@axiom-lattice/gateway 4.2.4 → 4.3.0

package/dist/index.js

@@ -1570,11 +1570,11 @@ function devModeDefaults() {
   const projectId = process.env[DEFAULT_PROJECT_ENV] || void 0;
   return { tenantId, projectId };
 }
-var import_protocols30, A2AAuthError, DEFAULT_TENANT_ENV, DEFAULT_TENANT_ID, DEFAULT_PROJECT_ENV, BEARER_SCHEME_RE, A2AAuthService;
+var import_protocols31, A2AAuthError, DEFAULT_TENANT_ENV, DEFAULT_TENANT_ID, DEFAULT_PROJECT_ENV, BEARER_SCHEME_RE, A2AAuthService;
 var init_A2AAuthService = __esm({
   "src/services/a2a/A2AAuthService.ts"() {
     "use strict";
-    import_protocols30 = require("@axiom-lattice/protocols");
+    import_protocols31 = require("@axiom-lattice/protocols");
     A2AAuthError = class extends Error {
       constructor(message, statusCode) {
         super(message);
@@ -1629,7 +1629,7 @@ var init_A2AAuthService = __esm({
         const entry = merged.get(token);
         if (!entry) return { authenticated: false };
         const hasExplicitGrants = Array.isArray(entry.grants) && entry.grants.length > 0;
-        const agentGrant = (0, import_protocols30.effectiveGrants)(entry).find((g) => g.domain === "agent");
+        const agentGrant = (0, import_protocols31.effectiveGrants)(entry).find((g) => g.domain === "agent");
         const assistantIds = hasExplicitGrants ? agentGrant?.items ?? [] : entry.assistantIds;
         return {
           authenticated: true,
@@ -2234,13 +2234,13 @@ function assistantHasGovernedTask(assistant) {
   const allowedTools = taskMiddleware?.allowedTools;
   return !!taskMiddleware && (allowedTools === void 0 || Array.isArray(allowedTools) && (allowedTools.length === 0 || allowedTools.includes("manage_task")));
 }
-var import_uuid11, import_core67, import_protocols31, _AxiomAgentExecutor, AxiomAgentExecutor;
+var import_uuid11, import_core67, import_protocols32, _AxiomAgentExecutor, AxiomAgentExecutor;
 var init_AxiomAgentExecutor = __esm({
   "src/services/a2a/AxiomAgentExecutor.ts"() {
     "use strict";
     import_uuid11 = require("uuid");
     import_core67 = require("@axiom-lattice/core");
-    import_protocols31 = require("@axiom-lattice/protocols");
+    import_protocols32 = require("@axiom-lattice/protocols");
     init_a2aFileRefs();
     init_task_file_refs();
     _AxiomAgentExecutor = class _AxiomAgentExecutor {
@@ -2344,7 +2344,7 @@ ${formatFileRefsSection(inputFiles)}` : text;
               custom_run_config: { taskId: ctx.taskId }
             });
             const stream = agent.chunkStream(messageId, [
-              import_protocols31.MessageChunkTypes.MESSAGE_COMPLETED
+              import_protocols32.MessageChunkTypes.MESSAGE_COMPLETED
             ]);
             let outputText = "";
             let interrupted = false;
@@ -2352,14 +2352,14 @@ ${formatFileRefsSection(inputFiles)}` : text;
               if (execution.canceled) return;
               const chunkType = chunk.type;
               const chunkText = chunk.data?.content ?? "";
-              if (chunkType === import_protocols31.MessageChunkTypes.INTERRUPT) {
+              if (chunkType === import_protocols32.MessageChunkTypes.INTERRUPT) {
                 interrupted = true;
                 break;
               }
-              if (chunkType === import_protocols31.MessageChunkTypes.AI && chunkText) {
+              if (chunkType === import_protocols32.MessageChunkTypes.AI && chunkText) {
                 outputText += chunkText;
               }
-              if (chunkType === import_protocols31.MessageChunkTypes.AI || chunkType === import_protocols31.MessageChunkTypes.TOOL) {
+              if (chunkType === import_protocols32.MessageChunkTypes.AI || chunkType === import_protocols32.MessageChunkTypes.TOOL) {
                 if (chunkText) {
                   bus.publish({
                     kind: "status-update",
@@ -3323,11 +3323,11 @@ var init_a2a = __esm({
 });
 
 // src/services/open/openAuthService.ts
-var import_protocols32, OpenAuthService;
+var import_protocols33, OpenAuthService;
 var init_openAuthService = __esm({
   "src/services/open/openAuthService.ts"() {
     "use strict";
-    import_protocols32 = require("@axiom-lattice/protocols");
+    import_protocols33 = require("@axiom-lattice/protocols");
     OpenAuthService = class {
       constructor(keyStore) {
         this.keyStore = keyStore;
@@ -3341,7 +3341,7 @@ var init_openAuthService = __esm({
           kind: "api_key",
           tenantId: record.tenantId,
           projectId: record.projectId,
-          grants: (0, import_protocols32.effectiveGrants)(record)
+          grants: (0, import_protocols33.effectiveGrants)(record)
         };
       }
     };
@@ -3349,11 +3349,11 @@ var init_openAuthService = __esm({
 });
 
 // src/services/open/openCredentialService.ts
-var import_protocols33, OpenCredentialService;
+var import_protocols34, OpenCredentialService;
 var init_openCredentialService = __esm({
   "src/services/open/openCredentialService.ts"() {
     "use strict";
-    import_protocols33 = require("@axiom-lattice/protocols");
+    import_protocols34 = require("@axiom-lattice/protocols");
     init_openToken();
     init_openAuthService();
     OpenCredentialService = class {
@@ -4351,7 +4351,7 @@ function registerOpenExposureRoutes(app2) {
       if (!record || record.tenantId !== tenantId) {
         return reply.status(404).send({ success: false, error: "Key not found" });
       }
-      const grants = (0, import_protocols34.effectiveGrants)(record);
+      const grants = (0, import_protocols35.effectiveGrants)(record);
       const forwardedHost = request.headers["x-forwarded-host"];
       const host = (Array.isArray(forwardedHost) ? forwardedHost[0] : forwardedHost) ?? (Array.isArray(request.headers.host) ? request.headers.host[0] : request.headers.host) ?? request.hostname;
       const baseUrl = `${request.protocol}://${host}`;
@@ -4390,12 +4390,12 @@ function registerOpenExposureRoutes(app2) {
     }
   );
 }
-var import_core75, import_protocols34;
+var import_core75, import_protocols35;
 var init_open_exposure = __esm({
   "src/routes/open-exposure.ts"() {
     "use strict";
     import_core75 = require("@axiom-lattice/core");
-    import_protocols34 = require("@axiom-lattice/protocols");
+    import_protocols35 = require("@axiom-lattice/protocols");
     init_openLattice();
     init_A2AAgentCardBuilder();
   }
@@ -4527,8 +4527,8 @@ function createAgentProvider(deps = {}) {
       const stream = agent.chunkStream(messageId, [...STOP_TYPES]);
       for await (const chunk of stream) {
         const text = chunk.data?.content;
-        if (chunk.type === import_protocols35.MessageChunkTypes.INTERRUPT) break;
-        if (chunk.type === import_protocols35.MessageChunkTypes.AI && text) {
+        if (chunk.type === import_protocols36.MessageChunkTypes.INTERRUPT) break;
+        if (chunk.type === import_protocols36.MessageChunkTypes.AI && text) {
           parts.push(text);
         }
       }
@@ -4538,14 +4538,14 @@ function createAgentProvider(deps = {}) {
     }
   };
 }
-var import_zod20, import_core76, import_protocols35, STOP_TYPES;
+var import_zod20, import_core76, import_protocols36, STOP_TYPES;
 var init_agentProvider = __esm({
   "src/services/open/providers/agentProvider.ts"() {
     "use strict";
     import_zod20 = require("zod");
     import_core76 = require("@axiom-lattice/core");
-    import_protocols35 = require("@axiom-lattice/protocols");
-    STOP_TYPES = [import_protocols35.MessageChunkTypes.MESSAGE_COMPLETED];
+    import_protocols36 = require("@axiom-lattice/protocols");
+    STOP_TYPES = [import_protocols36.MessageChunkTypes.MESSAGE_COMPLETED];
   }
 });
 
@@ -5081,7 +5081,7 @@ var import_path = __toESM(require("path"));
 
 // src/routes/index.ts
 var import_node_crypto23 = require("crypto");
-var import_protocols27 = require("@axiom-lattice/protocols");
+var import_protocols28 = require("@axiom-lattice/protocols");
 
 // src/controllers/assistant.ts
 var import_core = require("@axiom-lattice/core");
@@ -10327,12 +10327,12 @@ var NoopRoomBindingLifecycle = class {
 // src/services/collaboration/WorkspacePublicRoomService.ts
 var import_node_crypto2 = require("crypto");
 var import_node_crypto3 = require("crypto");
-var WORKSPACE_PUBLIC_ROOM_PROJECT_PREFIX = "workspace_public_";
+var import_protocols5 = require("@axiom-lattice/protocols");
 var PUBLIC_ROOM_PROJECT_NAME = "General";
 var PUBLIC_ROOM_PROJECT_DESCRIPTION = "Public room for everyone in the workspace";
 function workspacePublicRoomProjectId(tenantId, workspaceId) {
   const hash = (0, import_node_crypto2.createHash)("sha256").update([tenantId, workspaceId].join(":")).digest("hex");
-  return `${WORKSPACE_PUBLIC_ROOM_PROJECT_PREFIX}${hash}`;
+  return `${import_protocols5.WORKSPACE_PUBLIC_ROOM_PROJECT_PREFIX}${hash}`;
 }
 var WorkspacePublicRoomService = class {
   /** Creates the service from explicitly injected stores and provisioners. */
@@ -10505,7 +10505,7 @@ function createProjectCollaborationInitializer(deps) {
       } catch {
         throw new ProjectCollaborationInitializationError("room");
       }
-      if (project.kind === "business" && deps.ensureCoordinator) {
+      if ((project.kind === "business" || project.kind === "public") && deps.ensureCoordinator) {
         try {
           await deps.ensureCoordinator({
             tenantId,
@@ -10673,12 +10673,6 @@ var WorkspaceController = class {
         message: CAPABILITY_BUNDLE_CONFIG_MESSAGE
       });
     }
-    if (data.kind === "public") {
-      return reply.status(409).send({
-        success: false,
-        error: "The public room project is managed automatically"
-      });
-    }
     if (user?.id && this.projectCollaboration) {
       try {
         const authorized = await this.projectCollaboration.authorizeCreator({ tenantId, userId: user.id });
@@ -10756,16 +10750,10 @@ var WorkspaceController = class {
     }
     if (updates.kind !== void 0) {
       const existingProject = await this.projectStore.getProjectById(tenantId, projectId);
-      if (existingProject && updates.kind === "public") {
+      if (existingProject && existingProject.id === workspacePublicRoomProjectId(tenantId, existingProject.workspaceId)) {
         return reply.status(409).send({
           success: false,
-          error: "kind public is reserved for the workspace public room"
-        });
-      }
-      if (existingProject?.kind === "public") {
-        return reply.status(409).send({
-          success: false,
-          error: "The public room project classification cannot be changed"
+          error: "The workspace public room classification cannot be changed"
         });
       }
     }
@@ -10799,10 +10787,10 @@ var WorkspaceController = class {
         });
       }
     }
-    if (project.kind === "public") {
+    if (project.id === workspacePublicRoomProjectId(tenantId, project.workspaceId ?? workspaceId)) {
       return reply.status(409).send({
         success: false,
-        error: "The public room project cannot be deleted"
+        error: "The workspace public room cannot be deleted"
       });
     }
     const deleted = await this.projectStore.deleteProject(tenantId, projectId);
@@ -14588,7 +14576,7 @@ function registerChannelRoutes(app2, dependencies) {
 
 // src/controllers/channel-installations.ts
 var import_crypto10 = require("crypto");
-var import_protocols5 = require("@axiom-lattice/protocols");
+var import_protocols6 = require("@axiom-lattice/protocols");
 var _adapterRegistry;
 var _router;
 function setChannelControllerDeps(deps) {
@@ -14702,7 +14690,7 @@ function snapshotPlainObject(value) {
       const enumerable = Object.getOwnPropertyDescriptor(descriptor, "enumerable");
       if (!enumerable || !Object.prototype.hasOwnProperty.call(enumerable, "value")) return null;
       if (enumerable.value !== true) continue;
-      const data = (0, import_protocols5.descriptorDataValue)(descriptor);
+      const data = (0, import_protocols6.descriptorDataValue)(descriptor);
       if (!data) return null;
       snapshot[key] = data.value;
     }
@@ -15028,7 +15016,7 @@ function registerChannelInstallationRoutes(app2) {
 }
 
 // src/controllers/channel-bindings.ts
-var import_protocols6 = require("@axiom-lattice/protocols");
+var import_protocols7 = require("@axiom-lattice/protocols");
 var import_core38 = require("@axiom-lattice/core");
 function getTenantId14(request) {
   const userTenantId = request.user?.tenantId;
@@ -15048,7 +15036,7 @@ function snapshotPlainObject2(value) {
     const enumerable = Object.getOwnPropertyDescriptor(descriptor, "enumerable");
     if (!enumerable || !Object.prototype.hasOwnProperty.call(enumerable, "value")) return null;
     if (enumerable.value !== true) continue;
-    const data = (0, import_protocols6.descriptorDataValue)(descriptor);
+    const data = (0, import_protocols7.descriptorDataValue)(descriptor);
     if (!data) return null;
     snapshot[key] = data.value;
   }
@@ -15152,7 +15140,7 @@ async function createBinding(request, reply) {
     reply.status(201);
     return { success: true, message: "Binding created", data: binding };
   } catch (error) {
-    if (error instanceof import_protocols6.DuplicateChannelBindingSubjectError) {
+    if (error instanceof import_protocols7.DuplicateChannelBindingSubjectError) {
       reply.code(409);
       return { success: false, message: "Binding already exists" };
     }
@@ -15588,7 +15576,7 @@ var registerSTTRoutes = (app2) => {
 
 // src/controllers/local-a2a.ts
 var import_core41 = require("@axiom-lattice/core");
-var import_protocols7 = require("@axiom-lattice/protocols");
+var import_protocols8 = require("@axiom-lattice/protocols");
 function getTenantId16(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) return userTenantId;
@@ -15597,7 +15585,7 @@ function getTenantId16(request) {
 function getLocalRuntime(assistant) {
   const graphDefinition = assistant.graphDefinition;
   if (!graphDefinition || typeof graphDefinition !== "object") return void 0;
-  if (graphDefinition.type !== import_protocols7.AgentType.A2A_REMOTE) return void 0;
+  if (graphDefinition.type !== import_protocols8.AgentType.A2A_REMOTE) return void 0;
   return graphDefinition.localRuntime;
 }
 async function getLocalA2AAssistants(tenantId) {
@@ -15858,15 +15846,15 @@ function registerTaskRoutes(app2, controller) {
 var import_core52 = require("@axiom-lattice/core");
 
 // src/controllers/tasks.ts
-var import_protocols10 = require("@axiom-lattice/protocols");
+var import_protocols11 = require("@axiom-lattice/protocols");
 var import_core43 = require("@axiom-lattice/core");
 
 // src/services/collaboration/ProjectTaskThreadService.ts
 var import_core42 = require("@axiom-lattice/core");
-var import_protocols9 = require("@axiom-lattice/protocols");
+var import_protocols10 = require("@axiom-lattice/protocols");
 
 // src/services/collaboration/ProjectTaskSnapshots.ts
-var import_protocols8 = require("@axiom-lattice/protocols");
+var import_protocols9 = require("@axiom-lattice/protocols");
 function snapshotJsonValue(value, stack = /* @__PURE__ */ new WeakSet()) {
   if (value === null || typeof value === "string" || typeof value === "boolean") return value;
   if (typeof value === "number" && Number.isFinite(value)) return value;
@@ -15912,7 +15900,7 @@ function cloneExactDate(value) {
   }
 }
 function snapshotTaskItem(value) {
-  const row = (0, import_protocols8.snapshotExactRecord)(value, [
+  const row = (0, import_protocols9.snapshotExactRecord)(value, [
     "id",
     "tenantId",
     "ownerType",
@@ -15980,7 +15968,7 @@ function snapshotTaskItem(value) {
   }
 }
 function snapshotProjectRoom(value) {
-  const row = (0, import_protocols8.snapshotExactRecord)(value, ["id", "tenantId", "workspaceId", "projectId", "type", "name", "createdAt", "updatedAt"]);
+  const row = (0, import_protocols9.snapshotExactRecord)(value, ["id", "tenantId", "workspaceId", "projectId", "type", "name", "createdAt", "updatedAt"]);
   const createdAt = cloneExactDate(row?.createdAt);
   const updatedAt = cloneExactDate(row?.updatedAt);
   if (!row || !createdAt || !updatedAt || row.type !== "main") return void 0;
@@ -15999,7 +15987,7 @@ function snapshotProjectRoom(value) {
   };
 }
 function snapshotBotMembership(value) {
-  const row = (0, import_protocols8.snapshotExactRecord)(value, [
+  const row = (0, import_protocols9.snapshotExactRecord)(value, [
     "id",
     "tenantId",
     "workspaceId",
@@ -16038,7 +16026,7 @@ function snapshotBotMembership(value) {
   };
 }
 function snapshotThread(value) {
-  const row = (0, import_protocols8.snapshotExactRecord)(value, ["id", "tenantId", "assistantId", "createdAt", "updatedAt"], ["metadata"]);
+  const row = (0, import_protocols9.snapshotExactRecord)(value, ["id", "tenantId", "assistantId", "createdAt", "updatedAt"], ["metadata"]);
   const createdAt = cloneExactDate(row?.createdAt);
   const updatedAt = cloneExactDate(row?.updatedAt);
   if (!row || !createdAt || !updatedAt || typeof row.id !== "string" || !row.id || typeof row.tenantId !== "string" || !row.tenantId || typeof row.assistantId !== "string" || !row.assistantId) return void 0;
@@ -16061,7 +16049,7 @@ function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isTaskFileRef(value) {
-  const row = (0, import_protocols8.snapshotExactRecord)(value, ["uri"], ["name", "mimeType", "addedBy"]);
+  const row = (0, import_protocols9.snapshotExactRecord)(value, ["uri"], ["name", "mimeType", "addedBy"]);
   return !!row && typeof row.uri === "string" && !!row.uri && (row.name === void 0 || typeof row.name === "string") && (row.mimeType === void 0 || typeof row.mimeType === "string") && (row.addedBy === void 0 || row.addedBy === "user" || row.addedBy === "agent");
 }
 
@@ -16148,7 +16136,7 @@ function taskMetadata(task, room, membership) {
   };
 }
 function exactTaskMetadata(value, expected) {
-  const row = (0, import_protocols9.snapshotExactRecord)(value, [
+  const row = (0, import_protocols10.snapshotExactRecord)(value, [
     "source",
     "kind",
     "workspaceId",
@@ -16161,7 +16149,7 @@ function exactTaskMetadata(value, expected) {
   return !!row && row.source === expected.source && row.kind === expected.kind && row.workspaceId === expected.workspaceId && row.projectId === expected.projectId && row.roomId === expected.roomId && row.membershipId === expected.membershipId && row.assistantId === expected.assistantId && row.taskId === expected.taskId && row.parentTaskId === expected.parentTaskId && Object.prototype.hasOwnProperty.call(row, "parentTaskId") === Object.prototype.hasOwnProperty.call(expected, "parentTaskId");
 }
 function snapshotEnsureInput(input) {
-  const row = (0, import_protocols9.snapshotExactRecord)(input, ["task", "room", "membership", "mode"]);
+  const row = (0, import_protocols10.snapshotExactRecord)(input, ["task", "room", "membership", "mode"]);
   if (!row || row.mode !== "current_owner" && row.mode !== "reassignment") {
     throw new ProjectTaskThreadError("PROJECT_TASK_THREAD_SCOPE_INVALID", "Invalid ensure input");
   }
@@ -16285,7 +16273,7 @@ function offsetInteger(value) {
   return parsed;
 }
 function exactObject(value, allowed, required = []) {
-  const row = (0, import_protocols10.snapshotExactRecord)(value, required, allowed.filter((key) => !required.includes(key)));
+  const row = (0, import_protocols11.snapshotExactRecord)(value, required, allowed.filter((key) => !required.includes(key)));
   if (!row) throw new HttpTaskError(400, "INVALID_TASK_INPUT");
   return row;
 }
@@ -16336,7 +16324,7 @@ function validateUpdateTaskInput(row) {
   }
 }
 function taskFile(value) {
-  const row = (0, import_protocols10.snapshotExactRecord)(value, ["uri"], ["name", "mimeType", "addedBy"]);
+  const row = (0, import_protocols11.snapshotExactRecord)(value, ["uri"], ["name", "mimeType", "addedBy"]);
   return !!row && typeof row.uri === "string" && !!row.uri && (row.name === void 0 || typeof row.name === "string") && (row.mimeType === void 0 || typeof row.mimeType === "string") && (row.addedBy === void 0 || row.addedBy === "user" || row.addedBy === "agent");
 }
 function snapshotCreate(value) {
@@ -16956,10 +16944,15 @@ var agentWebAppFeaturesSchema = import_zod4.z.object({
   genUI: import_zod4.z.boolean(),
   files: import_zod4.z.boolean().optional()
 }).strict();
+var agentWebAppQuickPromptSchema = import_zod4.z.object({
+  label: import_zod4.z.string().min(1).max(40),
+  text: import_zod4.z.string().min(1).max(500)
+}).strict();
 var agentWebAppAppearanceSchema = import_zod4.z.object({
   title: import_zod4.z.string().max(120).optional(),
   welcomeMessage: import_zod4.z.string().max(1e3).optional(),
-  primaryColor: import_zod4.z.string().regex(/^#[0-9A-Fa-f]{6}$/).optional()
+  primaryColor: import_zod4.z.string().regex(/^#[0-9A-Fa-f]{6}$/).optional(),
+  quickPrompts: import_zod4.z.array(agentWebAppQuickPromptSchema).max(6).optional()
 }).strict();
 var agentWebAppIssuerSchema = import_zod4.z.object({
   iss: import_zod4.z.string().min(1).max(255),
@@ -17083,7 +17076,7 @@ var import_zod6 = require("zod");
 
 // src/services/agent-web-app/AgentWebAppRuntimeService.ts
 var import_node_crypto7 = require("crypto");
-var import_protocols11 = require("@axiom-lattice/protocols");
+var import_protocols12 = require("@axiom-lattice/protocols");
 init_task_file_refs();
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -17201,7 +17194,7 @@ var AgentWebAppRuntimeService = class {
     });
     return messages.flatMap((message) => {
       if (!isRecord2(message) || typeof message.id !== "string" || message.role !== "human" && message.role !== "ai") return [];
-      const content = typeof message.content === "string" ? message.content : runtime.webApp.features.genUI && Array.isArray(message.content) ? message.content.map(import_protocols11.parseAgentWebAppGenUIBlock).filter((block) => block !== void 0) : void 0;
+      const content = typeof message.content === "string" ? message.content : runtime.webApp.features.genUI && Array.isArray(message.content) ? message.content.map(import_protocols12.parseAgentWebAppGenUIBlock).filter((block) => block !== void 0) : void 0;
       return [{ id: message.id, role: message.role, ...content && (typeof content === "string" || content.length > 0) ? { content } : {} }];
     });
   }
@@ -17319,7 +17312,7 @@ ${formatFileRefsSection(refs)}` : input.content;
     return executeScopedAgentMessage(agent, {
       ...request,
       ...runtime.modelKey ? { custom_run_config: { modelConfig: { modelKey: runtime.modelKey } } } : {}
-    }, [import_protocols11.MessageChunkTypes.MESSAGE_COMPLETED, import_protocols11.MessageChunkTypes.INTERRUPT, import_protocols11.MessageChunkTypes.MESSAGE_FAILED]);
+    }, [import_protocols12.MessageChunkTypes.MESSAGE_COMPLETED, import_protocols12.MessageChunkTypes.INTERRUPT, import_protocols12.MessageChunkTypes.MESSAGE_FAILED]);
   }
   async resolveRuntime(webAppId, selection) {
     const webApp = await this.deps.webAppStore.findById(webAppId);
@@ -17590,7 +17583,7 @@ async function verifyWebAppToken(token, issuer, options = {}) {
 }
 
 // src/routes/agent-web-app-runtime.ts
-var import_protocols12 = require("@axiom-lattice/protocols");
+var import_protocols13 = require("@axiom-lattice/protocols");
 var idSchema = import_zod6.z.string().min(1).max(128);
 var paramsSchema = import_zod6.z.object({ webAppId: idSchema }).strict();
 var threadParamsSchema = import_zod6.z.object({ webAppId: idSchema, threadId: idSchema }).strict();
@@ -18065,9 +18058,9 @@ function withPreview(selection, preview) {
   return { ...selection, ...preview ? { preview } : {} };
 }
 async function pipeAgentWebAppStream(raw, stream, options = {}) {
-  const projection = (0, import_protocols12.createAgentWebAppStreamProjectionContext)(options);
+  const projection = (0, import_protocols13.createAgentWebAppStreamProjectionContext)(options);
   await pipeAsyncIterableToSse(raw, stream, {
-    project: (chunk) => (0, import_protocols12.projectAgentWebAppChunk)(chunk, projection),
+    project: (chunk) => (0, import_protocols13.projectAgentWebAppChunk)(chunk, projection),
     onError: (error) => {
       const code = error?.code;
       if (code === "aborted" || code === "superseded") return [{ type: "stream.completed" }];
@@ -18717,7 +18710,7 @@ var ProjectRoomService = class {
    */
   async ensureMainRoomWithCoordinator(input) {
     const { project, room } = await this.authorizedRoom(input);
-    if (project.kind === "business" && this.deps.ensureCoordinator) {
+    if ((project.kind === "business" || project.kind === "public") && this.deps.ensureCoordinator) {
       try {
         await this.deps.ensureCoordinator({
           tenantId: input.tenantId,
@@ -19158,12 +19151,12 @@ var ProjectRosterService = class {
 var import_node_crypto14 = require("crypto");
 
 // src/services/collaboration/ProjectBotMembershipSnapshot.ts
-var import_protocols13 = require("@axiom-lattice/protocols");
+var import_protocols14 = require("@axiom-lattice/protocols");
 var requiredKeys = ["assistantId", "id", "joinedAt", "mentionName", "projectId", "role", "roomId", "roomThreadId", "status", "tenantId", "title", "updatedAt", "workspaceId"];
 function snapshotProjectBotMembership(value) {
   try {
     if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-    const values = (0, import_protocols13.snapshotExactRecord)(value, requiredKeys, ["responsibility"]);
+    const values = (0, import_protocols14.snapshotExactRecord)(value, requiredKeys, ["responsibility"]);
     if (!values) return void 0;
     const read = (key) => values[key];
     const id3 = read("id");
@@ -19494,7 +19487,7 @@ function matchesNormalizedPayload(message, input) {
 
 // src/routes/project-rooms.ts
 var import_zod11 = require("zod");
-var import_protocols14 = require("@axiom-lattice/protocols");
+var import_protocols15 = require("@axiom-lattice/protocols");
 
 // src/services/collaboration/RoomInterruptService.ts
 var import_node_crypto15 = require("crypto");
@@ -19736,7 +19729,7 @@ function actor(request, projectId) {
   return { tenantId: user.tenantId, userId: user.id, projectId };
 }
 function toProjectRoomMessage(message) {
-  const publicMessage = (0, import_protocols14.toProjectRoomPublicMessage)(message);
+  const publicMessage = (0, import_protocols15.toProjectRoomPublicMessage)(message);
   if (publicMessage === void 0) throw new Error("Room message could not be mapped to its public DTO");
   return publicMessage;
 }
@@ -19803,7 +19796,7 @@ async function execute(reply, operation) {
 var import_node_crypto16 = require("crypto");
 var import_zod13 = require("zod");
 var import_core45 = require("@axiom-lattice/core");
-var import_protocols15 = require("@axiom-lattice/protocols");
+var import_protocols16 = require("@axiom-lattice/protocols");
 var CoSpaceAuthError = class extends Error {
   constructor() {
     super(...arguments);
@@ -19856,13 +19849,13 @@ function registerCoSpaceRoutes(app2, deps) {
         );
         const accessibleProjects = [];
         for (const project of allProjects) {
-          if (project.kind === "public") continue;
+          if (project.id.startsWith(import_protocols5.WORKSPACE_PUBLIC_ROOM_PROJECT_PREFIX)) continue;
           const membership = await deps.membershipStore.findByUser(
             actor3.tenantId,
             project.id,
             actor3.userId
           );
-          if (membership && membership.status === "active") {
+          if (project.kind === "public" || membership && membership.status === "active") {
             accessibleProjects.push(project);
           }
         }
@@ -19880,7 +19873,7 @@ function registerCoSpaceRoutes(app2, deps) {
               limit: 1
             });
             const lastMessage = messages[0];
-            const publicLastMessage = lastMessage === void 0 ? void 0 : (0, import_protocols15.toProjectRoomPublicMessage)(lastMessage);
+            const publicLastMessage = lastMessage === void 0 ? void 0 : (0, import_protocols16.toProjectRoomPublicMessage)(lastMessage);
             const memberships = await deps.membershipStore.list(
               actor3.tenantId,
               project.id
@@ -19905,6 +19898,7 @@ function registerCoSpaceRoutes(app2, deps) {
               ).length,
               participantNames,
               ...displayName === void 0 ? {} : { displayName },
+              ...project.kind === "public" ? { isPublic: true } : {},
               unreadCount: await computeUnread(
                 deps,
                 actor3.tenantId,
@@ -19946,7 +19940,7 @@ function registerCoSpaceRoutes(app2, deps) {
             rooms.unshift({
               project: publicRoom.project,
               room: publicRoom.room,
-              lastMessage: publicLastMessage === void 0 ? void 0 : (0, import_protocols15.toProjectRoomPublicMessage)(publicLastMessage),
+              lastMessage: publicLastMessage === void 0 ? void 0 : (0, import_protocols16.toProjectRoomPublicMessage)(publicLastMessage),
               participantCount: publicMemberships.filter((m) => m.status === "active").length,
               participantNames: publicParticipantNames,
               isPublic: true,
@@ -20659,7 +20653,7 @@ var RoomTargetResolver = class {
 };
 
 // src/services/collaboration/RoomDispatchService.ts
-var import_protocols16 = require("@axiom-lattice/protocols");
+var import_protocols17 = require("@axiom-lattice/protocols");
 
 // src/router/InternalRoomDispatch.ts
 var INTERNAL_ROOM_DISPATCH = Symbol("internal-room-dispatch");
@@ -20760,7 +20754,7 @@ function snapshotDispatchSource(value) {
   };
 }
 function snapshotMentions(value) {
-  const rows = (0, import_protocols16.snapshotExactArray)(value);
+  const rows = (0, import_protocols17.snapshotExactArray)(value);
   if (!rows) return void 0;
   const result = [];
   for (const row of rows) {
@@ -20778,7 +20772,7 @@ function snapshotMentions(value) {
 function exactValues(value, required, optional = []) {
   try {
     if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-    return (0, import_protocols16.snapshotExactRecord)(value, required, optional);
+    return (0, import_protocols17.snapshotExactRecord)(value, required, optional);
   } catch {
     return void 0;
   }
@@ -20787,7 +20781,7 @@ function exactValues(value, required, optional = []) {
 // src/services/collaboration/CoordinatorWakeNotifier.ts
 var import_node_crypto17 = require("crypto");
 var import_core46 = require("@axiom-lattice/core");
-var import_protocols17 = require("@axiom-lattice/protocols");
+var import_protocols18 = require("@axiom-lattice/protocols");
 var SYNTHETIC_WAKE_AUTHOR = "coordinator-wake";
 var CoordinatorWakeNotifier = class {
   /** Creates a bounded Project Task lifecycle observer that wakes the Room Coordinator. */
@@ -20943,7 +20937,7 @@ var CoordinatorWakeNotifier = class {
     }
   }
   parse(value) {
-    const row = (0, import_protocols17.snapshotExactRecord)(value, ["tenantId", "workspaceId", "projectId", "taskId", "status", "action", "eventKey", "updatedAt"], ["threadId"]);
+    const row = (0, import_protocols18.snapshotExactRecord)(value, ["tenantId", "workspaceId", "projectId", "taskId", "status", "action", "eventKey", "updatedAt"], ["threadId"]);
     const actions = ["in_progress", "interrupted", "failed", "completed", "cancelled", "reassigned"];
     const statuses = ["pending", "in_progress", "review", "failed", "interrupted", "completed", "cancelled"];
     if (!row || !actions.includes(String(row.action)) || !statuses.includes(String(row.status)) || !["tenantId", "workspaceId", "projectId", "taskId", "eventKey", "updatedAt"].every((key) => typeof row[key] === "string" && row[key].length > 0) || !Number.isFinite(Date.parse(row.updatedAt)) || row.threadId !== void 0 && typeof row.threadId !== "string") return void 0;
@@ -20984,10 +20978,102 @@ function readSourceMessageId(context) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 
+// src/services/collaboration/RoomMessageRetentionJob.ts
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var DEFAULT_INTERVAL_MS = 6 * 60 * 60 * 1e3;
+var DEFAULT_INITIAL_DELAY_MS = 6e4;
+var DEFAULT_BATCH_SIZE = 500;
+var MAX_BATCHES_PER_RUN = 1e3;
+var DEFAULT_RETENTION_DAYS = 60;
+function parseRetentionDays(value) {
+  if (value === void 0 || value === null) return DEFAULT_RETENTION_DAYS;
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  if (trimmed.length === 0) return DEFAULT_RETENTION_DAYS;
+  const parsed = Number(trimmed);
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : void 0;
+}
+var RoomMessageRetentionJob = class {
+  /**
+   * Creates a retention sweep job.
+   *
+   * @param deps Message store slice, positive retention days, and logger.
+   * @param options Optional interval, initial delay, batch size, and clock overrides.
+   */
+  constructor(deps, options = {}) {
+    this.deps = deps;
+    this.disposed = false;
+    this.running = false;
+    this.intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;
+    this.initialDelayMs = options.initialDelayMs ?? DEFAULT_INITIAL_DELAY_MS;
+    this.batchSize = options.batchSize ?? DEFAULT_BATCH_SIZE;
+    this.now = options.now ?? (() => /* @__PURE__ */ new Date());
+    for (const [name, value] of Object.entries({ intervalMs: this.intervalMs, initialDelayMs: this.initialDelayMs, batchSize: this.batchSize })) {
+      if (!Number.isSafeInteger(value) || value < 1) throw new RangeError(`Room message retention ${name} must be a positive safe integer`);
+    }
+  }
+  /** Schedules one delayed initial sweep plus the recurring interval (both unref'd). */
+  start() {
+    if (this.disposed || this.initial !== void 0 || this.interval !== void 0) return;
+    this.initial = setTimeout(() => {
+      this.initial = void 0;
+      void this.runOnce();
+    }, this.initialDelayMs);
+    this.initial.unref?.();
+    this.interval = setInterval(() => void this.runOnce(), this.intervalMs);
+    this.interval.unref?.();
+  }
+  /**
+   * Runs one bounded sweep: batches until a short batch or the per-run batch cap.
+   *
+   * @returns The number of deleted rows (0 on disabled/overlapping runs or failures).
+   */
+  async runOnce() {
+    if (this.disposed || this.running) return 0;
+    this.running = true;
+    try {
+      const before = new Date(this.now().getTime() - this.deps.days * DAY_MS);
+      let deleted = 0;
+      for (let batch = 0; batch < MAX_BATCHES_PER_RUN; batch += 1) {
+        const removed = await this.deps.messages.deleteChatOlderThan({ before, limit: this.batchSize });
+        deleted += removed;
+        if (removed < this.batchSize) break;
+      }
+      if (deleted > 0) this.deps.log.info?.("project-room:message-retention-swept", { deleted, days: this.deps.days });
+      return deleted;
+    } catch (error) {
+      this.deps.log.warn("project-room:message-retention-failed", {
+        days: this.deps.days,
+        error: error instanceof Error ? error.name : "UnknownError"
+      });
+      return 0;
+    } finally {
+      this.running = false;
+    }
+  }
+  /** Stops the timers; an in-flight sweep finishes on its own. */
+  dispose() {
+    this.disposed = true;
+    if (this.initial !== void 0) {
+      clearTimeout(this.initial);
+      this.initial = void 0;
+    }
+    if (this.interval !== void 0) {
+      clearInterval(this.interval);
+      this.interval = void 0;
+    }
+  }
+};
+function createRoomMessageRetentionJob(input) {
+  const days = parseRetentionDays(input.days);
+  if (days === void 0) return void 0;
+  return new RoomMessageRetentionJob({ messages: input.messages, days, log: input.log }, input.options);
+}
+
 // src/services/collaboration/ProjectTaskExecutionMutex.ts
-var import_protocols18 = require("@axiom-lattice/protocols");
+var import_protocols19 = require("@axiom-lattice/protocols");
 function machineKey(scope) {
-  const snapshot = (0, import_protocols18.snapshotExactRecord)(scope, ["tenantId", "assistantId", "projectId"]);
+  const snapshot = (0, import_protocols19.snapshotExactRecord)(scope, ["tenantId", "assistantId", "projectId"]);
   if (!snapshot) throw new Error("Invalid Project task machine scope");
   const values = [snapshot.tenantId, snapshot.assistantId, snapshot.projectId];
   for (const value of values) {
@@ -21065,7 +21151,7 @@ var ProjectTaskExecutionMutex = class {
 // src/services/collaboration/ProjectTaskExecutionService.ts
 var import_node_crypto18 = require("crypto");
 var import_core47 = require("@axiom-lattice/core");
-var import_protocols19 = require("@axiom-lattice/protocols");
+var import_protocols20 = require("@axiom-lattice/protocols");
 var SYSTEM_ACTOR = "system";
 var QUEUE_CLASSIFICATION_ATTEMPTS = 3;
 var ProjectTaskExecutionError = class extends Error {
@@ -21656,7 +21742,7 @@ function buildTrustedTaskContext(task, thread, inputMessageId) {
   };
 }
 function taskThreadMetadata(thread) {
-  const row = (0, import_protocols19.snapshotExactRecord)(thread.metadata, [
+  const row = (0, import_protocols20.snapshotExactRecord)(thread.metadata, [
     "source",
     "kind",
     "workspaceId",
@@ -21697,7 +21783,7 @@ function classifyRecoveryRows(task, thread, pending2, processingBefore, processi
 }
 function validRecoveryRow(row, task, thread) {
   try {
-    const trusted = (0, import_protocols19.parseTrustedRunContext)(row.trusted_run_context).projectTask;
+    const trusted = (0, import_protocols20.parseTrustedRunContext)(row.trusted_run_context).projectTask;
     const metadata = taskThreadMetadata(thread);
     return row.execution_mode === "followup" && !!trusted && trusted.tenantId === task.tenantId && trusted.workspaceId === task.workspaceId && trusted.projectId === task.projectId && trusted.assistantId === task.ownerId && trusted.taskId === task.id && trusted.threadId === thread.id && trusted.inputMessageId === row.id && !!metadata && trusted.roomId === metadata.roomId && trusted.membershipId === metadata.membershipId && metadata.assistantId === task.ownerId && metadata.taskId === task.id;
   } catch {
@@ -21708,7 +21794,7 @@ function validRecoveryRow(row, task, thread) {
 // src/services/collaboration/ProjectTaskObserver.ts
 var import_node_crypto19 = require("crypto");
 var import_core48 = require("@axiom-lattice/core");
-var import_protocols20 = require("@axiom-lattice/protocols");
+var import_protocols21 = require("@axiom-lattice/protocols");
 var SYSTEM_ACTOR2 = "system";
 var TERMINAL_ACTIONS = ["completed", "failed", "interrupted", "cancelled"];
 var MAX_LEARNING_ROUND_ANCESTORS = 8;
@@ -22445,7 +22531,7 @@ function errorMessage3(error) {
 }
 function readCreatedBy(value) {
   try {
-    const row = (0, import_protocols20.snapshotExactRecord)(value, ["assistantId", "membershipId"]);
+    const row = (0, import_protocols21.snapshotExactRecord)(value, ["assistantId", "membershipId"]);
     return row && typeof row.assistantId === "string" && row.assistantId.length > 0 && typeof row.membershipId === "string" && row.membershipId.length > 0 ? { assistantId: row.assistantId, membershipId: row.membershipId } : void 0;
   } catch {
     return void 0;
@@ -22461,7 +22547,7 @@ function combineSignals(left, right) {
 // src/services/collaboration/RoomProjectionService.ts
 var import_node_crypto20 = require("crypto");
 var import_core49 = require("@axiom-lattice/core");
-var import_protocols21 = require("@axiom-lattice/protocols");
+var import_protocols22 = require("@axiom-lattice/protocols");
 var ROOM_PROJECTABLE_ACTIONS = [
   "interrupted",
   "failed",
@@ -22540,7 +22626,7 @@ var RoomProjectionService = class {
         projectId: task.projectId,
         roomId: room.id,
         author: { type: "system" },
-        content: { type: "text", text: `${import_protocols21.PROJECT_ROOM_TASK_DELEGATED_LABEL}${import_protocols21.PROJECT_ROOM_TASK_DELEGATED_SEPARATOR}${input.fromLabel} \u2192 ${input.toLabel}` },
+        content: { type: "text", text: `${import_protocols22.PROJECT_ROOM_TASK_DELEGATED_LABEL}${import_protocols22.PROJECT_ROOM_TASK_DELEGATED_SEPARATOR}${input.fromLabel} \u2192 ${input.toLabel}` },
         mentions: [],
         source: "task",
         sourceId: task.id,
@@ -22691,7 +22777,7 @@ function parseProjectionInput(taskValue, itemValue) {
   }
 }
 function snapshotProjectableWorkItem(value) {
-  const row = (0, import_protocols21.snapshotExactRecord)(value, ["id", "taskId", "tenantId", "action", "actor", "createdAt"], [
+  const row = (0, import_protocols22.snapshotExactRecord)(value, ["id", "taskId", "tenantId", "action", "actor", "createdAt"], [
     "workspaceId",
     "projectId",
     "threadId",
@@ -22701,7 +22787,7 @@ function snapshotProjectableWorkItem(value) {
     "eventKey"
   ]);
   const createdAt = cloneExactDate(row?.createdAt);
-  if (!row || !createdAt || typeof row.id !== "string" || !row.id || typeof row.taskId !== "string" || !row.taskId || typeof row.tenantId !== "string" || !row.tenantId || typeof row.workspaceId !== "string" || !row.workspaceId || typeof row.projectId !== "string" || !row.projectId || typeof row.actor !== "string" || !row.actor || typeof row.eventKey !== "string" || !row.eventKey || !import_protocols21.PROJECT_TASK_LIFECYCLE_ACTIONS.includes(row.action) || row.threadId !== void 0 && typeof row.threadId !== "string" || row.summary !== void 0 && typeof row.summary !== "string" || row.attempt !== void 0 && (typeof row.attempt !== "number" || !Number.isFinite(row.attempt))) return void 0;
+  if (!row || !createdAt || typeof row.id !== "string" || !row.id || typeof row.taskId !== "string" || !row.taskId || typeof row.tenantId !== "string" || !row.tenantId || typeof row.workspaceId !== "string" || !row.workspaceId || typeof row.projectId !== "string" || !row.projectId || typeof row.actor !== "string" || !row.actor || typeof row.eventKey !== "string" || !row.eventKey || !import_protocols22.PROJECT_TASK_LIFECYCLE_ACTIONS.includes(row.action) || row.threadId !== void 0 && typeof row.threadId !== "string" || row.summary !== void 0 && typeof row.summary !== "string" || row.attempt !== void 0 && (typeof row.attempt !== "number" || !Number.isFinite(row.attempt))) return void 0;
   try {
     const detail = row.detail === void 0 ? void 0 : snapshotJsonValue(row.detail);
     if (detail !== void 0 && !isRecord3(detail)) return void 0;
@@ -22728,12 +22814,12 @@ function parseIso(value) {
   return typeof value === "string" && value.length > 0 && Number.isFinite(Date.parse(value));
 }
 function parseInterruption(value) {
-  const common = (0, import_protocols21.snapshotExactRecord)(value, ["type", "summary", "requestedAt"]);
+  const common = (0, import_protocols22.snapshotExactRecord)(value, ["type", "summary", "requestedAt"]);
   if (common && (common.type === "missing_input" || common.type === "user_decision") && typeof common.summary === "string" && common.summary.length > 0 && parseIso(common.requestedAt)) {
     return { type: common.type, summary: common.summary, requestedAt: common.requestedAt };
   }
-  const external = (0, import_protocols21.snapshotExactRecord)(value, ["type", "summary", "requestedAt", "dependencyTaskIds"]);
-  const ids = (0, import_protocols21.snapshotExactArray)(external?.dependencyTaskIds);
+  const external = (0, import_protocols22.snapshotExactRecord)(value, ["type", "summary", "requestedAt", "dependencyTaskIds"]);
+  const ids = (0, import_protocols22.snapshotExactArray)(external?.dependencyTaskIds);
   if (external?.type === "external_dependency" && typeof external.summary === "string" && external.summary.length > 0 && parseIso(external.requestedAt) && ids && ids.length > 0 && ids.every((id3) => typeof id3 === "string" && id3.length > 0) && new Set(ids).size === ids.length) {
     return {
       type: "external_dependency",
@@ -22742,22 +22828,22 @@ function parseInterruption(value) {
       dependencyTaskIds: [...ids]
     };
   }
-  const review = (0, import_protocols21.snapshotExactRecord)(value, ["type", "evidenceId"]);
+  const review = (0, import_protocols22.snapshotExactRecord)(value, ["type", "evidenceId"]);
   return review?.type === "review_required" && typeof review.evidenceId === "string" && review.evidenceId.length > 0 ? { type: "review_required", evidenceId: review.evidenceId } : void 0;
 }
 function parseBeliefImpact(value) {
-  const rows = (0, import_protocols21.snapshotExactArray)(value);
+  const rows = (0, import_protocols22.snapshotExactArray)(value);
   if (!rows) return void 0;
   const impacts = [];
   for (const row of rows) {
-    const entry = (0, import_protocols21.snapshotExactRecord)(row, ["key", "after", "basis"]);
+    const entry = (0, import_protocols22.snapshotExactRecord)(row, ["key", "after", "basis"]);
     if (!entry || typeof entry.key !== "string" || !entry.key || typeof entry.after !== "number" || !Number.isFinite(entry.after) || typeof entry.basis !== "string" || !entry.basis) return void 0;
     impacts.push({ key: entry.key, after: entry.after, basis: entry.basis });
   }
   return impacts;
 }
 function parseCompletion(item) {
-  const row = (0, import_protocols21.snapshotExactRecord)(item.detail, ["evidenceId", "eventKey", "result", "beliefImpact"]);
+  const row = (0, import_protocols22.snapshotExactRecord)(item.detail, ["evidenceId", "eventKey", "result", "beliefImpact"]);
   const beliefImpact = parseBeliefImpact(row?.beliefImpact);
   if (!row || typeof row.evidenceId !== "string" || !row.evidenceId || typeof row.eventKey !== "string" || !row.eventKey || item.eventKey !== `${row.eventKey}:completed` || typeof row.result !== "string" || !beliefImpact) return void 0;
   return { evidenceId: row.evidenceId, eventKey: row.eventKey, result: row.result, beliefImpact };
@@ -22767,19 +22853,19 @@ function parseProjection(item) {
     return parseInterruption(item.detail) ? { kind: "interrupted", text: "Task interrupted" } : void 0;
   }
   if (item.action === "failed") {
-    const row = (0, import_protocols21.snapshotExactRecord)(item.detail, ["failureReason"]);
+    const row = (0, import_protocols22.snapshotExactRecord)(item.detail, ["failureReason"]);
     return typeof row?.failureReason === "string" && row.failureReason ? { kind: "failed", text: "Task failed" } : void 0;
   }
   if (item.action === "completed") {
     return parseCompletion(item) ? { kind: "completed", text: "Task completed" } : void 0;
   }
   if (item.action === "cancelled") {
-    const empty = (0, import_protocols21.snapshotExactRecord)(item.detail, []);
-    const summarized = (0, import_protocols21.snapshotExactRecord)(item.detail, ["summary"]);
+    const empty = (0, import_protocols22.snapshotExactRecord)(item.detail, []);
+    const summarized = (0, import_protocols22.snapshotExactRecord)(item.detail, ["summary"]);
     return empty || typeof summarized?.summary === "string" && summarized.summary ? { kind: "cancelled", text: "Task cancelled" } : void 0;
   }
   if (item.action === "reassigned") {
-    const row = (0, import_protocols21.snapshotExactRecord)(
+    const row = (0, import_protocols22.snapshotExactRecord)(
       item.detail,
       ["previousOwnerId", "previousThreadId", "ownerId", "membershipId", "threadId"]
     );
@@ -22788,7 +22874,7 @@ function parseProjection(item) {
   return void 0;
 }
 function assertCanonicalProjection(value, expected) {
-  const row = (0, import_protocols21.snapshotExactRecord)(value, [
+  const row = (0, import_protocols22.snapshotExactRecord)(value, [
     "id",
     "tenantId",
     "workspaceId",
@@ -22802,9 +22888,9 @@ function assertCanonicalProjection(value, expected) {
     "idempotencyKey",
     "createdAt"
   ]);
-  const author = (0, import_protocols21.snapshotExactRecord)(row?.author, ["type"]);
-  const content = (0, import_protocols21.snapshotExactRecord)(row?.content, ["type", "text"]);
-  const mentions = (0, import_protocols21.snapshotExactArray)(row?.mentions);
+  const author = (0, import_protocols22.snapshotExactRecord)(row?.author, ["type"]);
+  const content = (0, import_protocols22.snapshotExactRecord)(row?.content, ["type", "text"]);
+  const mentions = (0, import_protocols22.snapshotExactArray)(row?.mentions);
   const createdAt = cloneExactDate(row?.createdAt);
   if (!row || !createdAt || author?.type !== "system" || content?.type !== "text" || content.text !== expected.content.text || !mentions || mentions.length !== 0 || typeof row.id !== "string" || !row.id || row.tenantId !== expected.tenantId || row.workspaceId !== expected.workspaceId || row.projectId !== expected.projectId || row.roomId !== expected.roomId || row.source !== "task" || row.sourceId !== expected.sourceId || row.idempotencyKey !== expected.idempotencyKey) {
     throw new Error("Invalid canonical task projection");
@@ -22825,7 +22911,7 @@ function assertCanonicalProjection(value, expected) {
   };
 }
 function snapshotLifecycleCursor(value) {
-  const row = (0, import_protocols21.snapshotExactRecord)(value, ["id", "taskId", "tenantId", "action", "actor", "createdAt"], [
+  const row = (0, import_protocols22.snapshotExactRecord)(value, ["id", "taskId", "tenantId", "action", "actor", "createdAt"], [
     "workspaceId",
     "projectId",
     "threadId",
@@ -22846,7 +22932,7 @@ var import_core51 = require("@axiom-lattice/core");
 
 // src/services/collaboration/ProjectRoomEventBroker.ts
 var import_node_crypto21 = require("crypto");
-var import_protocols22 = require("@axiom-lattice/protocols");
+var import_protocols23 = require("@axiom-lattice/protocols");
 var DEFAULT_MAX_EVENTS_PER_ROOM = 1e3;
 var DEFAULT_MAX_EVENT_AGE_MS = 10 * 60 * 1e3;
 var DEFAULT_MAX_ROOMS = 1e3;
@@ -22909,7 +22995,7 @@ var ProjectRoomEventBroker = class {
     const canonicalScope = snapshotScope(scope);
     const key = scopeKey2(canonicalScope);
     const now = this.currentTime();
-    if (this.sequence >= Number.MAX_SAFE_INTEGER) throw new import_protocols22.ProjectRoomBrokerCapacityError();
+    if (this.sequence >= Number.MAX_SAFE_INTEGER) throw new import_protocols23.ProjectRoomBrokerCapacityError();
     const nextSequence = this.sequence + 1;
     const event = snapshotJson({
       ...snapshotDraft(draft),
@@ -23092,11 +23178,11 @@ var ProjectRoomEventBroker = class {
   }
   resolveCursor(key, afterEventId, plan) {
     if (afterEventId === void 0) return void 0;
-    const cursor = (0, import_protocols22.parseProjectRoomEventId)(afterEventId);
-    if (!cursor) throw new import_protocols22.ProjectRoomCursorError("CURSOR_EXPIRED");
-    if (cursor.epoch !== this.epoch) throw new import_protocols22.ProjectRoomCursorError("SERVER_RESTART");
+    const cursor = (0, import_protocols23.parseProjectRoomEventId)(afterEventId);
+    if (!cursor) throw new import_protocols23.ProjectRoomCursorError("CURSOR_EXPIRED");
+    if (cursor.epoch !== this.epoch) throw new import_protocols23.ProjectRoomCursorError("SERVER_RESTART");
     if (plan.sequences.has(cursor.sequence) || this.sequenceScopes.get(cursor.sequence) !== key) {
-      throw new import_protocols22.ProjectRoomCursorError("CURSOR_EXPIRED");
+      throw new import_protocols23.ProjectRoomCursorError("CURSOR_EXPIRED");
     }
     return cursor.sequence;
   }
@@ -23189,7 +23275,7 @@ function snapshotJson(value, ancestors = /* @__PURE__ */ new Set()) {
 
 // src/services/collaboration/ProjectRoomRealtimePublisher.ts
 var import_node_crypto22 = require("crypto");
-var import_protocols23 = require("@axiom-lattice/protocols");
+var import_protocols24 = require("@axiom-lattice/protocols");
 var BrokerProjectRoomRealtimePublisher = class {
   /** Creates a publisher around a broker and structured warning logger. */
   constructor(deps) {
@@ -23203,7 +23289,7 @@ var BrokerProjectRoomRealtimePublisher = class {
   /** Publishes a canonical message after projecting it to its public shape. */
   messageCreated(message) {
     this.publish("message.created", () => {
-      const projection = (0, import_protocols23.snapshotProjectRoomMessageRealtime)(message);
+      const projection = (0, import_protocols24.snapshotProjectRoomMessageRealtime)(message);
       if (!projection) return void 0;
       return {
         sourceKey: `message:${projection.publicMessage.id}`,
@@ -23218,7 +23304,7 @@ var BrokerProjectRoomRealtimePublisher = class {
     this.publish("roster.changed", () => {
       const membership = snapshotInput(input, "roster");
       if (membership.membership.tenantId !== membership.tenantId || membership.membership.roomId !== membership.roomId || !safeId2(membership.membership.projectId)) throw new TypeError("Invalid roster scope");
-      const projection = (0, import_protocols23.snapshotProjectRoomBotMembershipRealtime)(membership.membership);
+      const projection = (0, import_protocols24.snapshotProjectRoomBotMembershipRealtime)(membership.membership);
       if (!projection) return void 0;
       return {
         sourceKey: membership.sourceKey,
@@ -23233,7 +23319,7 @@ var BrokerProjectRoomRealtimePublisher = class {
     this.publish("membership.changed", () => {
       const membership = snapshotInput(input, "membership");
       if (membership.membership.tenantId !== membership.tenantId || !safeId2(membership.membership.projectId)) throw new TypeError("Invalid membership scope");
-      const projection = (0, import_protocols23.snapshotProjectRoomMembershipRealtime)(membership.membership);
+      const projection = (0, import_protocols24.snapshotProjectRoomMembershipRealtime)(membership.membership);
       if (!projection) return void 0;
       return {
         sourceKey: membership.sourceKey,
@@ -23262,11 +23348,11 @@ var BrokerProjectRoomRealtimePublisher = class {
   /** Publishes a membership notice onto the affected user's channel scope. */
   membershipAffected(input) {
     this.publish("membership.affected", () => {
-      const value = (0, import_protocols23.snapshotExactRecord)(input, ["tenantId", "userId", "change", "projectId", "roomId", "sourceKey"]);
+      const value = (0, import_protocols24.snapshotExactRecord)(input, ["tenantId", "userId", "change", "projectId", "roomId", "sourceKey"]);
       if (!value || !safeId2(value.tenantId) || !safeId2(value.userId) || !safeId2(value.projectId) || !safeId2(value.roomId) || !safeSourceKey(value.sourceKey) || !["added", "removed", "role_changed"].includes(value.change)) {
         throw new TypeError("Invalid membership input");
       }
-      const scope = (0, import_protocols23.projectRoomUserEventScope)(value.tenantId, value.userId);
+      const scope = (0, import_protocols24.projectRoomUserEventScope)(value.tenantId, value.userId);
       return {
         sourceKey: value.sourceKey,
         id: value.sourceKey,
@@ -23282,11 +23368,11 @@ var BrokerProjectRoomRealtimePublisher = class {
   /** Publishes a read-marker update onto the acting user's channel scope. */
   readChanged(input) {
     this.publish("read.changed", () => {
-      const value = (0, import_protocols23.snapshotExactRecord)(input, ["tenantId", "userId", "projectId", "roomId", "lastReadAt", "sourceKey"]);
+      const value = (0, import_protocols24.snapshotExactRecord)(input, ["tenantId", "userId", "projectId", "roomId", "lastReadAt", "sourceKey"]);
       if (!value || !safeId2(value.tenantId) || !safeId2(value.userId) || !safeId2(value.projectId) || !safeId2(value.roomId) || !safeSourceKey(value.sourceKey) || typeof value.lastReadAt !== "string" || !Number.isFinite(Date.parse(value.lastReadAt))) {
         throw new TypeError("Invalid read input");
       }
-      const scope = (0, import_protocols23.projectRoomUserEventScope)(value.tenantId, value.userId);
+      const scope = (0, import_protocols24.projectRoomUserEventScope)(value.tenantId, value.userId);
       return {
         sourceKey: value.sourceKey,
         id: value.sourceKey,
@@ -23327,13 +23413,13 @@ var BrokerProjectRoomRealtimePublisher = class {
 };
 function snapshotInput(input, kind) {
   const keys2 = kind === "message" ? ["tenantId", "roomId", "message", "sourceKey"] : kind === "roster" ? ["tenantId", "roomId", "membership", "sourceKey"] : ["tenantId", "roomId", "membership", "sourceKey"];
-  const value = (0, import_protocols23.snapshotExactRecord)(input, [...keys2, "change"]);
+  const value = (0, import_protocols24.snapshotExactRecord)(input, [...keys2, "change"]);
   const validChange = kind === "roster" ? ["added", "updated", "paused", "resumed", "removed"].includes(value?.change) : ["added", "role_changed", "removed"].includes(value?.change);
   if (!value || !safeId2(value.tenantId) || !safeId2(value.roomId) || !safeSourceKey(value.sourceKey) || !validChange) throw new TypeError(`Invalid ${kind} input`);
   return value;
 }
 function snapshotTaskInput(input) {
-  const value = (0, import_protocols23.snapshotExactRecord)(input, ["tenantId", "roomId", "projectId", "taskId", "status", "ownerMembershipId", "updatedAt", "sourceKey"]);
+  const value = (0, import_protocols24.snapshotExactRecord)(input, ["tenantId", "roomId", "projectId", "taskId", "status", "ownerMembershipId", "updatedAt", "sourceKey"]);
   if (!value || !safeId2(value.tenantId) || !safeId2(value.roomId) || !safeSourceKey(value.sourceKey)) throw new TypeError("Invalid task input");
   if (!safeId2(value.projectId) || !safeId2(value.taskId) || !safeId2(value.ownerMembershipId) || !["pending", "in_progress", "review", "failed", "interrupted", "completed", "cancelled"].includes(value.status)) throw new TypeError("Invalid task input");
   if (typeof value.updatedAt !== "string") throw new TypeError("Invalid task timestamp");
@@ -23359,7 +23445,7 @@ function safeErrorCode(error) {
 
 // src/services/collaboration/ProjectRoomTaskEventSubscriber.ts
 var import_core50 = require("@axiom-lattice/core");
-var import_protocols24 = require("@axiom-lattice/protocols");
+var import_protocols25 = require("@axiom-lattice/protocols");
 var ProjectRoomTaskEventSubscriber = class {
   /** Creates a bounded Project task lifecycle observer. */
   constructor(deps) {
@@ -23469,7 +23555,7 @@ var ProjectRoomTaskEventSubscriber = class {
     }
   }
   parse(value) {
-    const row = (0, import_protocols24.snapshotExactRecord)(value, ["tenantId", "workspaceId", "projectId", "taskId", "status", "action", "eventKey", "updatedAt"], ["threadId"]);
+    const row = (0, import_protocols25.snapshotExactRecord)(value, ["tenantId", "workspaceId", "projectId", "taskId", "status", "action", "eventKey", "updatedAt"], ["threadId"]);
     const actions = ["in_progress", "interrupted", "failed", "completed", "cancelled", "reassigned"];
     const statuses = ["pending", "in_progress", "review", "failed", "interrupted", "completed", "cancelled"];
     if (!row || !actions.includes(String(row.action)) || !statuses.includes(String(row.status)) || !["tenantId", "workspaceId", "projectId", "taskId", "eventKey", "updatedAt"].every((key) => typeof row[key] === "string" && row[key].length > 0) || !Number.isFinite(Date.parse(row.updatedAt)) || row.threadId !== void 0 && typeof row.threadId !== "string") return void 0;
@@ -23665,7 +23751,7 @@ function createRoomPushNotifier(input) {
 }
 
 // src/services/collaboration/WorkspaceRoomEventsService.ts
-var import_protocols25 = require("@axiom-lattice/protocols");
+var import_protocols26 = require("@axiom-lattice/protocols");
 
 // src/services/collaboration/ProjectRoomSseWriter.ts
 var DEFAULT_MAX_FRAMES = 256;
@@ -23913,7 +23999,7 @@ var WorkspaceRoomEventsService = class {
     const clear = (timer) => {
       if (timer !== void 0) clearTimeout(timer);
     };
-    const userScope = (0, import_protocols25.projectRoomUserEventScope)(actor3.tenantId, actor3.userId);
+    const userScope = (0, import_protocols26.projectRoomUserEventScope)(actor3.tenantId, actor3.userId);
     const userScopeKey = JSON.stringify([userScope.tenantId, userScope.roomId, userScope.projectId]);
     const roomScopeKey = (scope) => JSON.stringify([scope.tenantId, scope.roomId, scope.projectId]);
     const serializeScoped = (scope, event) => scope === null ? `id: ${event.id}
@@ -24023,7 +24109,7 @@ data: ${JSON.stringify({ ...event, scope })}
       accessTimer = setTimeout(() => {
         accessTimer = void 0;
         if (closed) return;
-        const projectIds = [...subscriptions.values()].map((entry) => entry.scope.projectId).filter((projectId) => projectId !== import_protocols25.PROJECT_ROOM_USER_CHANNEL_PROJECT);
+        const projectIds = [...subscriptions.values()].map((entry) => entry.scope.projectId).filter((projectId) => projectId !== import_protocols26.PROJECT_ROOM_USER_CHANNEL_PROJECT);
         Promise.all(projectIds.map((projectId) => Promise.resolve().then(() => this.deps.requireReadAccess({ tenantId: actor3.tenantId, userId: actor3.userId, projectId })))).then(() => {
           if (!closed) scheduleAccessCheck();
         }, () => {
@@ -24066,7 +24152,7 @@ function createWorkspaceMemberRoomLister(deps) {
 }
 
 // src/routes/workspace-room-events.ts
-var import_protocols26 = require("@axiom-lattice/protocols");
+var import_protocols27 = require("@axiom-lattice/protocols");
 function registerWorkspaceRoomEventRoutes(app2, deps) {
   app2.get("/api/workspaces/:workspaceId/room-events", async (request, reply) => {
     try {
@@ -24094,7 +24180,7 @@ function registerWorkspaceRoomEventRoutes(app2, deps) {
   });
 }
 function exactParams(params) {
-  const value = (0, import_protocols26.snapshotExactRecord)(params, ["workspaceId"]);
+  const value = (0, import_protocols27.snapshotExactRecord)(params, ["workspaceId"]);
   if (!value || typeof value.workspaceId !== "string" || !value.workspaceId.trim()) throw new InvalidRealtimeRequestError();
   return { workspaceId: value.workspaceId };
 }
@@ -24222,7 +24308,7 @@ function snapshotDataRecord(value) {
     for (const key of Reflect.ownKeys(descriptors)) {
       if (typeof key !== "string") return void 0;
       const descriptor = descriptors[key];
-      const data = (0, import_protocols27.descriptorDataValue)(descriptor);
+      const data = (0, import_protocols28.descriptorDataValue)(descriptor);
       if (!data) return void 0;
       result[key] = data.value;
     }
@@ -24237,7 +24323,7 @@ function isPublicRoomAddress(message) {
 }
 async function validateReassignmentThread(threads, input) {
   const thread = snapshotThread(await threads.getThreadById(input.tenantId, input.newThreadId));
-  const metadata = (0, import_protocols27.snapshotExactRecord)(thread?.metadata, [
+  const metadata = (0, import_protocols28.snapshotExactRecord)(thread?.metadata, [
     "source",
     "kind",
     "workspaceId",
@@ -24269,6 +24355,15 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
   const accessService = new ProjectAccessService({ projectStore, membershipStore: projectMembershipStore, userTenantLinkStore });
   const realtimeMode = resolveProjectRoomRealtimeMode();
   const realtimeLog = options.projectTaskLog ?? { warn: () => void 0 };
+  const roomMessageRetention = createRoomMessageRetentionJob({
+    messages: projectRoomMessageStore,
+    days: process.env.PROJECT_ROOM_MESSAGE_RETENTION_DAYS,
+    log: realtimeLog
+  });
+  if (roomMessageRetention) {
+    roomMessageRetention.start();
+    app2.addHook("onClose", () => roomMessageRetention.dispose());
+  }
   const roomPushNotifier = createRoomPushNotifier({
     subscriptionStore: userPushSubscriptionStore,
     membershipStore: projectMembershipStore,
@@ -24943,9 +25038,9 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
 function tryCreateProjectTaskRuntime(input) {
   let projectWorkItems;
   try {
-    projectWorkItems = (0, import_protocols27.requireProjectTaskWorkItemStore)(input.taskWorkItemStore);
+    projectWorkItems = (0, import_protocols28.requireProjectTaskWorkItemStore)(input.taskWorkItemStore);
   } catch (error) {
-    if (error instanceof import_protocols27.ProjectTaskStoreUnsupportedError) {
+    if (error instanceof import_protocols28.ProjectTaskStoreUnsupportedError) {
       input.log?.warn("project-task:runtime-unavailable", {
         code: error.code,
         missingMethods: error.missingMethods
@@ -26855,7 +26950,7 @@ var import_core66 = require("@axiom-lattice/core");
 
 // src/router/MessageRouter.ts
 var import_core65 = require("@axiom-lattice/core");
-var import_protocols28 = require("@axiom-lattice/protocols");
+var import_protocols29 = require("@axiom-lattice/protocols");
 var import_crypto12 = require("crypto");
 var BindingNotFoundError = class extends Error {
   constructor(message) {
@@ -26890,10 +26985,10 @@ function clarifyText(clarify) {
   return ["```clarify", JSON.stringify({ questions: clarify.questions }), "```"].join("\n");
 }
 function exactDataValues(value, required, optional = []) {
-  return (0, import_protocols28.snapshotExactRecord)(value, required, optional);
+  return (0, import_protocols29.snapshotExactRecord)(value, required, optional);
 }
 function uniqueNonemptyStrings(value) {
-  const snapshot = (0, import_protocols28.snapshotExactArray)(value);
+  const snapshot = (0, import_protocols29.snapshotExactArray)(value);
   if (!snapshot || snapshot.length === 0 || snapshot.some((entry) => typeof entry !== "string" || entry.length === 0)) return void 0;
   const values = snapshot;
   return new Set(values).size === values.length ? values : void 0;
@@ -27401,7 +27496,7 @@ var MessageRouter = class {
 
 // src/channels/room/RoomChannelAdapter.ts
 var import_zod15 = require("zod");
-var import_protocols29 = require("@axiom-lattice/protocols");
+var import_protocols30 = require("@axiom-lattice/protocols");
 var roomConfigSchema = import_zod15.z.object({}).strict();
 function createRoomChannelAdapter(writer) {
   return {
@@ -27462,7 +27557,7 @@ function exactStrings(value, keys2) {
 function exactValues2(value, required, optional = []) {
   try {
     if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-    return (0, import_protocols29.snapshotExactRecord)(value, required, optional);
+    return (0, import_protocols30.snapshotExactRecord)(value, required, optional);
   } catch {
     return void 0;
   }
@@ -27507,14 +27602,14 @@ async function prepareProjectTaskRuntime(runtime, log2) {
 }
 
 // src/index.ts
-var import_protocols36 = require("@axiom-lattice/protocols");
+var import_protocols37 = require("@axiom-lattice/protocols");
 process.on("unhandledRejection", (reason, promise) => {
   console.error("\u672A\u5904\u7406\u7684Promise\u62D2\u7EDD:", reason);
 });
 var DEFAULT_LOGGER_CONFIG = {
   name: "default",
   description: "Default logger for lattice-gateway service",
-  type: import_protocols36.LoggerType.PINO,
+  type: import_protocols37.LoggerType.PINO,
   serviceName: "lattice/gateway",
   loggerName: "lattice/gateway"
 };