@axiom-lattice/gateway 4.9.0 → 4.9.2

package/dist/index.js

@@ -573,12 +573,13 @@ async function invokePluginTool(deps, tenantId, pluginType, name, args, runConte
     maxResultBytes: tool.maxResultBytes
   });
   if (!result.ok) throw new Error(result.error ?? "sandbox plugin execution failed");
-  return result.result;
+  return result.result === void 0 ? (0, import_core35.handlerResultText)(result) : result.result;
 }
-var PluginToolScopeError;
+var import_core35, PluginToolScopeError;
 var init_pluginToolExecution = __esm({
   "src/services/plugins/pluginToolExecution.ts"() {
     "use strict";
+    import_core35 = require("@axiom-lattice/core");
     PluginToolScopeError = class extends Error {
       /**
        * @param name - Rejected tool name.
@@ -1144,8 +1145,8 @@ async function refreshStoreKeyMap() {
 function broadcastA2AKeyChanged(tenantId) {
   if (!tenantId) return;
   try {
-    const outbox = (0, import_core56.getStoreLattice)("default", "outbox").store;
-    void publishA2AKeyChanged(outbox, (0, import_core56.getReplicaId)(), tenantId);
+    const outbox = (0, import_core58.getStoreLattice)("default", "outbox").store;
+    void publishA2AKeyChanged(outbox, (0, import_core58.getReplicaId)(), tenantId);
   } catch {
   }
 }
@@ -1321,11 +1322,11 @@ function registerA2ARoutes(app2) {
     );
   }
 }
-var import_core56, _a2aKeyStore, _a2aAuthService;
+var import_core58, _a2aKeyStore, _a2aAuthService;
 var init_a2a = __esm({
   "src/routes/a2a.ts"() {
     "use strict";
-    import_core56 = require("@axiom-lattice/core");
+    import_core58 = require("@axiom-lattice/core");
     init_A2AAuthService();
     init_a2aKeySync();
     _a2aKeyStore = null;
@@ -1372,7 +1373,7 @@ function outcome(task) {
   });
 }
 async function backfillTopCallerGroup(tasks, top, deps) {
-  const registry = deps.registry ?? import_core74.taskRunRegistry;
+  const registry = deps.registry ?? import_core76.taskRunRegistry;
   const results = [];
   const eligible = [];
   for (const task of tasks) {
@@ -1426,11 +1427,11 @@ async function recoverTask(task, deps) {
   if (task.status !== "in_progress") {
     return { kind: "skipped", reason: "not_in_progress" };
   }
-  const registry = deps.registry ?? import_core74.taskRunRegistry;
+  const registry = deps.registry ?? import_core76.taskRunRegistry;
   if (registry.isLive(task.id) || deps.isTaskLive && await deps.isTaskLive(task)) {
     return { kind: "skipped", reason: "live" };
   }
-  const { convergedTasks } = await (0, import_core74.reconcileStaleTaskRuns)({
+  const { convergedTasks } = await (0, import_core76.reconcileStaleTaskRuns)({
     tasks: [task],
     actor: "system:on-demand-recovery",
     lifecycle: deps.lifecycle,
@@ -1526,29 +1527,29 @@ async function runOrphanRecovery(deps) {
   deps.log.info("Task orphan recovery complete", { recovered, skipped });
   return { recovered, skipped };
 }
-var import_messages, import_core74;
+var import_messages, import_core76;
 var init_TopCallerRecovery = __esm({
   "src/services/collaboration/TopCallerRecovery.ts"() {
     "use strict";
     import_messages = require("@langchain/core/messages");
-    import_core74 = require("@axiom-lattice/core");
+    import_core76 = require("@axiom-lattice/core");
   }
 });
 
 // src/services/collaboration/taskRunLiveness.ts
 function createTaskRunLiveness() {
   try {
-    import_core75.storeLatticeManager.getStoreLattice("default", "lease");
+    import_core77.storeLatticeManager.getStoreLattice("default", "lease");
   } catch {
     return void 0;
   }
   return async (task) => {
     try {
-      const store2 = import_core75.storeLatticeManager.getStoreLattice("default", "lease").store;
-      if (await store2.get((0, import_core75.taskRunLeaseKey)(task.id))) return true;
+      const store2 = import_core77.storeLatticeManager.getStoreLattice("default", "lease").store;
+      if (await store2.get((0, import_core77.taskRunLeaseKey)(task.id))) return true;
       const threadId = typeof task.context?.thread_id === "string" ? task.context.thread_id : void 0;
       if (threadId && task.ownerId) {
-        if (await store2.get((0, import_core75.threadRunLeaseKey)(task.tenantId, task.ownerId, threadId))) return true;
+        if (await store2.get((0, import_core77.threadRunLeaseKey)(task.tenantId, task.ownerId, threadId))) return true;
       }
       return false;
     } catch {
@@ -1556,11 +1557,11 @@ function createTaskRunLiveness() {
     }
   };
 }
-var import_core75;
+var import_core77;
 var init_taskRunLiveness = __esm({
   "src/services/collaboration/taskRunLiveness.ts"() {
     "use strict";
-    import_core75 = require("@axiom-lattice/core");
+    import_core77 = require("@axiom-lattice/core");
   }
 });
 
@@ -1570,7 +1571,7 @@ __export(OrphanRecoveryRuntime_exports, {
   createOrphanRecoveryRuntime: () => createOrphanRecoveryRuntime
 });
 function createOrphanRecoveryRuntime(deps) {
-  const lifecycle = deps.lifecycle ?? (0, import_core76.createTaskLifecycleService)({
+  const lifecycle = deps.lifecycle ?? (0, import_core78.createTaskLifecycleService)({
     taskStore: deps.taskStore,
     workItemStore: deps.workItemStore
   });
@@ -1578,7 +1579,7 @@ function createOrphanRecoveryRuntime(deps) {
     async recoverAll() {
       const isTaskLive = deps.isTaskLive ?? createTaskRunLiveness();
       return runOrphanRecovery({
-        reconcile: () => (0, import_core76.reconcileAllTenantTaskRuns)({
+        reconcile: () => (0, import_core78.reconcileAllTenantTaskRuns)({
           actor: "system:orphan-recovery",
           tenantStore: {
             listTenants: async () => (await deps.tenantStore.getAllTenants()).map((tenant2) => ({ id: tenant2.id }))
@@ -1604,7 +1605,7 @@ function createOrphanRecoveryRuntime(deps) {
       const isTaskLive = deps.isTaskLive ?? createTaskRunLiveness();
       return recoverTask(task, {
         lifecycle,
-        registry: import_core76.taskRunRegistry,
+        registry: import_core78.taskRunRegistry,
         orphans,
         callerFor: deps.callerFor,
         resume: deps.resume,
@@ -1613,11 +1614,11 @@ function createOrphanRecoveryRuntime(deps) {
     }
   };
 }
-var import_core76;
+var import_core78;
 var init_OrphanRecoveryRuntime = __esm({
   "src/services/collaboration/OrphanRecoveryRuntime.ts"() {
     "use strict";
-    import_core76 = require("@axiom-lattice/core");
+    import_core78 = require("@axiom-lattice/core");
     init_TopCallerRecovery();
     init_projectTaskScope();
     init_taskRunLiveness();
@@ -1633,12 +1634,12 @@ function createRecoveryCallerDeps() {
   return {
     callerFor: async (top, tenantId) => {
       if (!top.assistantId) return void 0;
-      const load = import_core77.getAgentClientAsync ?? import_core77.getAgentClient;
+      const load = import_core79.getAgentClientAsync ?? import_core79.getAgentClient;
       const client = await load(tenantId, top.assistantId);
       const config = { configurable: { thread_id: top.threadId, runConfig: { tenantId, assistant_id: top.assistantId } } };
       let agent;
       try {
-        agent = import_core77.agentInstanceManager.getAgent({ assistant_id: top.assistantId, thread_id: top.threadId, tenant_id: tenantId });
+        agent = import_core79.agentInstanceManager.getAgent({ assistant_id: top.assistantId, thread_id: top.threadId, tenant_id: tenantId });
       } catch {
       }
       return agent ? { client, config, agent } : { client, config };
@@ -1655,11 +1656,11 @@ function createRecoveryCallerDeps() {
     }
   };
 }
-var import_core77;
+var import_core79;
 var init_RecoveryCallerDeps = __esm({
   "src/services/collaboration/RecoveryCallerDeps.ts"() {
     "use strict";
-    import_core77 = require("@axiom-lattice/core");
+    import_core79 = require("@axiom-lattice/core");
   }
 });
 
@@ -2078,13 +2079,13 @@ function isA2ATaskSnapshot(value) {
 function snapshotSequence(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
 }
-var import_node_crypto30, import_node_util, import_core78, TASK_STATUS_TO_A2A_STATE, TITLE_MAX_LENGTH, A2ATaskScopeConflictError, A2ATaskStoreAdapter;
+var import_node_crypto30, import_node_util, import_core80, TASK_STATUS_TO_A2A_STATE, TITLE_MAX_LENGTH, A2ATaskScopeConflictError, A2ATaskStoreAdapter;
 var init_A2ATaskStoreAdapter = __esm({
   "src/services/a2a/A2ATaskStoreAdapter.ts"() {
     "use strict";
     import_node_crypto30 = require("crypto");
     import_node_util = require("util");
-    import_core78 = require("@axiom-lattice/core");
+    import_core80 = require("@axiom-lattice/core");
     TASK_STATUS_TO_A2A_STATE = {
       pending: "submitted",
       in_progress: "working",
@@ -2110,7 +2111,7 @@ var init_A2ATaskStoreAdapter = __esm({
         this.workItemStore = options.workItemStore;
         this.lifecycle = options.lifecycle;
         this.scope = options.scope;
-        this.runBridge = (0, import_core78.createTaskRunBridge)({
+        this.runBridge = (0, import_core80.createTaskRunBridge)({
           lifecycle: this.lifecycle,
           taskStore: this.taskStore,
           workItemStore: this.workItemStore
@@ -2461,12 +2462,12 @@ function assistantHasGovernedTask(assistant) {
   const allowedTools = taskMiddleware?.allowedTools;
   return !!taskMiddleware && (allowedTools === void 0 || Array.isArray(allowedTools) && (allowedTools.length === 0 || allowedTools.includes("manage_task")));
 }
-var import_uuid11, import_core79, import_protocols35, _AxiomAgentExecutor, AxiomAgentExecutor;
+var import_uuid11, import_core81, import_protocols35, _AxiomAgentExecutor, AxiomAgentExecutor;
 var init_AxiomAgentExecutor = __esm({
   "src/services/a2a/AxiomAgentExecutor.ts"() {
     "use strict";
     import_uuid11 = require("uuid");
-    import_core79 = require("@axiom-lattice/core");
+    import_core81 = require("@axiom-lattice/core");
     import_protocols35 = require("@axiom-lattice/protocols");
     init_a2aFileRefs();
     init_task_file_refs();
@@ -2563,7 +2564,7 @@ var init_AxiomAgentExecutor = __esm({
           await this.taskStore.save(initialTask);
           bus.publish(initialTask);
           try {
-            const agent = import_core79.agentInstanceManager.getAgent(this.agentParams(threadId));
+            const agent = import_core81.agentInstanceManager.getAgent(this.agentParams(threadId));
             const requestText = inputFiles.length > 0 ? `${text}
 
 ${formatFileRefsSection(inputFiles)}` : text;
@@ -2751,7 +2752,7 @@ ${formatFileRefsSection(inputFiles)}` : text;
         const threadId = task ? asString2(task.metadata?.threadId) : void 0;
         if (threadId) {
           try {
-            const agent = import_core79.agentInstanceManager.getAgent(this.agentParams(threadId));
+            const agent = import_core81.agentInstanceManager.getAgent(this.agentParams(threadId));
             await agent.abort();
           } catch (err) {
             console.warn({
@@ -3125,10 +3126,10 @@ function isAsyncGenerator(value) {
 }
 function registerA2AStandardRoutes(app2, deps) {
   const authService = deps.authService;
-  const resolveTasks = deps.getTaskStoreLattice ?? (() => (0, import_core80.getStoreLattice)("default", "task").store);
-  const resolveTaskWorkItems = deps.getTaskWorkItemStore ?? (() => (0, import_core80.getStoreLattice)("default", "taskWorkItem").store);
-  const getAssistantStore2 = deps.getAssistantStore ?? (() => (0, import_core80.getStoreLattice)("default", "assistant").store);
-  const getProjectStore2 = deps.getProjectStore ?? (() => (0, import_core80.getStoreLattice)("default", "project").store);
+  const resolveTasks = deps.getTaskStoreLattice ?? (() => (0, import_core82.getStoreLattice)("default", "task").store);
+  const resolveTaskWorkItems = deps.getTaskWorkItemStore ?? (() => (0, import_core82.getStoreLattice)("default", "taskWorkItem").store);
+  const getAssistantStore2 = deps.getAssistantStore ?? (() => (0, import_core82.getStoreLattice)("default", "assistant").store);
+  const getProjectStore2 = deps.getProjectStore ?? (() => (0, import_core82.getStoreLattice)("default", "project").store);
   const runtimeRegistry = deps.runtimeRegistry ?? new A2ARuntimeRegistry();
   app2.addHook("onClose", async () => {
     runtimeRegistry.close();
@@ -3211,7 +3212,7 @@ function registerA2AStandardRoutes(app2, deps) {
       const taskStore = assistantHasGovernedTask(assistant) ? new A2ATaskStoreAdapter({
         taskStore: internalTasks,
         workItemStore: workItems,
-        lifecycle: (0, import_core80.createTaskLifecycleService)({
+        lifecycle: (0, import_core82.createTaskLifecycleService)({
           taskStore: internalTasks,
           workItemStore: workItems
         }),
@@ -3330,7 +3331,7 @@ data: ${JSON.stringify(errorResponse)}
       const taskStore = assistantHasGovernedTask(assistant) ? new A2ATaskStoreAdapter({
         taskStore: internalTasks,
         workItemStore: workItems,
-        lifecycle: (0, import_core80.createTaskLifecycleService)({
+        lifecycle: (0, import_core82.createTaskLifecycleService)({
           taskStore: internalTasks,
           workItemStore: workItems
         }),
@@ -3385,13 +3386,13 @@ data: ${JSON.stringify(data)}
     }
   );
 }
-var import_uuid12, import_server2, import_core80, SSE_HEADERS;
+var import_uuid12, import_server2, import_core82, SSE_HEADERS;
 var init_a2a_standard = __esm({
   "src/routes/a2a-standard.ts"() {
     "use strict";
     import_uuid12 = require("uuid");
     import_server2 = require("@a2a-js/sdk/server");
-    import_core80 = require("@axiom-lattice/core");
+    import_core82 = require("@axiom-lattice/core");
     init_A2AAuthService();
     init_A2AAgentCardBuilder();
     init_A2ATaskStoreAdapter();
@@ -3954,8 +3955,8 @@ function exposedDeclarations(plugin) {
   return (plugin.meta.tools ?? []).filter((t2) => t2.expose);
 }
 async function registerExposedPluginTools() {
-  for (const key of import_core81.PluginRegistry.list()) {
-    const plugin = import_core81.PluginRegistry.get(key);
+  for (const key of import_core83.PluginRegistry.list()) {
+    const plugin = import_core83.PluginRegistry.get(key);
     if (!plugin?.middleware) continue;
     const exposed = exposedDeclarations(plugin);
     if (exposed.length === 0) continue;
@@ -3990,8 +3991,8 @@ async function registerExposedPluginTools() {
 }
 function collectExposedPluginUiResources(grants) {
   const resources = /* @__PURE__ */ new Map();
-  for (const type of import_core81.PluginRegistry.list()) {
-    const plugin = import_core81.PluginRegistry.get(type);
+  for (const type of import_core83.PluginRegistry.list()) {
+    const plugin = import_core83.PluginRegistry.get(type);
     if (!plugin?.middleware) continue;
     const exposedNames = new Set(exposedDeclarations(plugin).map((d) => d.name));
     if (exposedNames.size === 0) continue;
@@ -4015,11 +4016,11 @@ function collectExposedPluginUiResources(grants) {
   }
   return resources;
 }
-var import_core81;
+var import_core83;
 var init_registerExposedPlugins = __esm({
   "src/services/open/registerExposedPlugins.ts"() {
     "use strict";
-    import_core81 = require("@axiom-lattice/core");
+    import_core83 = require("@axiom-lattice/core");
     init_openLattice();
     init_pluginExposeAdapter();
   }
@@ -4034,14 +4035,14 @@ function toText(result) {
 }
 function defaultCatalog() {
   return {
-    getValidatedManifest: (tenantId, type) => (0, import_core82.getSandboxPluginCatalog)().getValidatedManifest(tenantId, type),
-    getExecutor: () => (0, import_core82.getSandboxPluginCatalog)().getExecutor(),
-    readPluginFile: (tenantId, type, relPath) => (0, import_core82.getSandboxPluginCatalog)().readPluginFile(tenantId, type, relPath)
+    getValidatedManifest: (tenantId, type) => (0, import_core84.getSandboxPluginCatalog)().getValidatedManifest(tenantId, type),
+    getExecutor: () => (0, import_core84.getSandboxPluginCatalog)().getExecutor(),
+    readPluginFile: (tenantId, type, relPath) => (0, import_core84.getSandboxPluginCatalog)().readPluginFile(tenantId, type, relPath)
   };
 }
 async function defaultResolveConnections(pluginType, ctx) {
   try {
-    return await (0, import_core82.resolveSandboxPluginConnections)(
+    return await (0, import_core84.resolveSandboxPluginConnections)(
       pluginType,
       { connectAll: true },
       {
@@ -4070,7 +4071,7 @@ function mergeOpenCatalog(globalCatalog, tenantTools) {
 async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
   const catalog = deps.catalog ?? defaultCatalog();
   const listPlugins = deps.listPlugins ?? (async (tenant2) => {
-    const snapshot = await (0, import_core82.getSandboxPluginCatalog)().ensureLoaded(tenant2);
+    const snapshot = await (0, import_core84.getSandboxPluginCatalog)().ensureLoaded(tenant2);
     return { plugins: snapshot.plugins, diagnostics: snapshot.diagnostics };
   });
   const resolveConnections = deps.resolveConnections ?? defaultResolveConnections;
@@ -4112,7 +4113,7 @@ async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
         domain,
         action: tool.name,
         description: tool.description,
-        schema: (0, import_core82.jsonSchemaToZod)(tool.schema),
+        schema: (0, import_core84.jsonSchemaToZod)(tool.schema),
         annotations: {
           readOnlyHint: tool.readOnly ?? false,
           destructiveHint: tool.destructive ?? false
@@ -4163,11 +4164,11 @@ async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
     }
   };
 }
-var import_core82;
+var import_core84;
 var init_tenantOpenPlugins = __esm({
   "src/services/open/tenantOpenPlugins.ts"() {
     "use strict";
-    import_core82 = require("@axiom-lattice/core");
+    import_core84 = require("@axiom-lattice/core");
     init_openLattice();
     init_pluginToolExecution();
   }
@@ -4204,13 +4205,13 @@ function emptyTenantPlugins() {
 }
 function registerOpenRoutes(app2, deps = {}) {
   const openAuth = deps.openAuth ?? new OpenCredentialService(
-    (0, import_core83.getStoreLattice)("default", "a2aApiKey").store,
-    (0, import_core83.getStoreLattice)("default", "project").store
+    (0, import_core85.getStoreLattice)("default", "a2aApiKey").store,
+    (0, import_core85.getStoreLattice)("default", "project").store
   );
   const grantsSource = deps.grantsSource ?? ((ctx) => ctx.grants);
   const audit = deps.audit ?? (() => {
     try {
-      const store2 = (0, import_core83.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core85.getStoreLattice)("default", "openAudit").store;
       return new OpenAuditService(store2);
     } catch {
       return void 0;
@@ -4365,12 +4366,12 @@ function registerOpenRoutes(app2, deps = {}) {
     }
   );
 }
-var import_types, import_core83, RPC_ERROR;
+var import_types, import_core85, RPC_ERROR;
 var init_open = __esm({
   "src/routes/open.ts"() {
     "use strict";
     import_types = require("@modelcontextprotocol/sdk/types.js");
-    import_core83 = require("@axiom-lattice/core");
+    import_core85 = require("@axiom-lattice/core");
     init_openCredentialService();
     init_openAuditService();
     init_openRateLimiter();
@@ -4403,7 +4404,7 @@ function registerOpenSessionRoutes(app2) {
       if (typeof shareToken !== "string" || shareToken.length === 0) {
         return reply.status(400).send({ error: "SHARE_TOKEN_REQUIRED" });
       }
-      const store2 = (0, import_core84.getStoreLattice)("default", "sharedResource").store;
+      const store2 = (0, import_core86.getStoreLattice)("default", "sharedResource").store;
       const record = await store2.findByToken(shareToken);
       if (!record || record.revoked) {
         return reply.status(404).send({ error: "SHARE_NOT_FOUND" });
@@ -4428,11 +4429,11 @@ function registerOpenSessionRoutes(app2) {
     }
   );
 }
-var import_core84;
+var import_core86;
 var init_open_session = __esm({
   "src/routes/open-session.ts"() {
     "use strict";
-    import_core84 = require("@axiom-lattice/core");
+    import_core86 = require("@axiom-lattice/core");
     init_openToken();
     init_previewToken();
     init_openLattice();
@@ -4441,13 +4442,13 @@ var init_open_session = __esm({
 
 // src/services/open/openCatalogService.ts
 async function defaultListTenantPlugins(tenantId) {
-  return (await (0, import_core85.getSandboxPluginCatalog)().ensureLoaded(tenantId)).plugins;
+  return (await (0, import_core87.getSandboxPluginCatalog)().ensureLoaded(tenantId)).plugins;
 }
-var import_core85, OpenCatalogService;
+var import_core87, OpenCatalogService;
 var init_openCatalogService = __esm({
   "src/services/open/openCatalogService.ts"() {
     "use strict";
-    import_core85 = require("@axiom-lattice/core");
+    import_core87 = require("@axiom-lattice/core");
     init_openLattice();
     OpenCatalogService = class {
       constructor(assistantStore, lattice = openLattice, listTenantPlugins2 = defaultListTenantPlugins) {
@@ -4522,17 +4523,17 @@ function registerOpenCatalogRoutes(app2) {
     if (!tenantId) {
       return reply.status(401).send({ success: false, error: "Unauthorized" });
     }
-    const assistantStore = (0, import_core86.getStoreLattice)("default", "assistant").store;
+    const assistantStore = (0, import_core88.getStoreLattice)("default", "assistant").store;
     const service2 = new OpenCatalogService(assistantStore);
     const catalog = await service2.buildForTenant(tenantId);
     return reply.status(200).send({ success: true, data: catalog });
   });
 }
-var import_core86;
+var import_core88;
 var init_open_catalog = __esm({
   "src/routes/open-catalog.ts"() {
     "use strict";
-    import_core86 = require("@axiom-lattice/core");
+    import_core88 = require("@axiom-lattice/core");
     init_openCatalogService();
   }
 });
@@ -4547,11 +4548,11 @@ async function resolveContextSandbox(ctx) {
   const sandboxName = ctx.runConfig?.sandboxName;
   if (typeof sandboxName === "string" && sandboxName.length > 0) {
     try {
-      return await import_core87.sandboxLatticeManager.getSandbox(sandboxName);
+      return await import_core89.sandboxLatticeManager.getSandbox(sandboxName);
     } catch {
     }
   }
-  return import_core87.sandboxLatticeManager.getSandboxFromConfig({
+  return import_core89.sandboxLatticeManager.getSandboxFromConfig({
     assistant_id: "",
     thread_id: "",
     tenantId: ctx.tenantId,
@@ -4624,7 +4625,7 @@ function createOpenSandboxProvider() {
           const result = await sandbox.shell.execCommand({
             command,
             exec_dir,
-            timeout: timeout ?? 12e4
+            timeoutMs: timeout ?? 12e4
           });
           const truncated = result.output.length > MAX_OUTPUT_BYTES ? result.output.slice(0, MAX_OUTPUT_BYTES) + `
 ...[truncated ${result.output.length - MAX_OUTPUT_BYTES} bytes]` : result.output;
@@ -4649,12 +4650,12 @@ ${truncated}`
     }
   };
 }
-var import_zod21, import_core87, MAX_OUTPUT_BYTES;
+var import_zod21, import_core89, MAX_OUTPUT_BYTES;
 var init_sandboxProvider = __esm({
   "src/services/open/providers/sandboxProvider.ts"() {
     "use strict";
     import_zod21 = require("zod");
-    import_core87 = require("@axiom-lattice/core");
+    import_core89 = require("@axiom-lattice/core");
     MAX_OUTPUT_BYTES = 64e3;
   }
 });
@@ -4676,12 +4677,12 @@ function safePath(raw) {
 }
 function registerOpenFilesRoutes(app2, deps = {}) {
   const openAuth = deps.openAuth ?? new OpenCredentialService(
-    (0, import_core88.getStoreLattice)("default", "a2aApiKey").store,
-    (0, import_core88.getStoreLattice)("default", "project").store
+    (0, import_core90.getStoreLattice)("default", "a2aApiKey").store,
+    (0, import_core90.getStoreLattice)("default", "project").store
   );
   const audit = deps.audit ?? (() => {
     try {
-      const store2 = (0, import_core88.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core90.getStoreLattice)("default", "openAudit").store;
       return new OpenAuditService(store2);
     } catch {
       return void 0;
@@ -4791,11 +4792,11 @@ function registerOpenFilesRoutes(app2, deps = {}) {
     }
   });
 }
-var import_core88;
+var import_core90;
 var init_open_files = __esm({
   "src/routes/open-files.ts"() {
     "use strict";
-    import_core88 = require("@axiom-lattice/core");
+    import_core90 = require("@axiom-lattice/core");
     init_openCredentialService();
     init_openLattice();
     init_sandboxProvider();
@@ -4817,7 +4818,7 @@ function registerOpenAuditRoutes(app2) {
         return reply.status(401).send({ success: false, error: "Unauthorized" });
       }
       const status = request.query.status === "ok" || request.query.status === "error" ? request.query.status : void 0;
-      const store2 = (0, import_core89.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core91.getStoreLattice)("default", "openAudit").store;
       const records = await store2.query({
         tenantId,
         credentialId: request.query.credentialId,
@@ -4832,11 +4833,11 @@ function registerOpenAuditRoutes(app2) {
     }
   );
 }
-var import_core89;
+var import_core91;
 var init_open_audit = __esm({
   "src/routes/open-audit.ts"() {
     "use strict";
-    import_core89 = require("@axiom-lattice/core");
+    import_core91 = require("@axiom-lattice/core");
   }
 });
 
@@ -4853,7 +4854,7 @@ function registerOpenExposureRoutes(app2, deps = {}) {
       if (!tenantId) {
         return reply.status(401).send({ success: false, error: "Unauthorized" });
       }
-      const keyStore = (0, import_core90.getStoreLattice)("default", "a2aApiKey").store;
+      const keyStore = (0, import_core92.getStoreLattice)("default", "a2aApiKey").store;
       const record = await keyStore.findById(request.params.id);
       if (!record || record.tenantId !== tenantId) {
         return reply.status(404).send({ success: false, error: "Key not found" });
@@ -4887,7 +4888,7 @@ function registerOpenExposureRoutes(app2, deps = {}) {
         hasUi: Boolean(t2.ui)
       }));
       const agentGrant = grants.find((g) => g.domain === "agent");
-      const assistantStore = (0, import_core90.getStoreLattice)("default", "assistant").store;
+      const assistantStore = (0, import_core92.getStoreLattice)("default", "assistant").store;
       const agents = [];
       for (const assistantId of agentGrant?.items ?? []) {
         const assistant = await assistantStore.getAssistantById(
@@ -4922,11 +4923,11 @@ function registerOpenExposureRoutes(app2, deps = {}) {
     }
   );
 }
-var import_core90, import_protocols38;
+var import_core92, import_protocols38;
 var init_open_exposure = __esm({
   "src/routes/open-exposure.ts"() {
     "use strict";
-    import_core90 = require("@axiom-lattice/core");
+    import_core92 = require("@axiom-lattice/core");
     import_protocols38 = require("@axiom-lattice/protocols");
     init_openLattice();
     init_tenantOpenPlugins();
@@ -5046,7 +5047,7 @@ function createAgentProvider(deps = {}) {
         } catch {
         }
       }
-      const agent = import_core91.agentInstanceManager.getAgent({
+      const agent = import_core93.agentInstanceManager.getAgent({
         tenant_id: ctx.tenantId,
         assistant_id: assistantId,
         thread_id: threadId,
@@ -5071,12 +5072,12 @@ function createAgentProvider(deps = {}) {
     }
   };
 }
-var import_zod23, import_core91, import_protocols39, STOP_TYPES;
+var import_zod23, import_core93, import_protocols39, STOP_TYPES;
 var init_agentProvider = __esm({
   "src/services/open/providers/agentProvider.ts"() {
     "use strict";
     import_zod23 = require("zod");
-    import_core91 = require("@axiom-lattice/core");
+    import_core93 = require("@axiom-lattice/core");
     import_protocols39 = require("@axiom-lattice/protocols");
     STOP_TYPES = [import_protocols39.MessageChunkTypes.MESSAGE_COMPLETED];
   }
@@ -5179,11 +5180,11 @@ async function resolveAgentOpenGrants(tenantId, assistantId, deps) {
   }
 }
 function createDefaultAgentReflectionDeps(tenantId) {
-  (0, import_core92.ensureBuiltinAgentsForTenant)(tenantId);
+  (0, import_core94.ensureBuiltinAgentsForTenant)(tenantId);
   return {
-    ensure: (t2) => import_core92.agentLatticeManager.initializeStoredAssistantsForTenant(t2),
+    ensure: (t2) => import_core94.agentLatticeManager.initializeStoredAssistantsForTenant(t2),
     getAgentConfig: (t2, assistantId) => {
-      const config = import_core92.agentLatticeManager.getAgentConfigWithTenant(t2, assistantId);
+      const config = import_core94.agentLatticeManager.getAgentConfigWithTenant(t2, assistantId);
       if (!config) return void 0;
       return {
         middleware: extractMiddleware(config),
@@ -5191,16 +5192,16 @@ function createDefaultAgentReflectionDeps(tenantId) {
       };
     },
     getAssistantMiddleware: async (t2, assistantId) => {
-      const store2 = (0, import_core92.getStoreLattice)("default", "assistant").store;
+      const store2 = (0, import_core94.getStoreLattice)("default", "assistant").store;
       const assistant = await store2.getAssistantById(t2, assistantId);
       return extractMiddleware(assistant?.graphDefinition);
     },
     exposedActionsByType: (type) => {
-      const plugin = import_core92.PluginRegistry.get(type);
+      const plugin = import_core94.PluginRegistry.get(type);
       return plugin ? normalizeOpenExpose(plugin.meta.openExpose) : [];
     },
     resolvableAssistants: async (t2) => new Set(
-      import_core92.agentLatticeManager.getAllAgentLatticesByTenant(t2).map((lattice) => lattice.config.key)
+      import_core94.agentLatticeManager.getAllAgentLatticesByTenant(t2).map((lattice) => lattice.config.key)
     )
   };
 }
@@ -5265,30 +5266,30 @@ function buildTenantExposedGrants(manifests) {
 }
 function createDefaultPluginReflectionDeps() {
   return {
-    ensure: (tenantId) => import_core92.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
+    ensure: (tenantId) => import_core94.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
     globalExposedDomains: () => {
       const grants = [];
-      for (const type of import_core92.PluginRegistry.list()) {
-        const plugin = import_core92.PluginRegistry.get(type);
+      for (const type of import_core94.PluginRegistry.list()) {
+        const plugin = import_core94.PluginRegistry.get(type);
         const items = normalizeOpenExpose(plugin?.meta.openExpose);
         if (items.length > 0) grants.push({ domain: type, items });
       }
       return grants;
     },
     tenantExposedDomains: async (tenantId) => {
-      const { manifests } = await (0, import_core92.getSandboxPluginCatalog)().ensureLoaded(tenantId);
+      const { manifests } = await (0, import_core94.getSandboxPluginCatalog)().ensureLoaded(tenantId);
       return buildTenantExposedGrants(Object.values(manifests));
     },
     resolvableAssistants: async (tenantId) => new Set(
-      import_core92.agentLatticeManager.getAllAgentLatticesByTenant(tenantId).map((lattice) => lattice.config.key)
+      import_core94.agentLatticeManager.getAllAgentLatticesByTenant(tenantId).map((lattice) => lattice.config.key)
     )
   };
 }
-var import_core92, AGENT_REFLECTION_CACHE_TTL_MS, cache, PLUGIN_REFLECTION_CACHE_TTL_MS, pluginCache;
+var import_core94, AGENT_REFLECTION_CACHE_TTL_MS, cache, PLUGIN_REFLECTION_CACHE_TTL_MS, pluginCache;
 var init_sandboxOpenReflection = __esm({
   "src/services/open/sandboxOpenReflection.ts"() {
     "use strict";
-    import_core92 = require("@axiom-lattice/core");
+    import_core94 = require("@axiom-lattice/core");
     AGENT_REFLECTION_CACHE_TTL_MS = 6e4;
     cache = /* @__PURE__ */ new Map();
     PLUGIN_REFLECTION_CACHE_TTL_MS = 6e4;
@@ -5334,7 +5335,7 @@ function createSandboxOpenCredentialProvider(options) {
   };
 }
 function registerGatewaySandboxOpenCredentialProvider(onError) {
-  return (0, import_core93.registerSandboxOpenCredentialProvider)(
+  return (0, import_core95.registerSandboxOpenCredentialProvider)(
     createSandboxOpenCredentialProvider({
       gatewayUrl: process.env.PUBLIC_GATEWAY_URL?.trim() || void 0,
       onError
@@ -5342,11 +5343,11 @@ function registerGatewaySandboxOpenCredentialProvider(onError) {
     { onError }
   );
 }
-var import_core93, DEFAULT_SANDBOX_OPEN_GRANTS, MAX_SANDBOX_OPEN_DEPTH;
+var import_core95, DEFAULT_SANDBOX_OPEN_GRANTS, MAX_SANDBOX_OPEN_DEPTH;
 var init_sandboxOpenCredentialProvider = __esm({
   "src/services/open/sandboxOpenCredentialProvider.ts"() {
     "use strict";
-    import_core93 = require("@axiom-lattice/core");
+    import_core95 = require("@axiom-lattice/core");
     init_openToken();
     init_sandboxOpenReflection();
     DEFAULT_SANDBOX_OPEN_GRANTS = [
@@ -5383,12 +5384,12 @@ var resources_exports = {};
 __export(resources_exports, {
   ResourceController: () => ResourceController
 });
-var import_bcryptjs, import_core94, ResourceController;
+var import_bcryptjs, import_core96, ResourceController;
 var init_resources = __esm({
   "src/controllers/resources.ts"() {
     "use strict";
     import_bcryptjs = __toESM(require("bcryptjs"));
-    import_core94 = require("@axiom-lattice/core");
+    import_core96 = require("@axiom-lattice/core");
     init_mime();
     init_http_range();
     init_sandboxGrants();
@@ -5405,14 +5406,14 @@ var init_resources = __esm({
         if (!workspaceId || !projectId) {
           return reply.status(400).send({ error: "x-workspace-id and x-project-id headers required" });
         }
-        const payload = (0, import_core94.createSharePayload)(
+        const payload = (0, import_core96.createSharePayload)(
           tenantId,
           workspaceId,
           projectId,
           userId,
           body
         );
-        const token = (0, import_core94.generateToken)();
+        const token = (0, import_core96.generateToken)();
         try {
           await this.deps.store.create({ ...payload, token });
           this.deps.logger.info(
@@ -5564,7 +5565,7 @@ var init_resources = __esm({
             resourcePath: subPath
           }, subPath, ext, request, reply);
         }
-        const volume = (0, import_core94.buildNamedVolumeName)("p", "project", tenantId, workspaceId, projectId);
+        const volume = (0, import_core96.buildNamedVolumeName)("p", "project", tenantId, workspaceId, projectId);
         return this._resolveAndServe(
           volume,
           subPath,
@@ -14013,7 +14014,7 @@ function registerMcpServerConfigRoutes(app2) {
 
 // src/routes/mcp-apps.ts
 var import_protocols6 = require("@axiom-lattice/protocols");
-var import_core35 = require("@axiom-lattice/core");
+var import_core36 = require("@axiom-lattice/core");
 
 // src/services/mcp-ui/UiResourceResolver.ts
 var import_node_crypto5 = require("crypto");
@@ -14388,26 +14389,26 @@ function createDefaultPluginBackend() {
   return {
     resolvePlugin: (tenantId, type) => resolveTenantPluginByType(tenantId, type),
     catalog: {
-      readPluginFile: (tenantId, pluginType, relPath) => (0, import_core35.getSandboxPluginCatalog)().readPluginFile(tenantId, pluginType, relPath),
-      getValidatedManifest: (tenantId, pluginType) => (0, import_core35.getSandboxPluginCatalog)().getValidatedManifest(tenantId, pluginType),
-      getExecutor: () => (0, import_core35.getSandboxPluginCatalog)().getExecutor()
+      readPluginFile: (tenantId, pluginType, relPath) => (0, import_core36.getSandboxPluginCatalog)().readPluginFile(tenantId, pluginType, relPath),
+      getValidatedManifest: (tenantId, pluginType) => (0, import_core36.getSandboxPluginCatalog)().getValidatedManifest(tenantId, pluginType),
+      getExecutor: () => (0, import_core36.getSandboxPluginCatalog)().getExecutor()
     }
   };
 }
 function resolveMcpAppDeps(pluginBackend = createDefaultPluginBackend()) {
   const uiResourceResolver = new UiResourceResolver({
     store: new InMemoryMcpUiResourceCacheStore(),
-    fetchMcp: (tenantId, serverKey, resourceUri) => import_core35.mcpManager.readUiResource(tenantId, serverKey, resourceUri),
+    fetchMcp: (tenantId, serverKey, resourceUri) => import_core36.mcpManager.readUiResource(tenantId, serverKey, resourceUri),
     fetchPlugin: (tenantId, pluginType, resource) => fetchPluginUiResource(pluginBackend, tenantId, pluginType, resource)
   });
   return {
     resolveUiResource: (tenantId, ref) => uiResourceResolver.resolve(tenantId, ref),
-    callTool: (tenantId, ref, name, args, context) => ref.kind === "mcp" ? import_core35.mcpManager.callServerTool(tenantId, ref.serverKey, name, args) : callPluginTool(pluginBackend, tenantId, ref, name, args, context),
+    callTool: (tenantId, ref, name, args, context) => ref.kind === "mcp" ? import_core36.mcpManager.callServerTool(tenantId, ref.serverKey, name, args) : callPluginTool(pluginBackend, tenantId, ref, name, args, context),
     // Plugin refs reach these only after `tools/call`; the handler treats the
     // rejection as an unsupported method (403). The branches are live because
     // the pure handler deliberately delegates method policy to the deps.
-    readResource: (tenantId, ref, uri) => ref.kind === "mcp" ? import_core35.mcpManager.readServerResource(tenantId, ref.serverKey, uri) : Promise.reject(new PluginMethodNotSupportedError("resources/read")),
-    listTools: (tenantId, ref) => ref.kind === "mcp" ? import_core35.mcpManager.getAvailableTools(tenantId, ref.serverKey) : Promise.reject(new PluginMethodNotSupportedError("tools/list"))
+    readResource: (tenantId, ref, uri) => ref.kind === "mcp" ? import_core36.mcpManager.readServerResource(tenantId, ref.serverKey, uri) : Promise.reject(new PluginMethodNotSupportedError("resources/read")),
+    listTools: (tenantId, ref) => ref.kind === "mcp" ? import_core36.mcpManager.getAvailableTools(tenantId, ref.serverKey) : Promise.reject(new PluginMethodNotSupportedError("tools/list"))
   };
 }
 function firstHeader(request, name) {
@@ -14451,12 +14452,12 @@ function registerMcpAppRoutes(fastify2) {
 }
 
 // src/controllers/eval.ts
-var import_core37 = require("@axiom-lattice/core");
+var import_core38 = require("@axiom-lattice/core");
 var import_uuid5 = require("uuid");
 
 // src/services/eval-runner.ts
 var import_events = require("events");
-var import_core36 = require("@axiom-lattice/core");
+var import_core37 = require("@axiom-lattice/core");
 var import_uuid4 = require("uuid");
 var TERMINAL_PERSIST_ATTEMPTS = 2;
 function mapLogs(logs) {
@@ -14566,19 +14567,19 @@ var EvalRunner = class {
     const judgeModelKey = judgeCfg.modelKey || "";
     let resolvedJudgeModelKey;
     if (judgeModelKey) {
-      if (!import_core36.modelLatticeManager.hasLattice(judgeModelKey)) {
+      if (!await (0, import_core37.hasModelLatticeForTenant)(tenantId, judgeModelKey)) {
         throw new Error(`Judge model "${judgeModelKey}" is not registered`);
       }
       resolvedJudgeModelKey = judgeModelKey;
     } else {
-      const models = import_core36.modelLatticeManager.getAllLattices();
-      const defaultModel = models.find((m) => m.key === "default");
-      resolvedJudgeModelKey = defaultModel?.key ?? models[0]?.key ?? "";
-      if (!resolvedJudgeModelKey) {
-        throw new Error("No model registered \u2014 cannot run eval without a judge model");
-      }
-      if (!defaultModel) {
-        console.warn(`[eval-runner] Project "${project.name}" has no judge modelKey and no "default" model \u2014 falling back to first registered model "${resolvedJudgeModelKey}"`);
+      resolvedJudgeModelKey = "default";
+      if (!await (0, import_core37.hasModelLatticeForTenant)(tenantId, resolvedJudgeModelKey)) {
+        const models = (0, import_core37.listModelLatticesForTenant)(tenantId);
+        resolvedJudgeModelKey = models[0]?.key ?? "";
+        if (!resolvedJudgeModelKey) {
+          throw new Error("No model registered \u2014 cannot run eval without a judge model");
+        }
+        console.warn(`[eval-runner] Project "${project.name}" has no judge modelKey and no default model \u2014 falling back to "${resolvedJudgeModelKey}"`);
       }
     }
     const runId = (0, import_uuid4.v4)();
@@ -14679,7 +14680,7 @@ var EvalRunner = class {
     };
     const runPromise = (async () => {
       try {
-        const evalProject = new import_core36.LatticeEvalProject(projectConfig, onCaseComplete);
+        const evalProject = new import_core37.LatticeEvalProject(projectConfig, onCaseComplete);
         const calibration = await evalProject.calibrateJudge();
         if (!calibration.ok && !calibration.bypassed) {
           throw new Error(`Judge calibration failed: ${calibration.reason}`);
@@ -14783,7 +14784,7 @@ var EvalRunner = class {
     return ctx !== void 0 && !ctx.terminal.workerSettled && (tenantId === void 0 || ctx.tenantId === tenantId);
   }
   getEvalStore() {
-    return (0, import_core36.getStoreLattice)("default", "eval").store;
+    return (0, import_core37.getStoreLattice)("default", "eval").store;
   }
   releaseProjectLease(leaseKey, leaseToken) {
     if (this.projectLeases.get(leaseKey) === leaseToken) this.projectLeases.delete(leaseKey);
@@ -14800,7 +14801,7 @@ function getTenantId12(request) {
   return request.headers["x-tenant-id"] || "default";
 }
 function getEvalStore() {
-  return (0, import_core37.getStoreLattice)("default", "eval").store;
+  return (0, import_core38.getStoreLattice)("default", "eval").store;
 }
 async function getOwnedSuite(store2, tenantId, projectId, suiteId) {
   const project = await store2.getProjectById(tenantId, projectId);
@@ -14831,8 +14832,7 @@ async function createProject(request, reply) {
     const judgeCfg = data.judgeModelConfig || {};
     const modelKey2 = judgeCfg.modelKey || "";
     if (modelKey2) {
-      const { modelLatticeManager: modelLatticeManager4 } = await import("@axiom-lattice/core");
-      if (!modelLatticeManager4.hasLattice(modelKey2)) {
+      if (!await (0, import_core38.hasModelLatticeForTenant)(tenantId, modelKey2)) {
         return reply.status(400).send({ success: false, message: `Judge model "${modelKey2}" is not registered` });
       }
     }
@@ -14878,8 +14878,7 @@ async function listProjects(request, reply) {
     let projects = await store2.getProjectsByTenant(tenantId);
     if (projects.length === 0) {
       try {
-        const { modelLatticeManager: modelLatticeManager4 } = await import("@axiom-lattice/core");
-        const models = modelLatticeManager4.getAllLattices();
+        const models = import_core38.modelLatticeManager.getAllLattices();
         const first = models[0];
         const judgeModel = first ? { modelKey: first.key } : {};
         const host = request.hostname || "localhost";
@@ -14947,8 +14946,7 @@ async function updateProject(request, reply) {
       const judgeCfg = body.judgeModelConfig || {};
       const modelKey2 = judgeCfg.modelKey || "";
       if (modelKey2) {
-        const { modelLatticeManager: modelLatticeManager4 } = await import("@axiom-lattice/core");
-        if (!modelLatticeManager4.hasLattice(modelKey2)) {
+        if (!import_core38.modelLatticeManager.hasLattice(modelKey2)) {
           return reply.status(400).send({ success: false, message: `Judge model "${modelKey2}" is not registered` });
         }
       }
@@ -15330,11 +15328,11 @@ data: ${JSON.stringify(event.data)}
 }
 
 // src/controllers/users.ts
-var import_core38 = require("@axiom-lattice/core");
+var import_core39 = require("@axiom-lattice/core");
 var import_uuid6 = require("uuid");
 var UsersController = class {
   constructor() {
-    this.userStore = (0, import_core38.getStoreLattice)("default", "user").store;
+    this.userStore = (0, import_core39.getStoreLattice)("default", "user").store;
   }
   async listUsers(request, reply) {
     const { email } = request.query;
@@ -15412,11 +15410,11 @@ function registerUserRoutes(app2) {
 }
 
 // src/controllers/tenants.ts
-var import_core39 = require("@axiom-lattice/core");
+var import_core40 = require("@axiom-lattice/core");
 var import_uuid7 = require("uuid");
 var TenantsController = class {
   constructor() {
-    this.tenantStore = (0, import_core39.getStoreLattice)("default", "tenant").store;
+    this.tenantStore = (0, import_core40.getStoreLattice)("default", "tenant").store;
   }
   // ==================== Tenant CRUD ====================
   async listTenants(request, reply) {
@@ -15480,7 +15478,7 @@ function registerTenantRoutes(app2) {
 }
 
 // src/controllers/auth.ts
-var import_core40 = require("@axiom-lattice/core");
+var import_core41 = require("@axiom-lattice/core");
 var import_uuid8 = require("uuid");
 var import_node_crypto6 = require("crypto");
 var defaultAuthConfig = {
@@ -15490,9 +15488,9 @@ var defaultAuthConfig = {
 };
 var AuthController = class {
   constructor(config = {}) {
-    this.userStore = (0, import_core40.getStoreLattice)("default", "user").store;
-    this.tenantStore = (0, import_core40.getStoreLattice)("default", "tenant").store;
-    this.userTenantLinkStore = (0, import_core40.getStoreLattice)("default", "userTenantLink").store;
+    this.userStore = (0, import_core41.getStoreLattice)("default", "user").store;
+    this.tenantStore = (0, import_core41.getStoreLattice)("default", "tenant").store;
+    this.userTenantLinkStore = (0, import_core41.getStoreLattice)("default", "userTenantLink").store;
     this.config = { ...defaultAuthConfig, ...config };
   }
   async register(request, reply) {
@@ -15651,7 +15649,7 @@ var AuthController = class {
       const linkMeta = link?.metadata || {};
       let personalAssistant = null;
       if (linkMeta.personalAssistantId) {
-        const assistantStore = (0, import_core40.getStoreLattice)("default", "assistant").store;
+        const assistantStore = (0, import_core41.getStoreLattice)("default", "assistant").store;
         const exists = await assistantStore.hasAssistant(tenantId, linkMeta.personalAssistantId);
         if (exists) {
           personalAssistant = {
@@ -16348,6 +16346,7 @@ function registerChannelRoutes(app2, dependencies) {
 // src/controllers/channel-installations.ts
 var import_crypto10 = require("crypto");
 var import_protocols7 = require("@axiom-lattice/protocols");
+var import_core42 = require("@axiom-lattice/core");
 var _adapterRegistry;
 var _router;
 function setChannelControllerDeps(deps) {
@@ -16471,8 +16470,7 @@ function snapshotPlainObject(value) {
   }
 }
 async function getInstallationStore() {
-  const { getStoreLattice: getStoreLattice40 } = await import("@axiom-lattice/core");
-  const store2 = getStoreLattice40("default", "channelInstallation").store;
+  const store2 = (0, import_core42.getStoreLattice)("default", "channelInstallation").store;
   if (store2) return store2;
   const { PostgreSQLChannelInstallationStore } = await import("@axiom-lattice/pg-stores");
   const databaseUrl = process.env.DATABASE_URL;
@@ -16788,7 +16786,7 @@ function registerChannelInstallationRoutes(app2) {
 
 // src/controllers/channel-bindings.ts
 var import_protocols8 = require("@axiom-lattice/protocols");
-var import_core41 = require("@axiom-lattice/core");
+var import_core43 = require("@axiom-lattice/core");
 function getTenantId14(request) {
   const userTenantId = request.user?.tenantId;
   if (typeof userTenantId === "string" && userTenantId) return userTenantId;
@@ -16846,7 +16844,7 @@ function snapshotPublicUpdate(value) {
   return body;
 }
 function getInstallationStore2() {
-  return (0, import_core41.getStoreLattice)("default", "channelInstallation").store;
+  return (0, import_core43.getStoreLattice)("default", "channelInstallation").store;
 }
 async function isValidPublicInstallation(tenantId, channelInstallationId, channel) {
   const installation = await getInstallationStore2().getInstallationById(channelInstallationId);
@@ -16865,7 +16863,7 @@ async function getBindingList(request, _reply) {
   const tenantId = getTenantId14(request);
   const { channel, agentId, channelInstallationId, limit, offset } = request.query;
   try {
-    const registry = (0, import_core41.getBindingRegistry)();
+    const registry = (0, import_core43.getBindingRegistry)();
     const bindings = await registry.list({
       channel,
       agentId,
@@ -16884,7 +16882,7 @@ async function getBindingList(request, _reply) {
 async function getBinding(request, reply) {
   const tenantId = getTenantId14(request);
   try {
-    const registry = (0, import_core41.getBindingRegistry)();
+    const registry = (0, import_core43.getBindingRegistry)();
     const binding = await registry.findById(tenantId, request.params.id);
     if (!binding || isInternalBinding(binding)) {
       reply.status(404);
@@ -16906,7 +16904,7 @@ async function createBinding(request, reply) {
       input.channelInstallationId,
       input.channel
     )) return invalidPublicInstallation(reply);
-    const registry = (0, import_core41.getBindingRegistry)();
+    const registry = (0, import_core43.getBindingRegistry)();
     const binding = await registry.create({ ...input, tenantId });
     reply.status(201);
     return { success: true, message: "Binding created", data: binding };
@@ -16923,7 +16921,7 @@ async function createBinding(request, reply) {
 async function updateBinding(request, reply) {
   try {
     const tenantId = getTenantId14(request);
-    const registry = (0, import_core41.getBindingRegistry)();
+    const registry = (0, import_core43.getBindingRegistry)();
     const existing = await registry.findById(tenantId, request.params.id);
     if (!existing || isInternalBinding(existing)) {
       reply.status(404);
@@ -16950,7 +16948,7 @@ async function updateBinding(request, reply) {
 async function deleteBinding(request, reply) {
   try {
     const tenantId = getTenantId14(request);
-    const registry = (0, import_core41.getBindingRegistry)();
+    const registry = (0, import_core43.getBindingRegistry)();
     const existing = await registry.findById(tenantId, request.params.id);
     if (!existing || isInternalBinding(existing)) {
       reply.status(404);
@@ -16972,7 +16970,7 @@ async function resolveBinding(request, _reply) {
     return { success: false, message: "No binding found", data: null };
   }
   try {
-    const registry = (0, import_core41.getBindingRegistry)();
+    const registry = (0, import_core43.getBindingRegistry)();
     const binding = await registry.resolve({ channel, senderId, channelInstallationId, tenantId });
     if (!binding) {
       return { success: false, message: "No binding found", data: null };
@@ -16995,7 +16993,7 @@ function registerChannelBindingRoutes(app2) {
 }
 
 // src/controllers/menu-items.ts
-var import_core42 = require("@axiom-lattice/core");
+var import_core44 = require("@axiom-lattice/core");
 function getTenantId15(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) return userTenantId;
@@ -17007,7 +17005,7 @@ function errorMessage(err) {
 async function getMenuItemList(request, _reply) {
   const tenantId = getTenantId15(request);
   try {
-    const registry = (0, import_core42.getMenuRegistry)();
+    const registry = (0, import_core44.getMenuRegistry)();
     const items = await registry.list({ tenantId, menuTarget: request.query.menuTarget });
     return { success: true, message: "Menu items retrieved", data: { records: items, total: items.length } };
   } catch (error) {
@@ -17019,7 +17017,7 @@ async function getMenuItemList(request, _reply) {
 async function getMenuItem(request, reply) {
   const tenantId = getTenantId15(request);
   try {
-    const registry = (0, import_core42.getMenuRegistry)();
+    const registry = (0, import_core44.getMenuRegistry)();
     const item = await registry.getById(request.params.id);
     if (!item || item.tenantId !== tenantId) {
       reply.status(404);
@@ -17036,7 +17034,7 @@ async function getMenuItem(request, reply) {
 async function createMenuItem(request, reply) {
   const tenantId = getTenantId15(request);
   try {
-    const registry = (0, import_core42.getMenuRegistry)();
+    const registry = (0, import_core44.getMenuRegistry)();
     const item = await registry.create({ ...request.body, tenantId });
     reply.status(201);
     return { success: true, message: "Menu item created", data: item };
@@ -17050,7 +17048,7 @@ async function createMenuItem(request, reply) {
 async function updateMenuItem(request, reply) {
   try {
     const tenantId = getTenantId15(request);
-    const registry = (0, import_core42.getMenuRegistry)();
+    const registry = (0, import_core44.getMenuRegistry)();
     const existing = await registry.getById(request.params.id);
     if (!existing || existing.tenantId !== tenantId) {
       reply.status(404);
@@ -17068,7 +17066,7 @@ async function updateMenuItem(request, reply) {
 async function deleteMenuItem(request, reply) {
   try {
     const tenantId = getTenantId15(request);
-    const registry = (0, import_core42.getMenuRegistry)();
+    const registry = (0, import_core44.getMenuRegistry)();
     const existing = await registry.getById(request.params.id);
     if (!existing || existing.tenantId !== tenantId) {
       reply.status(404);
@@ -17268,7 +17266,7 @@ function registerA2ABridgeRoutes(app2) {
 }
 
 // src/routes/stt.ts
-var import_core43 = require("@axiom-lattice/core");
+var import_core45 = require("@axiom-lattice/core");
 var ALLOWED_AUDIO_FORMATS = /* @__PURE__ */ new Set([
   "webm",
   "wav",
@@ -17281,7 +17279,7 @@ var ALLOWED_AUDIO_FORMATS = /* @__PURE__ */ new Set([
 var MAX_AUDIO_FILE_SIZE = 25 * 1024 * 1024;
 var registerSTTRoutes = (app2) => {
   app2.get("/api/stt/models", async (_request, reply) => {
-    const models = import_core43.sttModelLatticeManager.getAllSTTModelInfo();
+    const models = import_core45.sttModelLatticeManager.getAllSTTModelInfo();
     return reply.send({ models });
   });
   app2.post(
@@ -17324,7 +17322,7 @@ var registerSTTRoutes = (app2) => {
       try {
         let client;
         try {
-          client = (0, import_core43.getSTTClient)(modelKey2);
+          client = (0, import_core45.getSTTClient)(modelKey2);
         } catch {
           return reply.status(404).send({ error: `STT model "${modelKey2}" not found` });
         }
@@ -17346,7 +17344,7 @@ var registerSTTRoutes = (app2) => {
 };
 
 // src/controllers/local-a2a.ts
-var import_core44 = require("@axiom-lattice/core");
+var import_core46 = require("@axiom-lattice/core");
 var import_protocols9 = require("@axiom-lattice/protocols");
 function getTenantId16(request) {
   const userTenantId = request.user?.tenantId;
@@ -17360,7 +17358,7 @@ function getLocalRuntime(assistant) {
   return graphDefinition.localRuntime;
 }
 async function getLocalA2AAssistants(tenantId) {
-  const storeLattice = (0, import_core44.getStoreLattice)("default", "assistant");
+  const storeLattice = (0, import_core46.getStoreLattice)("default", "assistant");
   const assistants = await storeLattice.store.getAllAssistants(tenantId);
   const results = [];
   for (const assistant of assistants) {
@@ -17372,7 +17370,7 @@ async function getLocalA2AAssistants(tenantId) {
   return results;
 }
 async function getLocalA2AAssistant(tenantId, assistantId) {
-  const storeLattice = (0, import_core44.getStoreLattice)("default", "assistant");
+  const storeLattice = (0, import_core46.getStoreLattice)("default", "assistant");
   const assistant = await storeLattice.store.getAssistantById(tenantId, assistantId);
   if (!assistant) return null;
   const runtime = getLocalRuntime(assistant);
@@ -17614,11 +17612,11 @@ function registerTaskRoutes(app2, controller) {
 }
 
 // src/routes/index.ts
-var import_core55 = require("@axiom-lattice/core");
+var import_core57 = require("@axiom-lattice/core");
 
 // src/controllers/tasks.ts
 var import_protocols13 = require("@axiom-lattice/protocols");
-var import_core46 = require("@axiom-lattice/core");
+var import_core48 = require("@axiom-lattice/core");
 
 // src/services/collaboration/ProjectTaskThreadService.ts
 var import_protocols11 = require("@axiom-lattice/protocols");
@@ -17938,7 +17936,7 @@ var import_node_crypto9 = require("crypto");
 
 // src/services/collaboration/ProjectTaskExecutionService.ts
 var import_node_crypto8 = require("crypto");
-var import_core45 = require("@axiom-lattice/core");
+var import_core47 = require("@axiom-lattice/core");
 var import_protocols12 = require("@axiom-lattice/protocols");
 init_projectTaskScope();
 
@@ -18002,7 +18000,7 @@ var ProjectTaskExecutionService = class {
     if (!Number.isFinite(options.lifecycleSettlementTimeoutMs) || options.lifecycleSettlementTimeoutMs <= 0) {
       throw new Error("Project task lifecycle settlement timeout must be positive");
     }
-    this.runBridge = (0, import_core45.createTaskRunBridge)({ lifecycle: this.deps.lifecycle });
+    this.runBridge = (0, import_core47.createTaskRunBridge)({ lifecycle: this.deps.lifecycle });
   }
   /** Validates, atomically starts, dispatches, and settles a pending Project Task. */
   async start(input, signal) {
@@ -18052,10 +18050,10 @@ var ProjectTaskExecutionService = class {
     return { kind: "ready", task: current, thread: ensured.thread, rosterExempt: validated.rosterExempt };
   }
   /** Resumes an interrupted Project Task on its canonical existing Thread. */
-  async resume(input, signal) {
+  async resume(input, signal, options) {
     const prepared = await this.prepareResume(input, signal);
     if (prepared.kind === "aborted") return prepared.outcome;
-    return this.dispatchRun(prepared.task, prepared.thread, "resume", prepared.rosterExempt, signal);
+    return this.dispatchRun(prepared.task, prepared.thread, "resume", prepared.rosterExempt, signal, options);
   }
   /** Clears the durable interruption and loads the exact resumed task. */
   async prepareResume(input, signal) {
@@ -18088,6 +18086,7 @@ var ProjectTaskExecutionService = class {
    *
    * @param input Tenant, task identity, and optional command actor.
    * @param signal Optional cancellation signal for the armed settlement.
+   * @param options Optional resume command carried into the queued run message.
    * @returns The settled run outcome.
    * @remarks `start` semantics: make this task run. `pending` starts,
    * `interrupted` resumes, `failed` retries, and `completed`/`cancelled`
@@ -18095,14 +18094,15 @@ var ProjectTaskExecutionService = class {
    * conflict. This is a record transition plus an application-layer side
    * effect; the kernel only records the status change. `actor` attributes the
    * start/resume/retry/reopen transition and defaults to the system actor.
+   * `options.command` is only carried on an interrupted-task resume.
    */
-  async dispatch(input, signal) {
+  async dispatch(input, signal, options) {
     const task = await this.requireTask(input);
     if (task.ownerType !== "agent") {
       throw new ProjectTaskExecutionError("PROJECT_TASK_NOT_READY", "Project task is not agent-owned");
     }
     if (task.status === "pending") return this.start(input, signal);
-    if (task.status === "interrupted") return this.resume(input, signal);
+    if (task.status === "interrupted") return this.resume(input, signal, options);
     if (task.status === "failed" || task.status === "completed" || task.status === "cancelled") {
       return this.dispatchRestartable(task, input.actor ?? SYSTEM_ACTOR, signal);
     }
@@ -18113,6 +18113,7 @@ var ProjectTaskExecutionService = class {
    *
    * @param input Tenant, task identity, and optional command actor.
    * @param signal Optional cancellation signal for the pre-run transition.
+   * @param options Optional resume command carried into the queued run message.
    * @returns The `in_progress` task snapshot and whether the run was queued.
    * @remarks Intended for command HTTP handlers that must release the Project
    * mutation mutex immediately: the armed settlement keeps running in the
@@ -18120,20 +18121,25 @@ var ProjectTaskExecutionService = class {
    * awaits it. Enqueue failure converges the task exactly like the awaited
    * path before throwing, so no phantom run is left behind.
    */
-  async dispatchDetached(input, signal) {
+  async dispatchDetached(input, signal, options) {
     const task = await this.requireTask(input);
+    if (options?.expectedStatus !== void 0 && task.status !== options.expectedStatus) {
+      throw new ProjectTaskExecutionError("PROJECT_TASK_NOT_RESUMABLE", "Project task is not in the expected status");
+    }
     if (task.ownerType !== "agent") {
       throw new ProjectTaskExecutionError("PROJECT_TASK_NOT_READY", "Project task is not agent-owned");
     }
     const actor3 = input.actor ?? SYSTEM_ACTOR;
     let prepared;
     let mode;
+    let resumeOptions;
     if (task.status === "pending") {
       prepared = await this.prepareStart(input, signal);
       mode = "start";
     } else if (task.status === "interrupted") {
       prepared = await this.prepareResume(input, signal);
       mode = "resume";
+      resumeOptions = options;
     } else if (task.status === "failed" || task.status === "completed" || task.status === "cancelled") {
       prepared = await this.prepareRestartable(task, actor3, signal);
       mode = "resume";
@@ -18141,7 +18147,7 @@ var ProjectTaskExecutionService = class {
       throw new ProjectTaskExecutionError("PROJECT_TASK_NOT_READY", `Project task is '${task.status}'`);
     }
     if (prepared.kind === "aborted") return { task: prepared.outcome.task, queued: false };
-    return this.enqueueDetached(prepared.task, prepared.thread, mode, prepared.rosterExempt);
+    return this.enqueueDetached(prepared.task, prepared.thread, mode, prepared.rosterExempt, resumeOptions);
   }
   /** Recovers one exact pending or processing queue row without dispatching a duplicate input. */
   async recover(input, signal) {
@@ -18197,15 +18203,15 @@ var ProjectTaskExecutionService = class {
         settlement.cleanup();
         return { kind: "deferred", task: input.task, thread: input.thread, messageId: input.inputMessageId };
       }
-      if (resumed.status === import_core45.ThreadStatus.INTERRUPTED && settlement.tryClaim()) {
+      if (resumed.status === import_core47.ThreadStatus.INTERRUPTED && settlement.tryClaim()) {
         settlement.cleanup();
         const outcome2 = await this.settleInterruptedEvent(input.task, input.thread, input.inputMessageId);
         settlement.resolve(outcome2);
         return outcome2;
       }
-      if ((resumed.status === import_core45.ThreadStatus.IDLE || resumed.status === import_core45.ThreadStatus.ERROR) && settlement.tryClaim()) {
+      if ((resumed.status === import_core47.ThreadStatus.IDLE || resumed.status === import_core47.ThreadStatus.ERROR) && settlement.tryClaim()) {
         settlement.cleanup();
-        const reason = resumed.status === import_core45.ThreadStatus.IDLE ? "Project task execution ended without lifecycle transition" : "Recovered Agent execution is in error state";
+        const reason = resumed.status === import_core47.ThreadStatus.IDLE ? "Project task execution ended without lifecycle transition" : "Recovered Agent execution is in error state";
         const outcome2 = await this.settleEndedRecovery(input, reason);
         settlement.resolve(outcome2);
         return outcome2;
@@ -18386,10 +18392,10 @@ var ProjectTaskExecutionService = class {
     }
     return current;
   }
-  async dispatchRun(task, thread, mode, rosterExempt, signal) {
+  async dispatchRun(task, thread, mode, rosterExempt, signal, options) {
     const messageId = (this.options.idFactory ?? import_node_crypto8.randomUUID)();
     if (signal?.aborted) return this.compensateCancellation(task, thread, messageId, false);
-    const armed = await this.armAndEnqueue(task, thread, mode, messageId, rosterExempt, signal);
+    const armed = await this.armAndEnqueue(task, thread, mode, messageId, rosterExempt, signal, options);
     if (armed.cancelled) return this.cancelSettlement(armed.settlement, task, thread, messageId, false);
     if (signal?.aborted) return this.cancelSettlement(armed.settlement, task, thread, messageId, armed.queued);
     if (!armed.queued) {
@@ -18404,7 +18410,7 @@ var ProjectTaskExecutionService = class {
    *   enqueue yields `queued: false` with a stable reason; the caller decides
    *   whether to converge only (awaited path) or converge and throw (detached).
    */
-  async armAndEnqueue(task, thread, mode, messageId, rosterExempt, signal) {
+  async armAndEnqueue(task, thread, mode, messageId, rosterExempt, signal, options) {
     const settlement = this.armSettlement(task, thread, messageId);
     if (signal?.aborted) return { settlement, queued: false, error: "", cancelled: true };
     try {
@@ -18414,7 +18420,10 @@ var ProjectTaskExecutionService = class {
         project_id: task.projectId,
         assistant_id: task.ownerId,
         thread_id: thread.id
-      }, { input: { id: messageId, message: buildTaskPrompt(task, mode) } }, {
+      }, {
+        input: { id: messageId, message: buildTaskPrompt(task, mode) },
+        ...mode === "resume" && options?.command ? { command: options.command } : {}
+      }, {
         executionMode: "followup",
         trustedRunContext: { projectTask: buildTrustedTaskContext(task, thread, messageId, rosterExempt) }
       });
@@ -18440,9 +18449,9 @@ var ProjectTaskExecutionService = class {
    * task is converged exactly like the awaited path before throwing, so no
    * phantom in-progress run is left behind.
    */
-  async enqueueDetached(task, thread, mode, rosterExempt) {
+  async enqueueDetached(task, thread, mode, rosterExempt, options) {
     const messageId = (this.options.idFactory ?? import_node_crypto8.randomUUID)();
-    const armed = await this.armAndEnqueue(task, thread, mode, messageId, rosterExempt);
+    const armed = await this.armAndEnqueue(task, thread, mode, messageId, rosterExempt, void 0, options);
     void armed.settlement.promise.catch(() => void 0);
     if (!armed.queued) {
       await this.claimDispatchFailure(armed.settlement, task, thread, messageId, armed.error);
@@ -18573,12 +18582,14 @@ var ProjectTaskExecutionService = class {
   async settleInterruptedEvent(task, thread, messageId, state) {
     const current = await this.withLifecycleTimeout(this.reloadTask(task), void 0);
     if (current?.status === "interrupted" && this.matchesExecution(current, task, thread)) {
+      this.emitInterrupted(current, thread, messageId, state);
       return { kind: "interrupted", task: current, thread, messageId };
     }
     const clarify = readClarifyInterrupt(state ?? await this.readInterruptedThreadState(task, thread));
     if (clarify !== void 0) {
       const interrupted = await this.interruptForClarify(current ?? task, thread, clarify);
       if (interrupted?.status === "interrupted" && this.matchesExecution(interrupted, task, thread)) {
+        this.emitInterrupted(interrupted, thread, messageId, state);
         return { kind: "interrupted", task: interrupted, thread, messageId };
       }
     }
@@ -18590,6 +18601,22 @@ var ProjectTaskExecutionService = class {
       "interruption_not_durable"
     );
   }
+  /**
+   * Fire-and-forget best-effort projection of a durable interruption.
+   *
+   * @remarks Never awaited and never allowed to affect settlement. The state is
+   * resolved lazily so a missing/undefined event state only triggers a thread
+   * read when the hook is actually wired.
+   */
+  emitInterrupted(task, thread, messageId, state) {
+    const hook = this.deps.onTaskInterrupted;
+    if (!hook) return;
+    void Promise.resolve().then(async () => {
+      const resolved = state ?? await this.readInterruptedThreadState(task, thread);
+      await hook({ task, thread, messageId, state: resolved });
+    }).catch(() => {
+    });
+  }
   /** Reads the paused thread snapshot when no interrupt event payload is available (recovery). */
   async readInterruptedThreadState(task, thread) {
     try {
@@ -19254,7 +19281,7 @@ function withErrors(handler) {
       if (error instanceof HttpTaskError) return reply.code(error.statusCode).send({ success: false, code: error.code, error: error.message });
       if (error instanceof TaskCommandError) return reply.code(error.statusCode).send({ success: false, code: error.code, error: error.message });
       if (error instanceof ProjectCollaborationError) return reply.code(error.statusCode).send({ success: false, code: error.code, error: error.message });
-      if (error instanceof import_core46.ProjectTaskOwnerPolicyError) return reply.code(403).send({ success: false, code: error.code, error: error.message });
+      if (error instanceof import_core48.ProjectTaskOwnerPolicyError) return reply.code(403).send({ success: false, code: error.code, error: error.message });
       if (error instanceof ProjectTaskThreadError) return reply.code(409).send({ success: false, code: error.code, error: error.message });
       request.log.error({ error }, "Task route failed");
       return reply.code(500).send({ success: false, code: "TASK_INTERNAL_ERROR", error: "Task operation failed" });
@@ -19683,10 +19710,14 @@ var AgentWebAppService = class {
         throw new AgentWebAppError("PROJECT_NOT_FOUND", 404, "Project not found");
       }
     }
-    const scope = this.validateModels(input.scope, input.features.modelSelector);
+    const scope = await this.validateModels(
+      tenantId,
+      input.scope,
+      input.features.modelSelector
+    );
     return { ...input, scope: { ...scope, allowedProjectIds } };
   }
-  validateModels(scope, modelSelector) {
+  async validateModels(tenantId, scope, modelSelector) {
     const allowedModelKeys = scope.allowedModelKeys ? [...new Set(scope.allowedModelKeys)] : void 0;
     if (!allowedModelKeys?.length) {
       if (scope.defaultModelKey || modelSelector) {
@@ -19701,7 +19732,7 @@ var AgentWebAppService = class {
       throw new AgentWebAppError("MODEL_SCOPE_INVALID", 400, "Default model must be in the model allowlist");
     }
     for (const key of allowedModelKeys) {
-      if (!this.deps.modelRegistry.has(key)) {
+      if (!await this.deps.modelRegistry.has(tenantId, key)) {
         throw new AgentWebAppError("MODEL_NOT_FOUND", 400, "Configured model is not registered");
       }
     }
@@ -19891,7 +19922,7 @@ var import_zod6 = require("zod");
 // src/services/agent-web-app/AgentWebAppRuntimeService.ts
 var import_node_crypto10 = require("crypto");
 var import_protocols14 = require("@axiom-lattice/protocols");
-var import_core47 = require("@axiom-lattice/core");
+var import_core49 = require("@axiom-lattice/core");
 init_task_file_refs();
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -19931,15 +19962,22 @@ var AgentWebAppRuntimeService = class {
       return { id: project.id, name: project.name };
     }));
     const defaultModelKey = runtime.webApp.scope.defaultModelKey;
-    if (defaultModelKey && !this.deps.modelRegistry.has(defaultModelKey)) {
+    const tenantId = runtime.webApp.tenantId;
+    if (defaultModelKey && !await this.deps.modelRegistry.has(tenantId, defaultModelKey)) {
       this.fail("MODEL_NOT_ALLOWED", 400, "Default model is not available");
     }
     const configuredPublicModelKeys = runtime.webApp.features.modelSelector ? runtime.webApp.scope.allowedModelKeys ?? [] : defaultModelKey ? [defaultModelKey] : [];
-    const publicModelKeys = [...new Set(configuredPublicModelKeys)].filter((key) => this.deps.modelRegistry.has(key));
-    const models = publicModelKeys.map((key) => ({
-      key,
-      label: this.deps.modelRegistry.label(key)
-    }));
+    const candidateModelKeys = [...new Set(configuredPublicModelKeys)];
+    const resolvable = await Promise.all(
+      candidateModelKeys.map((key) => this.deps.modelRegistry.has(tenantId, key))
+    );
+    const publicModelKeys = candidateModelKeys.filter((_, index) => resolvable[index]);
+    const models = await Promise.all(
+      publicModelKeys.map(async (key) => ({
+        key,
+        label: await this.deps.modelRegistry.label(tenantId, key)
+      }))
+    );
     const result = {
       webApp: {
         id: runtime.webApp.id,
@@ -20055,12 +20093,12 @@ var AgentWebAppRuntimeService = class {
     const runtime = await this.resolveRuntime(webAppId, selection);
     await this.requireOwnedThread(runtime, userId, threadId);
     if (process.env.AXIOM_REPLICA_ID) {
-      const owner = await (0, import_core47.getThreadRunOwner)({
+      const owner = await (0, import_core49.getThreadRunOwner)({
         tenantId: runtime.webApp.tenantId,
         assistantId: runtime.webApp.assistantId,
         threadId
       });
-      if (owner && owner !== (0, import_core47.getReplicaId)()) {
+      if (owner && owner !== (0, import_core49.getReplicaId)()) {
         return {
           stream: (async function* () {
             yield (0, import_protocols14.buildAffinityMissChunk)(owner, threadId);
@@ -20162,7 +20200,7 @@ ${formatFileRefsSection(refs)}` : input.content;
     }
     const modelKey2 = selection.modelKey ?? webApp.scope.defaultModelKey;
     const allowedModels = webApp.scope.allowedModelKeys;
-    if (modelKey2 && (!allowedModels?.includes(modelKey2) || !this.deps.modelRegistry.has(modelKey2))) {
+    if (modelKey2 && (!allowedModels?.includes(modelKey2) || !await this.deps.modelRegistry.has(webApp.tenantId, modelKey2))) {
       this.fail("MODEL_NOT_ALLOWED", 400, "Model is not allowed");
     }
     return { webApp, project, modelKey: modelKey2 };
@@ -20413,7 +20451,7 @@ async function verifyWebAppToken(token, issuer, options = {}) {
 
 // src/routes/agent-web-app-runtime.ts
 var import_protocols15 = require("@axiom-lattice/protocols");
-var import_core48 = require("@axiom-lattice/core");
+var import_core50 = require("@axiom-lattice/core");
 var idSchema = import_zod6.z.string().min(1).max(128);
 var paramsSchema = import_zod6.z.object({ webAppId: idSchema }).strict();
 var threadParamsSchema = import_zod6.z.object({ webAppId: idSchema, threadId: idSchema }).strict();
@@ -20847,7 +20885,7 @@ function registerAgentWebAppRuntimeRoutes(app2, deps) {
           if (!threadId) throw new AgentWebAppRuntimeError("INVALID_REQUEST", 400, "thread_id is required");
           const content = body.messages.map((message) => message.content).join("\n");
           const { messageId } = await deps.service.enqueueMessage(webAppId, identity.userId, threadId, content, { projectId: body.projectId, modelKey: body.modelKey });
-          reply.header(import_protocols15.REPLICA_HEADER, (0, import_core48.getReplicaId)());
+          reply.header(import_protocols15.REPLICA_HEADER, (0, import_core50.getReplicaId)());
           for (const [name, value] of Object.entries((0, import_protocols15.affinityEchoHeaders)(request.headers[import_protocols15.AGENT_AFFINITY_HEADER]))) {
             reply.header(name, value);
           }
@@ -20933,7 +20971,7 @@ function beginSse(reply, request) {
     "X-Accel-Buffering": "no",
     "Access-Control-Allow-Origin": "*",
     "Access-Control-Expose-Headers": `${import_protocols15.REPLICA_HEADER}, ${import_protocols15.AFFINITY_ECHO_HEADER}`,
-    [import_protocols15.REPLICA_HEADER]: (0, import_core48.getReplicaId)(),
+    [import_protocols15.REPLICA_HEADER]: (0, import_core50.getReplicaId)(),
     ...(0, import_protocols15.affinityEchoHeaders)(request.headers[import_protocols15.AGENT_AFFINITY_HEADER])
   });
 }
@@ -21170,7 +21208,7 @@ var import_zod9 = require("zod");
 
 // src/services/capability/CapabilityBundleService.ts
 var import_zod8 = require("zod");
-var import_core49 = require("@axiom-lattice/core");
+var import_core51 = require("@axiom-lattice/core");
 var CapabilityBundleServiceError = class extends Error {
   constructor(code, message, statusCode) {
     super(message);
@@ -21211,7 +21249,7 @@ function projectBundleIds(config) {
   return [...value];
 }
 function issue(error) {
-  if (error instanceof import_core49.CapabilityBundleMergeError || error instanceof import_core49.CapabilityBundleValidationError) return { code: error instanceof import_core49.CapabilityBundleValidationError && error.code === "CAPABILITY_BUNDLE_INVALID_CONFIG" ? "INVALID_BUNDLE_CONFIG" : error.code, message: error.message, bundleId: error instanceof import_core49.CapabilityBundleMergeError ? error.bundleId : void 0, capabilityType: error.capabilityType, fieldPath: error.fieldPath };
+  if (error instanceof import_core51.CapabilityBundleMergeError || error instanceof import_core51.CapabilityBundleValidationError) return { code: error instanceof import_core51.CapabilityBundleValidationError && error.code === "CAPABILITY_BUNDLE_INVALID_CONFIG" ? "INVALID_BUNDLE_CONFIG" : error.code, message: error.message, bundleId: error instanceof import_core51.CapabilityBundleMergeError ? error.bundleId : void 0, capabilityType: error.capabilityType, fieldPath: error.fieldPath };
   return { code: "CAPABILITY_BUNDLE_CONFIGURATION_ERROR", message: error instanceof Error ? error.message : "Invalid capability bundle configuration" };
 }
 var CapabilityBundleService = class {
@@ -21224,7 +21262,7 @@ var CapabilityBundleService = class {
     const errors = [];
     for (const value of values) {
       try {
-        (0, import_core49.validateCapabilityBundleInput)(value);
+        (0, import_core51.validateCapabilityBundleInput)(value);
         bundles.push(value);
       } catch {
         errors.push({ bundleId: value.id, code: "INVALID_BUNDLE_CONFIG", message: "Capability bundle record is invalid" });
@@ -21236,7 +21274,7 @@ var CapabilityBundleService = class {
     const value = await this.deps.bundleStore.getById(tenantId, id3);
     if (!value) throw new CapabilityBundleServiceError("BUNDLE_NOT_FOUND", "Capability bundle not found", 404);
     try {
-      (0, import_core49.validateCapabilityBundleInput)(value);
+      (0, import_core51.validateCapabilityBundleInput)(value);
     } catch {
       throw new CapabilityBundleServiceError("INVALID_BUNDLE_CONFIG", "Capability bundle record is invalid", 422);
     }
@@ -21244,7 +21282,7 @@ var CapabilityBundleService = class {
   }
   async create(tenantId, input) {
     rejectStableKey(input);
-    (0, import_core49.validateCapabilityBundleInput)(input);
+    (0, import_core51.validateCapabilityBundleInput)(input);
     const value = input;
     const name = value.name.trim();
     const base = slugify(name);
@@ -21255,10 +21293,10 @@ var CapabilityBundleService = class {
       let suffix = 2;
       while (keys2.has(key)) key = `${base}-${suffix++}`;
       const normalized = { ...value, key, name };
-      (0, import_core49.validateCapabilityBundleInput)(normalized);
+      (0, import_core51.validateCapabilityBundleInput)(normalized);
       try {
         const result = await this.deps.bundleStore.create(tenantId, normalized);
-        (0, import_core49.validateCapabilityBundleInput)(result);
+        (0, import_core51.validateCapabilityBundleInput)(result);
         return result;
       } catch (error) {
         if (!isDuplicate(error)) throw error;
@@ -21269,16 +21307,16 @@ var CapabilityBundleService = class {
   }
   async update(tenantId, id3, input) {
     rejectStableKey(input);
-    (0, import_core49.validateCapabilityBundleInput)(input, { partial: true });
+    (0, import_core51.validateCapabilityBundleInput)(input, { partial: true });
     if (!input || typeof input !== "object" || Array.isArray(input) || typeof input.expectedUpdatedAt !== "string" || !input.expectedUpdatedAt.trim()) throw new CapabilityBundleServiceError("INVALID_BUNDLE_CONFIG", "expectedUpdatedAt is required for capability bundle updates", 400);
     const value = input;
     const normalized = { ...value, ...value.name === void 0 ? {} : { name: value.name.trim() }, ...Object.prototype.hasOwnProperty.call(value, "description") ? { description: value.description?.trim() || void 0 } : {} };
-    (0, import_core49.validateCapabilityBundleInput)(normalized, { partial: true });
+    (0, import_core51.validateCapabilityBundleInput)(normalized, { partial: true });
     try {
       const result = await this.deps.bundleStore.update(tenantId, id3, normalized);
       if (!result) throw new CapabilityBundleServiceError("BUNDLE_NOT_FOUND", "Capability bundle not found", 404);
       if ("status" in result && result.status === "conflict") throw new CapabilityBundleServiceError("BUNDLE_CONFLICT", "Capability bundle changed after it was loaded; reload before saving", 409);
-      (0, import_core49.validateCapabilityBundleInput)(result);
+      (0, import_core51.validateCapabilityBundleInput)(result);
       return result;
     } catch (error) {
       if (error instanceof CapabilityBundleServiceError) throw error;
@@ -21313,8 +21351,8 @@ var CapabilityBundleService = class {
     if (missing.length > 0) return { bundleIds: ids, capabilities: [], overrides: [], sources: [], warnings: [], errors: missing.map((id3) => ({ code: "BUNDLE_NOT_FOUND", message: `Persisted capability bundle '${id3}' is missing`, bundleId: id3 })), revision: "" };
     try {
       const ordered = ids.map((id3) => byId.get(id3));
-      ordered.forEach((bundle) => (0, import_core49.validateCapabilityBundleInput)(bundle));
-      return (0, import_core49.mergeCapabilityBundles)(ordered);
+      ordered.forEach((bundle) => (0, import_core51.validateCapabilityBundleInput)(bundle));
+      return (0, import_core51.mergeCapabilityBundles)(ordered);
     } catch (error) {
       return { bundleIds: ids, capabilities: [], overrides: [], sources: [], warnings: [], errors: [issue(error)], revision: "" };
     }
@@ -21347,7 +21385,7 @@ var CapabilityBundleService = class {
     return ids.map((id3) => {
       const value = byId.get(id3);
       if (!value) throw new CapabilityBundleServiceError("BUNDLE_NOT_FOUND", "Capability bundle not found", 404);
-      (0, import_core49.validateCapabilityBundleInput)(value);
+      (0, import_core51.validateCapabilityBundleInput)(value);
       return value;
     });
   }
@@ -21362,7 +21400,7 @@ var CapabilityBundleService = class {
         continue;
       }
       try {
-        (0, import_core49.validateCapabilityBundleInput)(bundle);
+        (0, import_core51.validateCapabilityBundleInput)(bundle);
         valid.push(bundle);
       } catch (error) {
         errors.push({ ...issue(error), bundleId: id3 });
@@ -21370,7 +21408,7 @@ var CapabilityBundleService = class {
     }
     let preview;
     try {
-      preview = (0, import_core49.mergeCapabilityBundles)(valid);
+      preview = (0, import_core51.mergeCapabilityBundles)(valid);
     } catch (error) {
       preview = { bundleIds: ids, capabilities: [], overrides: [], sources: [], warnings: [], errors: [issue(error)], revision: "" };
     }
@@ -21522,7 +21560,7 @@ var import_zod11 = require("zod");
 // src/services/model-provider/ModelProviderService.ts
 var import_node_crypto14 = require("crypto");
 var import_protocols16 = require("@axiom-lattice/protocols");
-var import_core50 = require("@axiom-lattice/core");
+var import_core52 = require("@axiom-lattice/core");
 
 // src/services/model-provider/errors.ts
 var ModelProviderServiceError = class extends Error {
@@ -21725,7 +21763,6 @@ function getDiscoveryAdapter(protocol) {
 
 // src/services/model-provider/ModelProviderService.ts
 var PHASE1_REGISTRY_TENANT = "default";
-var ALLOWED_LLM_PROVIDERS = /* @__PURE__ */ new Set(["openai"]);
 var unsafeReasonToErrorCode = {
   INVALID_BASE_URL: "INVALID_BASE_URL",
   UNSUPPORTED_SCHEME: "INVALID_BASE_URL",
@@ -21792,6 +21829,8 @@ var ModelProviderService = class {
       source: "snapshot",
       enabled: model.enabled,
       stale: model.stale ?? false,
+      extra: model.extra,
+      isDefault: model.isDefault,
       executable: model.enabled && // A disabled provider is a kill switch: its models stay visible in the
       // catalog but are no longer reported as runnable.
       !disabledProviderIds.has(model.providerId) && this.deps.registry.has(
@@ -21799,20 +21838,20 @@ var ModelProviderService = class {
         (0, import_protocols16.toModelKey)(model.providerId, model.modelId)
       )
     }));
-    const known = new Set(models.map((model) => model.modelKey));
-    for (const modelKey2 of this.deps.registry.listRegistered(tenantId)) {
-      if (known.has(modelKey2)) {
-        continue;
+    if (models.length === 0) {
+      for (const modelKey2 of this.deps.registry.listRegistered(
+        PHASE1_REGISTRY_TENANT
+      )) {
+        models.push({
+          modelKey: modelKey2,
+          providerId: "",
+          providerName: "registered",
+          source: "registered",
+          enabled: true,
+          stale: false,
+          executable: true
+        });
       }
-      models.push({
-        modelKey: modelKey2,
-        providerId: "",
-        providerName: "registered",
-        source: "registered",
-        enabled: true,
-        stale: false,
-        executable: true
-      });
     }
     return {
       providers: providers.map(
@@ -21889,7 +21928,6 @@ var ModelProviderService = class {
    */
   async create(userId, tenantId, input) {
     await this.assertAdmin(userId, tenantId);
-    this.assertHasApiKey(input.apiKey);
     if (!getDiscoveryAdapter(input.protocol)) {
       throw new ModelProviderServiceError(
         "UNSUPPORTED_PROTOCOL",
@@ -21930,9 +21968,6 @@ var ModelProviderService = class {
   async update(userId, tenantId, id3, updates) {
     await this.assertAdmin(userId, tenantId);
     const existing = await this.requireProvider(tenantId, id3);
-    if (updates.clearApiKey || !(updates.apiKey?.trim() || existing.apiKey)) {
-      this.assertHasApiKey(void 0);
-    }
     if (updates.protocol && !getDiscoveryAdapter(updates.protocol)) {
       throw new ModelProviderServiceError(
         "UNSUPPORTED_PROTOCOL",
@@ -22053,6 +22088,8 @@ var ModelProviderService = class {
       void 0,
       now
     );
+    await this.ensureDefaultModel(tenantId);
+    this.deps.registry.forgetTenantDefaultMiss?.(tenantId);
     const registered = [];
     if (this.shouldRegister(tenantId)) {
       const snapshot = await this.deps.providerStore.listModels(tenantId, id3);
@@ -22153,6 +22190,13 @@ var ModelProviderService = class {
   async setModels(userId, tenantId, id3, selection) {
     await this.assertAdmin(userId, tenantId);
     const provider = await this.requireProvider(tenantId, id3);
+    if (selection.filter((entry) => entry.isDefault === true).length > 1) {
+      throw new ModelProviderServiceError(
+        "INVALID_INPUT",
+        400,
+        "Only one model can be the tenant's default"
+      );
+    }
     const previous = await this.deps.providerStore.listModels(tenantId, id3);
     const previousById = new Map(
       previous.map((model) => [model.modelId, model])
@@ -22170,9 +22214,18 @@ var ModelProviderService = class {
         // The selection carries only ids and states, so a model already in the
         // snapshot keeps the metadata discovery gave it.
         displayName: previousById.get(entry.modelId)?.displayName,
-        ownedBy: previousById.get(entry.modelId)?.ownedBy
+        ownedBy: previousById.get(entry.modelId)?.ownedBy,
+        // An omitted `extra` means "keep what is stored" — the picker sends no
+        // config, and a sync must not wipe one set by hand. The store resolves
+        // the fallback against the row's current value.
+        extra: entry.extra,
+        // Same rule: omitted leaves the flag alone, so a sync cannot quietly
+        // move the tenant's default.
+        isDefault: entry.isDefault
       }))
     );
+    await this.ensureDefaultModel(tenantId);
+    this.deps.registry.forgetTenantDefaultMiss?.(tenantId);
     const models = await this.deps.providerStore.listModels(tenantId, id3);
     const kept = new Set(models.map((model) => model.modelId));
     for (const model of previous) {
@@ -22187,6 +22240,40 @@ var ModelProviderService = class {
     this.notifyChanged(tenantId, id3);
     return this.toPublicEntry(provider, models.length);
   }
+  /**
+   * Give a tenant's sole model the default flag.
+   *
+   * A tenant with exactly one runnable model has an obvious default, and saying
+   * so is what keeps the invariant the rest of the feature leans on: a tenant
+   * either has no models at all — and falls back to the deployment's default —
+   * or has a default, which cannot be deleted. Without this a tenant could sit
+   * with one model and no default, and deleting that model would leave nothing
+   * behind.
+   *
+   * Deliberately narrow: more than one model is the tenant's choice to make,
+   * and a disabled model is not a candidate for "the model this tenant runs".
+   *
+   * @param tenantId - The tenant whose model set just changed
+   */
+  async ensureDefaultModel(tenantId) {
+    const models = await this.deps.providerStore.listModels(tenantId);
+    if (models.length !== 1) {
+      return;
+    }
+    const [only] = models;
+    if (only.isDefault || !only.enabled) {
+      return;
+    }
+    await this.deps.providerStore.replaceProviderModels(tenantId, only.providerId, [
+      {
+        id: only.modelId,
+        enabled: only.enabled,
+        stale: only.stale,
+        extra: only.extra,
+        isDefault: true
+      }
+    ]);
+  }
   syncRegistry(tenantId, provider, models) {
     if (!this.shouldRegister(tenantId)) {
       return [];
@@ -22201,7 +22288,7 @@ var ModelProviderService = class {
       this.deps.registry.register(
         tenantId,
         modelKey2,
-        this.toLlmConfig(provider, model.modelId)
+        this.buildLlmConfig(provider, model)
       );
       registered.push(modelKey2);
     }
@@ -22214,6 +22301,28 @@ var ModelProviderService = class {
     } catch {
     }
   }
+  /**
+   * Build a model's runtime config, keeping this service's error contract.
+   *
+   * The builder itself lives in core, because the registry's lazy loader needs
+   * the same one when a replica materialises a model it never discovered.
+   * Wrapping here preserves the `ModelProviderServiceError` the API layer
+   * renders — core cannot import a gateway error type.
+   */
+  buildLlmConfig(provider, model) {
+    try {
+      return (0, import_core52.buildModelLlmConfig)(provider, model);
+    } catch (error) {
+      if (error instanceof import_core52.UnsupportedModelProviderError) {
+        throw new ModelProviderServiceError(
+          "UNSUPPORTED_PROTOCOL",
+          400,
+          "Provider is configured with an unsupported LLM provider"
+        );
+      }
+      throw error;
+    }
+  }
   /**
    * Enable or disable a single discovered model.
    */
@@ -22244,34 +22353,6 @@ var ModelProviderService = class {
   shouldRegister(tenantId) {
     return tenantId === PHASE1_REGISTRY_TENANT;
   }
-  /**
-   * Build the runtime LLM config for a discovered model.
-   *
-   * `apiKeyEnvName`, `extra` and `modelKwargs` are deliberately omitted — they
-   * would let a tenant name an arbitrary process environment variable to read
-   * credentials from, or inject arbitrary constructor options.
-   */
-  toLlmConfig(provider, modelId) {
-    if (!ALLOWED_LLM_PROVIDERS.has(provider.llmProvider)) {
-      throw new ModelProviderServiceError(
-        "UNSUPPORTED_PROTOCOL",
-        400,
-        "Provider is configured with an unsupported LLM provider"
-      );
-    }
-    return {
-      provider: provider.llmProvider,
-      model: modelId,
-      displayName: modelId,
-      streaming: true,
-      apiKey: provider.apiKey,
-      baseURL: provider.baseURL,
-      // Chat Completions and the Responses API are different routes with
-      // different request fields; without this the gateway would post
-      // `messages` to an endpoint expecting `input`.
-      ...provider.apiStyle === "responses" ? { useResponsesApi: true } : {}
-    };
-  }
   /**
    * The sole projection from an internal provider entry to an API-safe shape.
    */
@@ -22296,21 +22377,6 @@ var ModelProviderService = class {
       updatedAt: provider.updatedAt.toISOString()
     };
   }
-  /**
-   * Reject a provider that would end up without a credential.
-   *
-   * @param apiKey - The key the provider would hold, if any
-   * @throws {ModelProviderServiceError} When no key is present
-   */
-  assertHasApiKey(apiKey) {
-    if (!apiKey?.trim()) {
-      throw new ModelProviderServiceError(
-        "INVALID_INPUT",
-        400,
-        "A model provider must have an API key"
-      );
-    }
-  }
   /**
    * Load a provider or fail with 404.
    *
@@ -22376,9 +22442,9 @@ var ModelProviderService = class {
    */
   async assertSafeUrl(baseURL) {
     try {
-      await (0, import_core50.assertSafeUpstreamUrl)(baseURL);
+      await (0, import_core52.assertSafeUpstreamUrl)(baseURL);
     } catch (error) {
-      if (error instanceof import_core50.UnsafeUpstreamUrlError) {
+      if (error instanceof import_core52.UnsafeUpstreamUrlError) {
         throw new ModelProviderServiceError(
           unsafeReasonToErrorCode[error.reason],
           400,
@@ -22420,15 +22486,18 @@ var providerId = import_zod10.z.string().trim().min(1).max(255);
 var providerParamsSchema = import_zod10.z.object({ providerId }).strict();
 var protocolSchema = import_zod10.z.enum(["openai-compatible"]);
 var apiStyleSchema = import_zod10.z.enum(["chat-completions", "responses"]);
+var extraSchema = import_zod10.z.record(import_zod10.z.string(), import_zod10.z.unknown());
 var createProviderSchema = import_zod10.z.object({
   name: import_zod10.z.string().trim().min(1).max(255),
   displayName: import_zod10.z.string().trim().max(255).optional(),
   protocol: protocolSchema,
   apiStyle: apiStyleSchema.optional(),
   baseURL: import_zod10.z.string().trim().min(1).max(2048),
-  // Required, not optional: see CreateModelProviderRequest.apiKey — a
-  // keyless provider would make the gateway send its own env credential.
-  apiKey: import_zod10.z.string().trim().min(1).max(1024),
+  // Optional: omitting it means the upstream needs no authentication, which
+  // is the normal case for a locally hosted model server. The service turns
+  // that into an explicit no-auth marker rather than an absent key, so the
+  // runtime never falls back to the gateway's own environment credentials.
+  apiKey: import_zod10.z.string().trim().max(1024).optional(),
   enabled: import_zod10.z.boolean().optional()
 }).strict();
 var updateProviderSchema = createProviderSchema.partial().extend({
@@ -22448,7 +22517,15 @@ var setModelsSchema = import_zod10.z.object({
     import_zod10.z.object({
       modelId: import_zod10.z.string().trim().min(1).max(512),
       enabled: import_zod10.z.boolean(),
-      stale: import_zod10.z.boolean().optional()
+      stale: import_zod10.z.boolean().optional(),
+      // Omitted means "leave the stored config alone" — the picker sends
+      // only ids and states, and must not wipe a config set by hand.
+      extra: extraSchema.optional(),
+      // At most one per tenant; the service rejects a tie with a
+      // readable error rather than letting the unique index raise one.
+      // Omitted means "leave the stored flag alone", which is what a
+      // sync carries.
+      isDefault: import_zod10.z.boolean().optional()
     }).strict()
   ).max(1e3)
 }).strict();
@@ -23095,7 +23172,13 @@ var ProjectRosterService = class {
     }
     const agent = (await this.deps.agents.list(actor3.tenantId, actor3.userId)).find((item) => item.assistantId === assistantId);
     if (!agent || agent.ownerUserId !== void 0) throw new ProjectRosterServiceError("ASSISTANT_NOT_FOUND", 404, "Agent not found");
-    const room = await this.deps.roomService.ensureMainRoom(actor3);
+    const room = await this.deps.roomStore.ensureMainRoom({
+      id: (0, import_node_crypto17.randomUUID)(),
+      tenantId: actor3.tenantId,
+      workspaceId: project.workspaceId,
+      projectId: actor3.projectId,
+      name: project.name
+    });
     const taken = new Set((await this.deps.membershipStore.list(actor3.tenantId, actor3.projectId)).map((item) => item.mentionName));
     const mentionName = uniqueMentionName(agent.name, taken);
     let ids = await this.findSafePresence(actor3, room, assistantId);
@@ -23811,6 +23894,13 @@ var import_protocols18 = require("@axiom-lattice/protocols");
 // src/services/collaboration/RoomInterruptService.ts
 var import_node_crypto19 = require("crypto");
 init_projectTaskScope();
+var RESUMABLE_TASK_INTERRUPT_CODES = /* @__PURE__ */ new Set([
+  "PROJECT_TASK_NOT_RESUMABLE",
+  "PROJECT_TASK_NOT_READY",
+  "PROJECT_TASK_START_CONFLICT",
+  "TASK_STATUS_CONFLICT",
+  "REVIEW_APPROVAL_REQUIRED"
+]);
 var RoomInterruptServiceError = class extends Error {
   /** Creates a stable room interrupt error. */
   constructor(code, statusCode, message) {
@@ -23833,7 +23923,16 @@ var RoomInterruptService = class {
   /** Resolves a pending interrupt with an explicit resume command. */
   async resume(input, command) {
     await this.deps.requireAccess({ tenantId: input.tenantId, userId: input.userId, projectId: input.projectId });
-    const membership = await this.deps.resolveMembership(input);
+    if (input.ref.kind === "task") {
+      await this.resumeTask(input, command);
+      return;
+    }
+    await this.resumePresence(input, command);
+  }
+  /** Resolves a bot presence-thread interrupt by dispatching a follow-up resume. */
+  async resumePresence(input, command) {
+    const membershipId = input.ref.kind === "presence" ? input.ref.membershipId : "";
+    const membership = await this.deps.resolveMembership({ tenantId: input.tenantId, projectId: input.projectId, membershipId });
     if (!membership || membership.status !== "active" || !membership.roomThreadId || membership.projectId !== input.projectId) {
       throw new RoomInterruptServiceError("ROOM_INTERRUPT_TARGET_UNAVAILABLE", 404, "Room interrupt target is unavailable");
     }
@@ -23886,6 +23985,47 @@ var RoomInterruptService = class {
       }
     );
   }
+  /** Resolves a Project Task interrupt by re-reading the task thread and resuming its durable run. */
+  async resumeTask(input, command) {
+    if (!this.deps.tasks || !this.deps.execution) throw new RoomInterruptServiceError("ROOM_INTERRUPT_TARGET_UNAVAILABLE", 404, "Project task runtime is unavailable");
+    const taskId = input.ref.kind === "task" ? input.ref.taskId : "";
+    const task = await this.deps.tasks.getById(input.tenantId, taskId);
+    if (!task || task.tenantId !== input.tenantId || task.projectId !== input.projectId || task.status !== "interrupted" || typeof task.context?.thread_id !== "string") {
+      throw new RoomInterruptServiceError("ROOM_INTERRUPT_NOT_PENDING", 409, "Room interrupt is no longer pending");
+    }
+    const status = await this.deps.getThreadStatus({
+      tenantId: task.tenantId,
+      assistantId: task.ownerId,
+      threadId: task.context.thread_id,
+      workspaceId: task.workspaceId ?? "",
+      projectId: task.projectId ?? ""
+    });
+    if (String(status) !== "interrupted") throw new RoomInterruptServiceError("ROOM_INTERRUPT_NOT_PENDING", 409, "Room interrupt is no longer pending");
+    if (this.deps.getThreadState) {
+      const state = await this.deps.getThreadState({
+        tenantId: task.tenantId,
+        assistantId: task.ownerId,
+        threadId: task.context.thread_id,
+        workspaceId: task.workspaceId ?? "",
+        projectId: task.projectId ?? ""
+      });
+      if (readClarifyInterrupt(state) === void 0) {
+        throw new RoomInterruptServiceError("ROOM_INTERRUPT_NOT_PENDING", 409, "Room interrupt is no longer pending");
+      }
+    }
+    try {
+      await this.deps.execution.dispatchDetached(
+        { tenantId: task.tenantId, taskId: task.id, actor: `user:${input.userId}` },
+        void 0,
+        { command, expectedStatus: "interrupted" }
+      );
+    } catch (error) {
+      if (error instanceof ProjectTaskExecutionError && RESUMABLE_TASK_INTERRUPT_CODES.has(error.code)) {
+        throw new RoomInterruptServiceError("ROOM_INTERRUPT_NOT_PENDING", 409, error.message);
+      }
+      throw error;
+    }
+  }
 };
 
 // src/schemas/project-room.ts
@@ -23929,14 +24069,18 @@ var updateProjectBotSchema = import_zod12.z.object({
   expectedUpdatedAt: isoDate
 }).strict().refine((value) => value.role !== void 0 || value.title !== void 0 || value.responsibility !== void 0 || value.mentionName !== void 0, { message: "At least one mutable field is required" });
 var resumeInterruptSchema = import_zod12.z.object({
-  membershipId: id2,
+  ref: import_zod12.z.discriminatedUnion("kind", [
+    import_zod12.z.object({ kind: import_zod12.z.literal("presence"), membershipId: id2 }).strict(),
+    import_zod12.z.object({ kind: import_zod12.z.literal("task"), taskId: id2 }).strict()
+  ]).optional(),
+  membershipId: id2.optional(),
   answers: import_zod12.z.array(import_zod12.z.object({
     questionIndex: import_zod12.z.number().int().nonnegative(),
     otherText: import_zod12.z.string().optional(),
     selectedOptions: import_zod12.z.array(import_zod12.z.string()).optional(),
     filePath: import_zod12.z.string().optional()
   }).strict()).optional()
-}).strict();
+}).strict().refine((v) => v.ref !== void 0 || v.membershipId !== void 0, { message: "ref or membershipId is required" });
 
 // src/routes/project-rooms.ts
 var ProjectRoomAuthError = class extends Error {
@@ -23987,8 +24131,9 @@ function registerProjectRoomRoutes(app2, deps) {
     const params = projectRoomParamsSchema.parse(request.params);
     const requestActor = actor(request, params.projectId);
     const body = resumeInterruptSchema.parse(request.body ?? {});
+    const ref = body.ref ?? { kind: "presence", membershipId: body.membershipId };
     await deps.interruptService.resume(
-      { tenantId: requestActor.tenantId, projectId: requestActor.projectId, userId: requestActor.userId, membershipId: body.membershipId },
+      { tenantId: requestActor.tenantId, projectId: requestActor.projectId, userId: requestActor.userId, ref },
       { resume: { data: { answers: body.answers ?? [] } } }
     );
     return { data: { resolved: true } };
@@ -24095,7 +24240,7 @@ async function execute(reply, operation) {
 // src/routes/cospace.ts
 var import_node_crypto20 = require("crypto");
 var import_zod15 = require("zod");
-var import_core51 = require("@axiom-lattice/core");
+var import_core53 = require("@axiom-lattice/core");
 var import_protocols19 = require("@axiom-lattice/protocols");
 var CoSpaceAuthError = class extends Error {
   constructor() {
@@ -24280,14 +24425,14 @@ function registerCoSpaceRoutes(app2, deps) {
         }
         let projectId;
         if (body.type === "human") {
-          projectId = (0, import_core51.generateDirectHumanProjectId)(
+          projectId = (0, import_core53.generateDirectHumanProjectId)(
             actor3.tenantId,
             params.workspaceId,
             actor3.userId,
             body.targetUserId
           );
         } else {
-          projectId = (0, import_core51.generateDirectBotProjectId)(
+          projectId = (0, import_core53.generateDirectBotProjectId)(
             actor3.tenantId,
             params.workspaceId,
             actor3.userId,
@@ -24494,7 +24639,7 @@ function registerCoSpaceRoutes(app2, deps) {
         );
         const bots = [];
         for (const assistant of assistants) {
-          const directProjectId = (0, import_core51.generateDirectBotProjectId)(
+          const directProjectId = (0, import_core53.generateDirectBotProjectId)(
             actor3.tenantId,
             params.workspaceId,
             actor3.userId,
@@ -24556,7 +24701,7 @@ function registerCoSpaceRoutes(app2, deps) {
           if (link.userId === actor3.userId) continue;
           const user = await deps.userStore.getUserById(link.userId);
           if (!user) continue;
-          const directProjectId = (0, import_core51.generateDirectHumanProjectId)(
+          const directProjectId = (0, import_core53.generateDirectHumanProjectId)(
             actor3.tenantId,
             params.workspaceId,
             actor3.userId,
@@ -25385,7 +25530,7 @@ function createRoomMessageRetentionJob(input) {
 
 // src/services/collaboration/ProjectTaskExecutionMutex.ts
 var import_protocols22 = require("@axiom-lattice/protocols");
-var import_core52 = require("@axiom-lattice/core");
+var import_core54 = require("@axiom-lattice/core");
 var MACHINE_LEASE_OPTIONS = { ttlMs: 6e4, acquireTimeoutMs: 9e4, retryDelayMs: 100 };
 function machineKey(scope) {
   const snapshot = (0, import_protocols22.snapshotExactRecord)(scope, ["tenantId", "assistantId", "projectId"]);
@@ -25413,9 +25558,9 @@ var ProjectTaskExecutionMutex = class {
     const leaseKey = `project-task-machine:${encodeURIComponent(scope.tenantId)}:${encodeURIComponent(scope.assistantId)}:${encodeURIComponent(scope.projectId)}`;
     await this.acquire(key, signal);
     try {
-      const store2 = (0, import_core52.getCoordinationLeaseStore)();
+      const store2 = (0, import_core54.getCoordinationLeaseStore)();
       if (!store2) return await operation();
-      return await (0, import_core52.withLease)(store2, leaseKey, (0, import_core52.getReplicaId)(), operation, MACHINE_LEASE_OPTIONS);
+      return await (0, import_core54.withLease)(store2, leaseKey, (0, import_core54.getReplicaId)(), operation, MACHINE_LEASE_OPTIONS);
     } finally {
       this.release(key);
     }
@@ -25466,9 +25611,57 @@ var ProjectTaskExecutionMutex = class {
   }
 };
 
+// src/services/collaboration/TaskInterruptCardProjector.ts
+function clarifyFence(data) {
+  return ["```clarify", JSON.stringify(data), "```"].join("\n");
+}
+var TaskInterruptCardProjector = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  /** Projects the interruption as a correlated room card when it is a clarify. */
+  async project(input) {
+    const clarify = readClarifyInterrupt(input.state);
+    if (!clarify) return;
+    const { task, messageId } = input;
+    const workspaceId = task.workspaceId;
+    const projectId = task.projectId;
+    if (!workspaceId || !projectId) return;
+    const adapter = this.deps.adapter;
+    const sendInterrupt = adapter.sendInterrupt;
+    if (!sendInterrupt) {
+      this.safeWarn("project-room:task-interrupt-card-unsupported", { taskId: task.id });
+      return;
+    }
+    try {
+      const room = snapshotProjectRoom(await this.deps.rooms.getMainRoom(task.tenantId, projectId));
+      if (!room || !room.id || room.tenantId !== task.tenantId || room.workspaceId !== workspaceId || room.projectId !== projectId) return;
+      const membership = snapshotBotMembership(await this.deps.bots.findByAssistant(task.tenantId, projectId, task.ownerId));
+      if (!membership || membership.tenantId !== task.tenantId || membership.workspaceId !== workspaceId || membership.projectId !== projectId || membership.roomId !== room.id || membership.assistantId !== task.ownerId || membership.status !== "active") return;
+      const installation = await this.deps.installation.ensure(task.tenantId);
+      const text = clarifyFence({ taskId: task.id, questions: clarify.questions });
+      await sendInterrupt.call(
+        adapter,
+        { adapterChannel: "room", channelInstallationId: installation.id, rawTarget: { targetMembershipId: membership.id } },
+        { text, metadata: { correlationKey: `task:${task.id}:${messageId}` } },
+        installation
+      );
+    } catch (error) {
+      this.safeWarn("project-room:task-interrupt-card-failed", { taskId: task.id, error: error instanceof Error ? error.message : String(error) });
+    }
+  }
+  /** Logs without ever letting a failing logger reject `project()`. */
+  safeWarn(message, context) {
+    try {
+      this.deps.log.warn(message, context);
+    } catch {
+    }
+  }
+};
+
 // src/services/collaboration/ProjectTaskObserver.ts
 var import_node_crypto22 = require("crypto");
-var import_core53 = require("@axiom-lattice/core");
+var import_core55 = require("@axiom-lattice/core");
 var import_protocols23 = require("@axiom-lattice/protocols");
 
 // src/services/collaboration/projectTaskDispatchMarker.ts
@@ -25505,7 +25698,7 @@ var ProjectTaskObserver = class {
         throw new Error(`Invalid Project task observer bound: ${name}`);
       }
     }
-    this.runBridge = (0, import_core53.createTaskRunBridge)({ lifecycle: this.deps.lifecycle });
+    this.runBridge = (0, import_core55.createTaskRunBridge)({ lifecycle: this.deps.lifecycle });
   }
   /** Fire-and-forget notifier adapter that never waits for observer work or machine acquisition. */
   async listener(event) {
@@ -26721,7 +26914,7 @@ function isRecord3(value) {
 init_projectTaskScope();
 
 // src/services/collaboration/ProjectRoomRealtimeRuntime.ts
-var import_core54 = require("@axiom-lattice/core");
+var import_core56 = require("@axiom-lattice/core");
 
 // src/services/collaboration/ProjectRoomEventBroker.ts
 var import_node_crypto24 = require("crypto");
@@ -27496,7 +27689,7 @@ function createProjectRoomRealtimeRuntime(deps) {
     broker,
     publisher,
     subscriber,
-    subscribe: (listener) => import_core54.taskLifecycleNotifier.subscribe(listener),
+    subscribe: (listener) => import_core56.taskLifecycleNotifier.subscribe(listener),
     log: deps.log,
     shutdownTimeoutMs: deps.shutdownTimeoutMs
   });
@@ -28233,35 +28426,35 @@ function hookErrorMessage(error) {
 function wrapReassignmentThreadError(error) {
   if (error instanceof ProjectTaskThreadError) {
     if (error.code === "PROJECT_TASK_THREAD_SCOPE_INVALID") {
-      return new import_core55.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", error.message, {
+      return new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", error.message, {
         hint: "Project task, room, or roster scope changed; re-read the task and retry."
       });
     }
     if (error.code === "PROJECT_TASK_THREAD_OWNER_INVALID") {
-      return new import_core55.ManagedTaskStartError("TASK_REASSIGN_NO_CHANGE", error.message, {
+      return new import_core57.ManagedTaskStartError("TASK_REASSIGN_NO_CHANGE", error.message, {
         hint: "The target already owns this task; re-read before dispatching."
       });
     }
-    return new import_core55.ManagedTaskStartError("TASK_THREAD_CONFLICT", error.message, {
+    return new import_core57.ManagedTaskStartError("TASK_THREAD_CONFLICT", error.message, {
       hint: "Task Thread changed concurrently; re-read the task and retry."
     });
   }
-  return new import_core55.ManagedTaskStartError("TASK_EXECUTION_ENQUEUE_FAILED", hookErrorMessage(error), {
+  return new import_core57.ManagedTaskStartError("TASK_EXECUTION_ENQUEUE_FAILED", hookErrorMessage(error), {
     hint: "Re-read the task and retry the dispatch."
   });
 }
 function wrapReassignmentAuthorizationError(error) {
-  if (error instanceof import_core55.ProjectTaskOwnerPolicyError) {
+  if (error instanceof import_core57.ProjectTaskOwnerPolicyError) {
     if (error.code === "PROJECT_TASK_CALLER_INACTIVE") {
-      return new import_core55.ManagedTaskStartError("PROJECT_TASK_CALLER_INACTIVE", error.message, {
+      return new import_core57.ManagedTaskStartError("PROJECT_TASK_CALLER_INACTIVE", error.message, {
         hint: "Dispatch from an active Project Room member bot."
       });
     }
-    return new import_core55.ManagedTaskStartError("PROJECT_TASK_OWNER_INACTIVE", error.message, {
+    return new import_core57.ManagedTaskStartError("PROJECT_TASK_OWNER_INACTIVE", error.message, {
       hint: "Dispatch to an active bot in this Project's roster."
     });
   }
-  return new import_core55.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", hookErrorMessage(error), {
+  return new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", hookErrorMessage(error), {
     hint: "Re-read the task and roster, then retry the dispatch."
   });
 }
@@ -28290,43 +28483,43 @@ async function transferGovernedDispatchOwner(task, options, deps) {
   const agentId = options?.agentId;
   if (!agentId || agentId === task.ownerId) return void 0;
   if (!task.workspaceId || !task.projectId) {
-    throw new import_core55.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Task is not governed by a Project lifecycle.", {
+    throw new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Task is not governed by a Project lifecycle.", {
       hint: "Dispatch governed tasks from a trusted Project run; ordinary tasks execute immediately."
     });
   }
   return deps.mutex.runExclusive({ tenantId: task.tenantId, projectId: task.projectId }, async () => {
     const current = await deps.tasks.getById(task.tenantId, task.id);
     if (!current || !isProjectLifecycleTask(current) || current.workspaceId !== task.workspaceId || current.projectId !== task.projectId) {
-      throw new import_core55.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Task is no longer a Project lifecycle task.", {
+      throw new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Task is no longer a Project lifecycle task.", {
         hint: "Re-read the task and confirm it still belongs to this Project before dispatching."
       });
     }
     if (current.ownerType !== "agent") {
-      throw new import_core55.ManagedTaskStartError("AGENT_TASK_REQUIRED", "Project task owner must be an Agent.", {
+      throw new import_core57.ManagedTaskStartError("AGENT_TASK_REQUIRED", "Project task owner must be an Agent.", {
         hint: "Assign the task to an Agent before dispatching."
       });
     }
     if (current.status !== "pending") {
-      throw new import_core55.ManagedTaskStartError("TASK_NOT_DISPATCHABLE", "Only a `pending` Project task can be dispatched.", {
+      throw new import_core57.ManagedTaskStartError("TASK_NOT_DISPATCHABLE", "Only a `pending` Project task can be dispatched.", {
         hint: `This task is '${current.status}'. Resolve it or create a new task before dispatching.`
       });
     }
     if (agentId === current.ownerId) return current;
     const room = await deps.rooms.getMainRoom(current.tenantId, current.projectId);
     if (!room || room.tenantId !== current.tenantId || room.workspaceId !== current.workspaceId || room.projectId !== current.projectId || room.type !== "main") {
-      throw new import_core55.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Project main room is unavailable.", {
+      throw new import_core57.ManagedTaskStartError("PROJECT_TASK_CONTEXT_INVALID", "Project main room is unavailable.", {
         hint: "Open or repair the Project Room before dispatching."
       });
     }
     const target = await deps.botMemberships.findByAssistant(current.tenantId, current.projectId, agentId);
     if (!target || target.status !== "active" || target.tenantId !== current.tenantId || target.workspaceId !== current.workspaceId || target.projectId !== current.projectId || target.assistantId !== agentId || target.roomId !== room.id) {
-      throw new import_core55.ManagedTaskStartError("PROJECT_TASK_OWNER_INACTIVE", "Target Project task owner is not active in the exact roster.", {
+      throw new import_core57.ManagedTaskStartError("PROJECT_TASK_OWNER_INACTIVE", "Target Project task owner is not active in the exact roster.", {
         hint: "Dispatch to an active bot in this Project's roster."
       });
     }
     const caller = options?.callerMembershipId ? await deps.botMemberships.findById(current.tenantId, options.callerMembershipId) : null;
     if (!caller || !options?.callerAssistantId || caller.id !== options.callerMembershipId || caller.assistantId !== options.callerAssistantId || caller.status !== "active" || caller.tenantId !== current.tenantId || caller.workspaceId !== current.workspaceId || caller.projectId !== current.projectId || caller.roomId !== room.id) {
-      throw new import_core55.ManagedTaskStartError("PROJECT_TASK_CALLER_INACTIVE", "Current Project task caller is not active in the exact roster.", {
+      throw new import_core57.ManagedTaskStartError("PROJECT_TASK_CALLER_INACTIVE", "Current Project task caller is not active in the exact roster.", {
         hint: "Dispatch from an active Project Room member bot."
       });
     }
@@ -28361,7 +28554,7 @@ async function transferGovernedDispatchOwner(task, options, deps) {
       actor: `agent:${caller.assistantId}`
     });
     if (!result.success) {
-      throw new import_core55.ManagedTaskStartError(result.code, result.error, {
+      throw new import_core57.ManagedTaskStartError(result.code, result.error, {
         hint: result.hint ?? reassignmentFailureHint(result.code),
         ...result.retryable !== void 0 ? { retryable: result.retryable } : {}
       });
@@ -28372,25 +28565,25 @@ async function transferGovernedDispatchOwner(task, options, deps) {
 function broadcastModelProviderChanged(tenantId, providerId2) {
   if (!tenantId) return;
   try {
-    const outbox = (0, import_core55.getStoreLattice)("default", "outbox").store;
-    void publishModelProviderChanged(outbox, (0, import_core55.getReplicaId)(), tenantId, providerId2);
+    const outbox = (0, import_core57.getStoreLattice)("default", "outbox").store;
+    void publishModelProviderChanged(outbox, (0, import_core57.getReplicaId)(), tenantId, providerId2);
   } catch {
   }
 }
 var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
-  const webAppStore = (0, import_core55.getStoreLattice)("default", "agentWebApp").store;
-  const assistantStore = (0, import_core55.getStoreLattice)("default", "assistant").store;
-  const projectStore = (0, import_core55.getStoreLattice)("default", "project").store;
-  const projectMembershipStore = (0, import_core55.getStoreLattice)("default", "projectMembership").store;
-  const userTenantLinkStore = (0, import_core55.getStoreLattice)("default", "userTenantLink").store;
-  const projectRoomStore = (0, import_core55.getStoreLattice)("default", "projectRoom").store;
-  const projectBotMembershipStore = (0, import_core55.getStoreLattice)("default", "projectBotMembership").store;
-  const projectRoomMessageStore = (0, import_core55.getStoreLattice)("default", "projectRoomMessage").store;
-  const projectRoomReadStateStore = (0, import_core55.getStoreLattice)("default", "projectRoomReadState").store;
-  const userPushSubscriptionStore = (0, import_core55.getStoreLattice)("default", "userPushSubscription").store;
-  const threadStore = (0, import_core55.getStoreLattice)("default", "thread").store;
-  const taskStore = (0, import_core55.getStoreLattice)("default", "task").store;
-  const taskWorkItemStore = (0, import_core55.getStoreLattice)("default", "taskWorkItem").store;
+  const webAppStore = (0, import_core57.getStoreLattice)("default", "agentWebApp").store;
+  const assistantStore = (0, import_core57.getStoreLattice)("default", "assistant").store;
+  const projectStore = (0, import_core57.getStoreLattice)("default", "project").store;
+  const projectMembershipStore = (0, import_core57.getStoreLattice)("default", "projectMembership").store;
+  const userTenantLinkStore = (0, import_core57.getStoreLattice)("default", "userTenantLink").store;
+  const projectRoomStore = (0, import_core57.getStoreLattice)("default", "projectRoom").store;
+  const projectBotMembershipStore = (0, import_core57.getStoreLattice)("default", "projectBotMembership").store;
+  const projectRoomMessageStore = (0, import_core57.getStoreLattice)("default", "projectRoomMessage").store;
+  const projectRoomReadStateStore = (0, import_core57.getStoreLattice)("default", "projectRoomReadState").store;
+  const userPushSubscriptionStore = (0, import_core57.getStoreLattice)("default", "userPushSubscription").store;
+  const threadStore = (0, import_core57.getStoreLattice)("default", "thread").store;
+  const taskStore = (0, import_core57.getStoreLattice)("default", "task").store;
+  const taskWorkItemStore = (0, import_core57.getStoreLattice)("default", "taskWorkItem").store;
   const projectTaskEnabled = options.projectTaskEnabled ?? process.env.AXIOM_PROJECT_TASK_EXECUTION_ENABLED !== "false";
   const accessService = new ProjectAccessService({ projectStore, membershipStore: projectMembershipStore, userTenantLinkStore });
   const realtimeMode = resolveProjectRoomRealtimeMode();
@@ -28456,7 +28649,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     updateAssistant: assistantStore.updateAssistant.bind(assistantStore)
   });
   const resolveCoordinatorMentionName = async (tenantId) => {
-    const tenant2 = await (0, import_core55.getStoreLattice)("default", "tenant").store.getTenantById(tenantId);
+    const tenant2 = await (0, import_core57.getStoreLattice)("default", "tenant").store.getTenantById(tenantId);
     const value = tenant2?.metadata?.coordinatorMentionName;
     return typeof value === "string" && value.length > 0 ? value : void 0;
   };
@@ -28474,31 +28667,11 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     ensureCoordinator: (scope) => coordinatorEnsurer.ensure(scope),
     log: realtimeLog
   });
-  const roomInterruptService = new RoomInterruptService({
-    requireAccess: async ({ tenantId, userId, projectId }) => {
-      await accessService.requireProjectAccess({ tenantId, userId, projectId, capability: "send" });
-    },
-    resolveMembership: async ({ tenantId, projectId, membershipId }) => {
-      const membership = await projectBotMembershipStore.findById(tenantId, membershipId);
-      return membership !== null && membership.projectId === projectId ? membership : null;
-    },
-    getThreadStatus: async ({ tenantId, assistantId, threadId, workspaceId, projectId }) => {
-      const agent = import_core55.agentInstanceManager.getAgent({
-        tenant_id: tenantId,
-        assistant_id: assistantId,
-        thread_id: threadId,
-        workspace_id: workspaceId,
-        project_id: projectId
-      });
-      return String(await agent.getRunStatus());
-    },
-    dispatcher: (0, import_core55.createTrustedAgentMessageDispatcher)((scope) => import_core55.agentInstanceManager.getAgent(scope)),
-    projects: projectStore
-  });
-  const membershipService = new ProjectMembershipService({ membershipStore: projectMembershipStore, userTenantLinkStore, accessService, projectMutationMutex: import_core55.projectMutationMutex, roomStore: projectRoomStore, realtime, onRealtimeFailure: realtime && channelDeps?.warn ? ({ code, membershipId }) => channelDeps.warn?.("project-room:membership-realtime-failed", { code, membershipId }) : void 0 });
+  const membershipService = new ProjectMembershipService({ membershipStore: projectMembershipStore, userTenantLinkStore, accessService, projectMutationMutex: import_core57.projectMutationMutex, roomStore: projectRoomStore, realtime, onRealtimeFailure: realtime && channelDeps?.warn ? ({ code, membershipId }) => channelDeps.warn?.("project-room:membership-realtime-failed", { code, membershipId }) : void 0 });
   const rosterService = new ProjectRosterService({
     accessService,
     roomService,
+    roomStore: projectRoomStore,
     membershipStore: projectBotMembershipStore,
     projects: projectStore,
     agents: { list: async (tenantId, userId) => (await collectTenantAssistants(tenantId, userId)).map((assistant) => ({ assistantId: assistant.id, name: assistant.name, ...assistant.ownerUserId === void 0 ? {} : { ownerUserId: assistant.ownerUserId } })) },
@@ -28506,7 +28679,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     assistantStore,
     taskStore,
     bindingLifecycle,
-    projectMutationMutex: import_core55.projectMutationMutex,
+    projectMutationMutex: import_core57.projectMutationMutex,
     realtime,
     onRealtimeFailure: realtime && channelDeps?.warn ? ({ code, membershipId }) => channelDeps.warn?.("project-room:roster-realtime-failed", { code, membershipId }) : void 0
   });
@@ -28548,6 +28721,14 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       messageId: event.messageId
     }) : void 0
   });
+  const roomAdapter = channelDeps?.adapterRegistry.get("room");
+  const taskInterruptProjector = installation && roomAdapter ? new TaskInterruptCardProjector({
+    rooms: projectRoomStore,
+    bots: projectBotMembershipStore,
+    installation,
+    adapter: roomAdapter,
+    log: realtimeLog
+  }) : void 0;
   const projectTaskRuntime = projectTaskEnabled ? tryCreateProjectTaskRuntime({
     taskStore,
     taskWorkItemStore,
@@ -28559,7 +28740,10 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     realtime,
     log: options.projectTaskLog,
     ensurePublicOwner: (scope) => rosterService.ensurePublicProjectAgent(scope),
-    ...coordinatorWakeNotifier === void 0 ? {} : { coordinatorWake: coordinatorWakeNotifier }
+    ...coordinatorWakeNotifier === void 0 ? {} : { coordinatorWake: coordinatorWakeNotifier },
+    ...taskInterruptProjector === void 0 ? {} : {
+      onTaskInterrupted: (input) => taskInterruptProjector.project(input)
+    }
   }) : { reason: void 0 };
   const projectTaskComposition = "composition" in projectTaskRuntime ? projectTaskRuntime.composition : void 0;
   const projectTaskUnavailableReason = "reason" in projectTaskRuntime ? projectTaskRuntime.reason : void 0;
@@ -28570,9 +28754,9 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
   }
   if (projectTaskComposition) app2.addHook("onClose", async () => projectTaskComposition.lease.release());
   const taskThreadService = projectTaskComposition?.lease.runtime.threads ?? new ProjectTaskThreadService({ threads: threadStore, idFactory: import_node_crypto26.randomUUID });
-  const taskLifecycle = projectTaskComposition?.lease.runtime.lifecycle ?? (0, import_core55.createTaskLifecycleService)({ taskStore, workItemStore: taskWorkItemStore });
-  const reassignmentAuthorizer = (0, import_core55.createProjectTaskReassignmentAuthorizer)(
-    new import_core55.ProjectTaskOwnerPolicy(projectBotMembershipStore),
+  const taskLifecycle = projectTaskComposition?.lease.runtime.lifecycle ?? (0, import_core57.createTaskLifecycleService)({ taskStore, workItemStore: taskWorkItemStore });
+  const reassignmentAuthorizer = (0, import_core57.createProjectTaskReassignmentAuthorizer)(
+    new import_core57.ProjectTaskOwnerPolicy(projectBotMembershipStore),
     (input) => validateReassignmentThread(threadStore, input)
   );
   const taskCommandService = new TaskCommandService({
@@ -28581,7 +28765,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     lifecycle: taskLifecycle,
     execution: projectTaskComposition?.lease.runtime.execution,
     threads: taskThreadService,
-    agents: { getAgent: (params) => import_core55.agentInstanceManager.getAgent(params) },
+    agents: { getAgent: (params) => import_core57.agentInstanceManager.getAgent(params) },
     taskScope: (task) => resolveCommandTaskScope(task, {
       rooms: projectRoomStore,
       bots: projectBotMembershipStore,
@@ -28589,6 +28773,39 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     }),
     reassign: unsupportedHumanReassign
   });
+  const roomInterruptService = new RoomInterruptService({
+    requireAccess: async ({ tenantId, userId, projectId }) => {
+      await accessService.requireProjectAccess({ tenantId, userId, projectId, capability: "send" });
+    },
+    resolveMembership: async ({ tenantId, projectId, membershipId }) => {
+      const membership = await projectBotMembershipStore.findById(tenantId, membershipId);
+      return membership !== null && membership.projectId === projectId ? membership : null;
+    },
+    getThreadStatus: async ({ tenantId, assistantId, threadId, workspaceId, projectId }) => {
+      const agent = import_core57.agentInstanceManager.getAgent({
+        tenant_id: tenantId,
+        assistant_id: assistantId,
+        thread_id: threadId,
+        workspace_id: workspaceId,
+        project_id: projectId
+      });
+      return String(await agent.getRunStatus());
+    },
+    getThreadState: async ({ tenantId, assistantId, threadId, workspaceId, projectId }) => {
+      const agent = import_core57.agentInstanceManager.getAgent({
+        tenant_id: tenantId,
+        assistant_id: assistantId,
+        thread_id: threadId,
+        workspace_id: workspaceId,
+        project_id: projectId
+      });
+      return agent.getCurrentState();
+    },
+    dispatcher: (0, import_core57.createTrustedAgentMessageDispatcher)((scope) => import_core57.agentInstanceManager.getAgent(scope)),
+    projects: projectStore,
+    tasks: taskStore,
+    execution: projectTaskComposition?.lease.runtime.execution
+  });
   const publicRoomService = new WorkspacePublicRoomService({
     getProjectById: projectStore.getProjectById.bind(projectStore),
     createProject: projectStore.createProject.bind(projectStore),
@@ -28619,7 +28836,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     readStateService,
     interruptService: roomInterruptService,
     userDirectory: {
-      getUserById: (id3) => (0, import_core55.getStoreLattice)("default", "user").store.getUserById(id3).then((u) => u ? { name: u.name } : null)
+      getUserById: (id3) => (0, import_core57.getStoreLattice)("default", "user").store.getUserById(id3).then((u) => u ? { name: u.name } : null)
     }
   });
   registerProjectRosterRoutes(app2, { service: rosterService });
@@ -28630,7 +28847,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       createProject: projectStore.createProject.bind(projectStore)
     },
     workspaceStore: {
-      getWorkspaceById: (tenantId, id3) => (0, import_core55.getStoreLattice)("default", "workspace").store.getWorkspaceById(tenantId, id3)
+      getWorkspaceById: (tenantId, id3) => (0, import_core57.getStoreLattice)("default", "workspace").store.getWorkspaceById(tenantId, id3)
     },
     membershipStore: {
       list: projectMembershipStore.list.bind(projectMembershipStore),
@@ -28653,7 +28870,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       getUsersByTenant: userTenantLinkStore.getUsersByTenant.bind(userTenantLinkStore)
     },
     userStore: {
-      getUserById: (id3) => (0, import_core55.getStoreLattice)("default", "user").store.getUserById(id3).then((u) => u ? { id: u.id, name: u.name, email: u.email } : null)
+      getUserById: (id3) => (0, import_core57.getStoreLattice)("default", "user").store.getUserById(id3).then((u) => u ? { id: u.id, name: u.name, email: u.email } : null)
     },
     assistantStore: {
       getAssistantById: assistantStore.getAssistantById.bind(assistantStore),
@@ -28675,17 +28892,18 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     }
   });
   registerCapabilityBundleRoutes(app2, new CapabilityBundleController({
-    bundleStore: (0, import_core55.getStoreLattice)("default", "capabilityBundle").store,
+    bundleStore: (0, import_core57.getStoreLattice)("default", "capabilityBundle").store,
     projectStore
   }, { authRequired: process.env.AUTH_REQUIRED === "true" }));
   const modelProviderController = new ModelProviderController({
-    providerStore: (0, import_core55.getStoreLattice)("default", "modelProvider").store,
+    providerStore: (0, import_core57.getStoreLattice)("default", "modelProvider").store,
     userTenantLinkStore,
     registry: {
-      register: (tenantId, modelKey2, config) => import_core55.modelLatticeManager.registerLatticeWithTenant(tenantId, modelKey2, config),
-      has: (tenantId, modelKey2) => import_core55.modelLatticeManager.hasLatticeWithTenant(tenantId, modelKey2),
-      remove: (tenantId, modelKey2) => import_core55.modelLatticeManager.removeLatticeWithTenant(tenantId, modelKey2),
-      listRegistered: (tenantId) => import_core55.modelLatticeManager.getLatticeKeysByTenant(tenantId)
+      register: (tenantId, modelKey2, config) => import_core57.modelLatticeManager.registerLatticeWithTenant(tenantId, modelKey2, config),
+      has: (tenantId, modelKey2) => import_core57.modelLatticeManager.hasLatticeWithTenant(tenantId, modelKey2),
+      remove: (tenantId, modelKey2) => import_core57.modelLatticeManager.removeLatticeWithTenant(tenantId, modelKey2),
+      listRegistered: (tenantId) => import_core57.modelLatticeManager.getLatticeKeysByTenant(tenantId),
+      forgetTenantDefaultMiss: (tenantId) => import_core57.modelLatticeManager.forgetTenantDefaultMiss(tenantId)
     },
     onChanged: (tenantId, providerId2) => broadcastModelProviderChanged(tenantId, providerId2)
   }, { authRequired: process.env.AUTH_REQUIRED === "true" });
@@ -28696,10 +28914,12 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       webAppStore,
       assistantStore,
       projectStore,
-      modelRegistry: { has: (key) => import_core55.modelLatticeManager.hasLattice(key) },
+      modelRegistry: {
+        has: (tenantId, key) => (0, import_core57.hasModelLatticeForTenant)(tenantId, key)
+      },
       configuredAgentResolver: createConfiguredAgentResolver({
-        hydrate: (tenantId) => import_core55.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
-        has: (tenantId, assistantId) => import_core55.agentLatticeManager.hasAgentLatticeWithTenant(tenantId, assistantId)
+        hydrate: (tenantId) => import_core57.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
+        has: (tenantId, assistantId) => import_core57.agentLatticeManager.hasAgentLatticeWithTenant(tenantId, assistantId)
       })
     })
   });
@@ -28736,28 +28956,28 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       },
       tasks: taskStore,
       workItems: taskWorkItemStore,
-      projectMutationMutex: import_core55.projectMutationMutex,
+      projectMutationMutex: import_core57.projectMutationMutex,
       ...projectTaskComposition ? { commands: taskCommandService } : {}
     }),
     service: new AgentWebAppRuntimeService({
       webAppStore,
-      threadStore: (0, import_core55.getStoreLattice)("default", "thread").store,
+      threadStore: (0, import_core57.getStoreLattice)("default", "thread").store,
       projectStore,
       assistantResolver: {
         resolve: async (tenantId, assistantId) => {
           const stored = await assistantStore.getAssistantById(tenantId, assistantId);
           if (stored) return { id: stored.id, name: stored.name, description: stored.description };
-          await import_core55.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId);
-          const config = import_core55.agentLatticeManager.getAgentConfigWithTenant(tenantId, assistantId);
+          await import_core57.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId);
+          const config = import_core57.agentLatticeManager.getAgentConfigWithTenant(tenantId, assistantId);
           return config ? { id: assistantId, name: config.name, description: config.description } : null;
         }
       },
       modelRegistry: {
-        has: (key) => import_core55.modelLatticeManager.hasLattice(key),
-        label: (key) => key
+        has: (tenantId, key) => (0, import_core57.hasModelLatticeForTenant)(tenantId, key),
+        label: async (tenantId, key) => (await (0, import_core57.resolveModelLatticeForTenant)(tenantId, key))?.client.getConfig().displayName ?? key
       },
       messageReader: {
-        getCurrentMessages: ({ tenantId, assistantId, threadId, workspaceId, projectId }) => import_core55.agentInstanceManager.getAgentForRead({
+        getCurrentMessages: ({ tenantId, assistantId, threadId, workspaceId, projectId }) => import_core57.agentInstanceManager.getAgentForRead({
           tenant_id: tenantId,
           assistant_id: assistantId,
           thread_id: threadId,
@@ -28766,7 +28986,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
         }).getCurrentMessages()
       },
       agentResolver: {
-        getAgent: ({ tenantId, assistantId, threadId, workspaceId, projectId }) => import_core55.agentInstanceManager.getAgent({
+        getAgent: ({ tenantId, assistantId, threadId, workspaceId, projectId }) => import_core57.agentInstanceManager.getAgent({
           tenant_id: tenantId,
           assistant_id: assistantId,
           thread_id: threadId,
@@ -28784,8 +29004,8 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
         if (webApp.tenantId !== preview.tenantId) return false;
         const assistant = await assistantStore.getAssistantById(preview.tenantId, webApp.assistantId);
         if (assistant) return !assistant.ownerUserId || assistant.ownerUserId === preview.userId;
-        await import_core55.agentLatticeManager.initializeStoredAssistantsForTenant(preview.tenantId);
-        return import_core55.agentLatticeManager.hasAgentLatticeWithTenant(preview.tenantId, webApp.assistantId);
+        await import_core57.agentLatticeManager.initializeStoredAssistantsForTenant(preview.tenantId);
+        return import_core57.agentLatticeManager.hasAgentLatticeWithTenant(preview.tenantId, webApp.assistantId);
       }
     })
   });
@@ -28842,14 +29062,14 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
   app2.post("/api/personal-assistant", createPersonalAssistant);
   app2.get("/api/personal-assistant", getPersonalAssistant);
   app2.delete("/api/personal-assistant", deletePersonalAssistant);
-  import_core55.executionAuthorityRegistry.register({
+  import_core57.executionAuthorityRegistry.register({
     id: "project-lifecycle",
     matches: isProjectLifecycleTask,
     code: "PROJECT_TASK_EXECUTION_MANAGED",
     message: "Project tasks are executed by the durable Project queue runtime",
     onManagedStart: async (task, options2) => {
       if (!projectTaskComposition && options2?.agentId && options2.agentId !== task.ownerId) {
-        throw new import_core55.ManagedTaskStartError(
+        throw new import_core57.ManagedTaskStartError(
           "PROJECT_TASK_RUNTIME_UNAVAILABLE",
           "Project task ownership transfer requires the Project task runtime.",
           { hint: "Project task execution is disabled; enable the Project task runtime or dispatch to the current owner." }
@@ -28862,7 +29082,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
         threads: taskThreadService,
         reassignmentAuthorizer,
         lifecycle: taskLifecycle,
-        mutex: import_core55.projectMutationMutex
+        mutex: import_core57.projectMutationMutex
       }) : void 0;
       const admitted = transferred ?? task;
       if (!admitted.workspaceId || !admitted.projectId) return;
@@ -28870,7 +29090,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
         context: withExecutionRequest(admitted.context, (/* @__PURE__ */ new Date()).toISOString())
       }).catch(() => null);
       const eventTask = markerUpdated ?? admitted;
-      void import_core55.projectTaskAdmissionNotifier.publish({
+      void import_core57.projectTaskAdmissionNotifier.publish({
         tenantId: eventTask.tenantId,
         workspaceId: eventTask.workspaceId,
         projectId: eventTask.projectId,
@@ -28884,7 +29104,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     access: accessService,
     tasks: taskStore,
     workItems: taskWorkItemStore,
-    projectMutationMutex: import_core55.projectMutationMutex,
+    projectMutationMutex: import_core57.projectMutationMutex,
     commands: taskCommandService,
     readableProjects: async ({ tenantId, userId, workspaceId }) => {
       const projects = await projectStore.getProjectsByWorkspace(tenantId, workspaceId);
@@ -29167,9 +29387,9 @@ function tryCreateProjectTaskRuntime(input) {
   let stores;
   try {
     stores = {
-      tenants: (0, import_core55.getStoreLattice)("default", "tenant").store,
-      workspaces: (0, import_core55.getStoreLattice)("default", "workspace").store,
-      queue: (0, import_core55.getStoreLattice)("default", "threadMessageQueue").store
+      tenants: (0, import_core57.getStoreLattice)("default", "tenant").store,
+      workspaces: (0, import_core57.getStoreLattice)("default", "workspace").store,
+      queue: (0, import_core57.getStoreLattice)("default", "threadMessageQueue").store
     };
     const missing = missingRuntimeMethod(input, stores);
     if (missing) return { reason: missing };
@@ -29201,7 +29421,7 @@ function createRuntime(input, stores, log2) {
   const controller = new AbortController();
   const mutex = new ProjectTaskExecutionMutex();
   const threads = new ProjectTaskThreadService({ threads: input.threadStore, idFactory: import_node_crypto26.randomUUID });
-  const lifecycle = (0, import_core55.createTaskLifecycleService)({ taskStore: input.taskStore, workItemStore: input.taskWorkItemStore });
+  const lifecycle = (0, import_core57.createTaskLifecycleService)({ taskStore: input.taskStore, workItemStore: input.taskWorkItemStore });
   const projection = new RoomProjectionService({
     messages: input.projectRoomMessageStore,
     events: input.taskWorkItemStore,
@@ -29211,7 +29431,7 @@ function createRuntime(input, stores, log2) {
     realtime: input.realtime,
     idFactory: import_node_crypto26.randomUUID
   });
-  const agentFor = (task, thread) => import_core55.agentInstanceManager.getAgent({
+  const agentFor = (task, thread) => import_core57.agentInstanceManager.getAgent({
     tenant_id: task.tenantId,
     assistant_id: task.ownerId,
     thread_id: thread.id,
@@ -29226,10 +29446,11 @@ function createRuntime(input, stores, log2) {
       bots: input.projectBotMembershipStore,
       threads,
       lifecycle,
-      dispatcher: (0, import_core55.createTrustedAgentMessageDispatcher)((scope) => import_core55.agentInstanceManager.getAgent(scope)),
+      dispatcher: (0, import_core57.createTrustedAgentMessageDispatcher)((scope) => import_core57.agentInstanceManager.getAgent(scope)),
       queue: stores.queue,
       agentFor,
-      ...input.ensurePublicOwner === void 0 ? {} : { ensurePublicOwner: input.ensurePublicOwner }
+      ...input.ensurePublicOwner === void 0 ? {} : { ensurePublicOwner: input.ensurePublicOwner },
+      ...input.onTaskInterrupted === void 0 ? {} : { onTaskInterrupted: input.onTaskInterrupted }
     },
     {
       settlementTimeoutMs: PROJECT_TASK_SETTLEMENT_TIMEOUT_MS,
@@ -29256,8 +29477,8 @@ function createRuntime(input, stores, log2) {
   const taskLifecycleListener = ((event) => {
     void observer.listener(event);
   });
-  const unsubscribe = import_core55.taskLifecycleNotifier.subscribe(taskLifecycleListener);
-  const unsubscribeAdmission = import_core55.projectTaskAdmissionNotifier.subscribe((event, signal) => {
+  const unsubscribe = import_core57.taskLifecycleNotifier.subscribe(taskLifecycleListener);
+  const unsubscribeAdmission = import_core57.projectTaskAdmissionNotifier.subscribe((event, signal) => {
     observer.admit(event, signal);
   });
   let reconciliationWork;
@@ -29408,12 +29629,12 @@ function registerResourceRoutes(app2, controller) {
 }
 
 // src/export_registrations/index.ts
-var import_core67 = require("@axiom-lattice/core");
+var import_core69 = require("@axiom-lattice/core");
 
 // src/export_registrations/skill.registration.ts
-var import_core57 = require("@axiom-lattice/core");
+var import_core59 = require("@axiom-lattice/core");
 function getStore(context) {
-  return new import_core57.SandboxSkillStore({
+  return new import_core59.SandboxSkillStore({
     workspaceId: context?.workspaceId,
     projectId: context?.projectId
   });
@@ -29431,7 +29652,7 @@ var skillRegistration = {
   async listForExport(tenantId, context) {
     const store2 = getStore(context);
     const skills = await store2.getAllSkills(tenantId, toStoreContext(context));
-    return skills.filter((s) => !(0, import_core57.isBuiltInSkill)(s.id)).map((s) => ({
+    return skills.filter((s) => !(0, import_core59.isBuiltInSkill)(s.id)).map((s) => ({
       _exportId: "",
       data: {
         id: s.id,
@@ -29496,7 +29717,7 @@ var skillRegistration = {
     const insertions = [];
     for (const entity of entities) {
       const id3 = entity.data.id;
-      if ((0, import_core57.isBuiltInSkill)(id3)) continue;
+      if ((0, import_core59.isBuiltInSkill)(id3)) continue;
       if (existingIds.has(id3)) {
         conflicts.push({
           _exportId: entity._exportId,
@@ -29555,9 +29776,9 @@ var skillRegistration = {
 };
 
 // src/export_registrations/agent.registration.ts
-var import_core58 = require("@axiom-lattice/core");
+var import_core60 = require("@axiom-lattice/core");
 function getStore2() {
-  return (0, import_core58.getStoreLattice)("default", "assistant").store;
+  return (0, import_core60.getStoreLattice)("default", "assistant").store;
 }
 var agentRegistration = {
   entityType: "agent",
@@ -29637,9 +29858,9 @@ var agentRegistration = {
 };
 
 // src/export_registrations/database-config.registration.ts
-var import_core59 = require("@axiom-lattice/core");
+var import_core61 = require("@axiom-lattice/core");
 function getStore3() {
-  return (0, import_core59.getStoreLattice)("default", "database").store;
+  return (0, import_core61.getStoreLattice)("default", "database").store;
 }
 var databaseConfigRegistration = {
   entityType: "database_config",
@@ -29719,9 +29940,9 @@ var databaseConfigRegistration = {
 };
 
 // src/export_registrations/metrics-config.registration.ts
-var import_core60 = require("@axiom-lattice/core");
+var import_core62 = require("@axiom-lattice/core");
 function getStore4() {
-  return (0, import_core60.getStoreLattice)("default", "metrics").store;
+  return (0, import_core62.getStoreLattice)("default", "metrics").store;
 }
 var metricsConfigRegistration = {
   entityType: "metrics_config",
@@ -29801,9 +30022,9 @@ var metricsConfigRegistration = {
 };
 
 // src/export_registrations/mcp-config.registration.ts
-var import_core61 = require("@axiom-lattice/core");
+var import_core63 = require("@axiom-lattice/core");
 function getStore5() {
-  return (0, import_core61.getStoreLattice)("default", "mcp").store;
+  return (0, import_core63.getStoreLattice)("default", "mcp").store;
 }
 var mcpConfigRegistration = {
   entityType: "mcp_config",
@@ -29886,9 +30107,9 @@ var mcpConfigRegistration = {
 };
 
 // src/export_registrations/connection.registration.ts
-var import_core62 = require("@axiom-lattice/core");
+var import_core64 = require("@axiom-lattice/core");
 function getStore6() {
-  return (0, import_core62.getStoreLattice)("default", "connection").store;
+  return (0, import_core64.getStoreLattice)("default", "connection").store;
 }
 async function listAllConnections(tenantId) {
   const store2 = getStore6();
@@ -29973,9 +30194,9 @@ var connectionRegistration = {
 };
 
 // src/export_registrations/collection.registration.ts
-var import_core63 = require("@axiom-lattice/core");
+var import_core65 = require("@axiom-lattice/core");
 function getStore7() {
-  return (0, import_core63.getStoreLattice)("default", "collection").store;
+  return (0, import_core65.getStoreLattice)("default", "collection").store;
 }
 var collectionRegistration = {
   entityType: "collection",
@@ -30046,7 +30267,7 @@ var collectionRegistration = {
 };
 
 // src/export_registrations/channel-installation.registration.ts
-var import_core64 = require("@axiom-lattice/core");
+var import_core66 = require("@axiom-lattice/core");
 var import_crypto11 = require("crypto");
 var UUID_PATTERN2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var PUBLIC_CHANNELS = /* @__PURE__ */ new Set(["lark", "email", "slack", "wechat"]);
@@ -30080,7 +30301,7 @@ function validateImportData(data) {
   };
 }
 function getStore8() {
-  return (0, import_core64.getStoreLattice)("default", "channelInstallation").store;
+  return (0, import_core66.getStoreLattice)("default", "channelInstallation").store;
 }
 function getOverwriteError(tenantId, incomingChannel, existing) {
   if (!existing) return "Channel installation overwrite target must exist";
@@ -30214,9 +30435,9 @@ var channelInstallationRegistration = {
 };
 
 // src/export_registrations/menu.registration.ts
-var import_core65 = require("@axiom-lattice/core");
+var import_core67 = require("@axiom-lattice/core");
 function getStore9() {
-  return (0, import_core65.getStoreLattice)("default", "menu").store;
+  return (0, import_core67.getStoreLattice)("default", "menu").store;
 }
 var menuRegistration = {
   entityType: "menu",
@@ -30294,9 +30515,9 @@ var menuRegistration = {
 };
 
 // src/export_registrations/eval.registration.ts
-var import_core66 = require("@axiom-lattice/core");
+var import_core68 = require("@axiom-lattice/core");
 function getStore10() {
-  return (0, import_core66.getStoreLattice)("default", "eval").store;
+  return (0, import_core68.getStoreLattice)("default", "eval").store;
 }
 var evalRegistration = {
   entityType: "eval",
@@ -30622,7 +30843,7 @@ var evalRegistration = {
 
 // src/export_registrations/index.ts
 function registerAllBuiltinEntities() {
-  const registry = import_core67.ExportableEntityRegistry.getInstance();
+  const registry = import_core69.ExportableEntityRegistry.getInstance();
   registry.register(skillRegistration);
   registry.register(agentRegistration);
   registry.register(databaseConfigRegistration);
@@ -30753,7 +30974,7 @@ function createAuditLoggerMiddleware() {
 }
 
 // src/index.ts
-var import_core95 = require("@axiom-lattice/core");
+var import_core97 = require("@axiom-lattice/core");
 
 // src/swagger.ts
 var import_swagger = __toESM(require("@fastify/swagger"));
@@ -30819,7 +31040,7 @@ var configureSwagger = async (app2, customSwaggerConfig, customSwaggerUiConfig)
 
 // src/services/agent_task_consumer.ts
 var import_node_crypto27 = require("crypto");
-var import_core68 = require("@axiom-lattice/core");
+var import_core70 = require("@axiom-lattice/core");
 var import_protocols32 = require("@axiom-lattice/protocols");
 var handleAgentTask = async (taskRequest, retryCount = 0) => {
   const {
@@ -30839,7 +31060,7 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
       `\u5F00\u59CB\u5904\u7406\u4EFB\u52A1 [assistant_id: ${assistant_id}, thread_id: ${thread_id}]`
     );
     const scope = (0, import_protocols32.resolveRunScope)(runConfig);
-    const agent = import_core68.agentInstanceManager.getAgent({ assistant_id, thread_id, tenant_id, workspace_id: scope.workspaceId, project_id: scope.projectId, custom_run_config: runConfig });
+    const agent = import_core70.agentInstanceManager.getAgent({ assistant_id, thread_id, tenant_id, workspace_id: scope.workspaceId, project_id: scope.projectId, custom_run_config: runConfig });
     if (callback_event) {
       const callbackEvent = callback_event;
       const messageId = typeof input?.id === "string" && input.id !== "" ? input.id : (0, import_node_crypto27.randomUUID)();
@@ -30860,13 +31081,13 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
       const onCompleted = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core68.eventBus.publish(callbackEvent, {
+          import_core70.eventBus.publish(callbackEvent, {
             success: true,
             state: evt.state
           });
           if (main_thread_id && main_tenant_id) {
             try {
-              const mainAgent = import_core68.agentInstanceManager.getAgent({
+              const mainAgent = import_core70.agentInstanceManager.getAgent({
                 assistant_id: main_assistant_id ?? assistant_id,
                 thread_id: main_thread_id,
                 tenant_id: main_tenant_id,
@@ -30899,7 +31120,7 @@ ${summary}`
       const onInterrupted = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core68.eventBus.publish(callbackEvent, {
+          import_core70.eventBus.publish(callbackEvent, {
             success: true,
             state: evt.state
           });
@@ -30908,7 +31129,7 @@ ${summary}`
       const onFailed = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core68.eventBus.publish(callbackEvent, {
+          import_core70.eventBus.publish(callbackEvent, {
             success: false,
             error: evt?.error instanceof Error ? evt.error.message : typeof evt?.error === "string" ? evt.error : "Agent execution failed"
           });
@@ -30923,13 +31144,13 @@ ${summary}`
       agent.subscribe("message:interrupted", onInterrupted);
       agent.subscribe("message:failed", onFailed);
       try {
-        await agent.addMessage({ input: { ...input, id: messageId }, command, custom_run_config: runConfig }, import_core68.QueueMode.STEER);
+        await agent.addMessage({ input: { ...input, id: messageId }, command, custom_run_config: runConfig }, import_core70.QueueMode.STEER);
       } catch (error) {
         dispose();
         throw error;
       }
     } else {
-      await agent.addMessage({ input, command, custom_run_config: runConfig }, import_core68.QueueMode.STEER);
+      await agent.addMessage({ input, command, custom_run_config: runConfig }, import_core70.QueueMode.STEER);
     }
     return true;
   } catch (error) {
@@ -30948,7 +31169,7 @@ ${summary}`
       return handleAgentTask(taskRequest, nextRetryCount);
     }
     if (callback_event) {
-      import_core68.eventBus.publish(callback_event, {
+      import_core70.eventBus.publish(callback_event, {
         success: false,
         error: error instanceof Error ? error.message : String(error)
       });
@@ -30985,7 +31206,7 @@ var _AgentTaskConsumer = class _AgentTaskConsumer {
    * 初始化事件监听和队列轮询
    */
   initialize() {
-    import_core68.eventBus.subscribe(import_core68.AGENT_TASK_EVENT, this.trigger_agent_task.bind(this));
+    import_core70.eventBus.subscribe(import_core70.AGENT_TASK_EVENT, this.trigger_agent_task.bind(this));
     this.startPollingQueue();
     console.log("Agent\u4EFB\u52A1\u6D88\u8D39\u8005\u5DF2\u542F\u52A8\u5E76\u76D1\u542C\u4EFB\u52A1\u4E8B\u4EF6\u548C\u961F\u5217");
   }
@@ -31104,7 +31325,7 @@ var _AgentTaskConsumer = class _AgentTaskConsumer {
     handleAgentTask(taskRequest).catch((error) => {
       console.error("\u5904\u7406Agent\u4EFB\u52A1\u65F6\u53D1\u751F\u672A\u6355\u83B7\u7684\u9519\u8BEF:", error);
       if (taskRequest.callback_event) {
-        import_core68.eventBus.publish(taskRequest.callback_event, {
+        import_core70.eventBus.publish(taskRequest.callback_event, {
           success: false,
           error: error instanceof Error ? error.message : String(error)
         });
@@ -31153,13 +31374,13 @@ function createGracefulShutdown(options) {
 }
 
 // src/index.ts
-var import_core96 = require("@axiom-lattice/core");
+var import_core98 = require("@axiom-lattice/core");
 
 // src/channels/ChannelInfrastructure.ts
-var import_core70 = require("@axiom-lattice/core");
+var import_core72 = require("@axiom-lattice/core");
 
 // src/router/MessageRouter.ts
-var import_core69 = require("@axiom-lattice/core");
+var import_core71 = require("@axiom-lattice/core");
 var import_protocols33 = require("@axiom-lattice/protocols");
 var import_crypto12 = require("crypto");
 var BindingNotFoundError = class extends Error {
@@ -31445,7 +31666,7 @@ var MessageRouter = class {
             channel: message.channel,
             adapterChannel: adapter.channel
           }, "Thread resolved by adapter strategy");
-          const threadStore = (0, import_core69.getStoreLattice)("default", "thread").store;
+          const threadStore = (0, import_core71.getStoreLattice)("default", "thread").store;
           try {
             await threadStore.createThread(
               tenantId,
@@ -31482,7 +31703,7 @@ var MessageRouter = class {
           }
         }
         if (!threadId) {
-          const threadStore = (0, import_core69.getStoreLattice)("default", "thread").store;
+          const threadStore = (0, import_core71.getStoreLattice)("default", "thread").store;
           const newThreadId = (0, import_crypto12.randomUUID)();
           console.log({
             event: "dispatch:thread:create",
@@ -31522,7 +31743,7 @@ var MessageRouter = class {
           senderId: message.sender.id,
           contentLength: message.content.text.length
         }, "Dispatching to agent");
-        const agent = import_core69.agentInstanceManager.getAgent({
+        const agent = import_core71.agentInstanceManager.getAgent({
           tenant_id: tenantId,
           assistant_id: agentId,
           thread_id: threadId,
@@ -31744,10 +31965,23 @@ function createRoomChannelAdapter(writer) {
       const installed = installationValues(installation);
       if (!installed) throw new Error("Invalid room installation");
       const targetEnvelope = exactValues2(replyTarget, ["adapterChannel", "channelInstallationId", "rawTarget"]);
-      const target = exactStrings(targetEnvelope?.rawTarget, ["sourceRoomMessageId", "targetMembershipId", "inputMessageId"]);
       const envelope = exactValues2(message, ["text", "metadata"]);
-      const metadata = exactStrings(envelope?.metadata, ["inputMessageId"]);
-      if (!targetEnvelope || targetEnvelope.adapterChannel !== "room" || targetEnvelope.channelInstallationId !== installation.id || !target || !metadata || typeof envelope?.text !== "string") throw new Error("Invalid room interrupt");
+      if (!targetEnvelope || targetEnvelope.adapterChannel !== "room" || targetEnvelope.channelInstallationId !== installation.id || typeof envelope?.text !== "string") throw new Error("Invalid room interrupt");
+      const correlationKey = exactStrings(envelope.metadata, ["correlationKey"])?.correlationKey;
+      if (correlationKey) {
+        const correlatedTarget = exactStrings(targetEnvelope.rawTarget, ["targetMembershipId"]);
+        if (!correlatedTarget) throw new Error("Invalid room interrupt correlation");
+        await writer.postCorrelatedInterrupt({
+          tenantId: installed.tenantId,
+          membershipId: correlatedTarget.targetMembershipId,
+          correlationKey,
+          text: envelope.text
+        });
+        return;
+      }
+      const target = exactStrings(targetEnvelope.rawTarget, ["sourceRoomMessageId", "targetMembershipId", "inputMessageId"]);
+      const metadata = exactStrings(envelope.metadata, ["inputMessageId"]);
+      if (!target || !metadata) throw new Error("Invalid room interrupt");
       if (target.inputMessageId !== metadata.inputMessageId) throw new Error("Invalid room interrupt correlation");
       await writer.postInterrupt({
         tenantId: installed.tenantId,
@@ -31795,7 +32029,7 @@ function createChannelInfrastructure(deps) {
       onMessageCommitted: deps.onMessageCommitted ?? (deps.realtime ? (message) => deps.realtime?.messageCreated(message) : void 0),
       onCallbackFailure: (event) => deps.warn("project-room:message-commit-callback-failed", event)
     };
-    deps.adapterRegistry.register(createRoomChannelAdapter(new import_core70.RoomAgentMessageService(writerDeps)));
+    deps.adapterRegistry.register(createRoomChannelAdapter(new import_core72.RoomAgentMessageService(writerDeps)));
   } catch (error) {
     deps.warn("Room channel unavailable", { error: error instanceof Error ? error.message : String(error) });
   }
@@ -31816,11 +32050,11 @@ async function prepareProjectTaskRuntime(runtime, log2) {
 }
 
 // src/services/plugins/PluginDeploymentRuntimeStartup.ts
-var import_core72 = require("@axiom-lattice/core");
+var import_core74 = require("@axiom-lattice/core");
 
 // src/services/plugins/PluginDeploymentService.ts
 var import_node_crypto29 = require("crypto");
-var import_core71 = require("@axiom-lattice/core");
+var import_core73 = require("@axiom-lattice/core");
 
 // src/services/plugins/pluginDeploymentNaming.ts
 var import_node_crypto28 = require("crypto");
@@ -31838,7 +32072,7 @@ function pluginSandboxName(tenantId, pluginType) {
 }
 
 // src/services/plugins/PluginDeploymentService.ts
-var PLUGIN_HOST_SERVER_PATH = `${import_core71.PLUGIN_HOST_DIR}/server.js`;
+var PLUGIN_HOST_SERVER_PATH = `${import_core73.PLUGIN_HOST_DIR}/server.js`;
 var DEFAULT_PLUGIN_IDLE_TIMEOUT_MS = 15 * 60 * 1e3;
 var DEFAULT_PLUGIN_HEALTH_TIMEOUT_MS = 3e4;
 var DEFAULT_PLUGIN_HEALTH_POLL_INTERVAL_MS = 500;
@@ -31877,11 +32111,11 @@ var PluginDeploymentService = class {
     this.catalog = deps.catalog;
     this.installPluginHost = deps.installPluginHost;
     this.lease = deps.lease;
-    this.registry = deps.registry ?? new import_core71.PluginDeploymentRuntimeRegistry({ now: deps.clock ?? Date.now });
+    this.registry = deps.registry ?? new import_core73.PluginDeploymentRuntimeRegistry({ now: deps.clock ?? Date.now });
     this.now = deps.clock ?? Date.now;
     this.logger = deps.logger ?? { info: () => void 0 };
     this.limits = deps.limits ?? {};
-    this.serviceBaseUrl = (deps.serviceBaseUrl ?? process.env.MICROSANDBOX_SERVICE_URL ?? "").replace(
+    this.serviceBaseUrl = (deps.serviceBaseUrl ?? process.env.MICROSANDBOX_SERVICE_BASE_URL ?? "").replace(
       /\/$/,
       ""
     );
@@ -32569,7 +32803,7 @@ function isPluginDeploymentRuntimeEnabled(env = process.env) {
   const flag = env[PLUGIN_DEPLOYMENT_RUNTIME_FLAG];
   if (flag === "false" || flag === "0") return false;
   if (flag === "true" || flag === "1") return true;
-  return Boolean(env.MICROSANDBOX_SERVICE_URL);
+  return Boolean(env.MICROSANDBOX_SERVICE_BASE_URL);
 }
 function readPluginDeploymentLimits(env = process.env) {
   return {
@@ -32586,15 +32820,15 @@ function readPluginDeploymentLimits(env = process.env) {
 function startPluginDeploymentRuntime(options) {
   const { lease, holder, logger: logger8 } = options;
   const forcedOn = process.env[PLUGIN_DEPLOYMENT_RUNTIME_FLAG] === "true" || process.env[PLUGIN_DEPLOYMENT_RUNTIME_FLAG] === "1";
-  const effectiveServiceBaseUrl = options.wiring.serviceBaseUrl ?? process.env.MICROSANDBOX_SERVICE_URL;
+  const effectiveServiceBaseUrl = options.wiring.serviceBaseUrl ?? process.env.MICROSANDBOX_SERVICE_BASE_URL;
   if (forcedOn && !effectiveServiceBaseUrl) {
     logger8.warn(
-      `${PLUGIN_DEPLOYMENT_RUNTIME_FLAG} is enabled but MICROSANDBOX_SERVICE_URL is empty; skipping plugin deployment runtime`,
+      `${PLUGIN_DEPLOYMENT_RUNTIME_FLAG} is enabled but MICROSANDBOX_SERVICE_BASE_URL is empty; skipping plugin deployment runtime`,
       { holder }
     );
     return { reconcile: Promise.resolve(), dispose: async () => void 0 };
   }
-  const register = options.register ?? ((service3) => (0, import_core72.setPluginDeploymentService)(service3));
+  const register = options.register ?? ((service3) => (0, import_core74.setPluginDeploymentService)(service3));
   const setIntervalFn = options.setIntervalFn ?? setInterval;
   const clearIntervalFn = options.clearIntervalFn ?? clearInterval;
   const watchdogIntervalMs = options.watchdogIntervalMs ?? DEFAULT_PLUGIN_WATCHDOG_INTERVAL_MS;
@@ -32739,7 +32973,7 @@ function errorMessage5(error) {
 }
 
 // src/services/multiReplicaReadiness.ts
-var import_core73 = require("@axiom-lattice/core");
+var import_core75 = require("@axiom-lattice/core");
 var SHARED_STORE_KINDS = [
   "lease",
   "outbox",
@@ -32750,7 +32984,7 @@ var SHARED_STORE_KINDS = [
 ];
 function storeClassName(kind) {
   try {
-    return (0, import_core73.getStoreLattice)("default", kind).store.constructor?.name;
+    return (0, import_core75.getStoreLattice)("default", kind).store.constructor?.name;
   } catch {
     return void 0;
   }
@@ -32922,11 +33156,11 @@ var DEFAULT_LOGGER_CONFIG = {
 var loggerLattice = initializeLogger(DEFAULT_LOGGER_CONFIG);
 var logger7 = loggerLattice.client;
 function initializeLogger(config) {
-  if (import_core96.loggerLatticeManager.hasLattice("default")) {
-    import_core96.loggerLatticeManager.removeLattice("default");
+  if (import_core98.loggerLatticeManager.hasLattice("default")) {
+    import_core98.loggerLatticeManager.removeLattice("default");
   }
-  (0, import_core96.registerLoggerLattice)("default", config);
-  return (0, import_core96.getLoggerLattice)("default");
+  (0, import_core98.registerLoggerLattice)("default", config);
+  return (0, import_core98.getLoggerLattice)("default");
 }
 var app = (0, import_fastify.default)({
   logger: false,
@@ -33024,7 +33258,7 @@ app.setErrorHandler((error, request, reply) => {
 var shutdownHandlersInstalled = false;
 function getConfiguredSandboxProvider() {
   const sandboxProviderType = process.env.SANDBOX_PROVIDER_TYPE || "microsandbox-remote";
-  return (0, import_core96.createSandboxProvider)({
+  return (0, import_core98.createSandboxProvider)({
     type: sandboxProviderType,
     remoteBaseURL: process.env.SANDBOX_BASE_URL,
     microsandboxServiceBaseURL: process.env.MICROSANDBOX_SERVICE_BASE_URL,
@@ -33040,7 +33274,7 @@ function getConfiguredSandboxProvider() {
 }
 async function restoreMcpConnections() {
   try {
-    const storeLattice = (0, import_core96.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core98.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     if (!store2) {
       logger7.info("MCP store not configured, skipping connection restoration");
@@ -33053,8 +33287,8 @@ async function restoreMcpConnections() {
     logger7.info(`Restoring ${configs.length} MCP server connections...`);
     const deps = {
       store: store2,
-      manager: import_core96.mcpManager,
-      convertToConnection: import_core96.convertToConnection
+      manager: import_core98.mcpManager,
+      convertToConnection: import_core98.convertToConnection
     };
     const results = await Promise.allSettled(
       configs.map(
@@ -33095,9 +33329,9 @@ var start = async (config) => {
     let projectRoomRealtimeRuntime;
     if (projectRoomRealtimeMode === "single-gateway") {
       projectRoomRealtimeRuntime = createProjectRoomRealtimeRuntime({
-        tasks: (0, import_core96.getStoreLattice)("default", "task").store,
-        rooms: (0, import_core96.getStoreLattice)("default", "projectRoom").store,
-        memberships: (0, import_core96.getStoreLattice)("default", "projectBotMembership").store,
+        tasks: (0, import_core98.getStoreLattice)("default", "task").store,
+        rooms: (0, import_core98.getStoreLattice)("default", "projectRoom").store,
+        memberships: (0, import_core98.getStoreLattice)("default", "projectBotMembership").store,
         log: { warn: (message, context) => logger7.warn(message, context) }
       });
     }
@@ -33107,11 +33341,10 @@ var start = async (config) => {
     const { wechatChannelAdapter: wechatChannelAdapter2 } = await Promise.resolve().then(() => (init_WechatChannelAdapter(), WechatChannelAdapter_exports));
     adapterRegistry.register(wechatChannelAdapter2);
     try {
-      const { getStoreLattice: getStore11 } = await import("@axiom-lattice/core");
       const infrastructure = createChannelInfrastructure({
         adapterRegistry,
-        getStore: ((kind) => getStore11("default", kind).store),
-        trustedDispatcher: (0, import_core96.createTrustedAgentMessageDispatcher)((scope) => import_core96.agentInstanceManager.getAgent(scope)),
+        getStore: ((kind) => (0, import_core98.getStoreLattice)("default", kind).store),
+        trustedDispatcher: (0, import_core98.createTrustedAgentMessageDispatcher)((scope) => import_core98.agentInstanceManager.getAgent(scope)),
         middlewares: [
           createDeduplicationMiddleware(),
           createRateLimitMiddleware(),
@@ -33122,7 +33355,7 @@ var start = async (config) => {
       });
       const bindingStore = infrastructure.bindingRegistry;
       const installationStore = infrastructure.installationStore;
-      (0, import_core95.setBindingRegistry)(bindingStore);
+      (0, import_core97.setBindingRegistry)(bindingStore);
       const router = infrastructure.router;
       app.addHook("onClose", async () => router.dispose());
       channelDeps = {
@@ -33138,10 +33371,10 @@ var start = async (config) => {
         error: err instanceof Error ? err.message : String(err)
       });
     }
-    (0, import_core95.setEvalRunService)(evalRunner);
+    (0, import_core97.setEvalRunService)(evalRunner);
     try {
-      const menuStore = (0, import_core96.getStoreLattice)("default", "menu").store;
-      (0, import_core95.setMenuRegistry)(menuStore);
+      const menuStore = (0, import_core98.getStoreLattice)("default", "menu").store;
+      (0, import_core97.setMenuRegistry)(menuStore);
       logger7.info("Menu registry initialized");
     } catch {
     }
@@ -33158,10 +33391,10 @@ var start = async (config) => {
       const { A2AAuthService: A2AAuthService2, parseEnvKeys: parseEnvKeys2 } = await Promise.resolve().then(() => (init_A2AAuthService(), A2AAuthService_exports));
       const { registerA2AStandardRoutes: registerA2AStandardRoutes2 } = await Promise.resolve().then(() => (init_a2a_standard(), a2a_standard_exports));
       const a2a = await Promise.resolve().then(() => (init_a2a(), a2a_exports));
-      const a2aKeyStore = (0, import_core96.getStoreLattice)("default", "a2aApiKey").store;
-      const assistantStore = (0, import_core96.getStoreLattice)("default", "assistant").store;
-      const projectStore = (0, import_core96.getStoreLattice)("default", "project").store;
-      const taskStore = (0, import_core96.getStoreLattice)("default", "task").store;
+      const a2aKeyStore = (0, import_core98.getStoreLattice)("default", "a2aApiKey").store;
+      const assistantStore = (0, import_core98.getStoreLattice)("default", "assistant").store;
+      const projectStore = (0, import_core98.getStoreLattice)("default", "project").store;
+      const taskStore = (0, import_core98.getStoreLattice)("default", "task").store;
       const authService = new A2AAuthService2({
         keyStore: a2aKeyStore,
         assistantStore,
@@ -33200,8 +33433,8 @@ var start = async (config) => {
       const { CollectionService: CollectionService2 } = await Promise.resolve().then(() => (init_collection_service(), collection_service_exports));
       openLattice2.register(createKbProvider2(new CollectionService2()));
       openLattice2.register(createOpenSandboxProvider2());
-      const threadStore = (0, import_core96.getStoreLattice)("default", "thread").store;
-      const assistantStore = (0, import_core96.getStoreLattice)("default", "assistant").store;
+      const threadStore = (0, import_core98.getStoreLattice)("default", "thread").store;
+      const assistantStore = (0, import_core98.getStoreLattice)("default", "assistant").store;
       openLattice2.register(
         createAgentProvider2({
           threadStore,
@@ -33235,15 +33468,15 @@ var start = async (config) => {
         error: err instanceof Error ? err.message : String(err)
       });
     }
-    if (!import_core96.sandboxLatticeManager.hasLattice("default")) {
-      import_core96.sandboxLatticeManager.registerLattice("default", getConfiguredSandboxProvider());
+    if (!import_core98.sandboxLatticeManager.hasLattice("default")) {
+      import_core98.sandboxLatticeManager.registerLattice("default", getConfiguredSandboxProvider());
       logger7.info("Registered sandbox manager from env configuration");
     }
     if (isPluginDeploymentRuntimeEnabled()) {
       try {
-        const pluginDeploymentStore = (0, import_core96.getStoreLattice)("default", "pluginDeployment").store;
-        const tenantStore = (0, import_core96.getStoreLattice)("default", "tenant").store;
-        const leaseStore2 = (0, import_core96.getStoreLattice)("default", "lease").store;
+        const pluginDeploymentStore = (0, import_core98.getStoreLattice)("default", "pluginDeployment").store;
+        const tenantStore = (0, import_core98.getStoreLattice)("default", "tenant").store;
+        const leaseStore2 = (0, import_core98.getStoreLattice)("default", "lease").store;
         const listAllDeployments = async () => {
           const tenants = await tenantStore.getAllTenants();
           const lists = await Promise.all(
@@ -33256,9 +33489,9 @@ var start = async (config) => {
         const pluginDeploymentRuntime = startPluginDeploymentRuntime({
           wiring: {
             store: pluginDeploymentStore,
-            sandboxManager: (0, import_core96.getSandBoxManager)(),
-            catalog: (0, import_core96.getSandboxPluginCatalog)(),
-            installPluginHost: import_core96.installPluginHost,
+            sandboxManager: (0, import_core98.getSandBoxManager)(),
+            catalog: (0, import_core98.getSandboxPluginCatalog)(),
+            installPluginHost: import_core98.installPluginHost,
             limits: readPluginDeploymentLimits(),
             serviceKey: process.env.MICROSANDBOX_API_KEY,
             listAllDeployments,
@@ -33270,7 +33503,7 @@ var start = async (config) => {
             }
           },
           lease: leaseStore2,
-          holder: (0, import_core96.getReplicaId)(),
+          holder: (0, import_core98.getReplicaId)(),
           logger: logger7
         });
         app.addHook("onClose", async () => {
@@ -33285,11 +33518,11 @@ var start = async (config) => {
     }
     try {
       const { ResourceController: ResourceController2 } = await Promise.resolve().then(() => (init_resources(), resources_exports));
-      const sharedResourceStore = (0, import_core96.getStoreLattice)("default", "sharedResource").store;
-      const cache2 = new import_core96.TokenCache();
+      const sharedResourceStore = (0, import_core98.getStoreLattice)("default", "sharedResource").store;
+      const cache2 = new import_core98.TokenCache();
       const resourceController = new ResourceController2({
         store: sharedResourceStore,
-        sandboxManager: import_core96.sandboxLatticeManager,
+        sandboxManager: import_core98.sandboxLatticeManager,
         cache: cache2,
         logger: logger7
       });
@@ -33301,15 +33534,14 @@ var start = async (config) => {
       });
     }
     if (channelDeps && process.env.CHANNELS_ENABLED !== "false") {
-      const { connectAllChannels, disconnectAllChannels, ChannelConnectionLeader } = await import("@axiom-lattice/core");
       try {
-        const channelLeader = new ChannelConnectionLeader({
-          leaseStore: (0, import_core96.getStoreLattice)("default", "lease").store,
-          owner: (0, import_core96.getReplicaId)(),
-          connect: () => connectAllChannels((channel) => adapterRegistry.get(channel), {
+        const channelLeader = new import_core98.ChannelConnectionLeader({
+          leaseStore: (0, import_core98.getStoreLattice)("default", "lease").store,
+          owner: (0, import_core98.getReplicaId)(),
+          connect: () => (0, import_core98.connectAllChannels)((channel) => adapterRegistry.get(channel), {
             deps: { router: channelDeps.router }
           }),
-          disconnect: () => disconnectAllChannels((channel) => adapterRegistry.get(channel)),
+          disconnect: () => (0, import_core98.disconnectAllChannels)((channel) => adapterRegistry.get(channel)),
           log: { warn: (message, context) => logger7.warn(message, context) }
         });
         app.addHook("onClose", async () => {
@@ -33323,40 +33555,40 @@ var start = async (config) => {
       }
     }
     const target_port = config?.port || Number(process.env.PORT) || 4001;
-    (0, import_core96.configureCoordinationLeaseStore)((0, import_core96.getStoreLattice)("default", "lease").store);
-    const outboxStore = (0, import_core96.getStoreLattice)("default", "outbox").store;
-    import_core96.taskLifecycleNotifier.setOutbox(outboxStore);
-    import_core96.projectTaskAdmissionNotifier.setOutbox(outboxStore);
-    (0, import_core96.configurePluginCatalogSync)({ outbox: outboxStore, owner: (0, import_core96.getReplicaId)() });
+    (0, import_core98.configureCoordinationLeaseStore)((0, import_core98.getStoreLattice)("default", "lease").store);
+    const outboxStore = (0, import_core98.getStoreLattice)("default", "outbox").store;
+    import_core98.taskLifecycleNotifier.setOutbox(outboxStore);
+    import_core98.projectTaskAdmissionNotifier.setOutbox(outboxStore);
+    (0, import_core98.configurePluginCatalogSync)({ outbox: outboxStore, owner: (0, import_core98.getReplicaId)() });
     bridgeAssistantEvents(
-      (event, cb) => import_core96.eventBus.subscribe(event, cb),
+      (event, cb) => import_core98.eventBus.subscribe(event, cb),
       outboxStore,
-      (0, import_core96.getReplicaId)()
+      (0, import_core98.getReplicaId)()
     );
     if (projectRoomRealtimeRuntime) {
       projectRoomRealtimeRuntime.broker.setBroadcastHook((scope, serialized, sourceKey) => {
-        void publishRoomEvent(outboxStore, (0, import_core96.getReplicaId)(), scope, serialized, sourceKey);
+        void publishRoomEvent(outboxStore, (0, import_core98.getReplicaId)(), scope, serialized, sourceKey);
       });
     }
-    const outboxPoller = new import_core96.OutboxPoller({
+    const outboxPoller = new import_core98.OutboxPoller({
       store: outboxStore,
-      owner: (0, import_core96.getReplicaId)(),
+      owner: (0, import_core98.getReplicaId)(),
       handlers: {
-        "task-lifecycle": (payload) => import_core96.taskLifecycleNotifier.deliverFromOutbox(payload),
-        "project-task-admission": (payload) => import_core96.projectTaskAdmissionNotifier.deliverFromOutbox(payload),
+        "task-lifecycle": (payload) => import_core98.taskLifecycleNotifier.deliverFromOutbox(payload),
+        "project-task-admission": (payload) => import_core98.projectTaskAdmissionNotifier.deliverFromOutbox(payload),
         [ROOM_EVENT_TOPIC]: async (payload) => {
           if (projectRoomRealtimeRuntime) ingestRoomEvent(payload, projectRoomRealtimeRuntime.broker);
         },
-        "assistant-changed": (payload) => handleAssistantChanged(payload, (tenantId) => import_core96.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId)),
+        "assistant-changed": (payload) => handleAssistantChanged(payload, (tenantId) => import_core98.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId)),
         [A2A_KEY_CHANGED_TOPIC]: (payload) => handleA2AKeyChanged(payload, () => refreshStoreKeyMap()),
         [MCP_CONFIG_CHANGED_TOPIC]: (payload) => reconcileMcpConfigChange(payload, {
-          store: (0, import_core96.getStoreLattice)("default", "mcp").store,
-          manager: import_core96.mcpManager,
-          convertToConnection: import_core96.convertToConnection
+          store: (0, import_core98.getStoreLattice)("default", "mcp").store,
+          manager: import_core98.mcpManager,
+          convertToConnection: import_core98.convertToConnection
         }),
-        [import_core96.PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
+        [import_core98.PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
           const tenantId = payload?.tenantId;
-          if (typeof tenantId === "string" && tenantId.length > 0) (0, import_core96.getSandboxPluginCatalog)().invalidate(tenantId);
+          if (typeof tenantId === "string" && tenantId.length > 0) (0, import_core98.getSandboxPluginCatalog)().invalidate(tenantId);
         },
         [MODEL_PROVIDER_CHANGED_TOPIC]: async (payload) => {
           const controller = routes.modelProviderController;
@@ -33371,7 +33603,7 @@ var start = async (config) => {
     } catch (err) {
       logger7.warn("Outbox poller failed to start", { error: err instanceof Error ? err.message : String(err) });
     }
-    const leaseStore = (0, import_core96.getStoreLattice)("default", "lease").store;
+    const leaseStore = (0, import_core98.getStoreLattice)("default", "lease").store;
     if (leaseStore.constructor?.name === "InMemoryLeaseStore") {
       logger7.warn(
         "Startup recovery leader gate uses a non-distributed lease store (per-process only); configure a shared 'lease' store for multi-replica deployments",
@@ -33379,7 +33611,7 @@ var start = async (config) => {
       );
     }
     warnMultiReplicaReadiness(logger7);
-    const startup = await (0, import_core96.runAsLeader)(leaseStore, "startup-recovery", async () => {
+    const startup = await (0, import_core98.runAsLeader)(leaseStore, "startup-recovery", async () => {
       if (routes.projectTaskRuntime) {
         await prepareProjectTaskRuntime(routes.projectTaskRuntime, logger7);
       }
@@ -33388,9 +33620,9 @@ var start = async (config) => {
           const { createOrphanRecoveryRuntime: createOrphanRecoveryRuntime2 } = await Promise.resolve().then(() => (init_OrphanRecoveryRuntime(), OrphanRecoveryRuntime_exports));
           const { createRecoveryCallerDeps: createRecoveryCallerDeps2 } = await Promise.resolve().then(() => (init_RecoveryCallerDeps(), RecoveryCallerDeps_exports));
           const runtime = createOrphanRecoveryRuntime2({
-            taskStore: (0, import_core96.getStoreLattice)("default", "task").store,
-            workItemStore: (0, import_core96.getStoreLattice)("default", "taskWorkItem").store,
-            tenantStore: (0, import_core96.getStoreLattice)("default", "tenant").store,
+            taskStore: (0, import_core98.getStoreLattice)("default", "task").store,
+            workItemStore: (0, import_core98.getStoreLattice)("default", "taskWorkItem").store,
+            tenantStore: (0, import_core98.getStoreLattice)("default", "tenant").store,
             ...createRecoveryCallerDeps2(),
             log: logger7
           });
@@ -33399,9 +33631,9 @@ var start = async (config) => {
           logger7.warn("Task orphan recovery failed", { error: err instanceof Error ? err.message : String(err) });
         }
       }
-      if (import_core96.scheduleLatticeManager.hasLattice("default")) {
+      if (import_core98.scheduleLatticeManager.hasLattice("default")) {
         try {
-          const restored = await import_core96.scheduleLatticeManager.getScheduleLattice("default").restore();
+          const restored = await import_core98.scheduleLatticeManager.getScheduleLattice("default").restore();
           logger7.info("Scheduled tasks restored", { phase: "startup_recovery", restored });
         } catch (err) {
           logger7.warn("Scheduled task restore failed", {
@@ -33444,7 +33676,7 @@ var start = async (config) => {
         steps: [
           async () => {
             await Promise.all(
-              import_core96.agentInstanceManager.getAllAgents().map((agent) => agent.abort().catch(() => void 0))
+              import_core98.agentInstanceManager.getAllAgents().map((agent) => agent.abort().catch(() => void 0))
             );
           },
           () => agentTaskConsumer?.stopPollingQueue(),