@axiom-lattice/gateway 8.2.0 → 8.4.0

package/dist/index.mjs

@@ -1,12 +1,19 @@
 import {
-  invalidateAgentReflectionCache,
-  invalidatePluginReflectionCache
-} from "./chunk-GL7RV5L3.mjs";
+  invalidateAgentReflectionCache
+} from "./chunk-YR32MWEJ.mjs";
 import {
   getContentTypeFromFilename,
   getFilenameFromPath,
   sendBufferWithRange
 } from "./chunk-EMYRCJOI.mjs";
+import {
+  createRecoveryCallerDeps
+} from "./chunk-NOXGKYUV.mjs";
+import {
+  Logger,
+  getQrCode,
+  getQrCodeStatus
+} from "./chunk-6CUQGDJI.mjs";
 import {
   PathOutsideRootError,
   ProjectFileValidationError,
@@ -28,9 +35,12 @@ import {
   wakeRunTaskQueue
 } from "./chunk-2SR4F3ZD.mjs";
 import {
-  PluginToolScopeError,
-  invokePluginTool
-} from "./chunk-XUWD4VKY.mjs";
+  claimDedupKey,
+  createRateLimitService,
+  getRateLimitService,
+  incrementRateCounter,
+  setRateLimitService
+} from "./chunk-A7YNAU5L.mjs";
 import {
   buildPreviewTokenScript
 } from "./chunk-7CG57LEF.mjs";
@@ -38,16 +48,24 @@ import "./chunk-EXPERMZR.mjs";
 import {
   CollectionService
 } from "./chunk-PWHUWFXL.mjs";
+import {
+  getMcpUiResourceResolver,
+  listTenantPlugins,
+  registerMcpAppRoutes,
+  resolveTenantPluginByType
+} from "./chunk-T2HIWZGP.mjs";
+import "./chunk-XUWD4VKY.mjs";
 import {
   A2A_KEY_CHANGED_TOPIC,
   handleA2AKeyChanged,
   publishA2AKeyChanged,
   refreshStoreKeyMap
-} from "./chunk-HYYLYIMH.mjs";
+} from "./chunk-OBODBHIS.mjs";
 import {
   A2AAuthService,
   parseEnvKeys
-} from "./chunk-GPHOYR3X.mjs";
+} from "./chunk-LCM4OQTI.mjs";
+import "./chunk-MFWTGNQR.mjs";
 import {
   createOrphanRecoveryRuntime,
   createTaskRunLiveness,
@@ -59,14 +77,6 @@ import {
   resolveTopCaller,
   runOrphanRecovery
 } from "./chunk-NZXKECNN.mjs";
-import {
-  createRecoveryCallerDeps
-} from "./chunk-NOXGKYUV.mjs";
-import {
-  Logger,
-  getQrCode,
-  getQrCodeStatus
-} from "./chunk-6CUQGDJI.mjs";
 import "./chunk-NFEGQTCC.mjs";
 
 // src/index.ts
@@ -10003,14 +10013,6 @@ async function importApply(request, reply) {
 
 // src/controllers/middleware-types.ts
 import { serializePluginMeta } from "@axiom-lattice/core";
-
-// src/services/plugins/tenantPluginResolver.ts
-import { listTenantPlugins } from "@axiom-lattice/core";
-async function resolveTenantPluginByType(tenantId, type) {
-  return (await listTenantPlugins(tenantId)).find((p) => p.meta.type === type);
-}
-
-// src/controllers/middleware-types.ts
 async function collectMiddlewareMetas(tenantId) {
   return (await listTenantPlugins(tenantId)).map(serializePluginMeta);
 }
@@ -12018,15 +12020,25 @@ var ProjectAccessService = class {
       input.projectId,
       input.userId
     );
-    if (membership?.status === "active") {
+    if (project.kind === "personal") {
+      if (!this.isActiveMembership(membership, input)) this.accessDenied();
       this.requireCapability(membership, input.capability);
       return { project, membership };
     }
+    if (this.isActiveMembership(membership, input) && this.hasCapability(membership, input.capability)) {
+      return { project, membership };
+    }
+    const tenantAdmin = await this.tenantAdminMembership(project, input);
+    if (this.isActiveMembership(membership, input)) {
+      if (tenantAdmin) return { project, membership: tenantAdmin };
+      this.requireCapability(membership, input.capability);
+    }
     const memberships = await this.deps.membershipStore.list(input.tenantId, input.projectId);
-    if (memberships.length !== 0) this.accessDenied();
-    if (project.kind === "personal") this.accessDenied();
-    const tenantLink = await this.deps.userTenantLinkStore.getLink(input.userId, input.tenantId);
-    if (tenantLink?.role !== "owner" && tenantLink?.role !== "admin") this.accessDenied();
+    if (memberships.length !== 0) {
+      if (tenantAdmin) return { project, membership: tenantAdmin };
+      this.accessDenied();
+    }
+    if (!tenantAdmin) this.accessDenied();
     let claim;
     try {
       claim = await this.deps.membershipStore.createInitialOwner({
@@ -12069,9 +12081,19 @@ var ProjectAccessService = class {
       input.projectId,
       input.userId
     );
-    if (!membership || membership.tenantId !== input.tenantId || membership.projectId !== input.projectId || membership.userId !== input.userId || membership.status !== "active") this.accessDenied();
-    this.requireCapability(membership, input.capability);
-    return { project, membership };
+    const activeMembership = this.isActiveMembership(membership, input) ? membership : void 0;
+    if (project.kind === "personal") {
+      if (!activeMembership) this.accessDenied();
+      this.requireCapability(activeMembership, input.capability);
+      return { project, membership: activeMembership };
+    }
+    if (activeMembership && this.hasCapability(activeMembership, input.capability)) {
+      return { project, membership: activeMembership };
+    }
+    const tenantAdmin = await this.tenantAdminMembership(project, input);
+    if (tenantAdmin) return { project, membership: tenantAdmin };
+    if (activeMembership) this.requireCapability(activeMembership, input.capability);
+    this.accessDenied();
   }
   /**
    * Authorizes roster visibility for any active participant (owner/admin/member/viewer).
@@ -12093,6 +12115,9 @@ var ProjectAccessService = class {
       input.userId
     );
     if (membership?.status === "active") {
+      if (this.hasCapability(membership, input.capability)) return { project, membership };
+      const tenantAdmin = await this.tenantAdminMembership(project, input);
+      if (tenantAdmin) return { project, membership: tenantAdmin };
       this.requireCapability(membership, input.capability);
       return { project, membership };
     }
@@ -12107,6 +12132,9 @@ var ProjectAccessService = class {
       input.userId
     );
     if (membership?.status === "active") {
+      if (this.hasCapability(membership, input.capability)) return { project, membership };
+      const tenantAdmin = await this.tenantAdminMembership(project, input);
+      if (tenantAdmin) return { project, membership: tenantAdmin };
       this.requireCapability(membership, input.capability);
       return { project, membership };
     }
@@ -12158,8 +12186,29 @@ var ProjectAccessService = class {
       throw error;
     }
   }
+  hasCapability(membership, capability2) {
+    return allowedRoles[capability2].has(membership.role);
+  }
   requireCapability(membership, capability2) {
-    if (!allowedRoles[capability2].has(membership.role)) this.accessDenied();
+    if (!this.hasCapability(membership, capability2)) this.accessDenied();
+  }
+  async tenantAdminMembership(project, input) {
+    if (project.kind === "personal") return void 0;
+    const tenantLink = await this.deps.userTenantLinkStore.getLink(input.userId, input.tenantId);
+    if (tenantLink?.role !== "owner" && tenantLink?.role !== "admin") return void 0;
+    return {
+      id: `tenant-admin:${input.userId}`,
+      tenantId: input.tenantId,
+      projectId: project.id,
+      userId: input.userId,
+      role: "admin",
+      status: "active",
+      joinedAt: project.createdAt,
+      updatedAt: project.updatedAt
+    };
+  }
+  isActiveMembership(membership, input) {
+    return membership != null && membership.tenantId === input.tenantId && membership.projectId === input.projectId && membership.userId === input.userId && membership.status === "active";
   }
   accessDenied() {
     throw new ProjectCollaborationError("PROJECT_ACCESS_DENIED", 403, "Project access denied");
@@ -13679,562 +13728,6 @@ function registerMcpServerConfigRoutes(app2) {
   app2.post("/api/mcp-servers/test-tools", testMcpServerTools);
 }
 
-// src/routes/mcp-apps.ts
-import {
-  parseMcpUiRef
-} from "@axiom-lattice/protocols";
-import {
-  getSandboxPluginCatalog as getSandboxPluginCatalog2,
-  mcpManager as mcpManager2,
-  resolvePluginConnections,
-  verifyMcpUiScope
-} from "@axiom-lattice/core";
-
-// src/services/mcp-ui/UiResourceResolver.ts
-import { createHash as createHash3 } from "crypto";
-var DEFAULT_TTL_MS = 5 * 60 * 1e3;
-function publicFieldsOf(payload) {
-  return {
-    mimeType: payload.mimeType,
-    html: payload.html,
-    ...payload.csp !== void 0 ? { csp: payload.csp } : {},
-    ...payload.permissions !== void 0 ? { permissions: payload.permissions } : {},
-    ...payload.prefersBorder !== void 0 ? { prefersBorder: payload.prefersBorder } : {}
-  };
-}
-var UiResourceResolver = class {
-  constructor(deps) {
-    this.deps = deps;
-    this.inFlight = /* @__PURE__ */ new Map();
-  }
-  keyOf(ref) {
-    return ref.kind === "mcp" ? `mcp\0${ref.serverKey}\0${ref.resourceUri}` : `plugin\0${ref.pluginType}\0${ref.resource}`;
-  }
-  fullKey(tenantId, ref) {
-    return `${tenantId}\0${this.keyOf(ref)}`;
-  }
-  /**
-   * Resolve a UI resource for a tenant.
-   *
-   * @param tenantId Tenant scope.
-   * @param ref The fence ref.
-   * @returns Public UI resource payload (no cache metadata).
-   */
-  async resolve(tenantId, ref) {
-    const key = this.fullKey(tenantId, ref);
-    const ttl = this.deps.ttlMs ?? DEFAULT_TTL_MS;
-    const cached = await this.deps.store.get(key);
-    if (cached && Date.now() - cached.fetchedAt < ttl) return publicFieldsOf(cached);
-    const existing = this.inFlight.get(key);
-    if (existing) return existing;
-    const promise = this.fetchAndCache(tenantId, ref, key, cached);
-    this.inFlight.set(key, promise);
-    try {
-      return await promise;
-    } finally {
-      this.inFlight.delete(key);
-    }
-  }
-  /**
-   * Evict the cached entry for a tenant/ref.
-   *
-   * @param tenantId Tenant scope.
-   * @param ref The fence ref.
-   */
-  async invalidate(tenantId, ref) {
-    await this.deps.store.delete(this.fullKey(tenantId, ref));
-  }
-  /**
-   * Evict every cached plugin UI resource for a tenant.
-   *
-   * @param tenantId Tenant whose plugin UI resources to drop.
-   * @remarks Called when a tenant's plugin catalog changes so an edited
-   * `ui/*.html` is re-fetched instead of being served from the TTL cache
-   * (which is keyed by ref identity, not content).
-   */
-  async invalidateTenantPlugins(tenantId) {
-    await this.deps.store.deleteByPrefix(`${tenantId}\0plugin\0`);
-  }
-  async fetchAndCache(tenantId, ref, key, cached) {
-    try {
-      const fresh = ref.kind === "mcp" ? await this.deps.fetchMcp(tenantId, ref.serverKey, ref.resourceUri) : await this.deps.fetchPlugin(tenantId, ref.pluginType, ref.resource);
-      const entry = {
-        ...publicFieldsOf(fresh),
-        hash: createHash3("sha256").update(fresh.html).digest("hex"),
-        fetchedAt: Date.now()
-      };
-      await this.deps.store.set(key, entry);
-      return publicFieldsOf(fresh);
-    } catch (error) {
-      if (cached) return { ...publicFieldsOf(cached), stale: true };
-      throw error;
-    }
-  }
-};
-
-// src/services/mcp-ui/McpUiResourceCacheStore.ts
-var InMemoryMcpUiResourceCacheStore = class {
-  constructor() {
-    this.map = /* @__PURE__ */ new Map();
-  }
-  async get(key) {
-    return this.map.get(key);
-  }
-  async set(key, entry) {
-    this.map.set(key, entry);
-  }
-  async delete(key) {
-    this.map.delete(key);
-  }
-  async deleteByPrefix(prefix) {
-    for (const key of this.map.keys()) {
-      if (key.startsWith(prefix)) this.map.delete(key);
-    }
-  }
-};
-
-// src/services/mcp-ui/buildCsp.ts
-var DEFAULT_CSP = [
-  "default-src 'none'",
-  "script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'",
-  "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data:",
-  "media-src 'self' data:",
-  // Fonts are restricted to the document origin; declared `resourceDomains`
-  // are the only origins ever added (no `data:` — a base64-embedded font must
-  // be served from a declared origin).
-  "font-src 'self'",
-  "object-src 'none'",
-  "connect-src 'none'",
-  "frame-src 'none'",
-  "base-uri 'self'"
-].join("; ");
-var ORIGIN_PATTERN = /^(https?|wss?):\/\/(\*\.)?[^\s;,'"*]+$/;
-function declaredOrigins(domains) {
-  if (!Array.isArray(domains)) return [];
-  return domains.filter((domain) => typeof domain === "string" && ORIGIN_PATTERN.test(domain));
-}
-function buildCsp(csp) {
-  if (!csp) return DEFAULT_CSP;
-  const resourceOrigins = declaredOrigins(csp.resourceDomains);
-  const resource = resourceOrigins.join(" ");
-  const withResourceOrigins = (base) => resource ? `${base} ${resource}` : base;
-  const img = ["'self'", "data:", ...resourceOrigins].join(" ");
-  const connect = declaredOrigins(csp.connectDomains);
-  const frame = declaredOrigins(csp.frameDomains);
-  const baseUri = declaredOrigins(csp.baseUriDomains);
-  const parts = [
-    "default-src 'none'",
-    withResourceOrigins("script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'"),
-    withResourceOrigins("style-src 'self' 'unsafe-inline'"),
-    `img-src ${img}`,
-    `media-src ${["'self'", "data:", ...resourceOrigins].join(" ")}`,
-    withResourceOrigins("font-src 'self'"),
-    "object-src 'none'",
-    `connect-src ${connect.length ? connect.join(" ") : "'none'"}`,
-    `frame-src ${frame.length ? frame.join(" ") : "'none'"}`,
-    `base-uri ${baseUri.length ? baseUri.join(" ") : "'self'"}`
-  ];
-  return parts.join("; ");
-}
-
-// src/services/mcp-ui/sandboxPage.ts
-var DEFAULT_CSP_LITERAL = JSON.stringify(buildCsp(void 0));
-var SANDBOX_HTML = `<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>MCP App Sandbox</title>
-    <style>html, body { margin: 0; height: 100%; }</style>
-  </head>
-  <body>
-    <script>
-      (function () {
-        var HOST_READY = "ui/notifications/sandbox-proxy-ready";
-        var RESOURCE_READY = "ui/notifications/sandbox-resource-ready";
-        var CONTROL_PREFIX = "ui/notifications/sandbox-";
-        var DEFAULT_CSP = ${DEFAULT_CSP_LITERAL};
-
-        function withCsp(html, csp) {
-          var policy = typeof csp === "string" && csp.length > 0 ? csp : DEFAULT_CSP;
-          var escaped = policy.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
-          var meta = '<meta http-equiv="Content-Security-Policy" content="' + escaped + '">';
-          // Insert at the very start (after an optional doctype) so the parser
-          // places the meta in the implicit head. Never search for a literal
-          // <head>: a resource could hide a decoy inside a comment/string and
-          // slip its real head past the splice.
-          var doctype = /^\\s*<!doctype[^>]*>/i.exec(html);
-          if (doctype) {
-            return html.slice(0, doctype[0].length) + meta + html.slice(doctype[0].length);
-          }
-          return meta + html;
-        }
-
-        // Size reporter injected into every View document. The host renders the
-        // View inside an opaque-origin iframe it cannot measure, so auto-height
-        // only happens when the View posts ui/notifications/size-changed. Most
-        // hand-written plugin apps never do; this script makes every app report
-        // its own content size. It only measures and postMessages \u2014 it never
-        // mutates the app's DOM.
-        var SIZE_REPORTER = [
-          "(function(){",
-          "function send(){",
-          "try{",
-          "var d=document.documentElement,b=document.body;",
-          "var w=Math.ceil(Math.max(d?d.scrollWidth:0,b?b.scrollWidth:0));",
-          "var h=Math.ceil(Math.max(d?d.scrollHeight:0,b?b.scrollHeight:0));",
-          "window.parent.postMessage({jsonrpc:'2.0',method:'ui/notifications/size-changed',params:{width:w,height:h}},'*');",
-          "}catch(e){}",
-          "}",
-          "send();",
-          "window.addEventListener('load',send);",
-          "if(typeof ResizeObserver!=='undefined'){",
-          "var ro=new ResizeObserver(send);",
-          "ro.observe(document.documentElement);",
-          "if(document.body)ro.observe(document.body);",
-          "}else{window.addEventListener('resize',send);}",
-          "})();"
-        ].join("");
-
-        function withSizeReporter(html) {
-          // Split the closing tag so this template literal never contains a
-          // literal script terminator that would end the sandbox page's own
-          // script block during HTML parsing.
-          var tag = "<scr" + "ipt>" + SIZE_REPORTER + "<" + "/scr" + "ipt>";
-          var lower = html.toLowerCase();
-          var bodyEnd = lower.lastIndexOf("</body>");
-          if (bodyEnd >= 0) return html.slice(0, bodyEnd) + tag + html.slice(bodyEnd);
-          return html + tag;
-        }
-
-        var inner = null;
-
-        window.parent.postMessage({ jsonrpc: "2.0", method: HOST_READY, params: {} }, "*");
-
-        window.addEventListener("message", function (event) {
-          if (event.source !== window.parent) return;
-          var data = event.data;
-          if (!data || typeof data !== "object") return;
-
-          if (data.method === RESOURCE_READY) {
-            var params = data.params || {};
-            if (inner && inner.parentNode) inner.parentNode.removeChild(inner);
-            inner = document.createElement("iframe");
-            inner.setAttribute("sandbox", params.sandbox || "allow-scripts");
-            inner.setAttribute("srcdoc", withCsp(withSizeReporter(String(params.html || "")), params.csp));
-            inner.style.cssText = "width:100%;height:100%;border:0;display:block";
-            document.body.appendChild(inner);
-            return;
-          }
-
-          if (typeof data.method === "string" && data.method.indexOf(CONTROL_PREFIX) === 0) return;
-          if (inner && inner.contentWindow) inner.contentWindow.postMessage(data, "*");
-        });
-
-        window.addEventListener("message", function (event) {
-          if (inner && event.source === inner.contentWindow) {
-            var data = event.data;
-            if (data && typeof data === "object" && typeof data.method === "string"
-              && data.method.indexOf(CONTROL_PREFIX) === 0) return;
-            window.parent.postMessage(event.data, "*");
-          }
-        });
-      })();
-    </script>
-  </body>
-</html>
-`;
-
-// src/routes/mcp-apps.ts
-var SANDBOX_HTML_CONTENT_TYPE = "text/html; charset=utf-8";
-var PluginMethodNotSupportedError = class extends Error {
-  /**
-   * @param method - Unsupported JSON-RPC method.
-   */
-  constructor(method) {
-    super(`plugin backend does not support ${method}`);
-    this.name = "PluginMethodNotSupportedError";
-  }
-};
-var McpAppScopeError = class extends Error {
-  /**
-   * @param status - HTTP status to return.
-   * @param code - Stable machine-readable denial code.
-   */
-  constructor(status, code) {
-    super(code);
-    this.status = status;
-    this.code = code;
-    this.name = "McpAppScopeError";
-  }
-};
-function denyScope(status, code, detail) {
-  console.warn(JSON.stringify({ event: "mcp-apps:scope-denied", ...detail, code }));
-  return new McpAppScopeError(status, code);
-}
-var ALLOWED_METHODS = /* @__PURE__ */ new Set(["tools/call", "tools/list", "resources/read"]);
-function asRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
-}
-function makeMcpAppHandlers(deps) {
-  return {
-    /**
-     * Resolve the `mcp_app` UI resource for a parsed ref.
-     *
-     * @param tenantId Tenant scope.
-     * @param rawRef Untrusted ref payload.
-     * @returns The resource payload plus a ready-to-use `cspPolicy` string
-     * ({@link buildCsp}, always non-empty), or a 400/502 error envelope.
-     */
-    async resource(tenantId, rawRef) {
-      const ref = parseMcpUiRef(rawRef);
-      if (!ref) return { status: 400, body: { error: "INVALID_REF" } };
-      if (ref.kind === "plugin" && ref.pluginType === "") {
-        return { status: 400, body: { error: "INVALID_REF" } };
-      }
-      try {
-        const payload = await deps.resolveUiResource(tenantId, ref);
-        return { status: 200, body: { ...payload, cspPolicy: buildCsp(payload.csp) } };
-      } catch (error) {
-        console.warn(JSON.stringify({
-          event: "mcp-apps:resource-failed",
-          tenantId,
-          kind: ref.kind,
-          error: error instanceof Error ? error.message : String(error)
-        }));
-        return { status: 502, body: { error: "RESOURCE_UNAVAILABLE" } };
-      }
-    },
-    /**
-     * Proxy an allow-listed JSON-RPC method for a parsed ref.
-     *
-     * @param tenantId Tenant scope.
-     * @param rawRef Untrusted ref payload.
-     * @param method JSON-RPC method name.
-     * @param params JSON-RPC params.
-     * @param context Request-scoped run context forwarded to `tools/call`.
-     * @returns The backend result, or a 400/403/502 error envelope.
-     */
-    async rpc(tenantId, rawRef, method, params, context) {
-      const ref = parseMcpUiRef(rawRef);
-      if (!ref) return { status: 400, body: { error: "INVALID_REF" } };
-      if (!ALLOWED_METHODS.has(method)) return { status: 403, body: { error: "METHOD_NOT_ALLOWED" } };
-      try {
-        if (method === "tools/call") {
-          const name = typeof params.name === "string" ? params.name : "";
-          if (name === "") return { status: 400, body: { error: "INVALID_PARAMS" } };
-          if ("pluginType" in ref && ref.pluginType === "") {
-            return { status: 400, body: { error: "INVALID_REF" } };
-          }
-          return {
-            status: 200,
-            body: await deps.callTool(tenantId, ref, name, asRecord(params.arguments) ?? {}, context)
-          };
-        }
-        if (method === "resources/read") {
-          const uri = typeof params.uri === "string" ? params.uri : "";
-          if (uri === "") return { status: 400, body: { error: "INVALID_PARAMS" } };
-          return { status: 200, body: await deps.readResource(tenantId, ref, uri) };
-        }
-        return { status: 200, body: { tools: await deps.listTools(tenantId, ref) } };
-      } catch (error) {
-        if (error instanceof McpAppScopeError) {
-          return { status: error.status, body: { error: error.code } };
-        }
-        if (error instanceof PluginToolScopeError) {
-          return { status: 403, body: { error: "PLUGIN_TOOL_SCOPE" } };
-        }
-        if (error instanceof PluginMethodNotSupportedError) {
-          return { status: 403, body: { error: "PLUGIN_METHOD_UNSUPPORTED" } };
-        }
-        const context2 = { tenantId, kind: ref.kind, method };
-        if (method === "resources/read") context2.uri = typeof params.uri === "string" ? params.uri : "";
-        if (method === "tools/call") context2.name = typeof params.name === "string" ? params.name : "";
-        console.warn(JSON.stringify({
-          event: "mcp-apps:rpc-failed",
-          ...context2,
-          error: error instanceof Error ? error.message : String(error)
-        }));
-        return { status: 502, body: { error: "RPC_FAILED" } };
-      }
-    }
-  };
-}
-async function fetchPluginUiResource(backend, tenantId, pluginType, resource) {
-  const plugin = await backend.resolvePlugin(tenantId, pluginType);
-  if (!plugin) throw new Error(`plugin "${pluginType}" not found`);
-  const tool = (plugin.meta.tools ?? []).find((t2) => t2.ui?.resource === resource);
-  if (!tool?.ui) throw new Error(`plugin "${pluginType}" has no tool declaring ui resource "${resource}"`);
-  const inline = plugin.meta.uiResources?.[resource];
-  if (inline) {
-    return {
-      mimeType: inline.mimeType ?? "text/html;profile=mcp-app",
-      html: inline.html,
-      csp: inline.csp ?? tool.ui.csp,
-      permissions: tool.ui.permissions,
-      prefersBorder: tool.ui.prefersBorder
-    };
-  }
-  const html = await backend.catalog.readPluginFile(tenantId, pluginType, resource);
-  return {
-    mimeType: "text/html",
-    html,
-    csp: tool.ui.csp,
-    permissions: tool.ui.permissions,
-    prefersBorder: tool.ui.prefersBorder
-  };
-}
-async function callPluginTool(backend, tenantId, ref, name, args, context, deps) {
-  const scope = ref.scope ? (deps?.verifyScope ?? verifyMcpUiScope)(ref.scope) : null;
-  if (ref.scope && !scope) {
-    throw denyScope(403, "SCOPE_INVALID", {
-      tenantId,
-      pluginType: ref.pluginType,
-      tool: name
-    });
-  }
-  if (scope) {
-    const mismatched = scope.tid !== tenantId || scope.plugin !== ref.pluginType || scope.resource !== ref.resource;
-    if (mismatched) {
-      throw denyScope(403, "SCOPE_MISMATCH", {
-        tenantId,
-        pluginType: ref.pluginType,
-        tool: name,
-        jti: scope.jti,
-        threadId: scope.thid
-      });
-    }
-  }
-  const manifest = await backend.catalog.getValidatedManifest(tenantId, ref.pluginType);
-  const rawConnectionKey = args.connectionKey;
-  const explicit = typeof rawConnectionKey === "string" ? rawConnectionKey : void 0;
-  const scoped = scope?.ck;
-  const connectionRelevant = Boolean(manifest?.connection) || scoped !== void 0;
-  if (connectionRelevant && (explicit !== void 0 ? explicit !== scoped : rawConnectionKey !== void 0)) {
-    throw denyScope(403, "CONNECTION_NOT_ALLOWED", {
-      tenantId,
-      pluginType: ref.pluginType,
-      tool: name,
-      jti: scope?.jti,
-      threadId: scope?.thid
-    });
-  }
-  let connection;
-  let connectionKey;
-  if (scoped !== void 0) {
-    const resolveConnections = deps?.resolveConnections ?? resolvePluginConnections;
-    const resolved = await resolveConnections(
-      ref.pluginType,
-      { connections: [scoped] },
-      { tenantId }
-    );
-    if (resolved.length === 0) {
-      throw denyScope(403, "CONNECTION_NOT_ALLOWED", {
-        tenantId,
-        pluginType: ref.pluginType,
-        tool: name,
-        jti: scope?.jti,
-        threadId: scope?.thid
-      });
-    }
-    connection = resolved[0].config;
-    connectionKey = resolved[0].key;
-  }
-  if (manifest?.connection && !connectionKey) {
-    throw denyScope(409, "CONNECTION_REQUIRED", {
-      tenantId,
-      pluginType: ref.pluginType,
-      tool: name,
-      jti: scope?.jti,
-      threadId: scope?.thid
-    });
-  }
-  const identity = scope ? {
-    workspaceId: scope.wid,
-    projectId: scope.pid,
-    threadId: scope.thid,
-    assistantId: scope.aid
-  } : {
-    workspaceId: context?.workspaceId,
-    projectId: context?.projectId
-  };
-  return invokePluginTool(backend, tenantId, ref.pluginType, name, args, {
-    ...identity,
-    ...connection === void 0 ? {} : { connection }
-  });
-}
-function createDefaultPluginBackend() {
-  return {
-    resolvePlugin: (tenantId, type) => resolveTenantPluginByType(tenantId, type),
-    catalog: {
-      readPluginFile: (tenantId, pluginType, relPath) => getSandboxPluginCatalog2().readPluginFile(tenantId, pluginType, relPath),
-      getValidatedManifest: (tenantId, pluginType) => getSandboxPluginCatalog2().getValidatedManifest(tenantId, pluginType),
-      getExecutor: () => getSandboxPluginCatalog2().getExecutor()
-    }
-  };
-}
-var uiResourceResolverSingleton;
-function getMcpUiResourceResolver() {
-  return uiResourceResolverSingleton;
-}
-function resolveMcpAppDeps(pluginBackend = createDefaultPluginBackend()) {
-  const uiResourceResolver = new UiResourceResolver({
-    store: new InMemoryMcpUiResourceCacheStore(),
-    fetchMcp: (tenantId, serverKey, resourceUri) => mcpManager2.readUiResource(tenantId, serverKey, resourceUri),
-    fetchPlugin: (tenantId, pluginType, resource) => fetchPluginUiResource(pluginBackend, tenantId, pluginType, resource)
-  });
-  uiResourceResolverSingleton = uiResourceResolver;
-  return {
-    resolveUiResource: (tenantId, ref) => uiResourceResolver.resolve(tenantId, ref),
-    callTool: (tenantId, ref, name, args, context) => ref.kind === "mcp" ? mcpManager2.callServerTool(tenantId, ref.serverKey, name, args) : callPluginTool(pluginBackend, tenantId, ref, name, args, context),
-    // Plugin refs reach these only after `tools/call`; the handler treats the
-    // rejection as an unsupported method (403). The branches are live because
-    // the pure handler deliberately delegates method policy to the deps.
-    readResource: (tenantId, ref, uri) => ref.kind === "mcp" ? mcpManager2.readServerResource(tenantId, ref.serverKey, uri) : Promise.reject(new PluginMethodNotSupportedError("resources/read")),
-    listTools: (tenantId, ref) => ref.kind === "mcp" ? mcpManager2.getAvailableTools(tenantId, ref.serverKey) : Promise.reject(new PluginMethodNotSupportedError("tools/list"))
-  };
-}
-function firstHeader(request, name) {
-  const header2 = request.headers[name];
-  return Array.isArray(header2) ? header2[0] : header2;
-}
-function tenantOf(request) {
-  const user = request.user;
-  return user?.tenantId ?? firstHeader(request, "x-tenant-id") ?? "default";
-}
-function runContextOf(request) {
-  return {
-    tenantId: tenantOf(request),
-    workspaceId: firstHeader(request, "x-workspace-id"),
-    projectId: firstHeader(request, "x-project-id")
-  };
-}
-function registerMcpAppRoutes(fastify2, deps = resolveMcpAppDeps()) {
-  const handlers = makeMcpAppHandlers(deps);
-  fastify2.get("/mcp-apps/sandbox.html", async (_request, reply) => {
-    return reply.header("content-type", SANDBOX_HTML_CONTENT_TYPE).header("x-content-type-options", "nosniff").header("cache-control", "no-store").send(SANDBOX_HTML);
-  });
-  fastify2.post("/api/mcp-apps/resource", async (request, reply) => {
-    const body = asRecord(request.body) ?? {};
-    const result = await handlers.resource(tenantOf(request), body.ref);
-    return reply.code(result.status).send(result.body);
-  });
-  fastify2.post("/api/mcp-apps/rpc", async (request, reply) => {
-    const body = asRecord(request.body) ?? {};
-    const params = asRecord(body.params) ?? {};
-    const context = runContextOf(request);
-    const result = await handlers.rpc(
-      context.tenantId,
-      body.ref,
-      String(body.method ?? ""),
-      params,
-      context
-    );
-    return reply.code(result.status).send(result.body);
-  });
-}
-
 // src/controllers/eval.ts
 import { getStoreLattice as getStoreLattice21, hasModelLatticeForTenant as hasModelLatticeForTenant2, modelLatticeManager as modelLatticeManager2 } from "@axiom-lattice/core";
 import { v4 as uuidv43 } from "uuid";
@@ -15384,6 +14877,16 @@ var AuthController = class {
   }
   async login(request, reply) {
     const { email, password } = request.body;
+    const rateLimit = await getRateLimitService().consume("auth.login", {
+      ip: request.ip
+    });
+    if (!rateLimit.allowed) {
+      return reply.header("Retry-After", String(rateLimit.retryAfterSeconds)).status(429).send({
+        success: false,
+        error: "RATE_LIMITED",
+        retryAfterSeconds: rateLimit.retryAfterSeconds
+      });
+    }
     try {
       const user = await this.userStore.getUserByEmail(email);
       if (!user) {
@@ -15752,7 +15255,7 @@ function isStaleConsoleSessionCredential(authHeader) {
 function bypassesConsoleAuth(request) {
   const path5 = request.url.split("?")[0];
   const method = request.method;
-  if (method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/bootstrap$/.test(path5) || (method === "GET" || method === "POST") && /^\/api\/web-apps\/[^/]+\/runtime\/threads$/.test(path5) || (method === "PATCH" || method === "DELETE") && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/messages$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/files\/(viewfile|downloadfile)$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/api\/assistants\/[^/]+\/threads\/[^/]+\/sandbox\/(viewfile|downloadfile)$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/(messages\/stream|abort|attachments)$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/interrupts\/[^/]+\/resume$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+\/join$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+\/cancel$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/chat$/.test(path5) || method === "GET" && /^\/embed\/[^/]+$/.test(path5) || method === "GET" && path5 === "/mcp-apps/sandbox.html" || (method === "POST" || method === "DELETE") && path5 === "/open/mcp" || (method === "POST" || method === "GET") && (path5 === "/mcp" || path5 === "/mcp/") || method === "POST" && path5 === "/open/session" || (method === "GET" || method === "POST") && path5.startsWith("/open/sandbox/files/")) return true;
+  if (method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/bootstrap$/.test(path5) || (method === "GET" || method === "POST") && /^\/api\/web-apps\/[^/]+\/runtime\/threads$/.test(path5) || (method === "PATCH" || method === "DELETE") && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/messages$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/files\/(viewfile|downloadfile)$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/api\/assistants\/[^/]+\/threads\/[^/]+\/sandbox\/(viewfile|downloadfile)$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/(messages\/stream|abort|attachments)$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/interrupts\/[^/]+\/resume$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+\/join$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+\/cancel$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/chat$/.test(path5) || method === "GET" && /^\/embed\/[^/]+$/.test(path5) || method === "GET" && path5 === "/mcp-apps/sandbox.html" || method === "GET" && /^\/api\/mcp-app-shares\/[^/]+\/bootstrap$/.test(path5) || method === "POST" && /^\/api\/mcp-app-shares\/[^/]+\/(resource|rpc|unlock)$/.test(path5) || (method === "POST" || method === "DELETE") && path5 === "/open/mcp" || (method === "POST" || method === "GET") && (path5 === "/mcp" || path5 === "/mcp/") || method === "POST" && path5 === "/open/session" || (method === "GET" || method === "POST") && path5.startsWith("/open/sandbox/files/")) return true;
   if (request.method === "GET" && (/^\/api\/a2a\/agents\/[^/]+\/\.well-known\/agent-card\.json$/.test(path5) || /^\/a2a\/(?:v1\/)?[^/]+\/\.well-known\/agent-card\.json$/.test(path5))) {
     return true;
   }
@@ -17518,6 +17021,7 @@ import {
   ProjectTaskOwnerPolicyError as ProjectTaskOwnerPolicyError2,
   projectMutationMutex as projectMutationMutex2,
   projectTaskAdmissionNotifier,
+  projectRoomMessageNotifier,
   taskLifecycleNotifier as taskLifecycleNotifier2
 } from "@axiom-lattice/core";
 
@@ -17856,7 +17360,7 @@ function snapshotEnsureInput(input) {
 }
 
 // src/services/tasks/TaskCommandService.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 
 // src/services/collaboration/ProjectTaskRunService.ts
 import { randomUUID as randomUUID21 } from "crypto";
@@ -18993,7 +18497,7 @@ var _TaskCommandService = class _TaskCommandService {
       threadId,
       summary: "User comment",
       detail: { markdown: text, type: "user_comment" },
-      fallbackEventKey: `task-comment:${task.id}:${createHash4("sha256").update(text).digest("hex")}`
+      fallbackEventKey: `task-comment:${task.id}:${createHash3("sha256").update(text).digest("hex")}`
     });
     const agent = this.deps.agents.getAgent(this.agentScope(task, threadId));
     await agent.addMessage({ input: { message: text } });
@@ -19966,7 +19470,7 @@ import { createHmac as createHmac3 } from "crypto";
 import { z as z5, ZodError as ZodError2 } from "zod";
 
 // src/services/agent-web-app/AgentWebAppRuntimeService.ts
-import { createHash as createHash5, randomUUID as randomUUID22 } from "crypto";
+import { createHash as createHash4, randomUUID as randomUUID22 } from "crypto";
 import { MessageChunkTypes as MessageChunkTypes3, parseAgentWebAppGenUIBlock, buildAffinityMissChunk as buildAffinityMissChunk2 } from "@axiom-lattice/protocols";
 import { getReplicaId as getReplicaId7, getThreadRunOwner as getThreadRunOwner2, normalizeAgentInterrupts as normalizeAgentInterrupts2 } from "@axiom-lattice/core";
 function isRecord9(value) {
@@ -20261,8 +19765,8 @@ ${formatFileRefsSection(refs)}` : input.content;
     const runtime = await this.resolveOwnedRuntime(webAppId, userId, threadId, selection);
     this.requireNamedFeature(runtime.webApp.features.attachments, "Attachments are disabled");
     if (!this.deps.saveProjectFile || !this.deps.attachmentRefs) this.fail("INTERNAL_ERROR", 500, "Attachment service is unavailable");
-    const userDigest = createHash5("sha256").update(userId, "utf8").digest("hex");
-    const contentDigest = createHash5("sha256").update(file.bytes).digest("hex");
+    const userDigest = createHash4("sha256").update(userId, "utf8").digest("hex");
+    const contentDigest = createHash4("sha256").update(file.bytes).digest("hex");
     const displayName = file.name;
     const physicalName = `${randomUUID22()}-${sanitizePhysicalFilename(file.name)}`;
     const saved = await this.deps.saveProjectFile({
@@ -20470,7 +19974,7 @@ function implicitThreadId(runtime, userId) {
     userId,
     runtime.project.id
   ]);
-  const bytes = createHash5("sha256").update(canonicalTuple, "utf8").digest().subarray(0, 16);
+  const bytes = createHash4("sha256").update(canonicalTuple, "utf8").digest().subarray(0, 16);
   bytes[6] = bytes[6] & 15 | 128;
   bytes[8] = bytes[8] & 63 | 128;
   const hex = bytes.toString("hex");
@@ -21284,17 +20788,19 @@ var CSS_CONTENT_TYPE = "text/css; charset=utf-8";
 var EXACT_ASSETS = {
   "agent-chat-loader.js": { contentType: JS_CONTENT_TYPE },
   "embed-page.js": { contentType: JS_CONTENT_TYPE },
-  "embed-page.css": { contentType: CSS_CONTENT_TYPE }
+  "embed-page.css": { contentType: CSS_CONTENT_TYPE },
+  "mcp-app-page.js": { contentType: JS_CONTENT_TYPE },
+  "mcp-app-page.css": { contentType: CSS_CONTENT_TYPE }
 };
-var HASHED_CHUNK_PATTERN = /^embed-page-[A-Za-z0-9._-]+\.(js|css)$/;
-var CHUNK_CSS_PATTERN = /^embed-page-[A-Za-z0-9._-]+\.css$/;
+var HASHED_CHUNK_PATTERN = /^(embed-page|mcp-app-page)-[A-Za-z0-9._-]+\.(js|css)$/;
+var CHUNK_CSS_PATTERN = /^(embed-page|mcp-app-page)-[A-Za-z0-9._-]+\.css$/;
 function resolveAsset(asset) {
   if (asset.includes("..")) return null;
   const exact2 = EXACT_ASSETS[asset];
   if (exact2 !== void 0) return { contentType: exact2.contentType, immutable: false };
   const hashed = HASHED_CHUNK_PATTERN.exec(asset);
   if (hashed) {
-    return { contentType: hashed[1] === "css" ? CSS_CONTENT_TYPE : JS_CONTENT_TYPE, immutable: true };
+    return { contentType: hashed[2] === "css" ? CSS_CONTENT_TYPE : JS_CONTENT_TYPE, immutable: true };
   }
   return null;
 }
@@ -21399,7 +20905,7 @@ function registerAgentWebAppEmbedRoutes(app2, deps = {}) {
 }
 
 // src/services/agent-web-app/AgentWebAppAttachmentRef.ts
-import { createCipheriv, createDecipheriv, createHash as createHash6, randomBytes as randomBytes2 } from "crypto";
+import { createCipheriv, createDecipheriv, createHash as createHash5, randomBytes as randomBytes2 } from "crypto";
 var TTL_MS = 15 * 6e4;
 function resolveAgentWebAppAttachmentSecret(consoleSecret) {
   return process.env.WEB_APP_ATTACHMENT_SECRET || process.env.AUTH_TOKEN_SECRET || process.env.JWT_SECRET || consoleSecret;
@@ -21408,7 +20914,7 @@ var AgentWebAppAttachmentRefService = class {
   constructor(secret, now = Date.now) {
     this.now = now;
     if (!secret) throw new Error("Attachment signing secret is required");
-    this.key = createHash6("sha256").update(secret, "utf8").digest();
+    this.key = createHash5("sha256").update(secret, "utf8").digest();
   }
   sign(input) {
     const payload = {
@@ -21470,7 +20976,7 @@ function decodeCanonical(value, expectedBytes) {
   return decoded;
 }
 function digestUser(userId) {
-  return createHash6("sha256").update(userId, "utf8").digest("hex");
+  return createHash5("sha256").update(userId, "utf8").digest("hex");
 }
 function isAttachmentPayload(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
@@ -23449,8 +22955,6 @@ var ProjectMembershipService = class {
   }
   async list(actor3) {
     await this.deps.accessService.requireRosterAccess(actor3);
-    const membership = await this.deps.membershipStore.findByUser(actor3.tenantId, actor3.projectId, actor3.userId);
-    if (!membership || membership.status !== "active") this.accessDenied();
     return this.deps.membershipStore.list(actor3.tenantId, actor3.projectId);
   }
   async add(actor3, input) {
@@ -23508,10 +23012,8 @@ var ProjectMembershipService = class {
     });
   }
   async authorize(actor3) {
-    await this.deps.accessService.requireProjectAccess({ ...actor3, capability: "manage" });
-    const membership = await this.deps.membershipStore.findByUser(actor3.tenantId, actor3.projectId, actor3.userId);
-    if (!membership || membership.status !== "active") this.accessDenied();
-    return membership;
+    const access = await this.deps.accessService.requireProjectAccess({ ...actor3, capability: "manage" });
+    return access.membership;
   }
   async target(actor3, id3) {
     const target = (await this.deps.membershipStore.list(actor3.tenantId, actor3.projectId)).find((item) => item.id === id3);
@@ -24048,7 +23550,7 @@ function virtualPublicProjectBot(project, room, agent, mentionName, now) {
 }
 
 // src/services/collaboration/RoomMessageService.ts
-import { createHash as createHash7, randomUUID as randomUUID27 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID27 } from "crypto";
 
 // src/services/collaboration/ProjectBotMembershipSnapshot.ts
 import { snapshotExactRecord as snapshotExactRecord5 } from "@axiom-lattice/protocols";
@@ -24351,7 +23853,7 @@ var RoomMessageService = class {
     let idempotencyKey;
     if (value.requestIdempotencyKey !== void 0) {
       if (typeof value.requestIdempotencyKey !== "string" || !/^[\x21-\x7e]{1,200}$/.test(value.requestIdempotencyKey.trim())) throw new RoomMessageServiceError("INVALID_MESSAGE", 400, "Invalid idempotency key");
-      idempotencyKey = `room-human:${actor3.userId}:${createHash7("sha256").update(value.requestIdempotencyKey.trim(), "utf8").digest("hex")}`;
+      idempotencyKey = `room-human:${actor3.userId}:${createHash6("sha256").update(value.requestIdempotencyKey.trim(), "utf8").digest("hex")}`;
     }
     return { text, mentions, botIds, ...value.replyToMessageId === void 0 ? {} : { replyToMessageId: value.replyToMessageId }, ...idempotencyKey === void 0 ? {} : { idempotencyKey } };
   }
@@ -24408,7 +23910,7 @@ function cloneRoomMessage(message) {
   };
 }
 function fingerprintRequest(input) {
-  return createHash7("sha256").update(JSON.stringify({
+  return createHash6("sha256").update(JSON.stringify({
     text: input.text,
     mentions: input.mentions,
     replyToMessageId: input.replyToMessageId ?? null
@@ -26472,7 +25974,7 @@ var TaskInterruptCardProjector = class {
 };
 
 // src/services/collaboration/ProjectTaskObserver.ts
-import { createHash as createHash8 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import {
   createTaskRunBridge as createTaskRunBridge3,
   probeThreadRunOwner as defaultProbeThreadRunOwner
@@ -27043,7 +26545,7 @@ var ProjectTaskObserver = class {
       action: "activity",
       summary: "Project task recovery warning",
       detail: { type: "project_task_recovery_warning", phase, message },
-      eventKey: `project-task-recovery-warning:${task.id}:${phase}:${createHash8("sha256").update(message).digest("hex")}`
+      eventKey: `project-task-recovery-warning:${task.id}:${phase}:${createHash7("sha256").update(message).digest("hex")}`
     });
   }
   async safeWarning(task, phase, error) {
@@ -27286,7 +26788,7 @@ var ProjectTaskObserver = class {
     }
   }
   async persistOverflowWarning(event) {
-    const scopeDigest = createHash8("sha256").update(JSON.stringify([event.tenantId, event.workspaceId, event.projectId])).digest("hex");
+    const scopeDigest = createHash7("sha256").update(JSON.stringify([event.tenantId, event.workspaceId, event.projectId])).digest("hex");
     try {
       await this.deps.workItems.createIfAbsentByEventKey({
         tenantId: event.tenantId,
@@ -27391,7 +26893,7 @@ function combineSignals(left, right) {
 }
 
 // src/services/collaboration/RoomProjectionService.ts
-import { createHash as createHash9 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import {
   PROJECT_ROOM_TASK_DELEGATED_LABEL,
   PROJECT_ROOM_TASK_DELEGATED_SEPARATOR,
@@ -27612,7 +27114,7 @@ function safeRepairIdentity(value, scope) {
   return taskId && eventKey && tenantId === scope.tenantId && workspaceId === scope.workspaceId && projectId === scope.projectId ? { taskId, eventKey } : void 0;
 }
 function tupleKey(prefix, values) {
-  const digest = createHash9("sha256").update(JSON.stringify(values)).digest("hex");
+  const digest = createHash8("sha256").update(JSON.stringify(values)).digest("hex");
   return `${prefix}:${digest}`;
 }
 function parseProjectionInput(taskValue, itemValue) {
@@ -28191,7 +27693,7 @@ function snapshotJson(value, ancestors = /* @__PURE__ */ new Set()) {
 }
 
 // src/services/collaboration/ProjectRoomRealtimePublisher.ts
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 import {
   projectRoomUserEventScope,
   snapshotExactRecord as snapshotExactRecord11,
@@ -28313,7 +27815,7 @@ var BrokerProjectRoomRealtimePublisher = class {
     try {
       event = build();
       if (!event) throw new Error("Invalid Project Room realtime projection");
-      const dedupeKey = createHash10("sha256").update(JSON.stringify([type, event.scope.tenantId, event.scope.projectId, event.scope.roomId, event.sourceKey])).digest("hex");
+      const dedupeKey = createHash9("sha256").update(JSON.stringify([type, event.scope.tenantId, event.scope.projectId, event.scope.roomId, event.sourceKey])).digest("hex");
       if (this.sourceKeys.has(dedupeKey)) return;
       this.deps.broker.publish(event.scope, event.draft, event.sourceKey);
       this.sourceKeys.set(dedupeKey, true);
@@ -28558,12 +28060,21 @@ function createProjectRoomRealtimeRuntime(deps) {
     shutdownTimeoutMs: deps.shutdownTimeoutMs
   });
 }
+var PUSH_DEDUPE_LIMIT = 2e3;
 function withPushNotifier(target, notifier) {
+  const pushedMessageIds = /* @__PURE__ */ new Set();
   return new Proxy(target, {
     get(inner, prop, receiver) {
       if (prop === "messageCreated") {
         return (message) => {
           inner.messageCreated(message);
+          if (pushedMessageIds.has(message.id)) return;
+          pushedMessageIds.add(message.id);
+          while (pushedMessageIds.size > PUSH_DEDUPE_LIMIT) {
+            const oldest = pushedMessageIds.values().next().value;
+            if (oldest === void 0) break;
+            pushedMessageIds.delete(oldest);
+          }
           void notifier.notifyMessage(message).catch(() => void 0);
         };
       }
@@ -29478,7 +28989,14 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     log: realtimeLog
   }) : void 0;
   if (projectRoomRealtimeRuntime) {
-    app2.addHook("onClose", async () => projectRoomRealtimeRuntime?.close());
+    const runtime = projectRoomRealtimeRuntime;
+    const unsubscribeProjectRoomMessages = projectRoomMessageNotifier.subscribe((message) => {
+      runtime.publisher.messageCreated(message);
+    });
+    app2.addHook("onClose", async () => {
+      unsubscribeProjectRoomMessages();
+      await runtime.close();
+    });
     const workspaceRoomEventsService = new WorkspaceRoomEventsService({
       broker: projectRoomRealtimeRuntime.broker,
       listMemberRooms: createWorkspaceMemberRoomLister({
@@ -31749,50 +31267,6 @@ var ChannelAdapterRegistry = class {
   }
 };
 
-// src/router/middlewares/channelSharedState.ts
-import { createClient as createClient2 } from "redis";
-var clientPromise;
-async function redis() {
-  const url = process.env.REDIS_URL?.trim();
-  if (!url) return void 0;
-  if (!clientPromise) {
-    clientPromise = (async () => {
-      const client = createClient2({ url });
-      client.on("error", () => void 0);
-      await client.connect();
-      return client;
-    })();
-  }
-  try {
-    const client = await clientPromise;
-    return client.isOpen ? client : void 0;
-  } catch {
-    clientPromise = void 0;
-    return void 0;
-  }
-}
-async function claimDedupKey(key, ttlMs) {
-  try {
-    const client = await redis();
-    if (!client) return void 0;
-    const result = await client.set(key, "1", { NX: true, PX: ttlMs });
-    return result === "OK";
-  } catch {
-    return void 0;
-  }
-}
-async function incrementRateCounter(key, windowMs) {
-  try {
-    const client = await redis();
-    if (!client) return void 0;
-    const count = await client.incr(key);
-    if (count === 1) await client.pExpire(key, windowMs);
-    return count;
-  } catch {
-    return void 0;
-  }
-}
-
 // src/router/middlewares/deduplication.ts
 var processedMessages = /* @__PURE__ */ new Map();
 function createDeduplicationMiddleware(ttlMs = 5 * 60 * 1e3) {
@@ -32861,7 +32335,7 @@ import {
   agentInstanceManager as agentInstanceManager13,
   createSandboxProvider,
   TokenCache,
-  mcpManager as mcpManager3,
+  mcpManager as mcpManager2,
   convertToConnection as convertToConnection2,
   createTrustedAgentMessageDispatcher as createTrustedAgentMessageDispatcher2,
   ChannelConnectionLeader,
@@ -32881,7 +32355,7 @@ import {
   COLLECTION_CHANGED_TOPIC,
   vectorStoreLatticeManager as vectorStoreLatticeManager2,
   observabilityLatticeManager,
-  getSandboxPluginCatalog as getSandboxPluginCatalog3,
+  getSandboxPluginCatalog as getSandboxPluginCatalog2,
   getSandBoxManager as getSandBoxManager4,
   installPluginHost,
   ThreadExecutionSupervisor,
@@ -32892,7 +32366,7 @@ import {
 } from "@axiom-lattice/core";
 
 // src/services/chunk/redisAppendLog.ts
-import { createClient as createClient3 } from "redis";
+import { createClient as createClient2 } from "redis";
 var VALUE_FIELD = "v";
 var START_ID = "0-0";
 var ChunkLogCorruptionError = class extends Error {
@@ -32909,7 +32383,7 @@ var ChunkLogCorruptionError = class extends Error {
   }
 };
 async function createRedisAppendLog(url, options = {}) {
-  const client = createClient3({
+  const client = createClient2({
     url,
     disableOfflineQueue: true,
     socket: {
@@ -33099,7 +32573,7 @@ function readField(fields, name) {
 }
 
 // src/services/run-cancel/RedisRunCancelNotifier.ts
-import { createClient as createClient4 } from "redis";
+import { createClient as createClient3 } from "redis";
 import {
   runCancelSignalSchema as runCancelSignalSchema2
 } from "@axiom-lattice/protocols";
@@ -33500,7 +32974,7 @@ function createRedisRunCancelNotifier(options) {
   });
 }
 function createNodeRedisClient2(url) {
-  const client = createClient4({
+  const client = createClient3({
     url,
     disableOfflineQueue: true,
     socket: {
@@ -34814,7 +34288,7 @@ import {
 } from "@axiom-lattice/core";
 
 // src/services/plugins/pluginDeploymentNaming.ts
-import { createHash as createHash11 } from "crypto";
+import { createHash as createHash10 } from "crypto";
 var PLUGIN_GUEST_PORT = 8080;
 var SANDBOX_NAME_HASH_LENGTH = 16;
 function pluginSandboxName(tenantId, pluginType) {
@@ -34824,7 +34298,7 @@ function pluginSandboxName(tenantId, pluginType) {
   if (!pluginType || typeof pluginType !== "string") {
     throw new Error("pluginSandboxName: pluginType must be a non-empty string");
   }
-  const hash = createHash11("sha256").update(`${tenantId}\0${pluginType}`).digest("hex").slice(0, SANDBOX_NAME_HASH_LENGTH);
+  const hash = createHash10("sha256").update(`${tenantId}\0${pluginType}`).digest("hex").slice(0, SANDBOX_NAME_HASH_LENGTH);
   return `plugin-${hash}`;
 }
 
@@ -37401,7 +36875,7 @@ function createAgentRunRetentionJob(input) {
 }
 
 // src/services/run-task/RedisRunTaskWake.ts
-import { createClient as createClient5 } from "redis";
+import { createClient as createClient4 } from "redis";
 var RUN_TASK_WAKE_CHANNEL = "run-task:wake";
 var DEFAULT_OPERATION_TIMEOUT_MS = 2e3;
 var DEFAULT_RETRY_DELAYS_MS = [500, 2e3, 5e3, 1e4];
@@ -37794,7 +37268,7 @@ function createConfiguredRedisRunTaskWake(options) {
   return createRedisRunTaskWake({ ...options, url });
 }
 function createNodeRedisClient3(url) {
-  const client = createClient5({
+  const client = createClient4({
     url,
     disableOfflineQueue: true,
     socket: {
@@ -38885,7 +38359,7 @@ async function restoreMcpConnections() {
     logger8.info(`Restoring ${configs.length} MCP server connections...`);
     const deps = {
       store: store2,
-      manager: mcpManager3,
+      manager: mcpManager2,
       convertToConnection: convertToConnection2
     };
     const results = await Promise.allSettled(
@@ -38923,6 +38397,8 @@ var start = async (config) => {
       logger8 = loggerLattice.client;
     }
     app.decorate("loggerLattice", loggerLattice);
+    const rateLimitService = createRateLimitService(config?.rateLimits);
+    setRateLimitService(rateLimitService);
     const observabilityProvider = observabilityLatticeManager.getDefault();
     if (observabilityProvider) {
       try {
@@ -39162,9 +38638,9 @@ var start = async (config) => {
       projectRoomRealtimeRuntime
     });
     try {
-      const { A2AAuthService: A2AAuthService2, parseEnvKeys: parseEnvKeys2 } = await import("./A2AAuthService-7UGQ7GMW.mjs");
-      const { registerA2AStandardRoutes } = await import("./a2a-standard-VL5I7B4W.mjs");
-      const a2a = await import("./a2a-BHBLACJV.mjs");
+      const { A2AAuthService: A2AAuthService2, parseEnvKeys: parseEnvKeys2 } = await import("./A2AAuthService-UKN53ZGP.mjs");
+      const { registerA2AStandardRoutes } = await import("./a2a-standard-INVCUSAW.mjs");
+      const a2a = await import("./a2a-TDZ3TT6H.mjs");
       const a2aKeyStore = getStoreLattice42("default", "a2aApiKey").store;
       const assistantStore = getStoreLattice42("default", "assistant").store;
       const projectStore = getStoreLattice42("default", "project").store;
@@ -39193,18 +38669,17 @@ var start = async (config) => {
       });
     }
     try {
-      const { registerOpenRoutes } = await import("./open-7ED27I5B.mjs");
-      const { registerOpenSessionRoutes } = await import("./open-session-2Y7XJJW2.mjs");
-      const { registerOpenCatalogRoutes } = await import("./open-catalog-SZQ435AY.mjs");
-      const { registerOpenFilesRoutes } = await import("./open-files-V3R2BFTV.mjs");
+      const { registerOpenRoutes } = await import("./open-27ZPLBIW.mjs");
+      const { registerOpenSessionRoutes } = await import("./open-session-CLZT3HVG.mjs");
+      const { registerOpenCatalogRoutes } = await import("./open-catalog-NVGP6SQP.mjs");
+      const { registerOpenFilesRoutes } = await import("./open-files-JPB2NBL6.mjs");
       const { registerOpenAuditRoutes } = await import("./open-audit-UJ3NXCGW.mjs");
-      const { registerOpenExposureRoutes } = await import("./open-exposure-I3DN2X4E.mjs");
-      const { openLattice } = await import("./openLattice-Q6M5S6CY.mjs");
-      const { OpenRateLimiter } = await import("./openRateLimiter-XEOL3A5G.mjs");
+      const { registerOpenExposureRoutes } = await import("./open-exposure-BPLYUIX6.mjs");
+      const { openLattice } = await import("./openLattice-D5YTSZBY.mjs");
       const { createKbProvider } = await import("./kbProvider-2D6DZ34N.mjs");
       const { createOpenSandboxProvider } = await import("./sandboxProvider-FILMFVIM.mjs");
       const { createAgentProvider } = await import("./agentProvider-X4FVQPKW.mjs");
-      const { registerExposedPluginTools } = await import("./registerExposedPlugins-6GCOE64C.mjs");
+      const { registerExposedPluginTools } = await import("./registerExposedPlugins-2JGXSMAL.mjs");
       const { CollectionService: CollectionService2 } = await import("./collection_service-RTRJEQFL.mjs");
       openLattice.register(createKbProvider(new CollectionService2()));
       openLattice.register(createOpenSandboxProvider());
@@ -39220,18 +38695,7 @@ var start = async (config) => {
         })
       );
       await registerExposedPluginTools();
-      const openRateLimitPerMinute = Number(
-        process.env.OPEN_RATE_LIMIT_PER_MINUTE
-      );
-      const openAgentRateLimitPerMinute = Number(
-        process.env.OPEN_AGENT_RATE_LIMIT_PER_MINUTE
-      );
-      registerOpenRoutes(app, {
-        rateLimiter: new OpenRateLimiter({
-          ...Number.isFinite(openRateLimitPerMinute) && openRateLimitPerMinute > 0 ? { defaultPerMinute: openRateLimitPerMinute } : {},
-          ...Number.isFinite(openAgentRateLimitPerMinute) && openAgentRateLimitPerMinute > 0 ? { agentPerMinute: openAgentRateLimitPerMinute } : {}
-        })
-      });
+      registerOpenRoutes(app, { rateLimits: rateLimitService });
       registerOpenSessionRoutes(app);
       registerOpenCatalogRoutes(app);
       registerOpenFilesRoutes(app);
@@ -39244,7 +38708,7 @@ var start = async (config) => {
       });
     }
     try {
-      const { registerGatewaySandboxOpenCredentialProvider } = await import("./sandboxOpenCredentialProvider-AT227D4N.mjs");
+      const { registerGatewaySandboxOpenCredentialProvider } = await import("./sandboxOpenCredentialProvider-RTYOYRCT.mjs");
       registerGatewaySandboxOpenCredentialProvider((error) => {
         logger8.warn("sandbox open-credential provider failed", { error });
       });
@@ -39276,7 +38740,7 @@ var start = async (config) => {
           wiring: {
             store: pluginDeploymentStore,
             sandboxManager: getSandBoxManager4(),
-            catalog: getSandboxPluginCatalog3(),
+            catalog: getSandboxPluginCatalog2(),
             installPluginHost,
             limits: readPluginDeploymentLimits(),
             serviceKey: process.env.MICROSANDBOX_API_KEY,
@@ -39303,7 +38767,7 @@ var start = async (config) => {
       }
     }
     try {
-      const { ResourceController } = await import("./resources-DAU5ZIPB.mjs");
+      const { ResourceController } = await import("./resources-YD5DOPGD.mjs");
       const sharedResourceStore = getStoreLattice42("default", "sharedResource").store;
       const cache = new TokenCache();
       const resourceController = new ResourceController({
@@ -39313,6 +38777,13 @@ var start = async (config) => {
         logger: logger8
       });
       registerResourceRoutes(app, resourceController);
+      const { registerMcpAppShareRoutes } = await import("./mcp-app-shares-SHPBJQXS.mjs");
+      const { makeMcpAppHandlers, resolveMcpAppDeps } = await import("./mcp-apps-QVUK6UBA.mjs");
+      registerMcpAppShareRoutes(app, {
+        store: sharedResourceStore,
+        handlers: makeMcpAppHandlers(resolveMcpAppDeps()),
+        rateLimits: rateLimitService
+      });
       logger8.info("Resource share routes registered");
     } catch (err) {
       logger8.warn("Resource share infrastructure unavailable", {
@@ -39392,7 +38863,6 @@ var start = async (config) => {
         "assistant-changed": (payload) => handleAssistantChanged(payload, async (tenantId) => {
           await agentLatticeManager6.initializeStoredAssistantsForTenant(tenantId);
           invalidateAgentReflectionCache(tenantId);
-          invalidatePluginReflectionCache(tenantId);
         }),
         [AGENT_LIFECYCLE_TOPIC]: async (payload) => {
           handleAgentLifecycle(payload);
@@ -39400,7 +38870,7 @@ var start = async (config) => {
         [A2A_KEY_CHANGED_TOPIC]: (payload) => handleA2AKeyChanged(payload, () => refreshStoreKeyMap()),
         [MCP_CONFIG_CHANGED_TOPIC]: (payload) => reconcileMcpConfigChange(payload, {
           store: getStoreLattice42("default", "mcp").store,
-          manager: mcpManager3,
+          manager: mcpManager2,
           convertToConnection: convertToConnection2
         }),
         [COLLECTION_CHANGED_TOPIC]: async (payload) => {
@@ -39412,8 +38882,7 @@ var start = async (config) => {
         [PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
           const tenantId = payload?.tenantId;
           if (typeof tenantId === "string" && tenantId.length > 0) {
-            getSandboxPluginCatalog3().invalidate(tenantId);
-            invalidatePluginReflectionCache(tenantId);
+            getSandboxPluginCatalog2().invalidate(tenantId);
             invalidateAgentReflectionCache(tenantId);
             await getMcpUiResourceResolver()?.invalidateTenantPlugins(tenantId);
           }