@axiom-lattice/gateway 6.0.1 → 6.1.0

package/dist/index.js

@@ -1445,11 +1445,11 @@ async function resolveAgentOpenGrants(tenantId, assistantId, deps) {
   }
 }
 function createDefaultAgentReflectionDeps(tenantId) {
-  (0, import_core74.ensureBuiltinAgentsForTenant)(tenantId);
+  (0, import_core75.ensureBuiltinAgentsForTenant)(tenantId);
   return {
-    ensure: (t2) => import_core74.agentLatticeManager.initializeStoredAssistantsForTenant(t2),
+    ensure: (t2) => import_core75.agentLatticeManager.initializeStoredAssistantsForTenant(t2),
     getAgentConfig: (t2, assistantId) => {
-      const config = import_core74.agentLatticeManager.getAgentConfigWithTenant(t2, assistantId);
+      const config = import_core75.agentLatticeManager.getAgentConfigWithTenant(t2, assistantId);
       if (!config) return void 0;
       return {
         middleware: extractMiddleware(config),
@@ -1457,16 +1457,16 @@ function createDefaultAgentReflectionDeps(tenantId) {
       };
     },
     getAssistantMiddleware: async (t2, assistantId) => {
-      const store2 = (0, import_core74.getStoreLattice)("default", "assistant").store;
+      const store2 = (0, import_core75.getStoreLattice)("default", "assistant").store;
       const assistant = await store2.getAssistantById(t2, assistantId);
       return extractMiddleware(assistant?.graphDefinition);
     },
     exposedActionsByType: (type) => {
-      const plugin = import_core74.PluginRegistry.get(type);
+      const plugin = import_core75.PluginRegistry.get(type);
       return plugin ? normalizeOpenExpose(plugin.meta.openExpose) : [];
     },
     resolvableAssistants: async (t2) => new Set(
-      import_core74.agentLatticeManager.getAllAgentLatticesByTenant(t2).map((lattice) => lattice.config.key)
+      import_core75.agentLatticeManager.getAllAgentLatticesByTenant(t2).map((lattice) => lattice.config.key)
     )
   };
 }
@@ -1538,30 +1538,30 @@ function buildTenantExposedGrants(manifests) {
 }
 function createDefaultPluginReflectionDeps() {
   return {
-    ensure: (tenantId) => import_core74.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
+    ensure: (tenantId) => import_core75.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId),
     globalExposedDomains: () => {
       const grants = [];
-      for (const type of import_core74.PluginRegistry.list()) {
-        const plugin = import_core74.PluginRegistry.get(type);
+      for (const type of import_core75.PluginRegistry.list()) {
+        const plugin = import_core75.PluginRegistry.get(type);
         const items = normalizeOpenExpose(plugin?.meta.openExpose);
         if (items.length > 0) grants.push({ domain: type, items });
       }
       return grants;
     },
     tenantExposedDomains: async (tenantId) => {
-      const { manifests } = await (0, import_core74.getSandboxPluginCatalog)().ensureLoaded(tenantId);
+      const { manifests } = await (0, import_core75.getSandboxPluginCatalog)().ensureLoaded(tenantId);
       return buildTenantExposedGrants(Object.values(manifests));
     },
     resolvableAssistants: async (tenantId) => new Set(
-      import_core74.agentLatticeManager.getAllAgentLatticesByTenant(tenantId).map((lattice) => lattice.config.key)
+      import_core75.agentLatticeManager.getAllAgentLatticesByTenant(tenantId).map((lattice) => lattice.config.key)
     )
   };
 }
-var import_core74, AGENT_REFLECTION_CACHE_TTL_MS, cache, PLUGIN_REFLECTION_CACHE_TTL_MS, pluginCache;
+var import_core75, AGENT_REFLECTION_CACHE_TTL_MS, cache, PLUGIN_REFLECTION_CACHE_TTL_MS, pluginCache;
 var init_sandboxOpenReflection = __esm({
   "src/services/open/sandboxOpenReflection.ts"() {
     "use strict";
-    import_core74 = require("@axiom-lattice/core");
+    import_core75 = require("@axiom-lattice/core");
     AGENT_REFLECTION_CACHE_TTL_MS = 6e4;
     cache = /* @__PURE__ */ new Map();
     PLUGIN_REFLECTION_CACHE_TTL_MS = 6e4;
@@ -1608,7 +1608,7 @@ function outcome(task) {
   });
 }
 async function backfillTopCallerGroup(tasks, top, deps) {
-  const registry = deps.registry ?? import_core77.taskRunRegistry;
+  const registry = deps.registry ?? import_core78.taskRunRegistry;
   const results = [];
   const eligible = [];
   for (const task of tasks) {
@@ -1662,11 +1662,11 @@ async function recoverTask(task, deps) {
   if (task.status !== "in_progress") {
     return { kind: "skipped", reason: "not_in_progress" };
   }
-  const registry = deps.registry ?? import_core77.taskRunRegistry;
+  const registry = deps.registry ?? import_core78.taskRunRegistry;
   if (registry.isLive(task.id) || deps.isTaskLive && await deps.isTaskLive(task)) {
     return { kind: "skipped", reason: "live" };
   }
-  const { convergedTasks } = await (0, import_core77.reconcileStaleTaskRuns)({
+  const { convergedTasks } = await (0, import_core78.reconcileStaleTaskRuns)({
     tasks: [task],
     actor: "system:on-demand-recovery",
     lifecycle: deps.lifecycle,
@@ -1762,30 +1762,30 @@ async function runOrphanRecovery(deps) {
   deps.log.info("Task orphan recovery complete", { recovered, skipped });
   return { recovered, skipped };
 }
-var import_messages, import_core77;
+var import_messages, import_core78;
 var init_TopCallerRecovery = __esm({
   "src/services/collaboration/TopCallerRecovery.ts"() {
     "use strict";
     import_messages = require("@langchain/core/messages");
-    import_core77 = require("@axiom-lattice/core");
+    import_core78 = require("@axiom-lattice/core");
   }
 });
 
 // src/services/collaboration/taskRunLiveness.ts
 function createTaskRunLiveness() {
   try {
-    import_core78.storeLatticeManager.getStoreLattice("default", "lease");
+    import_core79.storeLatticeManager.getStoreLattice("default", "lease");
   } catch {
     return void 0;
   }
-  return (task) => (0, import_core79.isTaskRunLeaseHeld)(task);
+  return (task) => (0, import_core80.isTaskRunLeaseHeld)(task);
 }
-var import_core78, import_core79;
+var import_core79, import_core80;
 var init_taskRunLiveness = __esm({
   "src/services/collaboration/taskRunLiveness.ts"() {
     "use strict";
-    import_core78 = require("@axiom-lattice/core");
     import_core79 = require("@axiom-lattice/core");
+    import_core80 = require("@axiom-lattice/core");
   }
 });
 
@@ -1795,7 +1795,7 @@ __export(OrphanRecoveryRuntime_exports, {
   createOrphanRecoveryRuntime: () => createOrphanRecoveryRuntime
 });
 function createOrphanRecoveryRuntime(deps) {
-  const lifecycle = deps.lifecycle ?? (0, import_core80.createTaskLifecycleService)({
+  const lifecycle = deps.lifecycle ?? (0, import_core81.createTaskLifecycleService)({
     taskStore: deps.taskStore,
     workItemStore: deps.workItemStore
   });
@@ -1803,7 +1803,7 @@ function createOrphanRecoveryRuntime(deps) {
     async recoverAll() {
       const isTaskLive = deps.isTaskLive ?? createTaskRunLiveness();
       return runOrphanRecovery({
-        reconcile: () => (0, import_core80.reconcileAllTenantTaskRuns)({
+        reconcile: () => (0, import_core81.reconcileAllTenantTaskRuns)({
           actor: "system:orphan-recovery",
           tenantStore: {
             listTenants: async () => (await deps.tenantStore.getAllTenants()).map((tenant2) => ({ id: tenant2.id }))
@@ -1829,7 +1829,7 @@ function createOrphanRecoveryRuntime(deps) {
       const isTaskLive = deps.isTaskLive ?? createTaskRunLiveness();
       return recoverTask(task, {
         lifecycle,
-        registry: import_core80.taskRunRegistry,
+        registry: import_core81.taskRunRegistry,
         orphans,
         callerFor: deps.callerFor,
         resume: deps.resume,
@@ -1838,11 +1838,11 @@ function createOrphanRecoveryRuntime(deps) {
     }
   };
 }
-var import_core80;
+var import_core81;
 var init_OrphanRecoveryRuntime = __esm({
   "src/services/collaboration/OrphanRecoveryRuntime.ts"() {
     "use strict";
-    import_core80 = require("@axiom-lattice/core");
+    import_core81 = require("@axiom-lattice/core");
     init_TopCallerRecovery();
     init_projectTaskScope();
     init_taskRunLiveness();
@@ -1858,12 +1858,12 @@ function createRecoveryCallerDeps() {
   return {
     callerFor: async (top, tenantId) => {
       if (!top.assistantId) return void 0;
-      const load = import_core81.getAgentClientAsync ?? import_core81.getAgentClient;
+      const load = import_core82.getAgentClientAsync ?? import_core82.getAgentClient;
       const client = await load(tenantId, top.assistantId);
       const config = { configurable: { thread_id: top.threadId, runConfig: { tenantId, assistant_id: top.assistantId } } };
       let agent;
       try {
-        agent = import_core81.agentInstanceManager.getAgent({ assistant_id: top.assistantId, thread_id: top.threadId, tenant_id: tenantId });
+        agent = import_core82.agentInstanceManager.getAgent({ assistant_id: top.assistantId, thread_id: top.threadId, tenant_id: tenantId });
       } catch {
       }
       return agent ? { client, config, agent } : { client, config };
@@ -1880,11 +1880,11 @@ function createRecoveryCallerDeps() {
     }
   };
 }
-var import_core81;
+var import_core82;
 var init_RecoveryCallerDeps = __esm({
   "src/services/collaboration/RecoveryCallerDeps.ts"() {
     "use strict";
-    import_core81 = require("@axiom-lattice/core");
+    import_core82 = require("@axiom-lattice/core");
   }
 });
 
@@ -1955,18 +1955,18 @@ function extractText(msg) {
   }
   return null;
 }
-var import_zod19, logger7, wechatConfigSchema, MAX_RECONNECT_DELAY_MS, BASE_RECONNECT_DELAY_MS, HEARTBEAT_INTERVAL_MS, MSG_TYPE_USER, MSG_ITEM_TEXT, activeConnections3, seenClientIds, wechatChannelAdapter;
+var import_zod20, logger7, wechatConfigSchema, MAX_RECONNECT_DELAY_MS, BASE_RECONNECT_DELAY_MS, HEARTBEAT_INTERVAL_MS, MSG_TYPE_USER, MSG_ITEM_TEXT, activeConnections3, seenClientIds, wechatChannelAdapter;
 var init_WechatChannelAdapter = __esm({
   "src/channels/wechat/WechatChannelAdapter.ts"() {
     "use strict";
-    import_zod19 = require("zod");
+    import_zod20 = require("zod");
     init_wechat_client();
     init_context_store();
     init_Logger();
     logger7 = new Logger({ serviceName: "lattice/gateway/wechat" });
-    wechatConfigSchema = import_zod19.z.object({
-      botToken: import_zod19.z.string(),
-      uin: import_zod19.z.string().optional()
+    wechatConfigSchema = import_zod20.z.object({
+      botToken: import_zod20.z.string(),
+      uin: import_zod20.z.string().optional()
     });
     MAX_RECONNECT_DELAY_MS = 3e4;
     BASE_RECONNECT_DELAY_MS = 1e3;
@@ -2303,13 +2303,13 @@ function isA2ATaskSnapshot(value) {
 function snapshotSequence(value) {
   return typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : void 0;
 }
-var import_node_crypto31, import_node_util, import_core82, TASK_STATUS_TO_A2A_STATE, TITLE_MAX_LENGTH, A2ATaskScopeConflictError, A2ATaskStoreAdapter;
+var import_node_crypto31, import_node_util, import_core83, TASK_STATUS_TO_A2A_STATE, TITLE_MAX_LENGTH, A2ATaskScopeConflictError, A2ATaskStoreAdapter;
 var init_A2ATaskStoreAdapter = __esm({
   "src/services/a2a/A2ATaskStoreAdapter.ts"() {
     "use strict";
     import_node_crypto31 = require("crypto");
     import_node_util = require("util");
-    import_core82 = require("@axiom-lattice/core");
+    import_core83 = require("@axiom-lattice/core");
     TASK_STATUS_TO_A2A_STATE = {
       pending: "submitted",
       in_progress: "working",
@@ -2335,7 +2335,7 @@ var init_A2ATaskStoreAdapter = __esm({
         this.workItemStore = options.workItemStore;
         this.lifecycle = options.lifecycle;
         this.scope = options.scope;
-        this.runBridge = (0, import_core82.createTaskRunBridge)({
+        this.runBridge = (0, import_core83.createTaskRunBridge)({
           lifecycle: this.lifecycle,
           taskStore: this.taskStore,
           workItemStore: this.workItemStore
@@ -2686,12 +2686,12 @@ function assistantHasGovernedTask(assistant) {
   const allowedTools = taskMiddleware?.allowedTools;
   return !!taskMiddleware && (allowedTools === void 0 || Array.isArray(allowedTools) && (allowedTools.length === 0 || allowedTools.includes("manage_task")));
 }
-var import_uuid11, import_core83, import_protocols35, _AxiomAgentExecutor, AxiomAgentExecutor;
+var import_uuid11, import_core84, import_protocols35, _AxiomAgentExecutor, AxiomAgentExecutor;
 var init_AxiomAgentExecutor = __esm({
   "src/services/a2a/AxiomAgentExecutor.ts"() {
     "use strict";
     import_uuid11 = require("uuid");
-    import_core83 = require("@axiom-lattice/core");
+    import_core84 = require("@axiom-lattice/core");
     import_protocols35 = require("@axiom-lattice/protocols");
     init_a2aFileRefs();
     init_task_file_refs();
@@ -2788,7 +2788,7 @@ var init_AxiomAgentExecutor = __esm({
           await this.taskStore.save(initialTask);
           bus.publish(initialTask);
           try {
-            const agent = import_core83.agentInstanceManager.getAgent(this.agentParams(threadId));
+            const agent = import_core84.agentInstanceManager.getAgent(this.agentParams(threadId));
             const requestText = inputFiles.length > 0 ? `${text}
 
 ${formatFileRefsSection(inputFiles)}` : text;
@@ -2976,7 +2976,7 @@ ${formatFileRefsSection(inputFiles)}` : text;
         const threadId = task ? asString2(task.metadata?.threadId) : void 0;
         if (threadId) {
           try {
-            const agent = import_core83.agentInstanceManager.getAgent(this.agentParams(threadId));
+            const agent = import_core84.agentInstanceManager.getAgent(this.agentParams(threadId));
             await agent.abort();
           } catch (err) {
             console.warn({
@@ -3350,10 +3350,10 @@ function isAsyncGenerator(value) {
 }
 function registerA2AStandardRoutes(app2, deps) {
   const authService = deps.authService;
-  const resolveTasks = deps.getTaskStoreLattice ?? (() => (0, import_core84.getStoreLattice)("default", "task").store);
-  const resolveTaskWorkItems = deps.getTaskWorkItemStore ?? (() => (0, import_core84.getStoreLattice)("default", "taskWorkItem").store);
-  const getAssistantStore2 = deps.getAssistantStore ?? (() => (0, import_core84.getStoreLattice)("default", "assistant").store);
-  const getProjectStore2 = deps.getProjectStore ?? (() => (0, import_core84.getStoreLattice)("default", "project").store);
+  const resolveTasks = deps.getTaskStoreLattice ?? (() => (0, import_core85.getStoreLattice)("default", "task").store);
+  const resolveTaskWorkItems = deps.getTaskWorkItemStore ?? (() => (0, import_core85.getStoreLattice)("default", "taskWorkItem").store);
+  const getAssistantStore2 = deps.getAssistantStore ?? (() => (0, import_core85.getStoreLattice)("default", "assistant").store);
+  const getProjectStore2 = deps.getProjectStore ?? (() => (0, import_core85.getStoreLattice)("default", "project").store);
   const runtimeRegistry = deps.runtimeRegistry ?? new A2ARuntimeRegistry();
   app2.addHook("onClose", async () => {
     runtimeRegistry.close();
@@ -3436,7 +3436,7 @@ function registerA2AStandardRoutes(app2, deps) {
       const taskStore = assistantHasGovernedTask(assistant) ? new A2ATaskStoreAdapter({
         taskStore: internalTasks,
         workItemStore: workItems,
-        lifecycle: (0, import_core84.createTaskLifecycleService)({
+        lifecycle: (0, import_core85.createTaskLifecycleService)({
           taskStore: internalTasks,
           workItemStore: workItems
         }),
@@ -3555,7 +3555,7 @@ data: ${JSON.stringify(errorResponse)}
       const taskStore = assistantHasGovernedTask(assistant) ? new A2ATaskStoreAdapter({
         taskStore: internalTasks,
         workItemStore: workItems,
-        lifecycle: (0, import_core84.createTaskLifecycleService)({
+        lifecycle: (0, import_core85.createTaskLifecycleService)({
           taskStore: internalTasks,
           workItemStore: workItems
         }),
@@ -3610,13 +3610,13 @@ data: ${JSON.stringify(data)}
     }
   );
 }
-var import_uuid12, import_server2, import_core84, SSE_HEADERS;
+var import_uuid12, import_server2, import_core85, SSE_HEADERS;
 var init_a2a_standard = __esm({
   "src/routes/a2a-standard.ts"() {
     "use strict";
     import_uuid12 = require("uuid");
     import_server2 = require("@a2a-js/sdk/server");
-    import_core84 = require("@axiom-lattice/core");
+    import_core85 = require("@axiom-lattice/core");
     init_A2AAuthService();
     init_A2AAgentCardBuilder();
     init_A2ATaskStoreAdapter();
@@ -3829,11 +3829,11 @@ function grantCovers(grants, domain, action) {
     (g) => g.domain === domain && (!g.items || g.items.length === 0 || g.items.includes(action))
   );
 }
-var import_zod20, GrantDeniedError, ValidationError, ActionNotFoundError, OpenLattice, openLattice;
+var import_zod21, GrantDeniedError, ValidationError, ActionNotFoundError, OpenLattice, openLattice;
 var init_openLattice = __esm({
   "src/services/open/openLattice.ts"() {
     "use strict";
-    import_zod20 = require("zod");
+    import_zod21 = require("zod");
     GrantDeniedError = class extends Error {
       constructor(toolName) {
         super(`GRANT_DENIED: no grant covers ${toolName}`);
@@ -3973,7 +3973,7 @@ var init_openLattice = __esm({
           throw new GrantDeniedError(toolName);
         }
         const resolvedSchema = resolved.action.schema;
-        const parsed = "safeParse" in resolvedSchema ? resolvedSchema.safeParse(args) : import_zod20.z.object(resolvedSchema).safeParse(args);
+        const parsed = "safeParse" in resolvedSchema ? resolvedSchema.safeParse(args) : import_zod21.z.object(resolvedSchema).safeParse(args);
         if (!parsed.success) {
           throw new ValidationError(parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; "));
         }
@@ -4106,7 +4106,7 @@ var init_openMcpServer = __esm({
 
 // src/services/open/pluginExposeAdapter.ts
 function schemaOf(tool) {
-  return tool.lc_kwargs?.schema ?? tool.schema ?? import_zod21.z.object({}).passthrough();
+  return tool.lc_kwargs?.schema ?? tool.schema ?? import_zod22.z.object({}).passthrough();
 }
 function createPluginProvider(domain, tools, options = {}) {
   function toAction(info) {
@@ -4154,11 +4154,11 @@ function createPluginProvider(domain, tools, options = {}) {
     }
   };
 }
-var import_zod21;
+var import_zod22;
 var init_pluginExposeAdapter = __esm({
   "src/services/open/pluginExposeAdapter.ts"() {
     "use strict";
-    import_zod21 = require("zod");
+    import_zod22 = require("zod");
   }
 });
 
@@ -4183,8 +4183,8 @@ function exposedDeclarations(plugin) {
   return (plugin.meta.tools ?? []).filter((t2) => t2.expose);
 }
 async function registerExposedPluginTools() {
-  for (const key of import_core85.PluginRegistry.list()) {
-    const plugin = import_core85.PluginRegistry.get(key);
+  for (const key of import_core86.PluginRegistry.list()) {
+    const plugin = import_core86.PluginRegistry.get(key);
     if (!plugin?.middleware) continue;
     const exposed = exposedDeclarations(plugin);
     if (exposed.length === 0) continue;
@@ -4219,8 +4219,8 @@ async function registerExposedPluginTools() {
 }
 function collectExposedPluginUiResources(grants) {
   const resources = /* @__PURE__ */ new Map();
-  for (const type of import_core85.PluginRegistry.list()) {
-    const plugin = import_core85.PluginRegistry.get(type);
+  for (const type of import_core86.PluginRegistry.list()) {
+    const plugin = import_core86.PluginRegistry.get(type);
     if (!plugin?.middleware) continue;
     const exposedNames = new Set(exposedDeclarations(plugin).map((d) => d.name));
     if (exposedNames.size === 0) continue;
@@ -4244,11 +4244,11 @@ function collectExposedPluginUiResources(grants) {
   }
   return resources;
 }
-var import_core85;
+var import_core86;
 var init_registerExposedPlugins = __esm({
   "src/services/open/registerExposedPlugins.ts"() {
     "use strict";
-    import_core85 = require("@axiom-lattice/core");
+    import_core86 = require("@axiom-lattice/core");
     init_openLattice();
     init_pluginExposeAdapter();
   }
@@ -4263,14 +4263,14 @@ function toText(result) {
 }
 function defaultCatalog() {
   return {
-    getValidatedManifest: (tenantId, type) => (0, import_core86.getSandboxPluginCatalog)().getValidatedManifest(tenantId, type),
-    getExecutor: () => (0, import_core86.getSandboxPluginCatalog)().getExecutor(),
-    readPluginFile: (tenantId, type, relPath) => (0, import_core86.getSandboxPluginCatalog)().readPluginFile(tenantId, type, relPath)
+    getValidatedManifest: (tenantId, type) => (0, import_core87.getSandboxPluginCatalog)().getValidatedManifest(tenantId, type),
+    getExecutor: () => (0, import_core87.getSandboxPluginCatalog)().getExecutor(),
+    readPluginFile: (tenantId, type, relPath) => (0, import_core87.getSandboxPluginCatalog)().readPluginFile(tenantId, type, relPath)
   };
 }
 async function defaultResolveConnections(pluginType, ctx) {
   try {
-    return await (0, import_core86.resolveSandboxPluginConnections)(
+    return await (0, import_core87.resolveSandboxPluginConnections)(
       pluginType,
       { connectAll: true },
       {
@@ -4299,7 +4299,7 @@ function mergeOpenCatalog(globalCatalog, tenantTools) {
 async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
   const catalog = deps.catalog ?? defaultCatalog();
   const listPlugins = deps.listPlugins ?? (async (tenant2) => {
-    const snapshot = await (0, import_core86.getSandboxPluginCatalog)().ensureLoaded(tenant2);
+    const snapshot = await (0, import_core87.getSandboxPluginCatalog)().ensureLoaded(tenant2);
     return { plugins: snapshot.plugins, diagnostics: snapshot.diagnostics };
   });
   const resolveConnections = deps.resolveConnections ?? defaultResolveConnections;
@@ -4341,7 +4341,7 @@ async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
         domain,
         action: tool.name,
         description: tool.description,
-        schema: (0, import_core86.jsonSchemaToZod)(tool.schema),
+        schema: (0, import_core87.jsonSchemaToZod)(tool.schema),
         annotations: {
           readOnlyHint: tool.readOnly ?? false,
           destructiveHint: tool.destructive ?? false
@@ -4392,11 +4392,11 @@ async function buildTenantOpenPlugins(tenantId, grants, deps = {}) {
     }
   };
 }
-var import_core86;
+var import_core87;
 var init_tenantOpenPlugins = __esm({
   "src/services/open/tenantOpenPlugins.ts"() {
     "use strict";
-    import_core86 = require("@axiom-lattice/core");
+    import_core87 = require("@axiom-lattice/core");
     init_openLattice();
     init_pluginToolExecution();
   }
@@ -4433,13 +4433,13 @@ function emptyTenantPlugins() {
 }
 function registerOpenRoutes(app2, deps = {}) {
   const openAuth = deps.openAuth ?? new OpenCredentialService(
-    (0, import_core87.getStoreLattice)("default", "a2aApiKey").store,
-    (0, import_core87.getStoreLattice)("default", "project").store
+    (0, import_core88.getStoreLattice)("default", "a2aApiKey").store,
+    (0, import_core88.getStoreLattice)("default", "project").store
   );
   const grantsSource = deps.grantsSource ?? ((ctx) => ctx.grants);
   const audit = deps.audit ?? (() => {
     try {
-      const store2 = (0, import_core87.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core88.getStoreLattice)("default", "openAudit").store;
       return new OpenAuditService(store2);
     } catch {
       return void 0;
@@ -4611,12 +4611,12 @@ function registerOpenRoutes(app2, deps = {}) {
     }
   );
 }
-var import_types, import_core87, RPC_ERROR;
+var import_types, import_core88, RPC_ERROR;
 var init_open = __esm({
   "src/routes/open.ts"() {
     "use strict";
     import_types = require("@modelcontextprotocol/sdk/types.js");
-    import_core87 = require("@axiom-lattice/core");
+    import_core88 = require("@axiom-lattice/core");
     init_openCredentialService();
     init_openAuditService();
     init_openRateLimiter();
@@ -4649,7 +4649,7 @@ function registerOpenSessionRoutes(app2) {
       if (typeof shareToken !== "string" || shareToken.length === 0) {
         return reply.status(400).send({ error: "SHARE_TOKEN_REQUIRED" });
       }
-      const store2 = (0, import_core88.getStoreLattice)("default", "sharedResource").store;
+      const store2 = (0, import_core89.getStoreLattice)("default", "sharedResource").store;
       const record = await store2.findByToken(shareToken);
       if (!record || record.revoked) {
         return reply.status(404).send({ error: "SHARE_NOT_FOUND" });
@@ -4674,11 +4674,11 @@ function registerOpenSessionRoutes(app2) {
     }
   );
 }
-var import_core88;
+var import_core89;
 var init_open_session = __esm({
   "src/routes/open-session.ts"() {
     "use strict";
-    import_core88 = require("@axiom-lattice/core");
+    import_core89 = require("@axiom-lattice/core");
     init_openToken();
     init_previewToken();
     init_openLattice();
@@ -4687,13 +4687,13 @@ var init_open_session = __esm({
 
 // src/services/open/openCatalogService.ts
 async function defaultListTenantPlugins(tenantId) {
-  return (await (0, import_core89.getSandboxPluginCatalog)().ensureLoaded(tenantId)).plugins;
+  return (await (0, import_core90.getSandboxPluginCatalog)().ensureLoaded(tenantId)).plugins;
 }
-var import_core89, OpenCatalogService;
+var import_core90, OpenCatalogService;
 var init_openCatalogService = __esm({
   "src/services/open/openCatalogService.ts"() {
     "use strict";
-    import_core89 = require("@axiom-lattice/core");
+    import_core90 = require("@axiom-lattice/core");
     init_openLattice();
     OpenCatalogService = class {
       constructor(assistantStore, lattice = openLattice, listTenantPlugins2 = defaultListTenantPlugins) {
@@ -4759,26 +4759,26 @@ var open_catalog_exports = {};
 __export(open_catalog_exports, {
   registerOpenCatalogRoutes: () => registerOpenCatalogRoutes
 });
-function tenantIdOf(request) {
+function tenantIdOf2(request) {
   return request.user?.tenantId;
 }
 function registerOpenCatalogRoutes(app2) {
   app2.get("/api/open/catalog", async (request, reply) => {
-    const tenantId = tenantIdOf(request);
+    const tenantId = tenantIdOf2(request);
     if (!tenantId) {
       return reply.status(401).send({ success: false, error: "Unauthorized" });
     }
-    const assistantStore = (0, import_core90.getStoreLattice)("default", "assistant").store;
+    const assistantStore = (0, import_core91.getStoreLattice)("default", "assistant").store;
     const service2 = new OpenCatalogService(assistantStore);
     const catalog = await service2.buildForTenant(tenantId);
     return reply.status(200).send({ success: true, data: catalog });
   });
 }
-var import_core90;
+var import_core91;
 var init_open_catalog = __esm({
   "src/routes/open-catalog.ts"() {
     "use strict";
-    import_core90 = require("@axiom-lattice/core");
+    import_core91 = require("@axiom-lattice/core");
     init_openCatalogService();
   }
 });
@@ -4793,11 +4793,11 @@ async function resolveContextSandbox(ctx) {
   const sandboxName = ctx.runConfig?.sandboxName;
   if (typeof sandboxName === "string" && sandboxName.length > 0) {
     try {
-      return await import_core91.sandboxLatticeManager.getSandbox(sandboxName);
+      return await import_core92.sandboxLatticeManager.getSandbox(sandboxName);
     } catch {
     }
   }
-  return import_core91.sandboxLatticeManager.getSandboxFromConfig({
+  return import_core92.sandboxLatticeManager.getSandboxFromConfig({
     assistant_id: "",
     thread_id: "",
     tenantId: ctx.tenantId,
@@ -4816,21 +4816,21 @@ function createOpenSandboxProvider() {
         name: "files_read",
         label: "Read files",
         description: "Read a file from the project sandbox.",
-        schema: { path: import_zod22.z.string().min(1) },
+        schema: { path: import_zod23.z.string().min(1) },
         annotations: { readOnlyHint: true, destructiveHint: false }
       },
       {
         name: "files_list",
         label: "List files",
         description: "List files under a directory in the project sandbox.",
-        schema: { path: import_zod22.z.string(), recursive: import_zod22.z.boolean().optional() },
+        schema: { path: import_zod23.z.string(), recursive: import_zod23.z.boolean().optional() },
         annotations: { readOnlyHint: true, destructiveHint: false }
       },
       {
         name: "files_write",
         label: "Write files",
         description: "Write content to a file in the project sandbox.",
-        schema: { path: import_zod22.z.string().min(1), content: import_zod22.z.string() },
+        schema: { path: import_zod23.z.string().min(1), content: import_zod23.z.string() },
         annotations: { readOnlyHint: false, destructiveHint: true }
       },
       {
@@ -4838,9 +4838,9 @@ function createOpenSandboxProvider() {
         label: "Run shell commands",
         description: "Execute a shell command in the project sandbox. Returns stdout (up to 64KB) and exit code.",
         schema: {
-          command: import_zod22.z.string().min(1),
-          exec_dir: import_zod22.z.string().optional(),
-          timeout: import_zod22.z.number().int().min(1e3).optional()
+          command: import_zod23.z.string().min(1),
+          exec_dir: import_zod23.z.string().optional(),
+          timeout: import_zod23.z.number().int().min(1e3).optional()
         },
         annotations: { readOnlyHint: false, destructiveHint: true }
       }
@@ -4895,12 +4895,12 @@ ${truncated}`
     }
   };
 }
-var import_zod22, import_core91, MAX_OUTPUT_BYTES;
+var import_zod23, import_core92, MAX_OUTPUT_BYTES;
 var init_sandboxProvider = __esm({
   "src/services/open/providers/sandboxProvider.ts"() {
     "use strict";
-    import_zod22 = require("zod");
-    import_core91 = require("@axiom-lattice/core");
+    import_zod23 = require("zod");
+    import_core92 = require("@axiom-lattice/core");
     MAX_OUTPUT_BYTES = 64e3;
   }
 });
@@ -4922,12 +4922,12 @@ function safePath(raw) {
 }
 function registerOpenFilesRoutes(app2, deps = {}) {
   const openAuth = deps.openAuth ?? new OpenCredentialService(
-    (0, import_core92.getStoreLattice)("default", "a2aApiKey").store,
-    (0, import_core92.getStoreLattice)("default", "project").store
+    (0, import_core93.getStoreLattice)("default", "a2aApiKey").store,
+    (0, import_core93.getStoreLattice)("default", "project").store
   );
   const audit = deps.audit ?? (() => {
     try {
-      const store2 = (0, import_core92.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core93.getStoreLattice)("default", "openAudit").store;
       return new OpenAuditService(store2);
     } catch {
       return void 0;
@@ -5037,11 +5037,11 @@ function registerOpenFilesRoutes(app2, deps = {}) {
     }
   });
 }
-var import_core92;
+var import_core93;
 var init_open_files = __esm({
   "src/routes/open-files.ts"() {
     "use strict";
-    import_core92 = require("@axiom-lattice/core");
+    import_core93 = require("@axiom-lattice/core");
     init_openCredentialService();
     init_openLattice();
     init_sandboxProvider();
@@ -5063,7 +5063,7 @@ function registerOpenAuditRoutes(app2) {
         return reply.status(401).send({ success: false, error: "Unauthorized" });
       }
       const status = request.query.status === "ok" || request.query.status === "error" ? request.query.status : void 0;
-      const store2 = (0, import_core93.getStoreLattice)("default", "openAudit").store;
+      const store2 = (0, import_core94.getStoreLattice)("default", "openAudit").store;
       const records = await store2.query({
         tenantId,
         credentialId: request.query.credentialId,
@@ -5078,11 +5078,11 @@ function registerOpenAuditRoutes(app2) {
     }
   );
 }
-var import_core93;
+var import_core94;
 var init_open_audit = __esm({
   "src/routes/open-audit.ts"() {
     "use strict";
-    import_core93 = require("@axiom-lattice/core");
+    import_core94 = require("@axiom-lattice/core");
   }
 });
 
@@ -5099,7 +5099,7 @@ function registerOpenExposureRoutes(app2, deps = {}) {
       if (!tenantId) {
         return reply.status(401).send({ success: false, error: "Unauthorized" });
       }
-      const keyStore = (0, import_core94.getStoreLattice)("default", "a2aApiKey").store;
+      const keyStore = (0, import_core95.getStoreLattice)("default", "a2aApiKey").store;
       const record = await keyStore.findById(request.params.id);
       if (!record || record.tenantId !== tenantId) {
         return reply.status(404).send({ success: false, error: "Key not found" });
@@ -5133,7 +5133,7 @@ function registerOpenExposureRoutes(app2, deps = {}) {
         hasUi: Boolean(t2.ui)
       }));
       const agentGrant = grants.find((g) => g.domain === "agent");
-      const assistantStore = (0, import_core94.getStoreLattice)("default", "assistant").store;
+      const assistantStore = (0, import_core95.getStoreLattice)("default", "assistant").store;
       const agents = [];
       for (const assistantId of agentGrant?.items ?? []) {
         const assistant = await assistantStore.getAssistantById(
@@ -5168,11 +5168,11 @@ function registerOpenExposureRoutes(app2, deps = {}) {
     }
   );
 }
-var import_core94, import_protocols38;
+var import_core95, import_protocols38;
 var init_open_exposure = __esm({
   "src/routes/open-exposure.ts"() {
     "use strict";
-    import_core94 = require("@axiom-lattice/core");
+    import_core95 = require("@axiom-lattice/core");
     import_protocols38 = require("@axiom-lattice/protocols");
     init_openLattice();
     init_tenantOpenPlugins();
@@ -5197,9 +5197,9 @@ function createKbProvider(collectionService3) {
         label: "Search collections",
         description: "Search a knowledge base collection. Returns matched entries with content, metadata and similarity score.",
         schema: {
-          collection: import_zod23.z.string().min(1),
-          query: import_zod23.z.string().min(1),
-          limit: import_zod23.z.number().int().min(1).max(50).optional()
+          collection: import_zod24.z.string().min(1),
+          query: import_zod24.z.string().min(1),
+          limit: import_zod24.z.number().int().min(1).max(50).optional()
         },
         annotations: { readOnlyHint: true, destructiveHint: false }
       }
@@ -5227,11 +5227,11 @@ function createKbProvider(collectionService3) {
     }
   };
 }
-var import_zod23;
+var import_zod24;
 var init_kbProvider = __esm({
   "src/services/open/providers/kbProvider.ts"() {
     "use strict";
-    import_zod23 = require("zod");
+    import_zod24 = require("zod");
   }
 });
 
@@ -5269,7 +5269,7 @@ function createAgentProvider(deps = {}) {
             toolName: `invoke_${assistantId}`,
             label: name,
             description: `Invoke the "${name}" agent${description ? ` \u2014 ${description}` : ""}. Returns its final reply.`,
-            schema: { message: import_zod24.z.string().min(1) },
+            schema: { message: import_zod25.z.string().min(1) },
             annotations: { readOnlyHint: false, destructiveHint: false }
           };
         })
@@ -5292,7 +5292,7 @@ function createAgentProvider(deps = {}) {
         } catch {
         }
       }
-      const agent = import_core95.agentInstanceManager.getAgent({
+      const agent = import_core96.agentInstanceManager.getAgent({
         tenant_id: ctx.tenantId,
         assistant_id: assistantId,
         thread_id: threadId,
@@ -5317,12 +5317,12 @@ function createAgentProvider(deps = {}) {
     }
   };
 }
-var import_zod24, import_core95, import_protocols39, STOP_TYPES;
+var import_zod25, import_core96, import_protocols39, STOP_TYPES;
 var init_agentProvider = __esm({
   "src/services/open/providers/agentProvider.ts"() {
     "use strict";
-    import_zod24 = require("zod");
-    import_core95 = require("@axiom-lattice/core");
+    import_zod25 = require("zod");
+    import_core96 = require("@axiom-lattice/core");
     import_protocols39 = require("@axiom-lattice/protocols");
     STOP_TYPES = [import_protocols39.MessageChunkTypes.MESSAGE_COMPLETED];
   }
@@ -5366,7 +5366,7 @@ function createSandboxOpenCredentialProvider(options) {
   };
 }
 function registerGatewaySandboxOpenCredentialProvider(onError) {
-  return (0, import_core96.registerSandboxOpenCredentialProvider)(
+  return (0, import_core97.registerSandboxOpenCredentialProvider)(
     createSandboxOpenCredentialProvider({
       gatewayUrl: process.env.PUBLIC_GATEWAY_URL?.trim() || void 0,
       onError
@@ -5374,11 +5374,11 @@ function registerGatewaySandboxOpenCredentialProvider(onError) {
     { onError }
   );
 }
-var import_core96, DEFAULT_SANDBOX_OPEN_GRANTS, MAX_SANDBOX_OPEN_DEPTH;
+var import_core97, DEFAULT_SANDBOX_OPEN_GRANTS, MAX_SANDBOX_OPEN_DEPTH;
 var init_sandboxOpenCredentialProvider = __esm({
   "src/services/open/sandboxOpenCredentialProvider.ts"() {
     "use strict";
-    import_core96 = require("@axiom-lattice/core");
+    import_core97 = require("@axiom-lattice/core");
     init_openToken();
     init_sandboxOpenReflection();
     DEFAULT_SANDBOX_OPEN_GRANTS = [
@@ -5415,12 +5415,12 @@ var resources_exports = {};
 __export(resources_exports, {
   ResourceController: () => ResourceController
 });
-var import_bcryptjs, import_core97, ResourceController;
+var import_bcryptjs, import_core98, ResourceController;
 var init_resources = __esm({
   "src/controllers/resources.ts"() {
     "use strict";
     import_bcryptjs = __toESM(require("bcryptjs"));
-    import_core97 = require("@axiom-lattice/core");
+    import_core98 = require("@axiom-lattice/core");
     init_mime();
     init_http_range();
     init_sandboxGrants();
@@ -5437,14 +5437,14 @@ var init_resources = __esm({
         if (!workspaceId || !projectId) {
           return reply.status(400).send({ error: "x-workspace-id and x-project-id headers required" });
         }
-        const payload = (0, import_core97.createSharePayload)(
+        const payload = (0, import_core98.createSharePayload)(
           tenantId,
           workspaceId,
           projectId,
           userId,
           body
         );
-        const token = (0, import_core97.generateToken)();
+        const token = (0, import_core98.generateToken)();
         try {
           await this.deps.store.create({ ...payload, token });
           this.deps.logger.info(
@@ -5581,7 +5581,7 @@ var init_resources = __esm({
             resourcePath: subPath
           }, subPath, ext, request, reply);
         }
-        const volume = (0, import_core97.buildNamedVolumeName)("p", "project", tenantId, workspaceId, projectId);
+        const volume = (0, import_core98.buildNamedVolumeName)("p", "project", tenantId, workspaceId, projectId);
         return this._resolveAndServe(
           volume,
           subPath,
@@ -8417,13 +8417,13 @@ async function searchEntries(request, reply) {
 
 // src/controllers/tools.ts
 var import_core14 = require("@axiom-lattice/core");
-function serializeSchema(schema) {
-  if (!schema) {
+function serializeSchema(schema2) {
+  if (!schema2) {
     return void 0;
   }
   try {
-    if (schema._def) {
-      const def = schema._def;
+    if (schema2._def) {
+      const def = schema2._def;
       if (def.typeName === "ZodObject") {
         const shape = def.shape();
         const properties = {};
@@ -8449,7 +8449,7 @@ function serializeSchema(schema) {
     }
     return {
       type: "object",
-      description: schema.description || "Schema definition"
+      description: schema2.description || "Schema definition"
     };
   } catch (error) {
     return {
@@ -17118,6 +17118,49 @@ function registerA2ABridgeRoutes(app2) {
 
 // src/routes/stt.ts
 var import_core46 = require("@axiom-lattice/core");
+
+// src/controllers/tenant-scope.ts
+var TenantScopeError2 = class extends Error {
+  /** Creates a tenant scope error. */
+  constructor(code, statusCode, message) {
+    super(message);
+    this.code = code;
+    this.statusCode = statusCode;
+    this.name = "TenantScopeError";
+  }
+};
+function resolveTenantScope(request, authRequired2) {
+  const authenticated = request.user?.tenantId;
+  const header2 = request.headers["x-tenant-id"];
+  const requested = Array.isArray(header2) ? header2[0] : header2;
+  if (authenticated) {
+    if (requested && requested !== authenticated) {
+      throw new TenantScopeError2(
+        "TENANT_ACCESS_DENIED",
+        403,
+        "Tenant access denied"
+      );
+    }
+    return { tenantId: authenticated, userId: request.user?.id };
+  }
+  if (authRequired2) {
+    throw new TenantScopeError2(
+      "UNAUTHENTICATED",
+      401,
+      "Console session required"
+    );
+  }
+  return { tenantId: requested || "default" };
+}
+
+// src/routes/stt.ts
+function tenantIdOf(request) {
+  try {
+    return resolveTenantScope(request, false).tenantId;
+  } catch {
+    return "default";
+  }
+}
 var ALLOWED_AUDIO_FORMATS = /* @__PURE__ */ new Set([
   "webm",
   "wav",
@@ -17171,10 +17214,11 @@ var registerSTTRoutes = (app2) => {
         return reply.status(400).send({ error: `Unsupported audio format: ${format}` });
       }
       try {
-        let client;
-        try {
-          client = (0, import_core46.getSTTClient)(modelKey2);
-        } catch {
+        const client = await import_core46.sttModelLatticeManager.getSTTClientWithTenantAsync(
+          tenantIdOf(request),
+          modelKey2
+        );
+        if (!client) {
           return reply.status(404).send({ error: `STT model "${modelKey2}" not found` });
         }
         const result = await client.transcribe(buffer, format);
@@ -21451,13 +21495,48 @@ function resolveDiscoveryTimeoutMs(raw = process.env.LATTICE_MODEL_DISCOVERY_TIM
   return parsed;
 }
 function buildModelsEndpoint(baseURL) {
+  return buildOpenAiEndpoint(baseURL, "models");
+}
+function buildOpenAiEndpoint(baseURL, path7) {
   const url = new URL(baseURL);
   const trimmed = url.pathname.replace(/\/+$/, "");
-  url.pathname = trimmed.endsWith("/v1") ? `${trimmed}/models` : `${trimmed}/v1/models`;
+  url.pathname = /\/v\d+$/.test(trimmed) ? `${trimmed}/${path7}` : `${trimmed}/v1/${path7}`;
   url.search = "";
   url.hash = "";
   return url.toString();
 }
+function assertUpstreamOk(response) {
+  if (response.status >= 300 && response.status < 400) {
+    throw new ModelProviderServiceError(
+      "UPSTREAM_REDIRECT_BLOCKED",
+      502,
+      "Upstream returned a redirect; configure the final URL directly"
+    );
+  }
+  if (response.status === 401 || response.status === 403) {
+    throw new ModelProviderServiceError(
+      "UPSTREAM_AUTH_FAILED",
+      502,
+      "Upstream rejected the configured credentials"
+    );
+  }
+  if (response.status === 429) {
+    throw new ModelProviderServiceError(
+      "UPSTREAM_RATE_LIMITED",
+      502,
+      "Upstream rate limited the request",
+      true
+    );
+  }
+  if (!response.ok) {
+    throw new ModelProviderServiceError(
+      "UPSTREAM_UNREACHABLE",
+      502,
+      "Upstream returned an error response",
+      response.status >= 500
+    );
+  }
+}
 function parseModelsPayload(payload) {
   const entries = Array.isArray(payload) ? payload : typeof payload === "object" && payload !== null ? payload.data : void 0;
   if (!Array.isArray(entries)) {
@@ -21528,36 +21607,60 @@ var openAiCompatibleAdapter = {
         true
       );
     }
-    if (response.status >= 300 && response.status < 400) {
-      throw new ModelProviderServiceError(
-        "UPSTREAM_REDIRECT_BLOCKED",
-        502,
-        "Upstream returned a redirect; configure the final URL directly"
-      );
-    }
-    if (response.status === 401 || response.status === 403) {
-      throw new ModelProviderServiceError(
-        "UPSTREAM_AUTH_FAILED",
-        502,
-        "Upstream rejected the configured credentials"
-      );
-    }
-    if (response.status === 429) {
+    assertUpstreamOk(response);
+    const body = await readBodyWithLimit(response, MAX_RESPONSE_BYTES);
+    let payload;
+    try {
+      payload = JSON.parse(body);
+    } catch {
       throw new ModelProviderServiceError(
-        "UPSTREAM_RATE_LIMITED",
+        "UPSTREAM_INVALID_RESPONSE",
         502,
-        "Upstream rate limited the request",
-        true
+        "Upstream response was not valid JSON"
       );
     }
-    if (!response.ok) {
+    return parseModelsPayload(payload);
+  }
+};
+async function probeEmbeddingInference(input, signal) {
+  const startedAt = Date.now();
+  const endpoint = buildOpenAiEndpoint(input.baseURL, "embeddings");
+  const headers = {
+    Accept: "application/json",
+    "Content-Type": "application/json"
+  };
+  if (input.apiKey) {
+    headers.Authorization = `Bearer ${input.apiKey}`;
+  }
+  try {
+    let response;
+    try {
+      response = await fetch(endpoint, {
+        method: "POST",
+        headers,
+        // Never follow redirects: a redirected request could reach an address
+        // that bypassed the SSRF checks.
+        redirect: "manual",
+        signal,
+        body: JSON.stringify({ model: input.modelId, input: "ping" })
+      });
+    } catch (error) {
+      if (error instanceof Error && error.name === "AbortError") {
+        throw new ModelProviderServiceError(
+          "UPSTREAM_TIMEOUT",
+          504,
+          "Upstream did not respond in time",
+          true
+        );
+      }
       throw new ModelProviderServiceError(
         "UPSTREAM_UNREACHABLE",
         502,
-        "Upstream returned an error response",
-        response.status >= 500
+        "Upstream could not be reached",
+        true
       );
     }
+    assertUpstreamOk(response);
     const body = await readBodyWithLimit(response, MAX_RESPONSE_BYTES);
     let payload;
     try {
@@ -21569,9 +21672,37 @@ var openAiCompatibleAdapter = {
         "Upstream response was not valid JSON"
       );
     }
-    return parseModelsPayload(payload);
+    return {
+      reachable: true,
+      latencyMs: Date.now() - startedAt,
+      dimensions: readEmbeddingDimensions(payload)
+    };
+  } catch (error) {
+    if (error instanceof ModelProviderServiceError && isUpstreamErrorCode(error.code)) {
+      return {
+        reachable: false,
+        latencyMs: Date.now() - startedAt,
+        error: error.code
+      };
+    }
+    throw error;
   }
-};
+}
+function readEmbeddingDimensions(payload) {
+  if (typeof payload !== "object" || payload === null) {
+    return void 0;
+  }
+  const data = payload.data;
+  if (!Array.isArray(data) || data.length === 0) {
+    return void 0;
+  }
+  const first = data[0];
+  if (typeof first !== "object" || first === null) {
+    return void 0;
+  }
+  const embedding = first.embedding;
+  return Array.isArray(embedding) ? embedding.length : void 0;
+}
 async function readBodyWithLimit(response, maxBytes) {
   if (!response.body) {
     return response.text();
@@ -21673,6 +21804,9 @@ var ModelProviderService = class {
     }
     const models = snapshot.map((model) => ({
       modelKey: (0, import_protocols16.toModelKey)(model.providerId, model.modelId),
+      // What this row can do. Pickers filter on it, so it travels with every
+      // entry rather than being re-derived by each consumer.
+      kind: model.kind,
       displayName: model.displayName,
       providerId: model.providerId,
       providerName: providerNames.get(model.providerId) ?? model.providerId,
@@ -21700,6 +21834,9 @@ var ModelProviderService = class {
           // which is how the deployment's `default` alias came to be offered as
           // a model literally called "default".
           displayName: config.displayName || config.model || modelKey2,
+          // Deployment-registered models are chat by construction: they are
+          // built with `registerModelLattice`, which only mints LLM clients.
+          kind: "chat",
           providerId: "",
           providerName: "registered",
           source: "registered",
@@ -21753,6 +21890,8 @@ var ModelProviderService = class {
    * left untouched.
    */
   async reconcileProvider(tenantId, providerId2) {
+    this.deps.registry.evictProviderCache?.(tenantId, providerId2);
+    this.deps.registry.forgetTenantDefaultMiss?.(tenantId);
     if (!this.shouldRegister(tenantId)) {
       return;
     }
@@ -21762,21 +21901,9 @@ var ModelProviderService = class {
     }
     const provider = await this.deps.providerStore.getProviderById(tenantId, providerId2);
     if (!provider) {
-      const prefix = `${providerId2}/`;
-      for (const { modelKey: modelKey2 } of this.deps.registry.listRegistered(tenantId)) {
-        if (modelKey2.startsWith(prefix)) {
-          this.deps.registry.remove(tenantId, modelKey2);
-        }
-      }
       return;
     }
     const models = await this.deps.providerStore.listModels(tenantId, providerId2);
-    const current = new Set(models.map((model) => (0, import_protocols16.toModelKey)(providerId2, model.modelId)));
-    for (const { modelKey: modelKey2 } of this.deps.registry.listRegistered(tenantId)) {
-      if (modelKey2.startsWith(`${providerId2}/`) && !current.has(modelKey2)) {
-        this.deps.registry.remove(tenantId, modelKey2);
-      }
-    }
     this.syncRegistry(tenantId, provider, models);
   }
   /**
@@ -21875,11 +22002,9 @@ var ModelProviderService = class {
   async remove(userId, tenantId, id3) {
     await this.assertAdmin(userId, tenantId);
     await this.requireProvider(tenantId, id3);
-    const snapshot = await this.deps.providerStore.listModels(tenantId, id3);
     await this.deps.providerStore.deleteProvider(tenantId, id3);
-    for (const model of snapshot) {
-      this.deps.registry.remove(tenantId, (0, import_protocols16.toModelKey)(id3, model.modelId));
-    }
+    this.deps.registry.evictProviderCache?.(tenantId, id3);
+    this.deps.registry.forgetTenantDefaultMiss?.(tenantId);
     this.notifyChanged(tenantId, id3);
   }
   /**
@@ -21909,7 +22034,8 @@ var ModelProviderService = class {
       () => controller.abort(),
       resolveDiscoveryTimeoutMs()
     );
-    const previous = this.shouldRegister(tenantId) ? await this.deps.providerStore.listModels(tenantId, id3) : [];
+    const previous = await this.deps.providerStore.listModels(tenantId, id3);
+    const previousIds = new Set(previous.map((model) => model.modelId));
     let discovered;
     try {
       discovered = await adapter.discover({
@@ -21935,7 +22061,12 @@ var ModelProviderService = class {
     const inserted = await this.deps.providerStore.replaceProviderModels(
       tenantId,
       id3,
-      discovered
+      discovered.map((model) => ({
+        ...model,
+        // Same rule as `setModels`: a row this provider just brought in starts
+        // with the default config, a row already stored keeps the tenant's.
+        extra: previousIds.has(model.id) ? void 0 : { ...import_core53.DEFAULT_MODEL_EXTRA }
+      }))
     );
     await this.deps.providerStore.markProviderStatus(
       tenantId,
@@ -22009,6 +22140,30 @@ var ModelProviderService = class {
       resolveDiscoveryTimeoutMs()
     );
     const startedAt = Date.now();
+    if (input.kind === "embedding") {
+      if (!input.modelId) {
+        throw new ModelProviderServiceError(
+          "INVALID_INPUT",
+          400,
+          "An embedding probe needs a model id"
+        );
+      }
+      try {
+        const outcome2 = await probeEmbeddingInference(
+          { baseURL: input.baseURL, apiKey, modelId: input.modelId },
+          controller.signal
+        );
+        return {
+          reachable: outcome2.reachable,
+          latencyMs: outcome2.latencyMs,
+          models: [],
+          ...outcome2.dimensions === void 0 ? {} : { dimensions: outcome2.dimensions },
+          ...outcome2.error ? { error: outcome2.error } : {}
+        };
+      } finally {
+        clearTimeout(timeout);
+      }
+    }
     try {
       const models = await adapter.discover({
         baseURL: input.baseURL,
@@ -22073,8 +22228,13 @@ var ModelProviderService = class {
         ownedBy: previousById.get(entry.modelId)?.ownedBy,
         // An omitted `extra` means "keep what is stored" — the picker sends no
         // config, and a sync must not wipe one set by hand. The store resolves
-        // the fallback against the row's current value.
-        extra: entry.extra,
+        // the fallback against the row's current value. A model that is not
+        // stored at all gets the default config rather than an empty one.
+        extra: entry.extra ?? (previousById.has(entry.modelId) ? void 0 : { ...import_core53.DEFAULT_MODEL_EXTRA }),
+        // Omitted means "keep the stored kind"; the store defaults a new row
+        // to chat. A picker that only toggles `enabled` therefore cannot
+        // accidentally reclassify a model.
+        kind: entry.kind,
         // Same rule: omitted leaves the flag alone, so a sync cannot quietly
         // move the tenant's default.
         isDefault: entry.isDefault
@@ -22097,14 +22257,17 @@ var ModelProviderService = class {
     return this.toPublicEntry(provider, models.length);
   }
   /**
-   * Give a tenant's sole model the default flag.
+   * Give a tenant's sole **chat** model the default flag.
+   *
+   * A tenant with exactly one runnable chat model has an obvious default, and
+   * saying so is what keeps the invariant the rest of the feature leans on: a
+   * tenant either has no chat model at all — and falls back to the deployment's
+   * default — or has a default, which cannot be deleted. Without this a tenant
+   * could sit with one model and no default, and deleting that model would
+   * leave nothing behind.
    *
-   * A tenant with exactly one runnable model has an obvious default, and saying
-   * so is what keeps the invariant the rest of the feature leans on: a tenant
-   * either has no models at all — and falls back to the deployment's default —
-   * or has a default, which cannot be deleted. Without this a tenant could sit
-   * with one model and no default, and deleting that model would leave nothing
-   * behind.
+   * Chat only: a bare `"default"` key resolves to a chat client, so an
+   * embedding or ASR row must never be marked as one.
    *
    * Deliberately narrow: more than one model is the tenant's choice to make,
    * and a disabled model is not a candidate for "the model this tenant runs".
@@ -22113,24 +22276,33 @@ var ModelProviderService = class {
    */
   async ensureDefaultModel(tenantId) {
     const models = await this.deps.providerStore.listModels(tenantId);
-    if (models.length !== 1) {
+    const chatModels = models.filter((model) => model.kind === "chat");
+    if (chatModels.length !== 1) {
       return;
     }
-    const [only] = models;
+    const [only] = chatModels;
     if (only.isDefault || !only.enabled) {
       return;
     }
-    await this.deps.providerStore.replaceProviderModels(tenantId, only.providerId, [
-      {
-        id: only.modelId,
-        enabled: only.enabled,
-        stale: only.stale,
-        extra: only.extra,
-        isDefault: true
-      }
-    ]);
+    const siblings = models.filter(
+      (model) => model.providerId === only.providerId
+    );
+    await this.deps.providerStore.replaceProviderModels(
+      tenantId,
+      only.providerId,
+      siblings.map((model) => ({
+        id: model.modelId,
+        enabled: model.enabled,
+        stale: model.stale,
+        extra: model.extra,
+        kind: model.kind,
+        isDefault: model.modelId === only.modelId
+      }))
+    );
   }
   syncRegistry(tenantId, provider, models) {
+    this.deps.registry.evictProviderCache?.(tenantId, provider.id);
+    this.deps.registry.forgetTenantDefaultMiss?.(tenantId);
     if (!this.shouldRegister(tenantId)) {
       return [];
     }
@@ -22377,6 +22549,10 @@ var setModelsSchema = import_zod10.z.object({
       // Omitted means "leave the stored config alone" — the picker sends
       // only ids and states, and must not wipe a config set by hand.
       extra: extraSchema.optional(),
+      // What this model does. Omitted means "leave the stored kind
+      // alone"; a new row defaults to chat. The kinds are independent —
+      // each has its own runtime lattice and loader guard.
+      kind: import_zod10.z.enum(["chat", "embedding", "asr"]).optional(),
       // At most one per tenant; the service rejects a tie with a
       // readable error rather than letting the unique index raise one.
       // Omitted means "leave the stored flag alone", which is what a
@@ -22389,43 +22565,13 @@ var probeProviderSchema = import_zod10.z.object({
   baseURL: import_zod10.z.string().trim().min(1).max(2048),
   apiKey: import_zod10.z.string().max(1024).optional(),
   providerId: import_zod10.z.string().trim().min(1).max(255).optional(),
-  protocol: protocolSchema.optional()
+  protocol: protocolSchema.optional(),
+  // Only an embedding probe uses these: it names the model and asks for one
+  // inference, because a model list cannot prove a model can embed.
+  kind: import_zod10.z.enum(["chat", "embedding", "asr"]).optional(),
+  modelId: import_zod10.z.string().trim().min(1).max(512).optional()
 }).strict();
 
-// src/controllers/tenant-scope.ts
-var TenantScopeError2 = class extends Error {
-  /** Creates a tenant scope error. */
-  constructor(code, statusCode, message) {
-    super(message);
-    this.code = code;
-    this.statusCode = statusCode;
-    this.name = "TenantScopeError";
-  }
-};
-function resolveTenantScope(request, authRequired2) {
-  const authenticated = request.user?.tenantId;
-  const header2 = request.headers["x-tenant-id"];
-  const requested = Array.isArray(header2) ? header2[0] : header2;
-  if (authenticated) {
-    if (requested && requested !== authenticated) {
-      throw new TenantScopeError2(
-        "TENANT_ACCESS_DENIED",
-        403,
-        "Tenant access denied"
-      );
-    }
-    return { tenantId: authenticated, userId: request.user?.id };
-  }
-  if (authRequired2) {
-    throw new TenantScopeError2(
-      "UNAUTHENTICATED",
-      401,
-      "Console session required"
-    );
-  }
-  return { tenantId: requested || "default" };
-}
-
 // src/controllers/model-providers.ts
 init_Logger();
 var logger4 = new Logger({ serviceName: "lattice/gateway/model-providers" });
@@ -28767,7 +28913,13 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
           config: lattice.client.getConfig()
         }))
       ),
-      forgetTenantDefaultMiss: (tenantId) => import_core58.modelLatticeManager.forgetTenantDefaultMiss(tenantId)
+      forgetTenantDefaultMiss: (tenantId) => import_core58.modelLatticeManager.forgetTenantDefaultMiss(tenantId),
+      evictProviderCache: (tenantId, providerId2) => {
+        import_core58.modelLatticeManager.evictProviderCache(tenantId, providerId2);
+        import_core58.embeddingsLatticeManager.evictProviderCache(tenantId, providerId2);
+        import_core58.sttModelLatticeManager.evictProviderCache(tenantId, providerId2);
+        import_core58.vectorStoreLatticeManager.clearTenantVectorStores(tenantId);
+      }
     },
     onChanged: (tenantId, providerId2) => broadcastModelProviderChanged(tenantId, providerId2)
   }, { authRequired: process.env.AUTH_REQUIRED === "true" });
@@ -30827,11 +30979,11 @@ function createAuditLoggerMiddleware() {
 }
 
 // src/index.ts
-var import_core98 = require("@axiom-lattice/core");
+var import_core99 = require("@axiom-lattice/core");
 
 // src/channels/wecom/WecomChannelAdapter.ts
 var import_node_crypto27 = require("crypto");
-var import_zod17 = require("zod");
+var import_zod18 = require("zod");
 var WecomAiBot = __toESM(require("@wecom/aibot-node-sdk"));
 
 // src/channels/wecom/parser.ts
@@ -30856,24 +31008,288 @@ function parseWecomTextFrame(frame) {
   };
 }
 
+// src/channels/wecom/cardTool.ts
+var import_core71 = require("@axiom-lattice/core");
+var import_zod17 = require("zod");
+var CARD_TTL_MS = 10 * 6e4;
+var MAX_CARD_ENTRIES = 1e3;
+var cardEntries = /* @__PURE__ */ new Map();
+function pruneCards(now) {
+  for (const [key, entry] of cardEntries) {
+    if (entry.expiresAt <= now) cardEntries.delete(key);
+  }
+  while (cardEntries.size > MAX_CARD_ENTRIES) {
+    const oldest = cardEntries.keys().next().value;
+    if (oldest === void 0) break;
+    cardEntries.delete(oldest);
+  }
+}
+function putWecomCard(key, card) {
+  const now = Date.now();
+  pruneCards(now);
+  if (cardEntries.get(key)?.closed) return false;
+  cardEntries.delete(key);
+  cardEntries.set(key, { card, expiresAt: now + CARD_TTL_MS, closed: false });
+  return true;
+}
+function takeWecomCard(key) {
+  const now = Date.now();
+  pruneCards(now);
+  const entry = cardEntries.get(key);
+  if (!entry) return void 0;
+  cardEntries.delete(key);
+  cardEntries.set(key, { expiresAt: now + CARD_TTL_MS, closed: true });
+  return entry.card;
+}
+function discardWecomCard(key) {
+  const now = Date.now();
+  pruneCards(now);
+  const entry = cardEntries.get(key);
+  if (entry) entry.card = void 0;
+  cardEntries.delete(key);
+  cardEntries.set(key, { expiresAt: now + CARD_TTL_MS, closed: true });
+}
+var CARD_TYPES = [
+  "text_notice",
+  "news_notice",
+  "button_interaction",
+  "vote_interaction",
+  "multiple_interaction"
+];
+var optionSchema = import_zod17.z.object({
+  id: import_zod17.z.string().describe("\u9009\u9879 ID"),
+  text: import_zod17.z.string().describe("\u9009\u9879\u6587\u6848"),
+  is_checked: import_zod17.z.boolean().optional().describe("\u662F\u5426\u9ED8\u8BA4\u9009\u4E2D")
+});
+var schema = import_zod17.z.object({
+  card_type: import_zod17.z.enum(CARD_TYPES).default("text_notice").describe(
+    "\u5361\u7247\u7C7B\u578B\uFF1Atext_notice(\u6587\u672C\u901A\u77E5)/news_notice(\u56FE\u6587)/button_interaction(\u6309\u94AE)/vote_interaction(\u6295\u7968)/multiple_interaction(\u591A\u9009)"
+  ),
+  title: import_zod17.z.string().min(1).max(26).describe("\u4E00\u7EA7\u6807\u9898\uFF0C\u4E0D\u8D85\u8FC7 26 \u5B57"),
+  desc: import_zod17.z.string().max(30).optional().describe("\u6807\u9898\u8F85\u52A9\u4FE1\u606F\uFF0C\u4E0D\u8D85\u8FC7 30 \u5B57"),
+  source_desc: import_zod17.z.string().max(13).optional().describe("\u5361\u7247\u5DE6\u4E0A\u89D2\u6765\u6E90\u6587\u6848\uFF0C\u4E0D\u8D85\u8FC7 13 \u5B57"),
+  source_color: import_zod17.z.number().int().min(0).max(3).optional().describe("\u6765\u6E90\u6587\u5B57\u989C\u8272\uFF1A0 \u7070(\u9ED8\u8BA4)/1 \u9ED1/2 \u7EA2/3 \u7EFF"),
+  emphasis_title: import_zod17.z.string().max(10).optional().describe("\u5173\u952E\u6570\u5B57\uFF0C\u4E0D\u8D85\u8FC7 10 \u5B57"),
+  emphasis_desc: import_zod17.z.string().max(15).optional().describe("\u5173\u952E\u6570\u5B57\u8BF4\u660E\uFF0C\u4E0D\u8D85\u8FC7 15 \u5B57"),
+  subtitle: import_zod17.z.string().max(112).optional().describe("\u4E8C\u7EA7\u666E\u901A\u6587\u672C\uFF0C\u4E0D\u8D85\u8FC7 112 \u5B57"),
+  quote_text: import_zod17.z.string().optional().describe("\u5F15\u7528\u6837\u5F0F\u6587\u672C\uFF08\u4E0E\u5173\u952E\u6570\u5B57\u4E8C\u9009\u4E00\uFF09"),
+  items: import_zod17.z.array(import_zod17.z.object({
+    key: import_zod17.z.string().max(5).describe("\u4E8C\u7EA7\u6807\u9898\uFF0C\u4E0D\u8D85\u8FC7 5 \u5B57"),
+    value: import_zod17.z.string().max(26).describe("\u4E8C\u7EA7\u6587\u672C\uFF0C\u4E0D\u8D85\u8FC7 26 \u5B57"),
+    url: import_zod17.z.string().optional().describe("\u70B9\u51FB\u8DF3\u8F6C\u94FE\u63A5\uFF08\u53EF\u9009\uFF09")
+  })).max(6).optional().describe("\u952E\u503C\u660E\u7EC6\u5217\u8868\uFF0C\u6700\u591A 6 \u6761"),
+  links: import_zod17.z.array(import_zod17.z.object({
+    title: import_zod17.z.string().max(13).describe("\u94FE\u63A5\u6587\u6848\uFF0C\u4E0D\u8D85\u8FC7 13 \u5B57"),
+    url: import_zod17.z.string()
+  })).max(3).optional().describe("\u8DF3\u8F6C\u94FE\u63A5\u5217\u8868\uFF0C\u6700\u591A 3 \u6761"),
+  action_url: import_zod17.z.string().optional().describe("\u6574\u5F20\u5361\u7247\u70B9\u51FB\u8DF3\u8F6C\u7684\u94FE\u63A5\uFF08\u4F01\u5FAE\u8981\u6C42\u5FC5\u586B\uFF1B\u7F3A\u7701\u65F6\u81EA\u52A8\u53D6\u7B2C\u4E00\u6761 links[].url\uFF09"),
+  // ── news_notice ──────────────────────────────────────────────
+  image_url: import_zod17.z.string().optional().describe("\u5361\u7247\u56FE\u7247\uFF08news_notice\uFF09"),
+  image_text: import_zod17.z.object({ title: import_zod17.z.string(), desc: import_zod17.z.string().optional(), url: import_zod17.z.string().optional() }).optional().describe("\u5DE6\u56FE\u53F3\u6587\u533A\u57DF\uFF08news_notice\uFF09"),
+  vertical_items: import_zod17.z.array(import_zod17.z.object({ title: import_zod17.z.string(), desc: import_zod17.z.string().optional() })).max(4).optional().describe("\u5782\u76F4\u5185\u5BB9\u5217\u8868\uFF0C\u6700\u591A 4 \u6761\uFF08news_notice\uFF09"),
+  // ── button_interaction ───────────────────────────────────────
+  buttons: import_zod17.z.array(import_zod17.z.object({
+    text: import_zod17.z.string().max(4).describe("\u6309\u94AE\u6587\u6848\uFF0C\u4E0D\u8D85\u8FC7 4 \u5B57"),
+    key: import_zod17.z.string().describe("\u6309\u94AE key\uFF0C\u7528\u4E8E\u56DE\u8C03"),
+    style: import_zod17.z.number().int().min(1).max(4).optional().describe("\u6309\u94AE\u6837\u5F0F 1-4")
+  })).max(6).optional().describe("\u6309\u94AE\u5217\u8868\uFF0C\u6700\u591A 6 \u6761\uFF08button_interaction\uFF09"),
+  // ── vote_interaction ─────────────────────────────────────────
+  checkbox: import_zod17.z.object({
+    question_key: import_zod17.z.string().describe("\u9009\u62E9\u9898 key"),
+    option_list: import_zod17.z.array(optionSchema).max(20).describe("\u9009\u9879\u5217\u8868\uFF0C\u6700\u591A 20 \u4E2A")
+  }).optional().describe("\u9009\u62E9\u9898\uFF08vote_interaction\uFF09"),
+  submit_text: import_zod17.z.string().optional().describe("\u63D0\u4EA4\u6309\u94AE\u6587\u6848\uFF0C\u9ED8\u8BA4\u300C\u63D0\u4EA4\u300D"),
+  // ── multiple_interaction ─────────────────────────────────────
+  selections: import_zod17.z.array(import_zod17.z.object({
+    question_key: import_zod17.z.string(),
+    title: import_zod17.z.string().optional(),
+    option_list: import_zod17.z.array(optionSchema).max(20)
+  })).max(3).optional().describe("\u4E0B\u62C9\u9009\u62E9\u5668\u5217\u8868\uFF0C\u6700\u591A 3 \u4E2A\uFF08multiple_interaction\uFF09")
+});
+function assertUrl(url, field) {
+  if (url === void 0) return;
+  if (!/^https?:\/\/\S+$/i.test(url)) {
+    throw new Error(`${field} \u5FC5\u987B\u662F http(s):// \u5F00\u5934\u7684\u53EF\u8BBF\u95EE\u94FE\u63A5\uFF0C\u6536\u5230\u300C${url}\u300D`);
+  }
+}
+function newTaskId() {
+  return `wecom-card-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+function buildTemplateCard(input) {
+  if (!input.title.trim()) throw new Error("title \u4E0D\u80FD\u4E3A\u7A7A");
+  assertUrl(input.action_url, "action_url");
+  assertUrl(input.image_url, "image_url");
+  input.links?.forEach((link, i) => assertUrl(link.url, `links[${i}].url`));
+  input.items?.forEach((item, i) => assertUrl(item.url, `items[${i}].url`));
+  assertUrl(input.image_text?.url, "image_text.url");
+  const actionUrl = input.action_url ?? input.links?.[0]?.url;
+  if (!actionUrl) {
+    throw new Error(
+      "\u5361\u7247\u5FC5\u987B\u63D0\u4F9B action_url\uFF08\u6574\u5361\u70B9\u51FB\u8DF3\u8F6C\uFF09\uFF0C\u6216\u81F3\u5C11\u4E00\u6761\u5E26 url \u7684 links \u2014\u2014 \u4F01\u5FAE\u8981\u6C42 card_action \u4E0D\u80FD\u4E3A\u7A7A"
+    );
+  }
+  const card = {
+    card_type: input.card_type,
+    main_title: {
+      title: input.title,
+      ...input.desc ? { desc: input.desc } : {}
+    },
+    card_action: { type: 1, url: actionUrl }
+  };
+  if (input.source_desc) {
+    card.source = {
+      desc: input.source_desc,
+      ...input.source_color !== void 0 ? { desc_color: input.source_color } : {}
+    };
+  }
+  if (input.emphasis_title || input.emphasis_desc) {
+    card.emphasis_content = {
+      ...input.emphasis_title ? { title: input.emphasis_title } : {},
+      ...input.emphasis_desc ? { desc: input.emphasis_desc } : {}
+    };
+  }
+  if (input.subtitle) card.sub_title_text = input.subtitle;
+  if (input.quote_text) card.quote_area = { type: 0, quote_text: input.quote_text };
+  if (input.items?.length) {
+    card.horizontal_content_list = input.items.map((item) => ({
+      type: item.url ? 1 : 0,
+      keyname: item.key,
+      value: item.value,
+      ...item.url ? { url: item.url } : {}
+    }));
+  }
+  if (input.links?.length) {
+    card.jump_list = input.links.map((link) => ({
+      type: 1,
+      url: link.url,
+      title: link.title
+    }));
+  }
+  if (input.card_type === "news_notice") {
+    if (input.image_url) card.card_image = { url: input.image_url };
+    if (input.image_text) {
+      card.image_text_area = {
+        type: input.image_text.url ? 1 : 0,
+        ...input.image_text.url ? { url: input.image_text.url } : {},
+        title: input.image_text.title,
+        ...input.image_text.desc ? { desc: input.image_text.desc } : {}
+      };
+    }
+    if (input.vertical_items?.length) {
+      card.vertical_content_list = input.vertical_items.map((item) => ({
+        title: item.title,
+        ...item.desc ? { desc: item.desc } : {}
+      }));
+    }
+  }
+  if (input.card_type === "button_interaction") {
+    if (!input.buttons?.length) throw new Error("button_interaction \u5FC5\u987B\u63D0\u4F9B buttons");
+    card.button_list = input.buttons.map((button) => ({
+      text: button.text,
+      key: button.key,
+      ...button.style !== void 0 ? { style: button.style } : {}
+    }));
+    card.task_id = newTaskId();
+  }
+  if (input.card_type === "vote_interaction") {
+    if (!input.checkbox) throw new Error("vote_interaction \u5FC5\u987B\u63D0\u4F9B checkbox");
+    card.checkbox = {
+      question_key: input.checkbox.question_key,
+      option_list: input.checkbox.option_list.map((option) => ({
+        id: option.id,
+        text: option.text,
+        ...option.is_checked !== void 0 ? { is_checked: option.is_checked } : {}
+      }))
+    };
+    card.submit_button = { text: input.submit_text ?? "\u63D0\u4EA4", type: 1, key: "submit" };
+    card.task_id = newTaskId();
+  }
+  if (input.card_type === "multiple_interaction") {
+    if (!input.selections?.length) throw new Error("multiple_interaction \u5FC5\u987B\u63D0\u4F9B selections");
+    card.select_list = input.selections.map((selection) => ({
+      question_key: selection.question_key,
+      ...selection.title ? { title: selection.title } : {},
+      option_list: selection.option_list.map((option) => ({
+        id: option.id,
+        text: option.text,
+        ...option.is_checked !== void 0 ? { is_checked: option.is_checked } : {}
+      }))
+    }));
+    card.submit_button = { text: input.submit_text ?? "\u63D0\u4EA4", type: 1, key: "submit" };
+    card.task_id = newTaskId();
+  }
+  return card;
+}
+function readReplyKey(exeConfig) {
+  const configurable = exeConfig?.configurable;
+  const key = configurable?.runConfig?.wecomReplyKey;
+  return typeof key === "string" && key.length > 0 ? key : void 0;
+}
+function registerWecomCardTool() {
+  if ((0, import_core71.getToolLattice)("wecom_card")) return;
+  (0, import_core71.registerToolLattice)(
+    "wecom_card",
+    {
+      name: "wecom_card",
+      description: "\u5728**\u4F01\u4E1A\u5FAE\u4FE1\u4F1A\u8BDD**\u4E2D\uFF0C\u628A\u672C\u8F6E\u56DE\u590D\u7684\u6838\u5FC3\u7ED3\u679C\u505A\u6210\u4E00\u5F20\u6A21\u677F\u5361\u7247\uFF0C\u5361\u7247\u4F1A\u5728\u672C\u6761\u56DE\u590D\u540E\u7531\u6E20\u9053\u81EA\u52A8\u53D1\u9001\u3002\n\n\u4E3B\u52A8\u4F7F\u7528\uFF08\u7528\u6237\u4E0D\u9700\u8981\u8BF4\u300C\u5361\u7247\u300D\u300C\u5361\u7247\u6D88\u606F\u300D\uFF09\uFF1A\u5F53\u56DE\u590D\u7684\u4E3B\u8981\u4EF7\u503C\u662F\u7ED3\u6784\u5316\u4E1A\u52A1\u5BF9\u8C61\u65F6 \u2014\u2014 \u5BA2\u6237\u4EA4\u63A5/\u6D3E\u5355\u3001\u544A\u8B66/\u5F02\u5E38/\u98CE\u9669\u3001\u6E05\u5355/\u6838\u5BF9\u8868\u3001\u5F85\u529E/\u884C\u52A8\u9879\u3001\u72B6\u6001/\u8FDB\u5EA6/\u6307\u6807\u6C47\u603B\u3001\u6295\u7968/\u9009\u62E9/\u786E\u8BA4\u3001\u9700\u8981\u70B9\u51FB\u8FDB\u5165\u7684\u94FE\u63A5/\u516C\u544A\u5165\u53E3\u3002\u53EA\u8981\u7ED3\u679C\u5177\u5907\u300C\u6807\u9898 + 1-6 \u6761\u952E\u503C\u660E\u7EC6\uFF08\u6216\u9009\u9879\uFF09+ \u4E00\u4E2A\u53EF\u8DF3\u8F6C\u94FE\u63A5\u300D\uFF0C\u5C31\u5E94\u8C03\u7528\u3002\n\n\u4E0D\u8981\u4F7F\u7528\uFF1A\u666E\u901A\u95EE\u7B54\u3001\u89E3\u91CA\u3001\u95F2\u804A\u3001\u957F\u6587\u5206\u6790\u3001\u4EE3\u7801\u3001\u6CA1\u6709\u660E\u786E\u8DF3\u8F6C\u76EE\u6807\u7684\u5BF9\u8BDD\u3001\u4E00\u53E5\u8BDD\u5C31\u80FD\u8BF4\u6E05\u7684\u7ED3\u679C\u3002\n\n\u8C03\u7528\u540E\u4ECD\u7528\u4E00\u4E24\u53E5\u8BDD\u603B\u7ED3\u7ED3\u8BBA\uFF1B\u4E0D\u8981\u518D\u8F93\u51FA JSON\uFF0C\u4E5F\u4E0D\u8981\u5199\u3010\u5361\u7247\u6D88\u606F\u3011\u3002\u6BCF\u6761\u56DE\u590D\u6700\u591A\u4E00\u5F20\u5361\u7247\uFF0C\u91CD\u590D\u8C03\u7528\u4F1A\u66FF\u6362\u4E0A\u4E00\u5F20\u3002\u8FD4\u56DE ERROR \u65F6\u6309\u63D0\u793A\u4FEE\u6B63\u540E\u91CD\u8BD5\uFF0C\u4E0D\u8981\u628A ERROR \u653E\u8FDB\u56DE\u590D\u3002\u5B50 agent \u4E0D\u8981\u8C03\u7528\u672C\u5DE5\u5177\u3002",
+      schema
+    },
+    async (input, exeConfig) => {
+      const replyKey = readReplyKey(exeConfig);
+      if (!replyKey) {
+        return "ERROR: wecom_card \u53EA\u80FD\u5728\u4F01\u4E1A\u5FAE\u4FE1\u5B9E\u65F6\u4F1A\u8BDD\u4E2D\u4F7F\u7528\uFF0C\u8BF7\u76F4\u63A5\u7528\u6587\u5B57\u56DE\u590D\u3002";
+      }
+      try {
+        const card = buildTemplateCard(input);
+        if (!putWecomCard(replyKey, card)) {
+          return "ERROR: \u672C\u6761\u56DE\u590D\u5DF2\u7ED3\u675F\uFF0C\u65E0\u6CD5\u518D\u9644\u5E26\u5361\u7247\u3002\u8BF7\u628A\u7ED3\u679C\u5199\u5165\u6B63\u6587\u3002";
+        }
+        const title = card.main_title?.title;
+        const suffix = typeof title === "string" && title ? `\u300C${title}\u300D` : "";
+        return `\u5DF2\u751F\u6210\u4F01\u4E1A\u5FAE\u4FE1\u5361\u7247${suffix}\uFF0C\u5C06\u968F\u672C\u6761\u56DE\u590D\u81EA\u52A8\u53D1\u9001\u3002\u8BF7\u7528\u6587\u5B57\u603B\u7ED3\u7ED3\u8BBA\uFF0C\u4E0D\u8981\u91CD\u590D\u5361\u7247\u5185\u5BB9\u3002`;
+      } catch (error) {
+        return `ERROR: ${error instanceof Error ? error.message : String(error)}\u3002\u8BF7\u4FEE\u6B63\u53C2\u6570\u540E\u91CD\u65B0\u8C03\u7528 wecom_card\u3002`;
+      }
+    }
+  );
+}
+
 // src/channels/wecom/WecomChannelAdapter.ts
 init_Logger();
 var logger6 = new Logger({ serviceName: "lattice/gateway/wecom" });
-var wecomConfigSchema = import_zod17.z.object({
-  botId: import_zod17.z.string(),
-  secret: import_zod17.z.string()
+var wecomConfigSchema = import_zod18.z.object({
+  botId: import_zod18.z.string(),
+  secret: import_zod18.z.string()
 });
 var RECONNECT_BASE_MS = 5e3;
 var RECONNECT_MAX_MS = 6e4;
+var SENT_CARD_TTL_MS = 10 * 6e4;
+var MAX_SENT_CARDS = 1e3;
 var activeConnections2 = /* @__PURE__ */ new Map();
 var streamIdsByReqId = /* @__PURE__ */ new Map();
 var MAX_TRACKED_STREAMS = 1e3;
-function streamKeyOf(replyTarget) {
-  const frame = replyTarget.rawTarget.frame;
-  return frame?.headers?.req_id ?? replyTarget.channelInstallationId;
+var sentCardsByTaskId = /* @__PURE__ */ new Map();
+var handledCardEventKeys = /* @__PURE__ */ new Map();
+var ACKNOWLEDGED_TTL_MS = 10 * 6e4;
+function isRecord4(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function replyKeyOf(installationId, reqId) {
+  return `${installationId}:${reqId ?? "no-req"}`;
+}
+function replyKeyForTarget(replyTarget) {
+  const frame = replyTarget.rawTarget?.frame;
+  return replyKeyOf(replyTarget.channelInstallationId, frame?.headers?.req_id);
+}
+function isEventReplyTarget(replyTarget) {
+  return replyTarget.rawTarget?.kind === "template_card_event";
+}
+function eventChatId(replyTarget) {
+  const chatId = replyTarget.rawTarget?.chatId;
+  return typeof chatId === "string" && chatId.length > 0 ? chatId : void 0;
 }
 function streamIdFor(replyTarget) {
-  const key = streamKeyOf(replyTarget);
+  const key = replyKeyForTarget(replyTarget);
   let streamId = streamIdsByReqId.get(key);
   if (!streamId) {
     streamId = (0, import_node_crypto27.randomUUID)();
@@ -30885,6 +31301,267 @@ function streamIdFor(replyTarget) {
   }
   return streamId;
 }
+function rememberSentCard(card) {
+  const taskId = typeof card.task_id === "string" ? card.task_id : void 0;
+  if (!taskId) return;
+  const now = Date.now();
+  for (const [key, entry] of sentCardsByTaskId) {
+    if (entry.expiresAt <= now) sentCardsByTaskId.delete(key);
+  }
+  sentCardsByTaskId.set(taskId, { card, expiresAt: now + SENT_CARD_TTL_MS });
+  while (sentCardsByTaskId.size > MAX_SENT_CARDS) {
+    const oldest = sentCardsByTaskId.keys().next().value;
+    if (oldest === void 0) break;
+    sentCardsByTaskId.delete(oldest);
+  }
+}
+function sentCardForTask(taskId) {
+  if (!taskId) return void 0;
+  const entry = sentCardsByTaskId.get(taskId);
+  if (!entry) return void 0;
+  if (entry.expiresAt <= Date.now()) {
+    sentCardsByTaskId.delete(taskId);
+    return void 0;
+  }
+  return entry.card;
+}
+function claimCardEvent(taskId, eventKey) {
+  if (!taskId) return true;
+  const key = `${taskId}:${eventKey ?? ""}`;
+  const now = Date.now();
+  for (const [handled, expiresAt] of handledCardEventKeys) {
+    if (expiresAt <= now) handledCardEventKeys.delete(handled);
+  }
+  if (handledCardEventKeys.has(key)) return false;
+  handledCardEventKeys.set(key, now + ACKNOWLEDGED_TTL_MS);
+  while (handledCardEventKeys.size > MAX_SENT_CARDS) {
+    const oldest = handledCardEventKeys.keys().next().value;
+    if (oldest === void 0) break;
+    handledCardEventKeys.delete(oldest);
+  }
+  return true;
+}
+async function sendStreamFrame(connection, replyTarget, input) {
+  if (isEventReplyTarget(replyTarget)) {
+    await sendEventReply(connection, replyTarget, input);
+    return;
+  }
+  const frame = replyTarget.rawTarget?.frame;
+  if (!frame) {
+    logger6.warn("WeCom reply target has no inbound frame, skipping", {
+      installationId: replyTarget.channelInstallationId
+    });
+    return;
+  }
+  const report = (message, error) => logger6.warn(message, {
+    installationId: replyTarget.channelInstallationId,
+    error: error instanceof Error ? error.message : String(error)
+  });
+  const text = input.text || (input.done ? input.card ? "\u5DF2\u5B8C\u6210\uFF0C\u8BE6\u60C5\u89C1\u4E0B\u65B9\u5361\u7247\u3002" : "\u5904\u7406\u5B8C\u6210\u3002" : "");
+  if (!text) return;
+  try {
+    await Promise.resolve(connection.client.reply(frame, {
+      msgtype: "stream",
+      stream: { id: streamIdFor(replyTarget), finish: input.done, content: text }
+    }));
+  } catch (error) {
+    report("WeCom stream reply failed", error);
+  }
+  if (input.done && input.card) {
+    try {
+      await Promise.resolve(connection.client.reply(frame, {
+        msgtype: "template_card",
+        template_card: input.card
+      }));
+      rememberSentCard(input.card);
+      logger6.info("WeCom card sent", {
+        installationId: replyTarget.channelInstallationId,
+        cardType: input.card.card_type
+      });
+    } catch (error) {
+      report("WeCom card reply failed (text already sent)", error);
+    }
+  }
+}
+async function sendEventReply(connection, replyTarget, input) {
+  if (!input.done) return;
+  const chatId = eventChatId(replyTarget);
+  if (!chatId) {
+    logger6.warn("WeCom card event has no chat id, cannot reply", {
+      installationId: replyTarget.channelInstallationId
+    });
+    return;
+  }
+  const sendMessage2 = connection.client.sendMessage;
+  if (!sendMessage2) {
+    logger6.warn("WeCom client does not support sendMessage, cannot reply to card event", {
+      installationId: replyTarget.channelInstallationId
+    });
+    return;
+  }
+  const report = (message, error) => logger6.warn(message, {
+    installationId: replyTarget.channelInstallationId,
+    error: error instanceof Error ? error.message : String(error)
+  });
+  if (input.card) {
+    try {
+      await Promise.resolve(sendMessage2.call(connection.client, chatId, {
+        msgtype: "template_card",
+        template_card: input.card
+      }));
+      rememberSentCard(input.card);
+      logger6.info("WeCom card sent", {
+        installationId: replyTarget.channelInstallationId,
+        cardType: input.card.card_type
+      });
+    } catch (error) {
+      report("WeCom card event card failed", error);
+    }
+    return;
+  }
+  if (input.text) {
+    try {
+      await Promise.resolve(sendMessage2.call(connection.client, chatId, {
+        msgtype: "markdown",
+        markdown: { content: input.text }
+      }));
+    } catch (error) {
+      report("WeCom card event reply failed", error);
+    }
+  }
+}
+function acknowledgedCard(taskId, eventKey) {
+  const desc = eventKey ? `\u5DF2\u6536\u5230\uFF1A${eventKey}` : "\u5DF2\u63D0\u4EA4\uFF0C\u6B63\u5728\u5904\u7406\u2026";
+  const original = sentCardForTask(taskId);
+  if (original) {
+    const mainTitle = isRecord4(original.main_title) ? original.main_title : {};
+    return { ...original, main_title: { ...mainTitle, desc } };
+  }
+  return {
+    card_type: "text_notice",
+    main_title: { title: "\u5DF2\u6536\u5230\u4F60\u7684\u64CD\u4F5C", desc },
+    ...taskId ? { task_id: taskId } : {}
+  };
+}
+function cardEventFields(event) {
+  const nested = isRecord4(event?.template_card_event) ? event.template_card_event : event;
+  const source = nested ?? {};
+  return {
+    cardEvent: source,
+    taskId: typeof source.task_id === "string" ? source.task_id : void 0,
+    eventKey: typeof source.event_key === "string" ? source.event_key : void 0,
+    cardType: typeof source.card_type === "string" ? source.card_type : void 0
+  };
+}
+function describeError(error) {
+  if (error instanceof Error) return error.message;
+  if (typeof error === "string") return error;
+  try {
+    return JSON.stringify(error);
+  } catch {
+    return String(error);
+  }
+}
+function cardEventInbound(frame, installation, input) {
+  const body = frame.body;
+  const { cardEvent, taskId, eventKey, cardType } = cardEventFields(body.event);
+  const summary = eventKey ? `\u7528\u6237\u70B9\u51FB\u4E86\u5361\u7247\u6309\u94AE\u300C${eventKey}\u300D${taskId ? `\uFF08task_id=${taskId}\uFF09` : ""}` : `\u7528\u6237\u63D0\u4EA4\u4E86\u5361\u7247\u64CD\u4F5C${taskId ? `\uFF08task_id=${taskId}\uFF09` : ""}\uFF1A${JSON.stringify(cardEvent)}`;
+  return {
+    channel: "wecom",
+    channelInstallationId: installation.id,
+    tenantId: installation.tenantId,
+    sender: { id: input.userId },
+    content: {
+      text: summary,
+      metadata: {
+        messageId: body.msgid,
+        chatId: input.chatId,
+        chatType: body.chattype === "group" ? "group" : "direct",
+        taskId,
+        eventKey,
+        cardType,
+        cardEvent,
+        wecomReplyKey: replyKeyOf(installation.id, frame.headers.req_id)
+      }
+    },
+    conversation: {
+      id: input.chatId,
+      type: body.chattype === "group" ? "group" : "direct"
+    },
+    replyTarget: {
+      adapterChannel: "wecom",
+      channelInstallationId: installation.id,
+      rawTarget: { kind: "template_card_event", frame, chatId: input.chatId }
+    }
+  };
+}
+function handleTemplateCardEvent(rawFrame, installation, client, router) {
+  const frame = rawFrame;
+  const body = frame?.body;
+  const event = body?.event;
+  const reqId = frame?.headers?.req_id;
+  if (!body || event?.eventtype !== "template_card_event" || typeof reqId !== "string") {
+    return;
+  }
+  const userId = body.from?.userid;
+  const chatId = typeof body.chatid === "string" && body.chatid ? body.chatid : userId;
+  if (!userId || !chatId) {
+    logger6.warn("WeCom card event missing user/chat id, skipping", {
+      installationId: installation.id
+    });
+    return;
+  }
+  const { taskId, eventKey } = cardEventFields(event);
+  if (!claimCardEvent(taskId, eventKey)) {
+    logger6.info("WeCom duplicate card event ignored", {
+      installationId: installation.id,
+      taskId,
+      eventKey
+    });
+    return;
+  }
+  const updateTemplateCard = client.updateTemplateCard;
+  if (updateTemplateCard) {
+    const updated = acknowledgedCard(taskId, eventKey);
+    try {
+      void Promise.resolve(updateTemplateCard.call(client, rawFrame, updated)).catch((error) => {
+        logger6.warn("WeCom template card update failed", {
+          installationId: installation.id,
+          error: describeError(error)
+        });
+      });
+    } catch (error) {
+      logger6.warn("WeCom template card update failed", {
+        installationId: installation.id,
+        error: describeError(error)
+      });
+    }
+  } else {
+    logger6.warn("WeCom client does not support updateTemplateCard", {
+      installationId: installation.id
+    });
+  }
+  if (!router) return;
+  logger6.info("WeCom card event dispatched", {
+    installationId: installation.id,
+    taskId,
+    eventKey,
+    chatId
+  });
+  try {
+    void router.dispatch(cardEventInbound(frame, installation, { chatId, userId })).catch((error) => {
+      logger6.error("WeCom card event dispatch error", {
+        installationId: installation.id,
+        error: describeError(error)
+      });
+    });
+  } catch (error) {
+    logger6.error("WeCom card event dispatch error", {
+      installationId: installation.id,
+      error: describeError(error)
+    });
+  }
+}
 var wecomChannelAdapter = {
   channel: "wecom",
   configSchema: wecomConfigSchema,
@@ -30898,11 +31575,13 @@ var wecomChannelAdapter = {
       sender: { id: parsed.fromUserId },
       content: {
         text: parsed.text,
-        // `messageId` 供去重中间件使用（企业微信可能重投同一 msgid）。
+        // `messageId` 供去重中间件使用（企业微信可能重投同一 msgid）；
+        // `wecomReplyKey` 供 `wecom_card` 工具登记本轮卡片。
         metadata: {
           messageId: parsed.msgId,
           chatId: parsed.chatId,
-          chatType: parsed.chatType
+          chatType: parsed.chatType,
+          wecomReplyKey: replyKeyOf(installation.id, parsed.reqId)
         }
       },
       conversation: {
@@ -30926,14 +31605,12 @@ var wecomChannelAdapter = {
       });
       return;
     }
-    const key = streamKeyOf(replyTarget);
-    connection.client.reply(replyTarget.rawTarget.frame, {
-      msgtype: "stream",
-      stream: {
-        id: streamIdFor(replyTarget),
-        finish: true,
-        content: message.text
-      }
+    const key = replyKeyForTarget(replyTarget);
+    const card = takeWecomCard(key);
+    await sendStreamFrame(connection, replyTarget, {
+      text: message.text,
+      done: true,
+      card
     });
     streamIdsByReqId.delete(key);
   },
@@ -30952,15 +31629,21 @@ var wecomChannelAdapter = {
       });
       return;
     }
-    connection.client.reply(replyTarget.rawTarget.frame, {
-      msgtype: "stream",
-      stream: {
-        id: streamIdFor(replyTarget),
-        finish: chunk.done,
-        content: chunk.text
+    const key = replyKeyForTarget(replyTarget);
+    let card;
+    if (chunk.done) {
+      if (chunk.reason !== void 0 && chunk.reason !== "completed") {
+        discardWecomCard(key);
+      } else {
+        card = takeWecomCard(key);
       }
+    }
+    await sendStreamFrame(connection, replyTarget, {
+      text: chunk.text,
+      done: chunk.done,
+      card
     });
-    if (chunk.done) streamIdsByReqId.delete(streamKeyOf(replyTarget));
+    if (chunk.done) streamIdsByReqId.delete(key);
   },
   resolveThreadId(message, binding) {
     const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
@@ -30994,6 +31677,9 @@ var wecomChannelAdapter = {
         });
       });
     });
+    client.on("event.template_card_event", (frame) => {
+      handleTemplateCardEvent(frame, installation, client, router);
+    });
     client.on("authenticated", () => {
       connection.attempts = 0;
     });
@@ -31130,7 +31816,7 @@ var configureSwagger = async (app2, customSwaggerConfig, customSwaggerUiConfig)
 
 // src/services/agent_task_consumer.ts
 var import_node_crypto28 = require("crypto");
-var import_core71 = require("@axiom-lattice/core");
+var import_core72 = require("@axiom-lattice/core");
 var import_protocols32 = require("@axiom-lattice/protocols");
 var handleAgentTask = async (taskRequest, retryCount = 0) => {
   const {
@@ -31150,7 +31836,7 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
       `\u5F00\u59CB\u5904\u7406\u4EFB\u52A1 [assistant_id: ${assistant_id}, thread_id: ${thread_id}]`
     );
     const scope = (0, import_protocols32.resolveRunScope)(runConfig);
-    const agent = import_core71.agentInstanceManager.getAgent({ assistant_id, thread_id, tenant_id, workspace_id: scope.workspaceId, project_id: scope.projectId, custom_run_config: runConfig });
+    const agent = import_core72.agentInstanceManager.getAgent({ assistant_id, thread_id, tenant_id, workspace_id: scope.workspaceId, project_id: scope.projectId, custom_run_config: runConfig });
     if (callback_event) {
       const callbackEvent = callback_event;
       const messageId = typeof input?.id === "string" && input.id !== "" ? input.id : (0, import_node_crypto28.randomUUID)();
@@ -31171,13 +31857,13 @@ var handleAgentTask = async (taskRequest, retryCount = 0) => {
       const onCompleted = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core71.eventBus.publish(callbackEvent, {
+          import_core72.eventBus.publish(callbackEvent, {
             success: true,
             state: evt.state
           });
           if (main_thread_id && main_tenant_id) {
             try {
-              const mainAgent = import_core71.agentInstanceManager.getAgent({
+              const mainAgent = import_core72.agentInstanceManager.getAgent({
                 assistant_id: main_assistant_id ?? assistant_id,
                 thread_id: main_thread_id,
                 tenant_id: main_tenant_id,
@@ -31210,7 +31896,7 @@ ${summary}`
       const onInterrupted = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core71.eventBus.publish(callbackEvent, {
+          import_core72.eventBus.publish(callbackEvent, {
             success: true,
             state: evt.state
           });
@@ -31219,7 +31905,7 @@ ${summary}`
       const onFailed = (evt) => {
         if (!belongsToMessage(evt)) return;
         settle(() => {
-          import_core71.eventBus.publish(callbackEvent, {
+          import_core72.eventBus.publish(callbackEvent, {
             success: false,
             error: evt?.error instanceof Error ? evt.error.message : typeof evt?.error === "string" ? evt.error : "Agent execution failed"
           });
@@ -31234,13 +31920,13 @@ ${summary}`
       agent.subscribe("message:interrupted", onInterrupted);
       agent.subscribe("message:failed", onFailed);
       try {
-        await agent.addMessage({ input: { ...input, id: messageId }, command, custom_run_config: runConfig }, import_core71.QueueMode.STEER);
+        await agent.addMessage({ input: { ...input, id: messageId }, command, custom_run_config: runConfig }, import_core72.QueueMode.STEER);
       } catch (error) {
         dispose();
         throw error;
       }
     } else {
-      await agent.addMessage({ input, command, custom_run_config: runConfig }, import_core71.QueueMode.STEER);
+      await agent.addMessage({ input, command, custom_run_config: runConfig }, import_core72.QueueMode.STEER);
     }
     return true;
   } catch (error) {
@@ -31259,7 +31945,7 @@ ${summary}`
       return handleAgentTask(taskRequest, nextRetryCount);
     }
     if (callback_event) {
-      import_core71.eventBus.publish(callback_event, {
+      import_core72.eventBus.publish(callback_event, {
         success: false,
         error: error instanceof Error ? error.message : String(error)
       });
@@ -31296,7 +31982,7 @@ var _AgentTaskConsumer = class _AgentTaskConsumer {
    * 初始化事件监听和队列轮询
    */
   initialize() {
-    import_core71.eventBus.subscribe(import_core71.AGENT_TASK_EVENT, this.trigger_agent_task.bind(this));
+    import_core72.eventBus.subscribe(import_core72.AGENT_TASK_EVENT, this.trigger_agent_task.bind(this));
     this.startPollingQueue();
     console.log("Agent\u4EFB\u52A1\u6D88\u8D39\u8005\u5DF2\u542F\u52A8\u5E76\u76D1\u542C\u4EFB\u52A1\u4E8B\u4EF6\u548C\u961F\u5217");
   }
@@ -31415,7 +32101,7 @@ var _AgentTaskConsumer = class _AgentTaskConsumer {
     handleAgentTask(taskRequest).catch((error) => {
       console.error("\u5904\u7406Agent\u4EFB\u52A1\u65F6\u53D1\u751F\u672A\u6355\u83B7\u7684\u9519\u8BEF:", error);
       if (taskRequest.callback_event) {
-        import_core71.eventBus.publish(taskRequest.callback_event, {
+        import_core72.eventBus.publish(taskRequest.callback_event, {
           success: false,
           error: error instanceof Error ? error.message : String(error)
         });
@@ -31464,13 +32150,13 @@ function createGracefulShutdown(options) {
 }
 
 // src/index.ts
-var import_core99 = require("@axiom-lattice/core");
+var import_core100 = require("@axiom-lattice/core");
 
 // src/channels/ChannelInfrastructure.ts
-var import_core73 = require("@axiom-lattice/core");
+var import_core74 = require("@axiom-lattice/core");
 
 // src/router/MessageRouter.ts
-var import_core72 = require("@axiom-lattice/core");
+var import_core73 = require("@axiom-lattice/core");
 var import_protocols33 = require("@axiom-lattice/protocols");
 var import_crypto11 = require("crypto");
 var BindingNotFoundError = class extends Error {
@@ -31486,6 +32172,7 @@ var ChannelInstallationNotFoundError = class extends Error {
   }
 };
 var DEFAULT_STREAM_PLACEHOLDER = "\u6B63\u5728\u5904\u7406\u2026";
+var DEFAULT_STREAM_FAILURE_TEXT = "\u5904\u7406\u672A\u5B8C\u6210\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002";
 function streamPlaceholderFor(installation) {
   const config = installation?.config;
   if (config !== null && typeof config === "object" && !Array.isArray(config)) {
@@ -31494,6 +32181,14 @@ function streamPlaceholderFor(installation) {
   }
   return DEFAULT_STREAM_PLACEHOLDER;
 }
+function streamFailureTextFor(installation) {
+  const config = installation?.config;
+  if (config !== null && typeof config === "object" && !Array.isArray(config)) {
+    const value = config.streamFailureText;
+    if (typeof value === "string") return value;
+  }
+  return DEFAULT_STREAM_FAILURE_TEXT;
+}
 var InvalidChannelInstallationError = class extends Error {
   constructor(message = "Channel installation is not valid for this message") {
     super(message);
@@ -31765,7 +32460,7 @@ var _MessageRouter = class _MessageRouter {
             channel: message.channel,
             adapterChannel: adapter.channel
           }, "Thread resolved by adapter strategy");
-          const threadStore = (0, import_core72.getStoreLattice)("default", "thread").store;
+          const threadStore = (0, import_core73.getStoreLattice)("default", "thread").store;
           try {
             await threadStore.createThread(
               tenantId,
@@ -31802,7 +32497,7 @@ var _MessageRouter = class _MessageRouter {
           }
         }
         if (!threadId) {
-          const threadStore = (0, import_core72.getStoreLattice)("default", "thread").store;
+          const threadStore = (0, import_core73.getStoreLattice)("default", "thread").store;
           const newThreadId = (0, import_crypto11.randomUUID)();
           console.log({
             event: "dispatch:thread:create",
@@ -31842,7 +32537,7 @@ var _MessageRouter = class _MessageRouter {
           senderId: message.sender.id,
           contentLength: message.content.text.length
         }, "Dispatching to agent");
-        const agent = import_core72.agentInstanceManager.getAgent({
+        const agent = import_core73.agentInstanceManager.getAgent({
           tenant_id: tenantId,
           assistant_id: agentId,
           thread_id: threadId,
@@ -31905,7 +32600,13 @@ var _MessageRouter = class _MessageRouter {
             if (cleaned || !event.consumedInputMessageIds.includes(inputMessageId)) return;
             cleanup();
             if (event.inputMessageId !== inputMessageId) return;
-            const delivery = replyAdapter.sendStreamChunk ? streamState.finished ? void 0 : replyAdapter.sendStreamChunk(replyTarget, { text: event.outputText, done: true }, installation) : replyAdapter.sendReply(replyTarget, {
+            if (replyAdapter.sendStreamChunk && streamState.finished) return;
+            if (replyAdapter.sendStreamChunk) streamState.finished = true;
+            const delivery = replyAdapter.sendStreamChunk ? replyAdapter.sendStreamChunk(
+              replyTarget,
+              { text: event.outputText, done: true, reason: "completed" },
+              installation
+            ) : replyAdapter.sendReply(replyTarget, {
               text: event.outputText,
               metadata: { inputMessageId, outputMessageId: event.outputMessageId }
             }, installation);
@@ -32029,17 +32730,34 @@ var _MessageRouter = class _MessageRouter {
     const send = adapter.sendStreamChunk;
     if (!send) return;
     let started = false;
+    let normalEnd = false;
     let accumulated = "";
     let lastSentText = "";
     let lastSentAt = 0;
     let sent = 0;
     const warn = (event, error) => console.warn({ event, inputMessageId, error: error instanceof Error ? error.message : String(error) });
-    const push = (text, done) => send.call(adapter, replyTarget, { text, done }, installation).catch((error) => warn("dispatch:stream:failed", error));
+    const push = (text, done, reason) => send.call(
+      adapter,
+      replyTarget,
+      reason ? { text, done, reason } : { text, done },
+      installation
+    ).catch((error) => warn("dispatch:stream:failed", error));
     const placeholder = streamPlaceholderFor(installation);
+    const closeWith = async (reason) => {
+      if (state.finished) return;
+      state.finished = true;
+      const text = accumulated || (reason === "completed" ? "" : streamFailureTextFor(installation) || placeholder);
+      await push(text, true, reason);
+    };
+    const timer = setTimeout(() => {
+      void closeWith("timeout");
+    }, _MessageRouter.STREAM_TIMEOUT_MS);
+    timer.unref?.();
     try {
       if (placeholder) await push(placeholder, false);
       const stream = agent.chunkStream(inputMessageId, []);
       for await (const chunk of stream) {
+        if (state.finished) break;
         if (!started) {
           if (chunk?.type === import_protocols33.MessageChunkTypes.HUMAN && chunk?.data?.id === inputMessageId) {
             started = true;
@@ -32047,12 +32765,19 @@ var _MessageRouter = class _MessageRouter {
           continue;
         }
         if (chunk?.type === import_protocols33.MessageChunkTypes.MESSAGE_COMPLETED || chunk?.type === import_protocols33.MessageChunkTypes.MESSAGE_FAILED || chunk?.type === import_protocols33.MessageChunkTypes.INTERRUPT) {
-          if (chunk.type !== import_protocols33.MessageChunkTypes.MESSAGE_COMPLETED) {
-            const text2 = accumulated || placeholder;
-            if (text2) {
-              await push(text2, true);
-              state.finished = true;
-            }
+          if (chunk.type === import_protocols33.MessageChunkTypes.MESSAGE_COMPLETED) {
+            normalEnd = true;
+            const grace = setTimeout(
+              () => {
+                void closeWith("completed");
+              },
+              _MessageRouter.COMPLETION_GRACE_MS
+            );
+            grace.unref?.();
+          } else if (chunk.type === import_protocols33.MessageChunkTypes.MESSAGE_FAILED) {
+            await closeWith("failed");
+          } else {
+            await closeWith("interrupted");
           }
           break;
         }
@@ -32072,7 +32797,11 @@ var _MessageRouter = class _MessageRouter {
       }
     } catch (error) {
       warn("dispatch:stream:error", error);
+      await closeWith("failed");
+    } finally {
+      clearTimeout(timer);
     }
+    if (!normalEnd) await closeWith("failed");
   }
   /**
    * Projects a pending HITL interrupt into the room as an independent bot message.
@@ -32097,15 +32826,30 @@ var _MessageRouter = class _MessageRouter {
     }
   }
 };
-/** 流式中途刷新的节流间隔与上限（微信单会话 30 条/分钟，留余量）。 */
-_MessageRouter.STREAM_CHUNK_INTERVAL_MS = 800;
-_MessageRouter.MAX_STREAM_CHUNKS = 60;
+/**
+ * 流式中途刷新的节流间隔与上限。
+ *
+ * 企业微信单会话限制 30 条/分钟（含占位、收尾和卡片）。2500ms 约 24 次
+ * 刷新/分钟，再加最多 3 条生命周期消息仍留有余量。
+ */
+_MessageRouter.STREAM_CHUNK_INTERVAL_MS = 2500;
+_MessageRouter.MAX_STREAM_CHUNKS = 190;
+/** 流式回复的硬超时：企微要求 10 分钟内 `finish=true`，留 2 分钟余量。 */
+_MessageRouter.STREAM_TIMEOUT_MS = 8 * 6e4;
+/**
+ * `MESSAGE_COMPLETED` 后等待 `reply:ready` 的宽限。
+ *
+ * 正常完成通常由 `reply:ready` 用权威全文收尾；但最终 AI 消息为空时
+ * （例如模型只调用了 `wecom_card`、没有产出文字）不会触发 `reply:ready`，
+ * 这里兜底自行收尾，避免流挂住、卡片丢失。
+ */
+_MessageRouter.COMPLETION_GRACE_MS = 3e3;
 var MessageRouter = _MessageRouter;
 
 // src/channels/room/RoomChannelAdapter.ts
-var import_zod18 = require("zod");
+var import_zod19 = require("zod");
 var import_protocols34 = require("@axiom-lattice/protocols");
-var roomConfigSchema = import_zod18.z.object({}).strict();
+var roomConfigSchema = import_zod19.z.object({}).strict();
 function createRoomChannelAdapter(writer) {
   return {
     channel: "room",
@@ -32202,7 +32946,7 @@ function createChannelInfrastructure(deps) {
       onMessageCommitted: deps.onMessageCommitted ?? (deps.realtime ? (message) => deps.realtime?.messageCreated(message) : void 0),
       onCallbackFailure: (event) => deps.warn("project-room:message-commit-callback-failed", event)
     };
-    deps.adapterRegistry.register(createRoomChannelAdapter(new import_core73.RoomAgentMessageService(writerDeps)));
+    deps.adapterRegistry.register(createRoomChannelAdapter(new import_core74.RoomAgentMessageService(writerDeps)));
   } catch (error) {
     deps.warn("Room channel unavailable", { error: error instanceof Error ? error.message : String(error) });
   }
@@ -32226,11 +32970,11 @@ async function prepareProjectTaskRuntime(runtime, log2) {
 }
 
 // src/services/plugins/PluginDeploymentRuntimeStartup.ts
-var import_core76 = require("@axiom-lattice/core");
+var import_core77 = require("@axiom-lattice/core");
 
 // src/services/plugins/PluginDeploymentService.ts
 var import_node_crypto30 = require("crypto");
-var import_core75 = require("@axiom-lattice/core");
+var import_core76 = require("@axiom-lattice/core");
 
 // src/services/plugins/pluginDeploymentNaming.ts
 var import_node_crypto29 = require("crypto");
@@ -32248,7 +32992,7 @@ function pluginSandboxName(tenantId, pluginType) {
 }
 
 // src/services/plugins/PluginDeploymentService.ts
-var PLUGIN_HOST_SERVER_PATH = `${import_core75.PLUGIN_HOST_DIR}/server.js`;
+var PLUGIN_HOST_SERVER_PATH = `${import_core76.PLUGIN_HOST_DIR}/server.js`;
 var DEFAULT_PLUGIN_IDLE_TIMEOUT_MS = 15 * 60 * 1e3;
 var DEFAULT_PLUGIN_HEALTH_TIMEOUT_MS = 3e4;
 var DEFAULT_PLUGIN_HEALTH_POLL_INTERVAL_MS = 500;
@@ -32267,7 +33011,7 @@ var PluginDeploymentError = class extends Error {
     this.code = code;
   }
 };
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function buildBootstrapEntrypoint(pluginType) {
@@ -32287,7 +33031,7 @@ var PluginDeploymentService = class {
     this.catalog = deps.catalog;
     this.installPluginHost = deps.installPluginHost;
     this.lease = deps.lease;
-    this.registry = deps.registry ?? new import_core75.PluginDeploymentRuntimeRegistry({ now: deps.clock ?? Date.now });
+    this.registry = deps.registry ?? new import_core76.PluginDeploymentRuntimeRegistry({ now: deps.clock ?? Date.now });
     this.now = deps.clock ?? Date.now;
     this.logger = deps.logger ?? { info: () => void 0 };
     this.limits = deps.limits ?? {};
@@ -32821,7 +33565,7 @@ var PluginDeploymentService = class {
         return { ok: false, error: `health responded with HTTP ${response.status}` };
       }
       const body = await response.json().catch(() => void 0);
-      if (isRecord4(body) && body.ok === true) {
+      if (isRecord5(body) && body.ok === true) {
         return { ok: true };
       }
       return { ok: false, error: "health returned an invalid envelope" };
@@ -33004,7 +33748,7 @@ function startPluginDeploymentRuntime(options) {
     );
     return { reconcile: Promise.resolve(), dispose: async () => void 0 };
   }
-  const register = options.register ?? ((service3) => (0, import_core76.setPluginDeploymentService)(service3));
+  const register = options.register ?? ((service3) => (0, import_core77.setPluginDeploymentService)(service3));
   const setIntervalFn = options.setIntervalFn ?? setInterval;
   const clearIntervalFn = options.clearIntervalFn ?? clearInterval;
   const watchdogIntervalMs = options.watchdogIntervalMs ?? DEFAULT_PLUGIN_WATCHDOG_INTERVAL_MS;
@@ -33287,11 +34031,11 @@ var DEFAULT_LOGGER_CONFIG = {
 var loggerLattice = initializeLogger(DEFAULT_LOGGER_CONFIG);
 var logger8 = loggerLattice.client;
 function initializeLogger(config) {
-  if (import_core99.loggerLatticeManager.hasLattice("default")) {
-    import_core99.loggerLatticeManager.removeLattice("default");
+  if (import_core100.loggerLatticeManager.hasLattice("default")) {
+    import_core100.loggerLatticeManager.removeLattice("default");
   }
-  (0, import_core99.registerLoggerLattice)("default", config);
-  return (0, import_core99.getLoggerLattice)("default");
+  (0, import_core100.registerLoggerLattice)("default", config);
+  return (0, import_core100.getLoggerLattice)("default");
 }
 var app = (0, import_fastify.default)({
   logger: false,
@@ -33389,7 +34133,7 @@ app.setErrorHandler((error, request, reply) => {
 var shutdownHandlersInstalled = false;
 function getConfiguredSandboxProvider() {
   const sandboxProviderType = process.env.SANDBOX_PROVIDER_TYPE || "microsandbox-remote";
-  return (0, import_core99.createSandboxProvider)({
+  return (0, import_core100.createSandboxProvider)({
     type: sandboxProviderType,
     remoteBaseURL: process.env.SANDBOX_BASE_URL,
     microsandboxServiceBaseURL: process.env.MICROSANDBOX_SERVICE_BASE_URL,
@@ -33405,7 +34149,7 @@ function getConfiguredSandboxProvider() {
 }
 async function restoreMcpConnections() {
   try {
-    const storeLattice = (0, import_core99.getStoreLattice)("default", "mcp");
+    const storeLattice = (0, import_core100.getStoreLattice)("default", "mcp");
     const store2 = storeLattice.store;
     if (!store2) {
       logger8.info("MCP store not configured, skipping connection restoration");
@@ -33418,8 +34162,8 @@ async function restoreMcpConnections() {
     logger8.info(`Restoring ${configs.length} MCP server connections...`);
     const deps = {
       store: store2,
-      manager: import_core99.mcpManager,
-      convertToConnection: import_core99.convertToConnection
+      manager: import_core100.mcpManager,
+      convertToConnection: import_core100.convertToConnection
     };
     const results = await Promise.allSettled(
       configs.map(
@@ -33460,9 +34204,9 @@ var start = async (config) => {
     let projectRoomRealtimeRuntime;
     if (projectRoomRealtimeMode === "single-gateway") {
       projectRoomRealtimeRuntime = createProjectRoomRealtimeRuntime({
-        tasks: (0, import_core99.getStoreLattice)("default", "task").store,
-        rooms: (0, import_core99.getStoreLattice)("default", "projectRoom").store,
-        memberships: (0, import_core99.getStoreLattice)("default", "projectBotMembership").store,
+        tasks: (0, import_core100.getStoreLattice)("default", "task").store,
+        rooms: (0, import_core100.getStoreLattice)("default", "projectRoom").store,
+        memberships: (0, import_core100.getStoreLattice)("default", "projectBotMembership").store,
         log: { warn: (message, context) => logger8.warn(message, context) }
       });
     }
@@ -33470,13 +34214,14 @@ var start = async (config) => {
     const adapterRegistry = new ChannelAdapterRegistry();
     adapterRegistry.register(larkChannelAdapter);
     adapterRegistry.register(wecomChannelAdapter);
+    registerWecomCardTool();
     const { wechatChannelAdapter: wechatChannelAdapter2 } = await Promise.resolve().then(() => (init_WechatChannelAdapter(), WechatChannelAdapter_exports));
     adapterRegistry.register(wechatChannelAdapter2);
     try {
       const infrastructure = createChannelInfrastructure({
         adapterRegistry,
-        getStore: ((kind) => (0, import_core99.getStoreLattice)("default", kind).store),
-        trustedDispatcher: (0, import_core99.createTrustedAgentMessageDispatcher)((scope) => import_core99.agentInstanceManager.getAgent(scope)),
+        getStore: ((kind) => (0, import_core100.getStoreLattice)("default", kind).store),
+        trustedDispatcher: (0, import_core100.createTrustedAgentMessageDispatcher)((scope) => import_core100.agentInstanceManager.getAgent(scope)),
         middlewares: [
           createDeduplicationMiddleware(),
           createRateLimitMiddleware(),
@@ -33487,7 +34232,7 @@ var start = async (config) => {
       });
       const bindingStore = infrastructure.bindingRegistry;
       const installationStore = infrastructure.installationStore;
-      (0, import_core98.setBindingRegistry)(bindingStore);
+      (0, import_core99.setBindingRegistry)(bindingStore);
       const router = infrastructure.router;
       app.addHook("onClose", async () => router.dispose());
       channelDeps = {
@@ -33503,10 +34248,10 @@ var start = async (config) => {
         error: err instanceof Error ? err.message : String(err)
       });
     }
-    (0, import_core98.setEvalRunService)(evalRunner);
+    (0, import_core99.setEvalRunService)(evalRunner);
     try {
-      const menuStore = (0, import_core99.getStoreLattice)("default", "menu").store;
-      (0, import_core98.setMenuRegistry)(menuStore);
+      const menuStore = (0, import_core100.getStoreLattice)("default", "menu").store;
+      (0, import_core99.setMenuRegistry)(menuStore);
       logger8.info("Menu registry initialized");
     } catch {
     }
@@ -33523,10 +34268,10 @@ var start = async (config) => {
       const { A2AAuthService: A2AAuthService2, parseEnvKeys: parseEnvKeys2 } = await Promise.resolve().then(() => (init_A2AAuthService(), A2AAuthService_exports));
       const { registerA2AStandardRoutes: registerA2AStandardRoutes2 } = await Promise.resolve().then(() => (init_a2a_standard(), a2a_standard_exports));
       const a2a = await Promise.resolve().then(() => (init_a2a(), a2a_exports));
-      const a2aKeyStore = (0, import_core99.getStoreLattice)("default", "a2aApiKey").store;
-      const assistantStore = (0, import_core99.getStoreLattice)("default", "assistant").store;
-      const projectStore = (0, import_core99.getStoreLattice)("default", "project").store;
-      const taskStore = (0, import_core99.getStoreLattice)("default", "task").store;
+      const a2aKeyStore = (0, import_core100.getStoreLattice)("default", "a2aApiKey").store;
+      const assistantStore = (0, import_core100.getStoreLattice)("default", "assistant").store;
+      const projectStore = (0, import_core100.getStoreLattice)("default", "project").store;
+      const taskStore = (0, import_core100.getStoreLattice)("default", "task").store;
       const authService = new A2AAuthService2({
         keyStore: a2aKeyStore,
         assistantStore,
@@ -33566,8 +34311,8 @@ var start = async (config) => {
       const { CollectionService: CollectionService2 } = await Promise.resolve().then(() => (init_collection_service(), collection_service_exports));
       openLattice2.register(createKbProvider2(new CollectionService2()));
       openLattice2.register(createOpenSandboxProvider2());
-      const threadStore = (0, import_core99.getStoreLattice)("default", "thread").store;
-      const assistantStore = (0, import_core99.getStoreLattice)("default", "assistant").store;
+      const threadStore = (0, import_core100.getStoreLattice)("default", "thread").store;
+      const assistantStore = (0, import_core100.getStoreLattice)("default", "assistant").store;
       openLattice2.register(
         createAgentProvider2({
           threadStore,
@@ -33612,15 +34357,15 @@ var start = async (config) => {
         error: err instanceof Error ? err.message : String(err)
       });
     }
-    if (!import_core99.sandboxLatticeManager.hasLattice("default")) {
-      import_core99.sandboxLatticeManager.registerLattice("default", getConfiguredSandboxProvider());
+    if (!import_core100.sandboxLatticeManager.hasLattice("default")) {
+      import_core100.sandboxLatticeManager.registerLattice("default", getConfiguredSandboxProvider());
       logger8.info("Registered sandbox manager from env configuration");
     }
     if (isPluginDeploymentRuntimeEnabled()) {
       try {
-        const pluginDeploymentStore = (0, import_core99.getStoreLattice)("default", "pluginDeployment").store;
-        const tenantStore = (0, import_core99.getStoreLattice)("default", "tenant").store;
-        const leaseStore2 = (0, import_core99.getStoreLattice)("default", "lease").store;
+        const pluginDeploymentStore = (0, import_core100.getStoreLattice)("default", "pluginDeployment").store;
+        const tenantStore = (0, import_core100.getStoreLattice)("default", "tenant").store;
+        const leaseStore2 = (0, import_core100.getStoreLattice)("default", "lease").store;
         const listAllDeployments = async () => {
           const tenants = await tenantStore.getAllTenants();
           const lists = await Promise.all(
@@ -33633,9 +34378,9 @@ var start = async (config) => {
         const pluginDeploymentRuntime = startPluginDeploymentRuntime({
           wiring: {
             store: pluginDeploymentStore,
-            sandboxManager: (0, import_core99.getSandBoxManager)(),
-            catalog: (0, import_core99.getSandboxPluginCatalog)(),
-            installPluginHost: import_core99.installPluginHost,
+            sandboxManager: (0, import_core100.getSandBoxManager)(),
+            catalog: (0, import_core100.getSandboxPluginCatalog)(),
+            installPluginHost: import_core100.installPluginHost,
             limits: readPluginDeploymentLimits(),
             serviceKey: process.env.MICROSANDBOX_API_KEY,
             listAllDeployments,
@@ -33647,7 +34392,7 @@ var start = async (config) => {
             }
           },
           lease: leaseStore2,
-          holder: (0, import_core99.getReplicaId)(),
+          holder: (0, import_core100.getReplicaId)(),
           logger: logger8
         });
         app.addHook("onClose", async () => {
@@ -33662,11 +34407,11 @@ var start = async (config) => {
     }
     try {
       const { ResourceController: ResourceController2 } = await Promise.resolve().then(() => (init_resources(), resources_exports));
-      const sharedResourceStore = (0, import_core99.getStoreLattice)("default", "sharedResource").store;
-      const cache2 = new import_core99.TokenCache();
+      const sharedResourceStore = (0, import_core100.getStoreLattice)("default", "sharedResource").store;
+      const cache2 = new import_core100.TokenCache();
       const resourceController = new ResourceController2({
         store: sharedResourceStore,
-        sandboxManager: import_core99.sandboxLatticeManager,
+        sandboxManager: import_core100.sandboxLatticeManager,
         cache: cache2,
         logger: logger8
       });
@@ -33679,13 +34424,13 @@ var start = async (config) => {
     }
     if (channelDeps && process.env.CHANNELS_ENABLED !== "false") {
       try {
-        const channelLeader = new import_core99.ChannelConnectionLeader({
-          leaseStore: (0, import_core99.getStoreLattice)("default", "lease").store,
-          owner: (0, import_core99.getReplicaId)(),
-          connect: () => (0, import_core99.connectAllChannels)((channel) => adapterRegistry.get(channel), {
+        const channelLeader = new import_core100.ChannelConnectionLeader({
+          leaseStore: (0, import_core100.getStoreLattice)("default", "lease").store,
+          owner: (0, import_core100.getReplicaId)(),
+          connect: () => (0, import_core100.connectAllChannels)((channel) => adapterRegistry.get(channel), {
             deps: { router: channelDeps.router }
           }),
-          disconnect: () => (0, import_core99.disconnectAllChannels)((channel) => adapterRegistry.get(channel)),
+          disconnect: () => (0, import_core100.disconnectAllChannels)((channel) => adapterRegistry.get(channel)),
           log: { warn: (message, context) => logger8.warn(message, context) }
         });
         app.addHook("onClose", async () => {
@@ -33699,45 +34444,52 @@ var start = async (config) => {
       }
     }
     const target_port = config?.port || Number(process.env.PORT) || 4001;
-    (0, import_core99.configureCoordinationLeaseStore)((0, import_core99.getStoreLattice)("default", "lease").store);
-    const outboxStore = (0, import_core99.getStoreLattice)("default", "outbox").store;
-    import_core99.taskLifecycleNotifier.setOutbox(outboxStore);
-    import_core99.projectTaskAdmissionNotifier.setOutbox(outboxStore);
-    (0, import_core99.configurePluginCatalogSync)({ outbox: outboxStore, owner: (0, import_core99.getReplicaId)() });
+    (0, import_core100.configureCoordinationLeaseStore)((0, import_core100.getStoreLattice)("default", "lease").store);
+    const outboxStore = (0, import_core100.getStoreLattice)("default", "outbox").store;
+    import_core100.taskLifecycleNotifier.setOutbox(outboxStore);
+    import_core100.projectTaskAdmissionNotifier.setOutbox(outboxStore);
+    (0, import_core100.configurePluginCatalogSync)({ outbox: outboxStore, owner: (0, import_core100.getReplicaId)() });
+    (0, import_core100.configureCollectionSync)({ outbox: outboxStore, owner: (0, import_core100.getReplicaId)() });
     bridgeAssistantEvents(
-      (event, cb) => import_core99.eventBus.subscribe(event, cb),
+      (event, cb) => import_core100.eventBus.subscribe(event, cb),
       outboxStore,
-      (0, import_core99.getReplicaId)()
+      (0, import_core100.getReplicaId)()
     );
     if (projectRoomRealtimeRuntime) {
       projectRoomRealtimeRuntime.broker.setBroadcastHook((scope, serialized, sourceKey) => {
-        void publishRoomEvent(outboxStore, (0, import_core99.getReplicaId)(), scope, serialized, sourceKey);
+        void publishRoomEvent(outboxStore, (0, import_core100.getReplicaId)(), scope, serialized, sourceKey);
       });
     }
-    const outboxPoller = new import_core99.OutboxPoller({
+    const outboxPoller = new import_core100.OutboxPoller({
       store: outboxStore,
-      owner: (0, import_core99.getReplicaId)(),
+      owner: (0, import_core100.getReplicaId)(),
       handlers: {
-        "task-lifecycle": (payload) => import_core99.taskLifecycleNotifier.deliverFromOutbox(payload),
-        "project-task-admission": (payload) => import_core99.projectTaskAdmissionNotifier.deliverFromOutbox(payload),
+        "task-lifecycle": (payload) => import_core100.taskLifecycleNotifier.deliverFromOutbox(payload),
+        "project-task-admission": (payload) => import_core100.projectTaskAdmissionNotifier.deliverFromOutbox(payload),
         [ROOM_EVENT_TOPIC]: async (payload) => {
           if (projectRoomRealtimeRuntime) ingestRoomEvent(payload, projectRoomRealtimeRuntime.broker);
         },
         "assistant-changed": (payload) => handleAssistantChanged(payload, async (tenantId) => {
-          await import_core99.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId);
+          await import_core100.agentLatticeManager.initializeStoredAssistantsForTenant(tenantId);
           invalidateAgentReflectionCache(tenantId);
           invalidatePluginReflectionCache(tenantId);
         }),
         [A2A_KEY_CHANGED_TOPIC]: (payload) => handleA2AKeyChanged(payload, () => refreshStoreKeyMap()),
         [MCP_CONFIG_CHANGED_TOPIC]: (payload) => reconcileMcpConfigChange(payload, {
-          store: (0, import_core99.getStoreLattice)("default", "mcp").store,
-          manager: import_core99.mcpManager,
-          convertToConnection: import_core99.convertToConnection
+          store: (0, import_core100.getStoreLattice)("default", "mcp").store,
+          manager: import_core100.mcpManager,
+          convertToConnection: import_core100.convertToConnection
         }),
-        [import_core99.PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
+        [import_core100.COLLECTION_CHANGED_TOPIC]: async (payload) => {
+          const tenantId = payload?.tenantId;
+          if (typeof tenantId === "string" && tenantId.length > 0) {
+            import_core100.vectorStoreLatticeManager.clearTenantVectorStores(tenantId);
+          }
+        },
+        [import_core100.PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
           const tenantId = payload?.tenantId;
           if (typeof tenantId === "string" && tenantId.length > 0) {
-            (0, import_core99.getSandboxPluginCatalog)().invalidate(tenantId);
+            (0, import_core100.getSandboxPluginCatalog)().invalidate(tenantId);
             invalidatePluginReflectionCache(tenantId);
             invalidateAgentReflectionCache(tenantId);
             await getMcpUiResourceResolver()?.invalidateTenantPlugins(tenantId);
@@ -33756,7 +34508,7 @@ var start = async (config) => {
     } catch (err) {
       logger8.warn("Outbox poller failed to start", { error: err instanceof Error ? err.message : String(err) });
     }
-    const leaseStore = (0, import_core99.getStoreLattice)("default", "lease").store;
+    const leaseStore = (0, import_core100.getStoreLattice)("default", "lease").store;
     if (leaseStore.constructor?.name === "InMemoryLeaseStore") {
       logger8.warn(
         "Startup recovery leader gate uses a non-distributed lease store (per-process only); configure a shared 'lease' store for multi-replica deployments",
@@ -33764,7 +34516,7 @@ var start = async (config) => {
       );
     }
     warnMultiReplicaReadiness(logger8);
-    const startup = await (0, import_core99.runAsLeader)(leaseStore, "startup-recovery", async () => {
+    const startup = await (0, import_core100.runAsLeader)(leaseStore, "startup-recovery", async () => {
       if (routes.projectTaskRuntime) {
         await prepareProjectTaskRuntime(routes.projectTaskRuntime, logger8);
       }
@@ -33773,9 +34525,9 @@ var start = async (config) => {
           const { createOrphanRecoveryRuntime: createOrphanRecoveryRuntime2 } = await Promise.resolve().then(() => (init_OrphanRecoveryRuntime(), OrphanRecoveryRuntime_exports));
           const { createRecoveryCallerDeps: createRecoveryCallerDeps2 } = await Promise.resolve().then(() => (init_RecoveryCallerDeps(), RecoveryCallerDeps_exports));
           const runtime = createOrphanRecoveryRuntime2({
-            taskStore: (0, import_core99.getStoreLattice)("default", "task").store,
-            workItemStore: (0, import_core99.getStoreLattice)("default", "taskWorkItem").store,
-            tenantStore: (0, import_core99.getStoreLattice)("default", "tenant").store,
+            taskStore: (0, import_core100.getStoreLattice)("default", "task").store,
+            workItemStore: (0, import_core100.getStoreLattice)("default", "taskWorkItem").store,
+            tenantStore: (0, import_core100.getStoreLattice)("default", "tenant").store,
             ...createRecoveryCallerDeps2(),
             log: logger8
           });
@@ -33784,9 +34536,9 @@ var start = async (config) => {
           logger8.warn("Task orphan recovery failed", { error: err instanceof Error ? err.message : String(err) });
         }
       }
-      if (import_core99.scheduleLatticeManager.hasLattice("default")) {
+      if (import_core100.scheduleLatticeManager.hasLattice("default")) {
         try {
-          const restored = await import_core99.scheduleLatticeManager.getScheduleLattice("default").restore();
+          const restored = await import_core100.scheduleLatticeManager.getScheduleLattice("default").restore();
           logger8.info("Scheduled tasks restored", { phase: "startup_recovery", restored });
         } catch (err) {
           logger8.warn("Scheduled task restore failed", {
@@ -33829,7 +34581,7 @@ var start = async (config) => {
         steps: [
           async () => {
             await Promise.all(
-              import_core99.agentInstanceManager.getAllAgents().map((agent) => agent.abort().catch(() => void 0))
+              import_core100.agentInstanceManager.getAllAgents().map((agent) => agent.abort().catch(() => void 0))
             );
           },
           () => agentTaskConsumer?.stopPollingQueue(),