catch(() => void 0))
             );
           },
           () => agentTaskConsumer?.stopPollingQueue(),