@axiom-lattice/gateway 4.11.0 → 6.0.0

package/dist/index.mjs

@@ -1,3 +1,7 @@
+import {
+  invalidateAgentReflectionCache,
+  invalidatePluginReflectionCache
+} from "./chunk-GL7RV5L3.mjs";
 import {
   getContentTypeFromFilename,
   getFilenameFromPath,
@@ -44,7 +48,7 @@ import {
   resolveTaskOwnerMembership,
   resolveTopCaller,
   runOrphanRecovery
-} from "./chunk-ZBTG3T7K.mjs";
+} from "./chunk-NZXKECNN.mjs";
 import {
   createRecoveryCallerDeps
 } from "./chunk-NOXGKYUV.mjs";
@@ -66,7 +70,7 @@ import staticPlugin from "@fastify/static";
 import path4 from "path";
 
 // src/routes/index.ts
-import { randomUUID as randomUUID24 } from "crypto";
+import { randomUUID as randomUUID23 } from "crypto";
 import {
   descriptorDataValue as descriptorDataValue3,
   snapshotExactRecord as snapshotExactRecord14,
@@ -772,11 +776,7 @@ async function getAssistantStats(request, reply) {
     const assistantMap = /* @__PURE__ */ new Map();
     codeConfiguredAssistants.forEach((a) => assistantMap.set(a.id, a));
     storedAssistants.forEach((a) => assistantMap.set(a.id, a));
-    const userId = getUserId(request);
-    const assistants = Array.from(assistantMap.values()).filter((a) => {
-      if (!a.ownerUserId) return true;
-      return a.ownerUserId === userId;
-    });
+    const assistants = Array.from(assistantMap.values());
     const threadStore = getStoreLattice("default", "thread").store;
     const evalStore = getStoreLattice("default", "eval").store;
     const now = Date.now();
@@ -1812,198 +1812,6 @@ async function resumeScheduledTask(request, reply) {
   }
 }
 
-// src/config.ts
-var ConfigService = class {
-  constructor() {
-    this.config = this.loadFromEnv();
-  }
-  /**
-   * Load configuration from environment variables
-   */
-  loadFromEnv() {
-    return {
-      port: process.env.PORT ? Number(process.env.PORT) : void 0,
-      queueServiceType: process.env.QUEUE_SERVICE_TYPE,
-      redisUrl: process.env.REDIS_URL,
-      redisPassword: process.env.REDIS_PASSWORD,
-      queueName: process.env.QUEUE_NAME
-    };
-  }
-  /**
-   * Update configuration from JSON object
-   * This will update both the internal config and process.env
-   */
-  updateConfig(jsonConfig) {
-    for (const [key, value] of Object.entries(jsonConfig)) {
-      if (value !== null && value !== void 0) {
-        if (typeof value === "object" && !Array.isArray(value)) {
-          for (const [nestedKey, nestedValue] of Object.entries(value)) {
-            const envKey = `${key.toUpperCase()}_${nestedKey.toUpperCase()}`;
-            process.env[envKey] = String(nestedValue);
-          }
-        } else {
-          process.env[key.toUpperCase()] = String(value);
-        }
-      }
-    }
-    this.config = this.loadFromEnv();
-    this.config = this.deepMerge(this.config, jsonConfig);
-  }
-  /**
-   * Deep merge two objects
-   */
-  deepMerge(target, source) {
-    const output = { ...target };
-    if (this.isObject(target) && this.isObject(source)) {
-      Object.keys(source).forEach((key) => {
-        if (this.isObject(source[key])) {
-          if (!(key in target)) {
-            Object.assign(output, { [key]: source[key] });
-          } else {
-            output[key] = this.deepMerge(target[key], source[key]);
-          }
-        } else {
-          Object.assign(output, { [key]: source[key] });
-        }
-      });
-    }
-    return output;
-  }
-  /**
-   * Check if value is a plain object
-   */
-  isObject(item) {
-    return item && typeof item === "object" && !Array.isArray(item);
-  }
-  /**
-   * Get current configuration
-   */
-  getConfig() {
-    return { ...this.config };
-  }
-};
-var configService = new ConfigService();
-
-// src/services/queue_service.ts
-import {
-  queueLatticeManager,
-  registerQueueLattice,
-  getQueueLattice
-} from "@axiom-lattice/core";
-import { QueueType } from "@axiom-lattice/protocols";
-import { RedisQueueClient } from "@axiom-lattice/queue-redis";
-var DEFAULT_QUEUE_KEY = "default";
-var queueServiceType = process.env.QUEUE_SERVICE_TYPE || "memory";
-var setQueueServiceType = (type) => {
-  queueServiceType = type;
-  console.log(`Queue service type set to: ${type}`);
-  const queueName = process.env.QUEUE_NAME || "tasks";
-  const config = {
-    name: "Default Queue Service",
-    description: `Default ${type} queue service`,
-    type: type === "redis" ? QueueType.REDIS : QueueType.MEMORY,
-    queueName,
-    options: type === "redis" ? {
-      redisUrl: process.env.REDIS_URL,
-      redisPassword: process.env.REDIS_PASSWORD
-    } : void 0
-  };
-  if (queueLatticeManager.hasLattice(DEFAULT_QUEUE_KEY)) {
-    queueLatticeManager.removeLattice(DEFAULT_QUEUE_KEY);
-  }
-  let client;
-  if (type === "redis") {
-    client = new RedisQueueClient(queueName, {
-      redisUrl: process.env.REDIS_URL,
-      redisPassword: process.env.REDIS_PASSWORD
-    });
-  }
-  registerQueueLattice(DEFAULT_QUEUE_KEY, config, client);
-};
-var getQueueService = () => {
-  if (!queueLatticeManager.hasLattice(DEFAULT_QUEUE_KEY)) {
-    setQueueServiceType(queueServiceType);
-  }
-  return getQueueLattice(DEFAULT_QUEUE_KEY);
-};
-var popAgentTaskFromQueue = async () => {
-  const queue = getQueueService();
-  const result = await queue.pop();
-  return result;
-};
-
-// src/controllers/config.ts
-async function updateConfig(request, reply) {
-  try {
-    const { config: jsonConfig } = request.body;
-    if (!jsonConfig || typeof jsonConfig !== "object") {
-      return reply.status(400).send({
-        success: false,
-        error: "Invalid configuration: config must be an object"
-      });
-    }
-    configService.updateConfig(jsonConfig);
-    const warnings = [];
-    const requiresRestart = [];
-    if (jsonConfig.port !== void 0) {
-      requiresRestart.push("PORT");
-      warnings.push("Port change requires server restart to take effect");
-    }
-    if (jsonConfig.queueServiceType) {
-      setQueueServiceType(jsonConfig.queueServiceType);
-    }
-    if ((jsonConfig.redisUrl || jsonConfig.redisPassword) && (process.env.QUEUE_SERVICE_TYPE === "redis" || jsonConfig.queueServiceType === "redis")) {
-      const currentType = jsonConfig.queueServiceType || process.env.QUEUE_SERVICE_TYPE || "memory";
-      if (currentType === "redis") {
-        setQueueServiceType("redis");
-      }
-    }
-    const updatedConfig = configService.getConfig();
-    const safeConfig = {
-      ...updatedConfig,
-      redisPassword: updatedConfig.redisPassword ? "***" : updatedConfig.redisPassword
-    };
-    return reply.send({
-      success: true,
-      message: "Configuration updated successfully",
-      data: safeConfig,
-      warnings: warnings.length > 0 ? warnings : void 0,
-      requiresRestart: requiresRestart.length > 0 ? requiresRestart : void 0
-    });
-  } catch (error) {
-    console.error("Failed to update configuration", {
-      error: error.message,
-      stack: error.stack
-    });
-    return reply.status(500).send({
-      success: false,
-      error: error.message || "Failed to update configuration"
-    });
-  }
-}
-async function getConfig(request, reply) {
-  try {
-    const currentConfig = configService.getConfig();
-    const safeConfig = {
-      ...currentConfig,
-      redisPassword: currentConfig.redisPassword ? "***" : currentConfig.redisPassword
-    };
-    return reply.send({
-      success: true,
-      data: safeConfig
-    });
-  } catch (error) {
-    console.error("Failed to get configuration", {
-      error: error.message,
-      stack: error.stack
-    });
-    return reply.status(500).send({
-      success: false,
-      error: error.message || "Failed to get configuration"
-    });
-  }
-}
-
 // src/controllers/models.ts
 import { registerModelLattice, modelLatticeManager } from "@axiom-lattice/core";
 async function getModels(request, reply) {
@@ -2117,6 +1925,119 @@ async function updateModels(request, reply) {
   }
 }
 
+// src/services/multiReplicaReadiness.ts
+import { getStoreLattice as getStoreLattice3 } from "@axiom-lattice/core";
+
+// src/services/queue_service.ts
+import {
+  queueLatticeManager,
+  registerQueueLattice,
+  getQueueLattice
+} from "@axiom-lattice/core";
+import { QueueType } from "@axiom-lattice/protocols";
+import { RedisQueueClient } from "@axiom-lattice/queue-redis";
+var DEFAULT_QUEUE_KEY = "default";
+var queueServiceType = process.env.QUEUE_SERVICE_TYPE || "memory";
+var setQueueServiceType = (type) => {
+  queueServiceType = type;
+  console.log(`Queue service type set to: ${type}`);
+  const queueName = process.env.QUEUE_NAME || "tasks";
+  const config = {
+    name: "Default Queue Service",
+    description: `Default ${type} queue service`,
+    type: type === "redis" ? QueueType.REDIS : QueueType.MEMORY,
+    queueName,
+    options: type === "redis" ? {
+      redisUrl: process.env.REDIS_URL,
+      redisPassword: process.env.REDIS_PASSWORD
+    } : void 0
+  };
+  if (queueLatticeManager.hasLattice(DEFAULT_QUEUE_KEY)) {
+    queueLatticeManager.removeLattice(DEFAULT_QUEUE_KEY);
+  }
+  let client;
+  if (type === "redis") {
+    client = new RedisQueueClient(queueName, {
+      redisUrl: process.env.REDIS_URL,
+      redisPassword: process.env.REDIS_PASSWORD
+    });
+  }
+  registerQueueLattice(DEFAULT_QUEUE_KEY, config, client);
+};
+var getQueueServiceType = () => {
+  return queueServiceType;
+};
+var getQueueService = () => {
+  if (!queueLatticeManager.hasLattice(DEFAULT_QUEUE_KEY)) {
+    setQueueServiceType(queueServiceType);
+  }
+  return getQueueLattice(DEFAULT_QUEUE_KEY);
+};
+var popAgentTaskFromQueue = async () => {
+  const queue = getQueueService();
+  const result = await queue.pop();
+  return result;
+};
+
+// src/services/multiReplicaReadiness.ts
+var SHARED_STORE_KINDS = [
+  "lease",
+  "outbox",
+  "threadMessageQueue",
+  "task",
+  "taskWorkItem",
+  "channelInstallation"
+];
+function isMultiReplicaDeclared() {
+  return typeof process.env.AXIOM_REPLICA_ID === "string" && process.env.AXIOM_REPLICA_ID.trim() !== "";
+}
+function storeClassName(kind) {
+  try {
+    return getStoreLattice3("default", kind).store.constructor?.name;
+  } catch {
+    return void 0;
+  }
+}
+function computeMultiReplicaReadiness() {
+  const multiReplicaDeclared = isMultiReplicaDeclared();
+  const warnings = [];
+  if (!multiReplicaDeclared) {
+    return { multiReplicaDeclared, ok: true, warnings };
+  }
+  for (const kind of SHARED_STORE_KINDS) {
+    const name = storeClassName(kind);
+    if (name === void 0 || !name.startsWith("InMemory")) continue;
+    warnings.push(`Multi-replica: store '${kind}' is ${name} (not shared); configure a shared store`);
+  }
+  if (!process.env.AUTH_TOKEN_SECRET?.trim() && !process.env.JWT_SECRET?.trim()) {
+    warnings.push(
+      "Multi-replica: AUTH_TOKEN_SECRET/JWT_SECRET unset; console sessions are signed per-process and will not verify across replicas"
+    );
+  }
+  if (!process.env.LATTICE_ENCRYPTION_KEY?.trim()) {
+    warnings.push(
+      "Multi-replica: LATTICE_ENCRYPTION_KEY unset; stored credentials use the shared dev default and may not decrypt across differing keys"
+    );
+  }
+  if (getQueueServiceType() !== "redis") {
+    warnings.push(
+      "Multi-replica: task queue service is 'memory' (not shared); set QUEUE_SERVICE_TYPE=redis so queued work is visible across replicas"
+    );
+  }
+  return { multiReplicaDeclared, ok: warnings.length === 0, warnings };
+}
+function warnMultiReplicaReadiness(logger8) {
+  const { multiReplicaDeclared, warnings } = computeMultiReplicaReadiness();
+  if (!multiReplicaDeclared) return;
+  for (const message of warnings) {
+    logger8.warn(message, { phase: "multi_replica_readiness" });
+  }
+  logger8.warn(
+    "Multi-replica: agent run SSE and resume_stream are process-local; route a thread's follow-up runs to the replica streaming it (sticky routing) or share the stream/queue state",
+    { phase: "multi_replica_readiness", feature: "agent-run-sse" }
+  );
+}
+
 // src/controllers/health.ts
 async function getHealth(request, reply) {
   try {
@@ -2125,7 +2046,8 @@ async function getHealth(request, reply) {
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       uptime: process.uptime(),
       service: "lattice-gateway",
-      version: process.env.npm_package_version || "1.0.0"
+      version: process.env.npm_package_version || "1.0.0",
+      readiness: computeMultiReplicaReadiness()
     };
     return reply.send({
       success: true,
@@ -2846,7 +2768,7 @@ async function getToolConfigs(request, reply) {
 
 // src/controllers/data-query.ts
 import {
-  getStoreLattice as getStoreLattice3,
+  getStoreLattice as getStoreLattice4,
   metricsServerManager
 } from "@axiom-lattice/core";
 function getTenantId5(request) {
@@ -2879,7 +2801,7 @@ async function executeDataQuery(request, reply) {
         message: "Cannot provide both metrics and customSql. Use one query type only."
       };
     }
-    const storeLattice = getStoreLattice3("default", "metrics");
+    const storeLattice = getStoreLattice4("default", "metrics");
     const store = storeLattice.store;
     if (!body.serverKey) {
       reply.code(400);
@@ -2987,7 +2909,7 @@ async function executeSqlQuery(client, body, reply) {
 }
 
 // src/controllers/workflow-tracking.ts
-import { getStoreLattice as getStoreLattice4, agentInstanceManager as agentInstanceManager4, ThreadStatus as ThreadStatus2, abortWorkflowRun as signalAbort } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice5, agentInstanceManager as agentInstanceManager4, ThreadStatus as ThreadStatus2, abortWorkflowRun as signalAbort } from "@axiom-lattice/core";
 import { MessageChunkTypes as MessageChunkTypes2 } from "@axiom-lattice/protocols";
 function getTenantId6(request) {
   const userTenantId = request.user?.tenantId;
@@ -2996,7 +2918,7 @@ function getTenantId6(request) {
 }
 function getTrackingStore() {
   try {
-    const storeLattice = getStoreLattice4("default", "workflowTracking");
+    const storeLattice = getStoreLattice5("default", "workflowTracking");
     return storeLattice.store;
   } catch {
     return null;
@@ -3004,7 +2926,7 @@ function getTrackingStore() {
 }
 async function getDefinitionsFromAssistants(tenantId) {
   try {
-    const storeLattice = getStoreLattice4("default", "assistant");
+    const storeLattice = getStoreLattice5("default", "assistant");
     const assistantStore = storeLattice.store;
     const assistants = await assistantStore.getAllAssistants(tenantId);
     const results = [];
@@ -3084,7 +3006,7 @@ async function getAllWorkflowRuns(request, reply) {
     }
     const nameMap = {};
     try {
-      const asStoreLattice = getStoreLattice4("default", "assistant");
+      const asStoreLattice = getStoreLattice5("default", "assistant");
       const assistantStore = asStoreLattice.store;
       const assistants = await assistantStore.getAllAssistants(tenantId);
       for (const a of assistants) {
@@ -3137,7 +3059,7 @@ async function getInboxItems(request, reply) {
     }
     const nameMap = {};
     try {
-      const asStoreLattice = getStoreLattice4("default", "assistant");
+      const asStoreLattice = getStoreLattice5("default", "assistant");
       const assistantStore = asStoreLattice.store;
       const assistants = await assistantStore.getAllAssistants(tenantId);
       for (const a of assistants) {
@@ -3511,7 +3433,7 @@ async function abortWorkflowRun(request, reply) {
 }
 
 // src/controllers/personal-assistant.ts
-import { eventBus as eventBus2, getStoreLattice as getStoreLattice5, PersonalAssistantConfig } from "@axiom-lattice/core";
+import { eventBus as eventBus2, getStoreLattice as getStoreLattice6, PersonalAssistantConfig } from "@axiom-lattice/core";
 import { randomUUID as randomUUID3 } from "crypto";
 function getWorkspaceId2(request) {
   return request.headers["x-workspace-id"] || "default";
@@ -3527,13 +3449,13 @@ function getUserId3(request) {
   return userId;
 }
 function getLinkStore() {
-  return getStoreLattice5("default", "userTenantLink").store;
+  return getStoreLattice6("default", "userTenantLink").store;
 }
 function getAssistantStore() {
-  return getStoreLattice5("default", "assistant").store;
+  return getStoreLattice6("default", "assistant").store;
 }
 function getProjectStore() {
-  return getStoreLattice5("default", "project").store;
+  return getStoreLattice6("default", "project").store;
 }
 async function getLinkMeta(userId, tenantId) {
   const link = await getLinkStore().getLink(userId, tenantId);
@@ -3609,7 +3531,7 @@ async function deletePersonalAssistant(request, reply) {
     return reply.status(500).send({ success: false, message: "Failed to delete personal assistant" });
   }
   eventBus2.publish("assistant:deleted", { id: assistant.id, tenantId });
-  const threadStore = getStoreLattice5("default", "thread").store;
+  const threadStore = getStoreLattice6("default", "thread").store;
   try {
     const threads = await threadStore.getThreadsByAssistantId(tenantId, assistant.id);
     for (const t2 of threads) {
@@ -3635,25 +3557,14 @@ async function deletePersonalAssistant(request, reply) {
 
 // src/services/ExportImportService.ts
 import { ExportableEntityRegistry, DependencyResolver, IdRemapper, isBuiltInSkill } from "@axiom-lattice/core";
-import { randomUUID as randomUUID4 } from "crypto";
 import * as fs from "fs/promises";
 import * as os from "os";
 import * as path from "path";
 import * as tar from "tar";
 import * as zlib from "zlib";
-var exportJobs = /* @__PURE__ */ new Map();
-var JOB_TTL_MS = 60 * 60 * 1e3;
 var MAX_ARCHIVE_ENTRIES = 1e4;
 var MAX_ARCHIVE_FILE_BYTES = 100 * 1024 * 1024;
 var MAX_ARCHIVE_TOTAL_BYTES = 512 * 1024 * 1024;
-function cleanExpiredJobs() {
-  const now = Date.now();
-  for (const [id3, entry] of exportJobs) {
-    if (now - entry.createdAt > JOB_TTL_MS) {
-      exportJobs.delete(id3);
-    }
-  }
-}
 function archiveFileKey(entityType, entityId, relPath) {
   return `files/${entityType}/${entityId}/${relPath}`;
 }
@@ -3676,7 +3587,8 @@ var ExportImportService = class {
   }
   /**
    * Generate a full export (bundle + file content) for the given tenant and entity types.
-   * Stores the data in-memory and returns a jobId for download.
+   * The result is returned directly so the caller can pack and stream it in the same
+   * request, with no process-local job state that would break across Gateway replicas.
    */
   async export(tenantId, entityTypes, entityIds, context) {
     const { dependencyOrder, entities: rawEntities } = await this.resolveExportSelection(
@@ -3735,18 +3647,7 @@ var ExportImportService = class {
       dependencyOrder,
       _warning: "This file contains plaintext secrets (passwords, API keys, tokens). Store it securely and delete after import."
     };
-    const jobId = randomUUID4();
-    exportJobs.set(jobId, { data: { bundle, files }, tenantId, createdAt: Date.now() });
-    return { jobId, data: { bundle, files } };
-  }
-  /**
-   * Retrieve a previously generated export job data by jobId with tenant validation.
-   */
-  getExportJob(jobId, tenantId) {
-    cleanExpiredJobs();
-    const entry = exportJobs.get(jobId);
-    if (!entry || entry.tenantId !== tenantId) return void 0;
-    return entry.data;
+    return { bundle, files };
   }
   /**
    * Pack an ExportJobData into a tar.gz buffer.
@@ -4331,6 +4232,12 @@ function safeArchiveFilename(sourceTenantId) {
   const safeTenantId = sourceTenantId.replace(/[^A-Za-z0-9._-]/g, "_");
   return `tenant-export-${safeTenantId}.tar.gz`;
 }
+async function sendArchive(reply, data) {
+  const tarGz = await service.packTarGz(data);
+  reply.type("application/gzip");
+  reply.header("Content-Disposition", `attachment; filename="${safeArchiveFilename(data.bundle.sourceTenantId)}"`);
+  reply.send(tarGz);
+}
 function assertCompleteFile(file) {
   if (file.truncated) {
     throw new Error("Uploaded file was truncated because it exceeds the configured file size limit");
@@ -4418,30 +4325,14 @@ async function exportConfig(request, reply) {
       }
     });
   }
-  const { jobId, data } = await service.export(tenantId, entityTypes, entityIds, getContext(request));
-  return reply.send({
-    success: true,
-    data: {
-      jobId,
-      summary: Object.fromEntries(
-        Object.entries(data.bundle.entities).map(([type, entities]) => [type, entities.length])
-      )
-    }
-  });
+  const data = await service.export(tenantId, entityTypes, entityIds, getContext(request));
+  return sendArchive(reply, data);
 }
 async function exportConfigConfirm(request, reply) {
   const tenantId = resolveTenantId(request, request.params.tenantId);
   const { entityTypes, entityIds } = request.body;
-  const { jobId, data } = await service.export(tenantId, entityTypes, entityIds, getContext(request));
-  return reply.send({
-    success: true,
-    data: {
-      jobId,
-      summary: Object.fromEntries(
-        Object.entries(data.bundle.entities).map(([type, entities]) => [type, entities.length])
-      )
-    }
-  });
+  const data = await service.export(tenantId, entityTypes, entityIds, getContext(request));
+  return sendArchive(reply, data);
 }
 async function previewEntities(request, reply) {
   const tenantId = resolveTenantId(request, request.params.tenantId);
@@ -4464,18 +4355,6 @@ async function previewEntities(request, reply) {
     return reply.status(400).send({ success: false, message: err.message });
   }
 }
-async function downloadExport(request, reply) {
-  const tenantId = resolveTenantId(request, request.params.tenantId);
-  const data = service.getExportJob(request.params.jobId, tenantId);
-  if (!data) {
-    return reply.status(404).send({ success: false, message: "Export job not found or expired" });
-  }
-  const tarGz = await service.packTarGz(data);
-  const filename = safeArchiveFilename(data.bundle.sourceTenantId);
-  reply.type("application/gzip");
-  reply.header("Content-Disposition", `attachment; filename="${filename}"`);
-  return reply.send(tarGz);
-}
 async function importPreview(request, reply) {
   const tenantId = resolveTenantId(request, request.params.tenantId);
   try {
@@ -4805,77 +4684,6 @@ var triggerAgentTaskSchema = {
     }
   }
 };
-var updateConfigSchema = {
-  description: "Update gateway configuration",
-  tags: ["Configuration"],
-  summary: "Update Configuration",
-  body: {
-    type: "object",
-    properties: {
-      config: {
-        type: "object",
-        description: "Configuration object to update",
-        properties: {
-          port: { type: "number", description: "Server port" },
-          queueServiceType: {
-            type: "string",
-            enum: ["memory", "redis"],
-            description: "Queue service type"
-          },
-          redisUrl: { type: "string", description: "Redis URL" },
-          redisPassword: { type: "string", description: "Redis password" },
-          queueName: { type: "string", description: "Queue name" }
-        }
-      }
-    },
-    required: ["config"]
-  },
-  response: {
-    200: {
-      type: "object",
-      properties: {
-        success: { type: "boolean" },
-        message: { type: "string" },
-        data: { type: "object" }
-      }
-    },
-    400: {
-      type: "object",
-      properties: {
-        success: { type: "boolean" },
-        error: { type: "string" }
-      }
-    },
-    500: {
-      type: "object",
-      properties: {
-        success: { type: "boolean" },
-        error: { type: "string" }
-      }
-    }
-  }
-};
-var getConfigSchema = {
-  description: "Get current gateway configuration",
-  tags: ["Configuration"],
-  summary: "Get Configuration",
-  response: {
-    200: {
-      type: "object",
-      properties: {
-        success: { type: "boolean" },
-        data: { type: "object" }
-      }
-    },
-    500: {
-      type: "object",
-      properties: {
-        success: { type: "boolean" },
-        error: { type: "string" }
-      }
-    }
-  }
-};
 var getHealthSchema = {
   description: "Health check endpoint for monitoring and load balancer checks",
   tags: ["Health"],
@@ -4892,7 +4700,15 @@ var getHealthSchema = {
             timestamp: { type: "string" },
             uptime: { type: "number" },
             service: { type: "string" },
-            version: { type: "string" }
+            version: { type: "string" },
+            readiness: {
+              type: "object",
+              properties: {
+                multiReplicaDeclared: { type: "boolean" },
+                ok: { type: "boolean" },
+                warnings: { type: "array", items: { type: "string" } }
+              }
+            }
           }
         }
       }
@@ -5238,7 +5054,7 @@ import * as fs2 from "fs/promises";
 import * as path2 from "path";
 import { constants as fsConstants } from "fs";
 import * as os2 from "os";
-import { getStoreLattice as getStoreLattice6 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice7 } from "@axiom-lattice/core";
 import { SandboxFilesystem, FilesystemBackend } from "@axiom-lattice/core";
 import { getSandBoxManager as getSandBoxManager3 } from "@axiom-lattice/core";
 import { v4 as uuidv4 } from "uuid";
@@ -5291,7 +5107,7 @@ var RoomCoordinatorProvisioner = class {
 };
 
 // src/services/collaboration/RoomCoordinatorEnsurer.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 
 // src/services/collaboration/ProjectMutationMutex.ts
 import {
@@ -5332,7 +5148,7 @@ var RoomCoordinatorEnsurer = class {
   constructor(deps) {
     this.deps = deps;
     this.mutex = deps.mutationMutex ?? projectMutationMutex;
-    this.idFactory = deps.idFactory ?? randomUUID5;
+    this.idFactory = deps.idFactory ?? randomUUID4;
   }
   /**
    * Ensures the coordinator membership for one room.
@@ -5417,7 +5233,7 @@ var NoopRoomBindingLifecycle = class {
 
 // src/services/collaboration/WorkspacePublicRoomService.ts
 import { createHash } from "crypto";
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 import { WORKSPACE_PUBLIC_ROOM_PROJECT_PREFIX } from "@axiom-lattice/protocols";
 var PUBLIC_ROOM_PROJECT_NAME = "General";
 var PUBLIC_ROOM_PROJECT_DESCRIPTION = "Public room for everyone in the workspace";
@@ -5429,7 +5245,7 @@ var WorkspacePublicRoomService = class {
   /** Creates the service from explicitly injected stores and provisioners. */
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID6;
+    this.idFactory = deps.idFactory ?? randomUUID5;
   }
   /**
    * Returns the workspace's public room project and room, creating them on first call.
@@ -5618,13 +5434,13 @@ function createProjectCollaborationInitializer(deps) {
 var WorkspaceController = class {
   constructor(projectCollaboration) {
     this.projectCollaboration = projectCollaboration;
-    this.workspaceStore = getStoreLattice6("default", "workspace").store;
-    this.projectStore = getStoreLattice6("default", "project").store;
-    const roomStore = getStoreLattice6("default", "projectRoom").store;
-    const botMembershipStore = getStoreLattice6("default", "projectBotMembership").store;
-    const assistantStore = getStoreLattice6("default", "assistant").store;
-    const threadStore = getStoreLattice6("default", "thread").store;
-    const tenantStore = getStoreLattice6("default", "tenant").store;
+    this.workspaceStore = getStoreLattice7("default", "workspace").store;
+    this.projectStore = getStoreLattice7("default", "project").store;
+    const roomStore = getStoreLattice7("default", "projectRoom").store;
+    const botMembershipStore = getStoreLattice7("default", "projectBotMembership").store;
+    const assistantStore = getStoreLattice7("default", "assistant").store;
+    const threadStore = getStoreLattice7("default", "thread").store;
+    const tenantStore = getStoreLattice7("default", "tenant").store;
     const coordinatorProvisioner = new RoomCoordinatorProvisioner({
       getAssistantById: assistantStore.getAssistantById.bind(assistantStore),
       createAssistant: assistantStore.createAssistant.bind(assistantStore),
@@ -6594,7 +6410,7 @@ function registerWorkspaceRoutes(app2, projectCollaboration) {
 }
 
 // src/services/collaboration/ProjectAccessService.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 var ProjectCollaborationError = class extends Error {
   /** Creates a project collaboration error. */
   constructor(code, statusCode, message) {
@@ -6620,7 +6436,7 @@ var ProjectAccessService = class {
   /** Creates a project access service from explicitly injected stores. */
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID7;
+    this.idFactory = deps.idFactory ?? randomUUID6;
   }
   /** Returns the project and active membership when the user has the requested capability. */
   async requireProjectAccess(input) {
@@ -6786,10 +6602,10 @@ var ProjectAccessService = class {
 
 // src/controllers/database-configs.ts
 import {
-  getStoreLattice as getStoreLattice7,
+  getStoreLattice as getStoreLattice8,
   sqlDatabaseManager
 } from "@axiom-lattice/core";
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 function getTenantId8(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) {
@@ -6800,7 +6616,7 @@ function getTenantId8(request) {
 async function getDatabaseConfigList(request, reply) {
   const tenantId = getTenantId8(request);
   try {
-    const storeLattice = getStoreLattice7("default", "database");
+    const storeLattice = getStoreLattice8("default", "database");
     const store = storeLattice.store;
     const configs = await store.getAllConfigs(tenantId);
     console.log("Backend: getAllConfigs returned:", configs);
@@ -6831,7 +6647,7 @@ async function getDatabaseConfig(request, reply) {
   const tenantId = getTenantId8(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice7("default", "database");
+    const storeLattice = getStoreLattice8("default", "database");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -6857,7 +6673,7 @@ async function createDatabaseConfig(request, reply) {
   const tenantId = getTenantId8(request);
   const body = request.body;
   try {
-    const storeLattice = getStoreLattice7("default", "database");
+    const storeLattice = getStoreLattice8("default", "database");
     const store = storeLattice.store;
     const existing = await store.getConfigByKey(tenantId, body.key);
     if (existing) {
@@ -6867,7 +6683,7 @@ async function createDatabaseConfig(request, reply) {
         message: "Database configuration with this key already exists"
       };
     }
-    const id3 = body.id || randomUUID8();
+    const id3 = body.id || randomUUID7();
     const config = await store.createConfig(tenantId, id3, body);
     try {
       sqlDatabaseManager.registerDatabase(tenantId, config.key, config.config);
@@ -6893,7 +6709,7 @@ async function updateDatabaseConfig(request, reply) {
   const { key } = request.params;
   const updates = request.body;
   try {
-    const storeLattice = getStoreLattice7("default", "database");
+    const storeLattice = getStoreLattice8("default", "database");
     const store = storeLattice.store;
     const existing = await store.getConfigByKey(tenantId, key);
     if (!existing) {
@@ -6934,7 +6750,7 @@ async function deleteDatabaseConfig(request, reply) {
   const tenantId = getTenantId8(request);
   const { keyOrId } = request.params;
   try {
-    const storeLattice = getStoreLattice7("default", "database");
+    const storeLattice = getStoreLattice8("default", "database");
     const store = storeLattice.store;
     console.log("Delete request - keyOrId:", keyOrId);
     let config = await store.getConfigByKey(tenantId, keyOrId);
@@ -6983,7 +6799,7 @@ async function testDatabaseConnection(request, reply) {
   const tenantId = getTenantId8(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice7("default", "database");
+    const storeLattice = getStoreLattice8("default", "database");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7068,11 +6884,11 @@ function registerDatabaseConfigRoutes(app2) {
 
 // src/controllers/metrics-configs.ts
 import {
-  getStoreLattice as getStoreLattice8,
+  getStoreLattice as getStoreLattice9,
   metricsServerManager as metricsServerManager2,
   SemanticMetricsClient as SemanticMetricsClient2
 } from "@axiom-lattice/core";
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 function getTenantId9(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) {
@@ -7083,7 +6899,7 @@ function getTenantId9(request) {
 async function getMetricsServerConfigList(request, reply) {
   const tenantId = getTenantId9(request);
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const configs = await store.getAllConfigs(tenantId);
     return {
@@ -7110,7 +6926,7 @@ async function getMetricsServerConfig(request, reply) {
   const tenantId = getTenantId9(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7136,7 +6952,7 @@ async function createMetricsServerConfig(request, reply) {
   const tenantId = getTenantId9(request);
   const body = request.body;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const existing = await store.getConfigByKey(tenantId, body.key);
     if (existing) {
@@ -7153,7 +6969,7 @@ async function createMetricsServerConfig(request, reply) {
         message: "selectedDataSources is required for semantic metrics servers"
       };
     }
-    const id3 = body.id || randomUUID9();
+    const id3 = body.id || randomUUID8();
     const configData = {
       key: body.key,
       name: body.name,
@@ -7188,7 +7004,7 @@ async function updateMetricsServerConfig(request, reply) {
   const { key } = request.params;
   const updates = request.body;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const existing = await store.getConfigByKey(tenantId, key);
     if (!existing) {
@@ -7238,7 +7054,7 @@ async function deleteMetricsServerConfig(request, reply) {
   const tenantId = getTenantId9(request);
   const { keyOrId } = request.params;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     let config = await store.getConfigByKey(tenantId, keyOrId);
     let configKey = keyOrId;
@@ -7285,7 +7101,7 @@ async function testMetricsServerConnection(request, reply) {
   const tenantId = getTenantId9(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7336,7 +7152,7 @@ async function listAvailableMetrics(request, reply) {
   const tenantId = getTenantId9(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7375,7 +7191,7 @@ async function queryMetricsData(request, reply) {
   const { key } = request.params;
   const { metricName, startTime, endTime, step, labels } = request.body;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7422,7 +7238,7 @@ async function getDataSources(request, reply) {
   const tenantId = getTenantId9(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7463,7 +7279,7 @@ async function getDatasourceMetrics(request, reply) {
   const tenantId = getTenantId9(request);
   const { key, datasourceId } = request.params;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7501,7 +7317,7 @@ async function querySemanticMetrics(request, reply) {
   const { key } = request.params;
   const body = request.body;
   try {
-    const storeLattice = getStoreLattice8("default", "metrics");
+    const storeLattice = getStoreLattice9("default", "metrics");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7810,13 +7626,13 @@ function connectionRoutes(fastify2) {
 
 // src/controllers/mcp-configs.ts
 import {
-  getStoreLattice as getStoreLattice9,
+  getStoreLattice as getStoreLattice10,
   getReplicaId as getReplicaId2,
   mcpManager,
   McpLatticeManager,
   convertToConnection
 } from "@axiom-lattice/core";
-import { randomUUID as randomUUID10 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 
 // src/services/mcpConfigSync.ts
 var MCP_CONFIG_CHANGED_TOPIC = "mcp-config-changed";
@@ -7864,7 +7680,7 @@ function getTenantId10(request) {
 function broadcastMcpConfigChanged(tenantId, serverKey) {
   if (!tenantId || !serverKey) return;
   try {
-    const outbox = getStoreLattice9("default", "outbox").store;
+    const outbox = getStoreLattice10("default", "outbox").store;
     void publishMcpConfigChanged(outbox, getReplicaId2(), tenantId, serverKey);
   } catch {
   }
@@ -7872,7 +7688,7 @@ function broadcastMcpConfigChanged(tenantId, serverKey) {
 async function getMcpServerConfigList(request, reply) {
   const tenantId = getTenantId10(request);
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const configs = await store.getAllConfigs(tenantId);
     return {
@@ -7899,7 +7715,7 @@ async function getMcpServerConfig(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -7925,7 +7741,7 @@ async function createMcpServerConfig(request, reply) {
   const tenantId = getTenantId10(request);
   const body = request.body;
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const existing = await store.getConfigByKey(tenantId, body.key);
     if (existing) {
@@ -7935,7 +7751,7 @@ async function createMcpServerConfig(request, reply) {
         message: "MCP server configuration with this key already exists"
       };
     }
-    const id3 = body.id || randomUUID10();
+    const id3 = body.id || randomUUID9();
     const config = await store.createConfig(tenantId, id3, body);
     try {
       await connectAndRegisterTools(config);
@@ -7966,7 +7782,7 @@ async function updateMcpServerConfig(request, reply) {
   const { key } = request.params;
   const updates = request.body;
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const existing = await store.getConfigByKey(tenantId, key);
     if (!existing) {
@@ -8036,7 +7852,7 @@ async function deleteMcpServerConfig(request, reply) {
   const tenantId = getTenantId10(request);
   const { keyOrId } = request.params;
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     let config = await store.getConfigByKey(tenantId, keyOrId);
     let configKey = keyOrId;
@@ -8084,7 +7900,7 @@ async function testMcpServerConnection(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -8132,7 +7948,7 @@ async function listMcpServerTools(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -8173,7 +7989,7 @@ async function connectMcpServer(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -8195,7 +8011,7 @@ async function connectMcpServer(request, reply) {
     };
   } catch (error) {
     console.error("Failed to connect MCP server:", error);
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (config) {
@@ -8212,7 +8028,7 @@ async function disconnectMcpServer(request, reply) {
   const tenantId = getTenantId10(request);
   const { key } = request.params;
   try {
-    const storeLattice = getStoreLattice9("default", "mcp");
+    const storeLattice = getStoreLattice10("default", "mcp");
     const store = storeLattice.store;
     const config = await store.getConfigByKey(tenantId, key);
     if (!config) {
@@ -8360,6 +8176,17 @@ var UiResourceResolver = class {
   async invalidate(tenantId, ref) {
     await this.deps.store.delete(this.fullKey(tenantId, ref));
   }
+  /**
+   * Evict every cached plugin UI resource for a tenant.
+   *
+   * @param tenantId Tenant whose plugin UI resources to drop.
+   * @remarks Called when a tenant's plugin catalog changes so an edited
+   * `ui/*.html` is re-fetched instead of being served from the TTL cache
+   * (which is keyed by ref identity, not content).
+   */
+  async invalidateTenantPlugins(tenantId) {
+    await this.deps.store.deleteByPrefix(`${tenantId}\0plugin\0`);
+  }
   async fetchAndCache(tenantId, ref, key, cached) {
     try {
       const fresh = ref.kind === "mcp" ? await this.deps.fetchMcp(tenantId, ref.serverKey, ref.resourceUri) : await this.deps.fetchPlugin(tenantId, ref.pluginType, ref.resource);
@@ -8684,12 +8511,17 @@ function createDefaultPluginBackend() {
     }
   };
 }
+var uiResourceResolverSingleton;
+function getMcpUiResourceResolver() {
+  return uiResourceResolverSingleton;
+}
 function resolveMcpAppDeps(pluginBackend = createDefaultPluginBackend()) {
   const uiResourceResolver = new UiResourceResolver({
     store: new InMemoryMcpUiResourceCacheStore(),
     fetchMcp: (tenantId, serverKey, resourceUri) => mcpManager2.readUiResource(tenantId, serverKey, resourceUri),
     fetchPlugin: (tenantId, pluginType, resource) => fetchPluginUiResource(pluginBackend, tenantId, pluginType, resource)
   });
+  uiResourceResolverSingleton = uiResourceResolver;
   return {
     resolveUiResource: (tenantId, ref) => uiResourceResolver.resolve(tenantId, ref),
     callTool: (tenantId, ref, name, args, context) => ref.kind === "mcp" ? mcpManager2.callServerTool(tenantId, ref.serverKey, name, args) : callPluginTool(pluginBackend, tenantId, ref, name, args, context),
@@ -8741,13 +8573,13 @@ function registerMcpAppRoutes(fastify2) {
 }
 
 // src/controllers/eval.ts
-import { getStoreLattice as getStoreLattice11, hasModelLatticeForTenant as hasModelLatticeForTenant2, modelLatticeManager as modelLatticeManager2 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice12, hasModelLatticeForTenant as hasModelLatticeForTenant2, modelLatticeManager as modelLatticeManager2 } from "@axiom-lattice/core";
 import { v4 as uuidv43 } from "uuid";
 
 // src/services/eval-runner.ts
 import { EventEmitter } from "events";
 import {
-  getStoreLattice as getStoreLattice10,
+  getStoreLattice as getStoreLattice11,
   hasModelLatticeForTenant,
   listModelLatticesForTenant,
   LatticeEvalProject
@@ -9078,7 +8910,7 @@ var EvalRunner = class {
     return ctx !== void 0 && !ctx.terminal.workerSettled && (tenantId === void 0 || ctx.tenantId === tenantId);
   }
   getEvalStore() {
-    return getStoreLattice10("default", "eval").store;
+    return getStoreLattice11("default", "eval").store;
   }
   releaseProjectLease(leaseKey, leaseToken) {
     if (this.projectLeases.get(leaseKey) === leaseToken) this.projectLeases.delete(leaseKey);
@@ -9095,7 +8927,7 @@ function getTenantId11(request) {
   return request.headers["x-tenant-id"] || "default";
 }
 function getEvalStore() {
-  return getStoreLattice11("default", "eval").store;
+  return getStoreLattice12("default", "eval").store;
 }
 async function getOwnedSuite(store, tenantId, projectId, suiteId) {
   const project = await store.getProjectById(tenantId, projectId);
@@ -9622,11 +9454,11 @@ data: ${JSON.stringify(event.data)}
 }
 
 // src/controllers/users.ts
-import { getStoreLattice as getStoreLattice12 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice13 } from "@axiom-lattice/core";
 import { v4 as uuidv44 } from "uuid";
 var UsersController = class {
   constructor() {
-    this.userStore = getStoreLattice12("default", "user").store;
+    this.userStore = getStoreLattice13("default", "user").store;
   }
   async listUsers(request, reply) {
     const { email } = request.query;
@@ -9704,11 +9536,11 @@ function registerUserRoutes(app2) {
 }
 
 // src/controllers/tenants.ts
-import { getStoreLattice as getStoreLattice13 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice14 } from "@axiom-lattice/core";
 import { v4 as uuidv45 } from "uuid";
 var TenantsController = class {
   constructor() {
-    this.tenantStore = getStoreLattice13("default", "tenant").store;
+    this.tenantStore = getStoreLattice14("default", "tenant").store;
   }
   // ==================== Tenant CRUD ====================
   async listTenants(request, reply) {
@@ -9772,7 +9604,7 @@ function registerTenantRoutes(app2) {
 }
 
 // src/controllers/auth.ts
-import { getStoreLattice as getStoreLattice14 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice15 } from "@axiom-lattice/core";
 import { v4 as uuidv46 } from "uuid";
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
 var defaultAuthConfig = {
@@ -9782,9 +9614,9 @@ var defaultAuthConfig = {
 };
 var AuthController = class {
   constructor(config = {}) {
-    this.userStore = getStoreLattice14("default", "user").store;
-    this.tenantStore = getStoreLattice14("default", "tenant").store;
-    this.userTenantLinkStore = getStoreLattice14("default", "userTenantLink").store;
+    this.userStore = getStoreLattice15("default", "user").store;
+    this.tenantStore = getStoreLattice15("default", "tenant").store;
+    this.userTenantLinkStore = getStoreLattice15("default", "userTenantLink").store;
     this.config = { ...defaultAuthConfig, ...config };
   }
   async register(request, reply) {
@@ -9943,7 +9775,7 @@ var AuthController = class {
       const linkMeta = link?.metadata || {};
       let personalAssistant = null;
       if (linkMeta.personalAssistantId) {
-        const assistantStore = getStoreLattice14("default", "assistant").store;
+        const assistantStore = getStoreLattice15("default", "assistant").store;
         const exists = await assistantStore.hasAssistant(tenantId, linkMeta.personalAssistantId);
         if (exists) {
           personalAssistant = {
@@ -10635,11 +10467,11 @@ function registerChannelRoutes(app2, dependencies) {
 }
 
 // src/controllers/channel-installations.ts
-import { randomUUID as randomUUID11 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 import {
   descriptorDataValue
 } from "@axiom-lattice/protocols";
-import { getStoreLattice as getStoreLattice15 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice16 } from "@axiom-lattice/core";
 var _adapterRegistry;
 var _router;
 function setChannelControllerDeps(deps) {
@@ -10770,7 +10602,7 @@ function snapshotPlainObject(value) {
   }
 }
 async function getInstallationStore() {
-  const store = getStoreLattice15("default", "channelInstallation").store;
+  const store = getStoreLattice16("default", "channelInstallation").store;
   if (store) return store;
   const { PostgreSQLChannelInstallationStore } = await import("@axiom-lattice/pg-stores");
   const databaseUrl = process.env.DATABASE_URL;
@@ -10846,7 +10678,7 @@ async function createChannelInstallation(request, reply) {
       };
     }
     const store = await getInstallationStore();
-    const installationId = randomUUID11();
+    const installationId = randomUUID10();
     const createInput = {
       channel: body.channel,
       name: body.name,
@@ -11089,7 +10921,7 @@ import {
   DuplicateChannelBindingSubjectError,
   descriptorDataValue as descriptorDataValue2
 } from "@axiom-lattice/protocols";
-import { getBindingRegistry, getStoreLattice as getStoreLattice16 } from "@axiom-lattice/core";
+import { getBindingRegistry, getStoreLattice as getStoreLattice17 } from "@axiom-lattice/core";
 function getTenantId13(request) {
   const userTenantId = request.user?.tenantId;
   if (typeof userTenantId === "string" && userTenantId) return userTenantId;
@@ -11147,7 +10979,7 @@ function snapshotPublicUpdate(value) {
   return body;
 }
 function getInstallationStore2() {
-  return getStoreLattice16("default", "channelInstallation").store;
+  return getStoreLattice17("default", "channelInstallation").store;
 }
 async function isValidPublicInstallation(tenantId, channelInstallationId, channel) {
   const installation = await getInstallationStore2().getInstallationById(channelInstallationId);
@@ -11647,7 +11479,7 @@ var registerSTTRoutes = (app2) => {
 };
 
 // src/controllers/local-a2a.ts
-import { getStoreLattice as getStoreLattice17 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice18 } from "@axiom-lattice/core";
 import {
   AgentType as AgentType2
 } from "@axiom-lattice/protocols";
@@ -11663,7 +11495,7 @@ function getLocalRuntime(assistant) {
   return graphDefinition.localRuntime;
 }
 async function getLocalA2AAssistants(tenantId) {
-  const storeLattice = getStoreLattice17("default", "assistant");
+  const storeLattice = getStoreLattice18("default", "assistant");
   const assistants = await storeLattice.store.getAllAssistants(tenantId);
   const results = [];
   for (const assistant of assistants) {
@@ -11675,7 +11507,7 @@ async function getLocalA2AAssistants(tenantId) {
   return results;
 }
 async function getLocalA2AAssistant(tenantId, assistantId) {
-  const storeLattice = getStoreLattice17("default", "assistant");
+  const storeLattice = getStoreLattice18("default", "assistant");
   const assistant = await storeLattice.store.getAssistantById(tenantId, assistantId);
   if (!assistant) return null;
   const runtime = getLocalRuntime(assistant);
@@ -11806,7 +11638,7 @@ async function getLocalA2ATemplates(_request, reply) {
 }
 
 // src/routes/a2a-test-connection.ts
-import { randomUUID as randomUUID12 } from "crypto";
+import { randomUUID as randomUUID11 } from "crypto";
 function describeTestConnectionError(error, agentCardUrl) {
   if (!(error instanceof Error)) {
     return `Failed to fetch agent card from ${agentCardUrl}: ${String(error)}`;
@@ -11846,7 +11678,7 @@ async function ensureLocalRuntimeForConnectionTest(localRuntime, agentCardUrl) {
     return { error: portValidation.error };
   }
   const state = await localA2AService.startProvider(
-    `test-${randomUUID12()}`,
+    `test-${randomUUID11()}`,
     testRuntime
   );
   if (state.status === "running") return { runtimeId: state.runtimeId };
@@ -11925,7 +11757,7 @@ import {
   createTrustedAgentMessageDispatcher,
   executionAuthorityRegistry,
   getReplicaId as getReplicaId6,
-  getStoreLattice as getStoreLattice18,
+  getStoreLattice as getStoreLattice19,
   hasModelLatticeForTenant as hasModelLatticeForTenant3,
   ManagedTaskStartError,
   modelLatticeManager as modelLatticeManager3,
@@ -12261,7 +12093,7 @@ function snapshotEnsureInput(input) {
 import { createHash as createHash3 } from "crypto";
 
 // src/services/collaboration/ProjectTaskExecutionService.ts
-import { randomUUID as randomUUID13 } from "crypto";
+import { randomUUID as randomUUID12 } from "crypto";
 import {
   createTaskRunBridge,
   ThreadStatus as ThreadStatus3
@@ -12724,7 +12556,7 @@ var ProjectTaskExecutionService = class {
     return current;
   }
   async dispatchRun(task, thread, mode, rosterExempt, signal, options) {
-    const messageId = (this.options.idFactory ?? randomUUID13)();
+    const messageId = (this.options.idFactory ?? randomUUID12)();
     if (signal?.aborted) return this.compensateCancellation(task, thread, messageId, false);
     const armed = await this.armAndEnqueue(task, thread, mode, messageId, rosterExempt, signal, options);
     if (armed.cancelled) return this.cancelSettlement(armed.settlement, task, thread, messageId, false);
@@ -12781,7 +12613,7 @@ var ProjectTaskExecutionService = class {
    * phantom in-progress run is left behind.
    */
   async enqueueDetached(task, thread, mode, rosterExempt, options) {
-    const messageId = (this.options.idFactory ?? randomUUID13)();
+    const messageId = (this.options.idFactory ?? randomUUID12)();
     const armed = await this.armAndEnqueue(task, thread, mode, messageId, rosterExempt, void 0, options);
     void armed.settlement.promise.catch(() => void 0);
     if (!armed.queued) {
@@ -14251,7 +14083,7 @@ import { createHmac as createHmac3 } from "crypto";
 import { z as z5, ZodError as ZodError2 } from "zod";
 
 // src/services/agent-web-app/AgentWebAppRuntimeService.ts
-import { createHash as createHash4, randomUUID as randomUUID14 } from "crypto";
+import { createHash as createHash4, randomUUID as randomUUID13 } from "crypto";
 import { MessageChunkTypes as MessageChunkTypes3, parseAgentWebAppGenUIBlock, buildAffinityMissChunk as buildAffinityMissChunk2 } from "@axiom-lattice/protocols";
 import { getReplicaId as getReplicaId3, getThreadRunOwner as getThreadRunOwner2 } from "@axiom-lattice/core";
 function isRecord2(value) {
@@ -14470,7 +14302,7 @@ ${formatFileRefsSection(refs)}` : input.content;
     const userDigest = createHash4("sha256").update(userId, "utf8").digest("hex");
     const contentDigest = createHash4("sha256").update(file.bytes).digest("hex");
     const displayName = file.name;
-    const physicalName = `${randomUUID14()}-${sanitizePhysicalFilename(file.name)}`;
+    const physicalName = `${randomUUID13()}-${sanitizePhysicalFilename(file.name)}`;
     const saved = await this.deps.saveProjectFile({
       tenantId: runtime.webApp.tenantId,
       workspaceId: runtime.project.workspaceId,
@@ -14622,7 +14454,7 @@ ${formatFileRefsSection(refs)}` : input.content;
     const thread = await this.deps.threadStore.createThread(
       runtime.webApp.tenantId,
       runtime.webApp.assistantId,
-      randomUUID14(),
+      randomUUID13(),
       { metadata: this.metadata(runtime, userId, normalizeLabel(rawLabel)) }
     );
     return toRuntimeThread(thread);
@@ -15884,7 +15716,7 @@ function registerCapabilityBundleRoutes(app2, controller) {
 import { ZodError as ZodError3 } from "zod";
 
 // src/services/model-provider/ModelProviderService.ts
-import { randomUUID as randomUUID15 } from "crypto";
+import { randomUUID as randomUUID14 } from "crypto";
 import { toModelKey } from "@axiom-lattice/protocols";
 import {
   assertSafeUpstreamUrl,
@@ -16102,7 +15934,7 @@ var unsafeReasonToErrorCode = {
 var ModelProviderService = class {
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? (() => randomUUID15());
+    this.idFactory = deps.idFactory ?? (() => randomUUID14());
   }
   /**
    * List the tenant's provider configurations.
@@ -17167,12 +16999,12 @@ async function handleModelProviderChanged(payload, reconcile) {
 }
 
 // src/services/collaboration/ProjectRoomService.ts
-import { randomUUID as randomUUID16 } from "crypto";
+import { randomUUID as randomUUID15 } from "crypto";
 var ProjectRoomService = class {
   /** Creates a project room service from explicitly injected collaborators. */
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID16;
+    this.idFactory = deps.idFactory ?? randomUUID15;
   }
   /**
    * Authorizes read access and ensures the project's main room.
@@ -17232,7 +17064,7 @@ var ProjectRoomService = class {
 };
 
 // src/services/collaboration/ProjectMembershipService.ts
-import { randomUUID as randomUUID17 } from "crypto";
+import { randomUUID as randomUUID16 } from "crypto";
 var ProjectMembershipServiceError = class extends Error {
   constructor(code, statusCode, message) {
     super(message);
@@ -17248,7 +17080,7 @@ function isMembershipConflict(error) {
 var ProjectMembershipService = class {
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID17;
+    this.idFactory = deps.idFactory ?? randomUUID16;
     this.mutationMutex = deps.projectMutationMutex ?? projectMutationMutex;
   }
   async list(actor3) {
@@ -17382,7 +17214,7 @@ var ProjectMembershipService = class {
 };
 
 // src/services/collaboration/ProjectRosterService.ts
-import { randomUUID as randomUUID18 } from "crypto";
+import { randomUUID as randomUUID17 } from "crypto";
 var ProjectRosterServiceError = class extends Error {
   /** Creates a stable roster service error. */
   constructor(code, statusCode, message) {
@@ -17401,7 +17233,7 @@ var ProjectRosterService = class {
   /** Creates a roster service from explicitly injected collaborators. */
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID18;
+    this.idFactory = deps.idFactory ?? randomUUID17;
     this.mutationMutex = deps.projectMutationMutex ?? projectMutationMutex;
   }
   /**
@@ -17508,7 +17340,7 @@ var ProjectRosterService = class {
     const agent = (await this.deps.agents.list(actor3.tenantId, actor3.userId)).find((item) => item.assistantId === assistantId);
     if (!agent || agent.ownerUserId !== void 0) throw new ProjectRosterServiceError("ASSISTANT_NOT_FOUND", 404, "Agent not found");
     const room = await this.deps.roomStore.ensureMainRoom({
-      id: randomUUID18(),
+      id: randomUUID17(),
       tenantId: actor3.tenantId,
       workspaceId: project.workspaceId,
       projectId: actor3.projectId,
@@ -17852,7 +17684,7 @@ function virtualPublicProjectBot(project, room, agent, mentionName, now) {
 }
 
 // src/services/collaboration/RoomMessageService.ts
-import { createHash as createHash6, randomUUID as randomUUID19 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID18 } from "crypto";
 
 // src/services/collaboration/ProjectBotMembershipSnapshot.ts
 import { snapshotExactRecord as snapshotExactRecord5 } from "@axiom-lattice/protocols";
@@ -17941,7 +17773,7 @@ var RoomMessageService = class {
   constructor(deps, options = {}) {
     this.deps = deps;
     this.idempotentOutcomes = /* @__PURE__ */ new Map();
-    this.idFactory = deps.idFactory ?? randomUUID19;
+    this.idFactory = deps.idFactory ?? randomUUID18;
     const limit = options.idempotentOutcomeLimit ?? 1e3;
     if (!Number.isSafeInteger(limit) || limit < 1) throw new RangeError("idempotentOutcomeLimit must be a positive safe integer");
     this.idempotentOutcomeLimit = limit;
@@ -18227,7 +18059,7 @@ import { ZodError as ZodError4 } from "zod";
 import { toProjectRoomPublicMessage } from "@axiom-lattice/protocols";
 
 // src/services/collaboration/RoomInterruptService.ts
-import { randomUUID as randomUUID20 } from "crypto";
+import { randomUUID as randomUUID19 } from "crypto";
 var RESUMABLE_TASK_INTERRUPT_CODES = /* @__PURE__ */ new Set([
   "PROJECT_TASK_NOT_RESUMABLE",
   "PROJECT_TASK_NOT_READY",
@@ -18248,7 +18080,7 @@ var RoomInterruptService = class {
   /** Creates the service from explicitly injected stores and dispatcher. */
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID20;
+    this.idFactory = deps.idFactory ?? randomUUID19;
   }
   /** Resolves a pending clarify interrupt with no answers. */
   async skip(input) {
@@ -18572,7 +18404,7 @@ async function execute(reply, operation) {
 }
 
 // src/routes/cospace.ts
-import { randomUUID as randomUUID21 } from "crypto";
+import { randomUUID as randomUUID20 } from "crypto";
 import { ZodError as ZodError6 } from "zod";
 import {
   generateDirectHumanProjectId,
@@ -18606,7 +18438,7 @@ async function computeUnread(deps, tenantId, userId, roomId, lastMessage) {
   });
 }
 function registerCoSpaceRoutes(app2, deps) {
-  const idFactory = deps.idFactory ?? (() => randomUUID21());
+  const idFactory = deps.idFactory ?? (() => randomUUID20());
   app2.get(
     "/api/workspaces/:workspaceId/rooms",
     async (request, reply) => {
@@ -19573,7 +19405,7 @@ function exactValues(value, required, optional = []) {
 }
 
 // src/services/collaboration/CoordinatorWakeNotifier.ts
-import { randomUUID as randomUUID22 } from "crypto";
+import { randomUUID as randomUUID21 } from "crypto";
 import {
   snapshotExactRecord as snapshotExactRecord7
 } from "@axiom-lattice/protocols";
@@ -19589,7 +19421,7 @@ var CoordinatorWakeNotifier = class {
     this.accepted = /* @__PURE__ */ new Set();
     this.maxPending = deps.maxPending ?? 1024;
     if (!Number.isSafeInteger(this.maxPending) || this.maxPending < 1) throw new RangeError("maxPending must be a positive safe integer");
-    this.idFactory = deps.idFactory ?? randomUUID22;
+    this.idFactory = deps.idFactory ?? randomUUID21;
   }
   /** Admits one notification without awaiting any store or dispatch operation. */
   handle(value, anchorMessageId) {
@@ -21259,7 +21091,7 @@ function isRecord3(value) {
 import { taskLifecycleNotifier } from "@axiom-lattice/core";
 
 // src/services/collaboration/ProjectRoomEventBroker.ts
-import { randomUUID as randomUUID23 } from "crypto";
+import { randomUUID as randomUUID22 } from "crypto";
 import {
   parseProjectRoomEventId,
   ProjectRoomBrokerCapacityError,
@@ -21290,7 +21122,7 @@ var ProjectRoomEventBroker = class {
     this.subscriberCount = 0;
     this.usageClock = 0;
     this.closed = false;
-    this.epoch = options.epoch ?? randomUUID23();
+    this.epoch = options.epoch ?? randomUUID22();
     if (!UUID_PATTERN.test(this.epoch)) {
       throw new TypeError("Project Room event epoch must be a lowercase canonical UUID");
     }
@@ -22916,25 +22748,25 @@ async function transferGovernedDispatchOwner(task, options, deps) {
 function broadcastModelProviderChanged(tenantId, providerId2) {
   if (!tenantId) return;
   try {
-    const outbox = getStoreLattice18("default", "outbox").store;
+    const outbox = getStoreLattice19("default", "outbox").store;
     void publishModelProviderChanged(outbox, getReplicaId6(), tenantId, providerId2);
   } catch {
   }
 }
 var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
-  const webAppStore = getStoreLattice18("default", "agentWebApp").store;
-  const assistantStore = getStoreLattice18("default", "assistant").store;
-  const projectStore = getStoreLattice18("default", "project").store;
-  const projectMembershipStore = getStoreLattice18("default", "projectMembership").store;
-  const userTenantLinkStore = getStoreLattice18("default", "userTenantLink").store;
-  const projectRoomStore = getStoreLattice18("default", "projectRoom").store;
-  const projectBotMembershipStore = getStoreLattice18("default", "projectBotMembership").store;
-  const projectRoomMessageStore = getStoreLattice18("default", "projectRoomMessage").store;
-  const projectRoomReadStateStore = getStoreLattice18("default", "projectRoomReadState").store;
-  const userPushSubscriptionStore = getStoreLattice18("default", "userPushSubscription").store;
-  const threadStore = getStoreLattice18("default", "thread").store;
-  const taskStore = getStoreLattice18("default", "task").store;
-  const taskWorkItemStore = getStoreLattice18("default", "taskWorkItem").store;
+  const webAppStore = getStoreLattice19("default", "agentWebApp").store;
+  const assistantStore = getStoreLattice19("default", "assistant").store;
+  const projectStore = getStoreLattice19("default", "project").store;
+  const projectMembershipStore = getStoreLattice19("default", "projectMembership").store;
+  const userTenantLinkStore = getStoreLattice19("default", "userTenantLink").store;
+  const projectRoomStore = getStoreLattice19("default", "projectRoom").store;
+  const projectBotMembershipStore = getStoreLattice19("default", "projectBotMembership").store;
+  const projectRoomMessageStore = getStoreLattice19("default", "projectRoomMessage").store;
+  const projectRoomReadStateStore = getStoreLattice19("default", "projectRoomReadState").store;
+  const userPushSubscriptionStore = getStoreLattice19("default", "userPushSubscription").store;
+  const threadStore = getStoreLattice19("default", "thread").store;
+  const taskStore = getStoreLattice19("default", "task").store;
+  const taskWorkItemStore = getStoreLattice19("default", "taskWorkItem").store;
   const projectTaskEnabled = options.projectTaskEnabled ?? process.env.AXIOM_PROJECT_TASK_EXECUTION_ENABLED !== "false";
   const accessService = new ProjectAccessService({ projectStore, membershipStore: projectMembershipStore, userTenantLinkStore });
   const realtimeMode = resolveProjectRoomRealtimeMode();
@@ -23000,7 +22832,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     updateAssistant: assistantStore.updateAssistant.bind(assistantStore)
   });
   const resolveCoordinatorMentionName = async (tenantId) => {
-    const tenant2 = await getStoreLattice18("default", "tenant").store.getTenantById(tenantId);
+    const tenant2 = await getStoreLattice19("default", "tenant").store.getTenantById(tenantId);
     const value = tenant2?.metadata?.coordinatorMentionName;
     return typeof value === "string" && value.length > 0 ? value : void 0;
   };
@@ -23104,7 +22936,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     });
   }
   if (projectTaskComposition) app2.addHook("onClose", async () => projectTaskComposition.lease.release());
-  const taskThreadService = projectTaskComposition?.lease.runtime.threads ?? new ProjectTaskThreadService({ threads: threadStore, idFactory: randomUUID24 });
+  const taskThreadService = projectTaskComposition?.lease.runtime.threads ?? new ProjectTaskThreadService({ threads: threadStore, idFactory: randomUUID23 });
   const taskLifecycle = projectTaskComposition?.lease.runtime.lifecycle ?? createTaskLifecycleService({ taskStore, workItemStore: taskWorkItemStore });
   const reassignmentAuthorizer = createProjectTaskReassignmentAuthorizer(
     new ProjectTaskOwnerPolicy(projectBotMembershipStore),
@@ -23187,7 +23019,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     readStateService,
     interruptService: roomInterruptService,
     userDirectory: {
-      getUserById: (id3) => getStoreLattice18("default", "user").store.getUserById(id3).then((u) => u ? { name: u.name } : null)
+      getUserById: (id3) => getStoreLattice19("default", "user").store.getUserById(id3).then((u) => u ? { name: u.name } : null)
     }
   });
   registerProjectRosterRoutes(app2, { service: rosterService });
@@ -23198,7 +23030,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       createProject: projectStore.createProject.bind(projectStore)
     },
     workspaceStore: {
-      getWorkspaceById: (tenantId, id3) => getStoreLattice18("default", "workspace").store.getWorkspaceById(tenantId, id3)
+      getWorkspaceById: (tenantId, id3) => getStoreLattice19("default", "workspace").store.getWorkspaceById(tenantId, id3)
     },
     membershipStore: {
       list: projectMembershipStore.list.bind(projectMembershipStore),
@@ -23221,7 +23053,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       getUsersByTenant: userTenantLinkStore.getUsersByTenant.bind(userTenantLinkStore)
     },
     userStore: {
-      getUserById: (id3) => getStoreLattice18("default", "user").store.getUserById(id3).then((u) => u ? { id: u.id, name: u.name, email: u.email } : null)
+      getUserById: (id3) => getStoreLattice19("default", "user").store.getUserById(id3).then((u) => u ? { id: u.id, name: u.name, email: u.email } : null)
     },
     assistantStore: {
       getAssistantById: assistantStore.getAssistantById.bind(assistantStore),
@@ -23243,11 +23075,11 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     }
   });
   registerCapabilityBundleRoutes(app2, new CapabilityBundleController({
-    bundleStore: getStoreLattice18("default", "capabilityBundle").store,
+    bundleStore: getStoreLattice19("default", "capabilityBundle").store,
     projectStore
   }, { authRequired: process.env.AUTH_REQUIRED === "true" }));
   const modelProviderController = new ModelProviderController({
-    providerStore: getStoreLattice18("default", "modelProvider").store,
+    providerStore: getStoreLattice19("default", "modelProvider").store,
     userTenantLinkStore,
     registry: {
       register: (tenantId, modelKey2, config) => modelLatticeManager3.registerLatticeWithTenant(tenantId, modelKey2, config),
@@ -23320,7 +23152,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     }),
     service: new AgentWebAppRuntimeService({
       webAppStore,
-      threadStore: getStoreLattice18("default", "thread").store,
+      threadStore: getStoreLattice19("default", "thread").store,
       projectStore,
       assistantResolver: {
         resolve: async (tenantId, assistantId) => {
@@ -23502,16 +23334,6 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     "/api/assistants/:assistantId/threads/:threadId",
     deleteThread
   );
-  app2.get(
-    "/api/config",
-    { schema: getConfigSchema },
-    getConfig
-  );
-  app2.put(
-    "/api/config",
-    { schema: updateConfigSchema },
-    updateConfig
-  );
   app2.get("/api/models", getModels);
   app2.put("/api/models", updateModels);
   app2.get("/api/tools", getToolConfigs);
@@ -23710,10 +23532,6 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     "/api/tenants/:tenantId/export/entities",
     previewEntities
   );
-  app2.get(
-    "/api/tenants/:tenantId/export/:jobId/download",
-    downloadExport
-  );
   app2.post(
     "/api/tenants/:tenantId/import/preview",
     importPreview
@@ -23746,9 +23564,9 @@ function tryCreateProjectTaskRuntime(input) {
   let stores;
   try {
     stores = {
-      tenants: getStoreLattice18("default", "tenant").store,
-      workspaces: getStoreLattice18("default", "workspace").store,
-      queue: getStoreLattice18("default", "threadMessageQueue").store
+      tenants: getStoreLattice19("default", "tenant").store,
+      workspaces: getStoreLattice19("default", "workspace").store,
+      queue: getStoreLattice19("default", "threadMessageQueue").store
     };
     const missing = missingRuntimeMethod(input, stores);
     if (missing) return { reason: missing };
@@ -23779,7 +23597,7 @@ function tryCreateProjectTaskRuntime(input) {
 function createRuntime(input, stores, log2) {
   const controller = new AbortController();
   const mutex = new ProjectTaskExecutionMutex();
-  const threads = new ProjectTaskThreadService({ threads: input.threadStore, idFactory: randomUUID24 });
+  const threads = new ProjectTaskThreadService({ threads: input.threadStore, idFactory: randomUUID23 });
   const lifecycle = createTaskLifecycleService({ taskStore: input.taskStore, workItemStore: input.taskWorkItemStore });
   const projection = new RoomProjectionService({
     messages: input.projectRoomMessageStore,
@@ -23788,7 +23606,7 @@ function createRuntime(input, stores, log2) {
     warnings: input.taskWorkItemStore,
     log: log2,
     realtime: input.realtime,
-    idFactory: randomUUID24
+    idFactory: randomUUID23
   });
   const agentFor = (task, thread) => agentInstanceManager6.getAgent({
     tenant_id: task.tenantId,
@@ -24131,9 +23949,9 @@ var skillRegistration = {
 };
 
 // src/export_registrations/agent.registration.ts
-import { getStoreLattice as getStoreLattice19 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice20 } from "@axiom-lattice/core";
 function getStore2() {
-  return getStoreLattice19("default", "assistant").store;
+  return getStoreLattice20("default", "assistant").store;
 }
 var agentRegistration = {
   entityType: "agent",
@@ -24213,9 +24031,9 @@ var agentRegistration = {
 };
 
 // src/export_registrations/database-config.registration.ts
-import { getStoreLattice as getStoreLattice20 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice21 } from "@axiom-lattice/core";
 function getStore3() {
-  return getStoreLattice20("default", "database").store;
+  return getStoreLattice21("default", "database").store;
 }
 var databaseConfigRegistration = {
   entityType: "database_config",
@@ -24295,9 +24113,9 @@ var databaseConfigRegistration = {
 };
 
 // src/export_registrations/metrics-config.registration.ts
-import { getStoreLattice as getStoreLattice21 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice22 } from "@axiom-lattice/core";
 function getStore4() {
-  return getStoreLattice21("default", "metrics").store;
+  return getStoreLattice22("default", "metrics").store;
 }
 var metricsConfigRegistration = {
   entityType: "metrics_config",
@@ -24377,9 +24195,9 @@ var metricsConfigRegistration = {
 };
 
 // src/export_registrations/mcp-config.registration.ts
-import { getStoreLattice as getStoreLattice22 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice23 } from "@axiom-lattice/core";
 function getStore5() {
-  return getStoreLattice22("default", "mcp").store;
+  return getStoreLattice23("default", "mcp").store;
 }
 var mcpConfigRegistration = {
   entityType: "mcp_config",
@@ -24462,9 +24280,9 @@ var mcpConfigRegistration = {
 };
 
 // src/export_registrations/connection.registration.ts
-import { getStoreLattice as getStoreLattice23 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice24 } from "@axiom-lattice/core";
 function getStore6() {
-  return getStoreLattice23("default", "connection").store;
+  return getStoreLattice24("default", "connection").store;
 }
 async function listAllConnections(tenantId) {
   const store = getStore6();
@@ -24549,9 +24367,9 @@ var connectionRegistration = {
 };
 
 // src/export_registrations/collection.registration.ts
-import { getStoreLattice as getStoreLattice24 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice25 } from "@axiom-lattice/core";
 function getStore7() {
-  return getStoreLattice24("default", "collection").store;
+  return getStoreLattice25("default", "collection").store;
 }
 var collectionRegistration = {
   entityType: "collection",
@@ -24622,8 +24440,8 @@ var collectionRegistration = {
 };
 
 // src/export_registrations/channel-installation.registration.ts
-import { getStoreLattice as getStoreLattice25 } from "@axiom-lattice/core";
-import { randomUUID as randomUUID25 } from "crypto";
+import { getStoreLattice as getStoreLattice26 } from "@axiom-lattice/core";
+import { randomUUID as randomUUID24 } from "crypto";
 var UUID_PATTERN2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var PUBLIC_CHANNELS = /* @__PURE__ */ new Set(["lark", "email", "slack", "wechat", "wecom"]);
 function isPublicChannel(channel) {
@@ -24659,7 +24477,7 @@ function validateImportData(data) {
   };
 }
 function getStore8() {
-  return getStoreLattice25("default", "channelInstallation").store;
+  return getStoreLattice26("default", "channelInstallation").store;
 }
 function getOverwriteError(tenantId, incomingChannel, existing) {
   if (!existing) return "Channel installation overwrite target must exist";
@@ -24785,7 +24603,7 @@ var channelInstallationRegistration = {
       }
       id3 = sourceId;
     } else {
-      id3 = randomUUID25();
+      id3 = randomUUID24();
     }
     await store.createInstallation(tenantId, id3, createInput);
     return { newId: id3 };
@@ -24793,9 +24611,9 @@ var channelInstallationRegistration = {
 };
 
 // src/export_registrations/menu.registration.ts
-import { getStoreLattice as getStoreLattice26 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice27 } from "@axiom-lattice/core";
 function getStore9() {
-  return getStoreLattice26("default", "menu").store;
+  return getStoreLattice27("default", "menu").store;
 }
 var menuRegistration = {
   entityType: "menu",
@@ -24873,9 +24691,9 @@ var menuRegistration = {
 };
 
 // src/export_registrations/eval.registration.ts
-import { getStoreLattice as getStoreLattice27 } from "@axiom-lattice/core";
+import { getStoreLattice as getStoreLattice28 } from "@axiom-lattice/core";
 function getStore10() {
-  return getStoreLattice27("default", "eval").store;
+  return getStoreLattice28("default", "eval").store;
 }
 var evalRegistration = {
   entityType: "eval",
@@ -25334,7 +25152,7 @@ function createAuditLoggerMiddleware() {
 import { setBindingRegistry, setMenuRegistry, setEvalRunService } from "@axiom-lattice/core";
 
 // src/channels/wecom/WecomChannelAdapter.ts
-import { randomUUID as randomUUID26 } from "crypto";
+import { randomUUID as randomUUID25 } from "crypto";
 import { z as z12 } from "zod";
 import * as WecomAiBot from "@wecom/aibot-node-sdk";
 
@@ -25379,7 +25197,7 @@ function streamIdFor(replyTarget) {
   const key = streamKeyOf(replyTarget);
   let streamId = streamIdsByReqId.get(key);
   if (!streamId) {
-    streamId = randomUUID26();
+    streamId = randomUUID25();
     streamIdsByReqId.set(key, streamId);
     if (streamIdsByReqId.size > MAX_TRACKED_STREAMS) {
       const oldest = streamIdsByReqId.keys().next().value;
@@ -25632,7 +25450,7 @@ var configureSwagger = async (app2, customSwaggerConfig, customSwaggerUiConfig)
 };
 
 // src/services/agent_task_consumer.ts
-import { randomUUID as randomUUID27 } from "crypto";
+import { randomUUID as randomUUID26 } from "crypto";
 import { eventBus as eventBus3, AGENT_TASK_EVENT, agentInstanceManager as agentInstanceManager7, QueueMode as QueueMode2 } from "@axiom-lattice/core";
 import { resolveRunScope } from "@axiom-lattice/protocols";
 var handleAgentTask = async (taskRequest, retryCount = 0) => {
@@ -25656,7 +25474,7 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
     const agent = agentInstanceManager7.getAgent({ assistant_id, thread_id, tenant_id, workspace_id: scope.workspaceId, project_id: scope.projectId, custom_run_config: runConfig });
     if (callback_event) {
       const callbackEvent = callback_event;
-      const messageId = typeof input?.id === "string" && input.id !== "" ? input.id : randomUUID27();
+      const messageId = typeof input?.id === "string" && input.id !== "" ? input.id : randomUUID26();
       let settled = false;
       const subscriptions = [];
       const dispose = () => {
@@ -26003,7 +25821,7 @@ import { RoomAgentMessageService } from "@axiom-lattice/core";
 
 // src/router/MessageRouter.ts
 import {
-  getStoreLattice as getStoreLattice28,
+  getStoreLattice as getStoreLattice29,
   agentInstanceManager as agentInstanceManager8
 } from "@axiom-lattice/core";
 import {
@@ -26011,7 +25829,7 @@ import {
   snapshotExactRecord as snapshotExactRecord15,
   MessageChunkTypes as MessageChunkTypes4
 } from "@axiom-lattice/protocols";
-import { randomUUID as randomUUID28 } from "crypto";
+import { randomUUID as randomUUID27 } from "crypto";
 var BindingNotFoundError = class extends Error {
   constructor(message) {
     super(message);
@@ -26304,7 +26122,7 @@ var _MessageRouter = class _MessageRouter {
             channel: message.channel,
             adapterChannel: adapter.channel
           }, "Thread resolved by adapter strategy");
-          const threadStore = getStoreLattice28("default", "thread").store;
+          const threadStore = getStoreLattice29("default", "thread").store;
           try {
             await threadStore.createThread(
               tenantId,
@@ -26341,8 +26159,8 @@ var _MessageRouter = class _MessageRouter {
           }
         }
         if (!threadId) {
-          const threadStore = getStoreLattice28("default", "thread").store;
-          const newThreadId = randomUUID28();
+          const threadStore = getStoreLattice29("default", "thread").store;
+          const newThreadId = randomUUID27();
           console.log({
             event: "dispatch:thread:create",
             agentId,
@@ -26388,7 +26206,7 @@ var _MessageRouter = class _MessageRouter {
           workspace_id: binding?.workspaceId || "",
           project_id: binding?.projectId || ""
         });
-        const inputMessageId = randomUUID28();
+        const inputMessageId = randomUUID27();
         const replyTarget = internalRoom ? correlatedRoomReplyTarget(message.replyTarget, inputMessageId) : message.replyTarget;
         const replyAdapter = replyTarget ? this.adapterRegistry.get(replyTarget.adapterChannel) : void 0;
         if (options.trustedMessageOptions && (!this.trustedDispatcher || !replyTarget || !replyAdapter)) {
@@ -26765,7 +26583,7 @@ async function prepareProjectTaskRuntime(runtime, log2) {
 import { setPluginDeploymentService } from "@axiom-lattice/core";
 
 // src/services/plugins/PluginDeploymentService.ts
-import { randomUUID as randomUUID29 } from "crypto";
+import { randomUUID as randomUUID28 } from "crypto";
 import {
   PLUGIN_HOST_DIR,
   PluginDeploymentRuntimeRegistry
@@ -26909,7 +26727,7 @@ var PluginDeploymentService = class {
       const failedAt = this.nowIso();
       await this.store.upsert(
         this.buildRecord({
-          id: existing?.id ?? randomUUID29(),
+          id: existing?.id ?? randomUUID28(),
           tenantId,
           pluginType,
           pluginVersion: manifest.version,
@@ -26931,7 +26749,7 @@ var PluginDeploymentService = class {
       );
     }
     const record = this.buildRecord({
-      id: existing?.id ?? randomUUID29(),
+      id: existing?.id ?? randomUUID28(),
       tenantId,
       pluginType,
       pluginVersion: manifest.version,
@@ -27687,51 +27505,6 @@ function errorMessage5(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
-// src/services/multiReplicaReadiness.ts
-import { getStoreLattice as getStoreLattice29 } from "@axiom-lattice/core";
-var SHARED_STORE_KINDS = [
-  "lease",
-  "outbox",
-  "threadMessageQueue",
-  "task",
-  "taskWorkItem",
-  "channelInstallation"
-];
-function storeClassName(kind) {
-  try {
-    return getStoreLattice29("default", kind).store.constructor?.name;
-  } catch {
-    return void 0;
-  }
-}
-function warnMultiReplicaReadiness(logger8) {
-  if (typeof process.env.AXIOM_REPLICA_ID !== "string" || process.env.AXIOM_REPLICA_ID.trim() === "") return;
-  for (const kind of SHARED_STORE_KINDS) {
-    const name = storeClassName(kind);
-    if (name === void 0 || !name.startsWith("InMemory")) continue;
-    logger8.warn(`Multi-replica: store '${kind}' is ${name} (not shared); configure a shared store`, {
-      phase: "multi_replica_readiness",
-      store: kind
-    });
-  }
-  if (!process.env.AUTH_TOKEN_SECRET?.trim() && !process.env.JWT_SECRET?.trim()) {
-    logger8.warn(
-      "Multi-replica: AUTH_TOKEN_SECRET/JWT_SECRET unset; console sessions are signed per-process and will not verify across replicas",
-      { phase: "multi_replica_readiness", env: "AUTH_TOKEN_SECRET" }
-    );
-  }
-  if (!process.env.LATTICE_ENCRYPTION_KEY?.trim()) {
-    logger8.warn(
-      "Multi-replica: LATTICE_ENCRYPTION_KEY unset; stored credentials use the shared dev default and may not decrypt across differing keys",
-      { phase: "multi_replica_readiness", env: "LATTICE_ENCRYPTION_KEY" }
-    );
-  }
-  logger8.warn(
-    "Multi-replica: agent run SSE and resume_stream are process-local; route a thread's follow-up runs to the replica streaming it (sticky routing) or share the stream/queue state",
-    { phase: "multi_replica_readiness", feature: "agent-run-sse" }
-  );
-}
-
 // src/services/OutboxRetentionJob.ts
 var HOUR_MS = 60 * 60 * 1e3;
 var DEFAULT_INTERVAL_MS2 = 6 * HOUR_MS;
@@ -28103,7 +27876,7 @@ var start = async (config) => {
     });
     try {
       const { A2AAuthService: A2AAuthService2, parseEnvKeys: parseEnvKeys2 } = await import("./A2AAuthService-7UGQ7GMW.mjs");
-      const { registerA2AStandardRoutes } = await import("./a2a-standard-PBYPNHOA.mjs");
+      const { registerA2AStandardRoutes } = await import("./a2a-standard-3OZFXDCW.mjs");
       const a2a = await import("./a2a-BHBLACJV.mjs");
       const a2aKeyStore = getStoreLattice30("default", "a2aApiKey").store;
       const assistantStore = getStoreLattice30("default", "assistant").store;
@@ -28133,7 +27906,7 @@ var start = async (config) => {
       });
     }
     try {
-      const { registerOpenRoutes } = await import("./open-GNBMCHYA.mjs");
+      const { registerOpenRoutes } = await import("./open-MDC4VCR7.mjs");
       const { registerOpenSessionRoutes } = await import("./open-session-2Y7XJJW2.mjs");
       const { registerOpenCatalogRoutes } = await import("./open-catalog-SZQ435AY.mjs");
       const { registerOpenFilesRoutes } = await import("./open-files-FS5AN6Q6.mjs");
@@ -28184,7 +27957,7 @@ var start = async (config) => {
       });
     }
     try {
-      const { registerGatewaySandboxOpenCredentialProvider } = await import("./sandboxOpenCredentialProvider-USIU7Z7H.mjs");
+      const { registerGatewaySandboxOpenCredentialProvider } = await import("./sandboxOpenCredentialProvider-AT227D4N.mjs");
       registerGatewaySandboxOpenCredentialProvider((error) => {
         logger7.warn("sandbox open-credential provider failed", { error });
       });
@@ -28243,7 +28016,7 @@ var start = async (config) => {
       }
     }
     try {
-      const { ResourceController } = await import("./resources-2L3KSUUU.mjs");
+      const { ResourceController } = await import("./resources-DAU5ZIPB.mjs");
       const sharedResourceStore = getStoreLattice30("default", "sharedResource").store;
       const cache = new TokenCache();
       const resourceController = new ResourceController({
@@ -28305,7 +28078,11 @@ var start = async (config) => {
         [ROOM_EVENT_TOPIC]: async (payload) => {
           if (projectRoomRealtimeRuntime) ingestRoomEvent(payload, projectRoomRealtimeRuntime.broker);
         },
-        "assistant-changed": (payload) => handleAssistantChanged(payload, (tenantId) => agentLatticeManager5.initializeStoredAssistantsForTenant(tenantId)),
+        "assistant-changed": (payload) => handleAssistantChanged(payload, async (tenantId) => {
+          await agentLatticeManager5.initializeStoredAssistantsForTenant(tenantId);
+          invalidateAgentReflectionCache(tenantId);
+          invalidatePluginReflectionCache(tenantId);
+        }),
         [A2A_KEY_CHANGED_TOPIC]: (payload) => handleA2AKeyChanged(payload, () => refreshStoreKeyMap()),
         [MCP_CONFIG_CHANGED_TOPIC]: (payload) => reconcileMcpConfigChange(payload, {
           store: getStoreLattice30("default", "mcp").store,
@@ -28314,7 +28091,12 @@ var start = async (config) => {
         }),
         [PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
           const tenantId = payload?.tenantId;
-          if (typeof tenantId === "string" && tenantId.length > 0) getSandboxPluginCatalog3().invalidate(tenantId);
+          if (typeof tenantId === "string" && tenantId.length > 0) {
+            getSandboxPluginCatalog3().invalidate(tenantId);
+            invalidatePluginReflectionCache(tenantId);
+            invalidateAgentReflectionCache(tenantId);
+            await getMcpUiResourceResolver()?.invalidateTenantPlugins(tenantId);
+          }
         },
         [MODEL_PROVIDER_CHANGED_TOPIC]: async (payload) => {
           const controller = routes.modelProviderController;
@@ -28343,7 +28125,7 @@ var start = async (config) => {
       }
       if (process.env.AXIOM_TASK_ORPHAN_RECOVERY === "true") {
         try {
-          const { createOrphanRecoveryRuntime: createOrphanRecoveryRuntime2 } = await import("./OrphanRecoveryRuntime-BEFILJMU.mjs");
+          const { createOrphanRecoveryRuntime: createOrphanRecoveryRuntime2 } = await import("./OrphanRecoveryRuntime-T4T5NOZU.mjs");
           const { createRecoveryCallerDeps: createRecoveryCallerDeps2 } = await import("./RecoveryCallerDeps-6SJUYJ5S.mjs");
           const runtime = createOrphanRecoveryRuntime2({
             taskStore: getStoreLattice30("default", "task").store,