@axiom-lattice/gateway 8.3.0 → 9.0.0

package/dist/index.mjs

@@ -1,12 +1,19 @@
 import {
-  invalidateAgentReflectionCache,
-  invalidatePluginReflectionCache
-} from "./chunk-GL7RV5L3.mjs";
+  invalidateAgentReflectionCache
+} from "./chunk-YR32MWEJ.mjs";
 import {
   getContentTypeFromFilename,
   getFilenameFromPath,
   sendBufferWithRange
 } from "./chunk-EMYRCJOI.mjs";
+import {
+  createRecoveryCallerDeps
+} from "./chunk-NOXGKYUV.mjs";
+import {
+  Logger,
+  getQrCode,
+  getQrCodeStatus
+} from "./chunk-6CUQGDJI.mjs";
 import {
   PathOutsideRootError,
   ProjectFileValidationError,
@@ -28,9 +35,12 @@ import {
   wakeRunTaskQueue
 } from "./chunk-2SR4F3ZD.mjs";
 import {
-  PluginToolScopeError,
-  invokePluginTool
-} from "./chunk-XUWD4VKY.mjs";
+  claimDedupKey,
+  createRateLimitService,
+  getRateLimitService,
+  incrementRateCounter,
+  setRateLimitService
+} from "./chunk-A7YNAU5L.mjs";
 import {
   buildPreviewTokenScript
 } from "./chunk-7CG57LEF.mjs";
@@ -40,14 +50,25 @@ import {
 } from "./chunk-PWHUWFXL.mjs";
 import {
   A2A_KEY_CHANGED_TOPIC,
+  ProjectAccessService,
+  ProjectCollaborationError,
   handleA2AKeyChanged,
   publishA2AKeyChanged,
-  refreshStoreKeyMap
-} from "./chunk-HYYLYIMH.mjs";
+  refreshStoreKeyMap,
+  setA2AProjectAccess
+} from "./chunk-NYYSBNDG.mjs";
 import {
   A2AAuthService,
   parseEnvKeys
-} from "./chunk-GPHOYR3X.mjs";
+} from "./chunk-LCM4OQTI.mjs";
+import {
+  getMcpUiResourceResolver,
+  listTenantPlugins,
+  registerMcpAppRoutes,
+  resolveTenantPluginByType
+} from "./chunk-T2HIWZGP.mjs";
+import "./chunk-XUWD4VKY.mjs";
+import "./chunk-MFWTGNQR.mjs";
 import {
   createOrphanRecoveryRuntime,
   createTaskRunLiveness,
@@ -59,14 +80,6 @@ import {
   resolveTopCaller,
   runOrphanRecovery
 } from "./chunk-NZXKECNN.mjs";
-import {
-  createRecoveryCallerDeps
-} from "./chunk-NOXGKYUV.mjs";
-import {
-  Logger,
-  getQrCode,
-  getQrCodeStatus
-} from "./chunk-6CUQGDJI.mjs";
 import "./chunk-NFEGQTCC.mjs";
 
 // src/index.ts
@@ -80,7 +93,7 @@ import staticPlugin from "@fastify/static";
 import path4 from "path";
 
 // src/routes/index.ts
-import { randomUUID as randomUUID32 } from "crypto";
+import { randomUUID as randomUUID31 } from "crypto";
 import {
   descriptorDataValue as descriptorDataValue3,
   snapshotExactRecord as snapshotExactRecord14,
@@ -10003,14 +10016,6 @@ async function importApply(request, reply) {
 
 // src/controllers/middleware-types.ts
 import { serializePluginMeta } from "@axiom-lattice/core";
-
-// src/services/plugins/tenantPluginResolver.ts
-import { listTenantPlugins } from "@axiom-lattice/core";
-async function resolveTenantPluginByType(tenantId, type) {
-  return (await listTenantPlugins(tenantId)).find((p) => p.meta.type === type);
-}
-
-// src/controllers/middleware-types.ts
 async function collectMiddlewareMetas(tenantId) {
   return (await listTenantPlugins(tenantId)).map(serializePluginMeta);
 }
@@ -10998,8 +11003,9 @@ function createProjectCollaborationInitializer(deps) {
   };
 }
 var WorkspaceController = class {
-  constructor(projectCollaboration) {
+  constructor(projectCollaboration, projectAccess) {
     this.projectCollaboration = projectCollaboration;
+    this.projectAccess = projectAccess;
     this.workspaceStore = getStoreLattice16("default", "workspace").store;
     this.projectStore = getStoreLattice16("default", "project").store;
     const roomStore = getStoreLattice16("default", "projectRoom").store;
@@ -11041,6 +11047,48 @@ var WorkspaceController = class {
     }
     return request.headers["x-tenant-id"] || "default";
   }
+  requireActor(request, reply) {
+    const user = request.user;
+    if (!user?.id || !user.tenantId) {
+      void reply.status(401).send({
+        success: false,
+        code: "UNAUTHORIZED",
+        error: "Unauthorized"
+      });
+      return null;
+    }
+    return { tenantId: user.tenantId, userId: user.id };
+  }
+  accessService() {
+    if (!this.projectAccess) {
+      throw new Error("Project access service is not configured");
+    }
+    return this.projectAccess;
+  }
+  async requireReadableProject(actor3, workspaceId, projectId, capability2) {
+    try {
+      const result = await this.accessService().requireExistingProjectAccess({
+        tenantId: actor3.tenantId,
+        userId: actor3.userId,
+        projectId,
+        capability: capability2
+      });
+      if (result.project.workspaceId !== workspaceId) return null;
+      return result.project;
+    } catch (error) {
+      if (error instanceof ProjectCollaborationError && (error.code === "PROJECT_ACCESS_DENIED" || error.code === "PROJECT_NOT_FOUND")) {
+        return null;
+      }
+      throw error;
+    }
+  }
+  projectNotFound(reply) {
+    return reply.status(404).send({
+      success: false,
+      code: "PROJECT_NOT_FOUND",
+      error: "Project not found"
+    });
+  }
   // ==================== Workspace CRUD ====================
   async listWorkspaces(request, reply) {
     const tenantId = this.getTenantId(request);
@@ -11098,14 +11146,18 @@ var WorkspaceController = class {
   }
   // ==================== Project CRUD ====================
   async listProjects(request, reply) {
-    const tenantId = this.getTenantId(request);
+    const actor3 = this.requireActor(request, reply);
+    if (!actor3) return;
     const { workspaceId } = request.params;
     const kindFilter = request.query.kind;
-    await this.ensureTrainingProject(tenantId, workspaceId);
-    await this.publicRoom.ensure(tenantId, workspaceId);
-    const projects = kindFilter ? await this.projectStore.getProjectsByWorkspace(tenantId, workspaceId, {
+    await this.ensureTrainingProject(actor3.tenantId, workspaceId);
+    await this.publicRoom.ensure(actor3.tenantId, workspaceId);
+    const projects = await this.accessService().listReadableProjects({
+      tenantId: actor3.tenantId,
+      userId: actor3.userId,
+      workspaceId,
       kind: kindFilter
-    }) : await this.projectStore.getProjectsByWorkspace(tenantId, workspaceId);
+    });
     return { success: true, data: projects };
   }
   /**
@@ -11130,13 +11182,9 @@ var WorkspaceController = class {
     });
   }
   async createProject(request, reply) {
-    const user = request.user;
-    const requestedTenantId = request.query?.tenantId ?? request.headers["x-tenant-id"];
-    const selectedTenantId = requestedTenantId === void 0 ? void 0 : String(requestedTenantId);
-    if (user?.tenantId && selectedTenantId && user.tenantId !== selectedTenantId) {
-      return reply.status(403).send({ success: false, code: "TENANT_ACCESS_DENIED", error: "Tenant access denied" });
-    }
-    const tenantId = user?.tenantId ?? selectedTenantId ?? "default";
+    const actor3 = this.requireActor(request, reply);
+    if (!actor3) return;
+    const tenantId = actor3.tenantId;
     const { workspaceId } = request.params;
     const data = request.body;
     if (writesCapabilityBundleIds(data.config)) {
@@ -11146,9 +11194,9 @@ var WorkspaceController = class {
         message: CAPABILITY_BUNDLE_CONFIG_MESSAGE
       });
     }
-    if (user?.id && this.projectCollaboration) {
+    if (this.projectCollaboration) {
       try {
-        const authorized = await this.projectCollaboration.authorizeCreator({ tenantId, userId: user.id });
+        const authorized = await this.projectCollaboration.authorizeCreator({ tenantId, userId: actor3.userId });
         if (!authorized) {
           return reply.status(403).send({ success: false, code: "TENANT_ACCESS_DENIED", error: "Tenant access denied" });
         }
@@ -11159,7 +11207,7 @@ var WorkspaceController = class {
         console.error({
           event: "project:collaboration-preflight-failed",
           tenantId,
-          userId: user.id,
+          userId: actor3.userId,
           errorName: error instanceof Error ? error.name : "UnknownError"
         });
         return reply.status(500).send({
@@ -11177,42 +11225,72 @@ var WorkspaceController = class {
       id3,
       data
     );
-    if (user?.id && this.projectCollaboration) {
+    if (this.projectCollaboration) {
       try {
-        await this.projectCollaboration.initialize({ tenantId, userId: user.id, project });
+        await this.projectCollaboration.initialize({ tenantId, userId: actor3.userId, project });
       } catch (error) {
-        const phase = error instanceof ProjectCollaborationInitializationError ? error.phase : "owner";
+        const phase = error instanceof ProjectCollaborationInitializationError ? error.phase : void 0;
+        let rolledBack = false;
+        if (phase === "owner") {
+          try {
+            rolledBack = await this.projectStore.deleteProject(tenantId, project.id);
+            if (!rolledBack) {
+              console.error({
+                event: "project:owner-initialization-rollback-missed",
+                tenantId,
+                projectId: project.id
+              });
+            }
+          } catch (cleanupError) {
+            console.error({
+              event: "project:owner-initialization-rollback-failed",
+              tenantId,
+              projectId: project.id,
+              errorName: cleanupError instanceof Error ? cleanupError.name : "UnknownError"
+            });
+          }
+        }
         console.error({
           event: "project:collaboration-initialization-failed",
           phase,
           tenantId,
           projectId: project.id,
-          userId: user.id,
+          userId: actor3.userId,
           errorName: error instanceof Error ? error.name : "UnknownError"
         });
         return reply.status(500).send({
           success: false,
           error: "Internal server error",
-          code: phase === "owner" ? "PROJECT_OWNER_INITIALIZATION_FAILED" : "PROJECT_ROOM_INITIALIZATION_FAILED",
+          code: phase === "owner" ? "PROJECT_OWNER_INITIALIZATION_FAILED" : phase === "room" ? "PROJECT_ROOM_INITIALIZATION_FAILED" : "PROJECT_COLLABORATION_INITIALIZATION_FAILED",
           projectId: project.id,
-          retryable: phase === "room"
+          retryable: phase === "room" || rolledBack
         });
       }
     }
     return reply.status(201).send({ success: true, data: project });
   }
   async getProject(request, reply) {
-    const tenantId = this.getTenantId(request);
-    const { projectId } = request.params;
-    const project = await this.projectStore.getProjectById(tenantId, projectId);
-    if (!project) {
-      return reply.status(404).send({ success: false, error: "Project not found" });
-    }
+    const actor3 = this.requireActor(request, reply);
+    if (!actor3) return;
+    const project = await this.requireReadableProject(
+      actor3,
+      request.params.workspaceId,
+      request.params.projectId,
+      "read"
+    );
+    if (!project) return this.projectNotFound(reply);
     return { success: true, data: project };
   }
   async updateProject(request, reply) {
-    const tenantId = this.getTenantId(request);
-    const { projectId } = request.params;
+    const actor3 = this.requireActor(request, reply);
+    if (!actor3) return;
+    const project = await this.requireReadableProject(
+      actor3,
+      request.params.workspaceId,
+      request.params.projectId,
+      "manage"
+    );
+    if (!project) return this.projectNotFound(reply);
     const updates = request.body;
     if (writesCapabilityBundleIds(updates.config)) {
       return reply.status(400).send({
@@ -11221,36 +11299,35 @@ var WorkspaceController = class {
         message: CAPABILITY_BUNDLE_CONFIG_MESSAGE
       });
     }
-    if (updates.kind !== void 0) {
-      const existingProject = await this.projectStore.getProjectById(tenantId, projectId);
-      if (existingProject && existingProject.id === workspacePublicRoomProjectId(tenantId, existingProject.workspaceId)) {
-        return reply.status(409).send({
-          success: false,
-          error: "The workspace public room classification cannot be changed"
-        });
-      }
+    if (project.id === workspacePublicRoomProjectId(actor3.tenantId, project.workspaceId) && (updates.kind !== void 0 || updates.name !== void 0)) {
+      return reply.status(409).send({
+        success: false,
+        error: "The workspace public room cannot be renamed or reclassified"
+      });
     }
-    const project = await this.projectStore.updateProject(
-      tenantId,
-      projectId,
+    const updated = await this.projectStore.updateProject(
+      actor3.tenantId,
+      project.id,
       updates
     );
-    if (!project) {
-      return reply.status(404).send({ success: false, error: "Project not found" });
-    }
-    return { success: true, data: project };
+    if (!updated) return this.projectNotFound(reply);
+    return { success: true, data: updated };
   }
   async deleteProject(request, reply) {
-    const tenantId = this.getTenantId(request);
-    const { workspaceId, projectId } = request.params;
-    const project = await this.projectStore.getProjectById(tenantId, projectId);
-    if (!project) {
-      return reply.status(404).send({ success: false, error: "Project not found" });
-    }
+    const actor3 = this.requireActor(request, reply);
+    if (!actor3) return;
+    const project = await this.requireReadableProject(
+      actor3,
+      request.params.workspaceId,
+      request.params.projectId,
+      "manage"
+    );
+    if (!project) return this.projectNotFound(reply);
+    const { workspaceId } = request.params;
     if (project.kind === "training") {
       const training = await this.projectStore.getProjectsByWorkspace(
-        tenantId,
-        workspaceId,
+        actor3.tenantId,
+        project.workspaceId,
         { kind: "training" }
       );
       if (training.length <= 1) {
@@ -11260,16 +11337,14 @@ var WorkspaceController = class {
         });
       }
     }
-    if (project.id === workspacePublicRoomProjectId(tenantId, project.workspaceId ?? workspaceId)) {
+    if (project.id === workspacePublicRoomProjectId(actor3.tenantId, project.workspaceId ?? workspaceId)) {
       return reply.status(409).send({
         success: false,
         error: "The workspace public room cannot be deleted"
       });
     }
-    const deleted = await this.projectStore.deleteProject(tenantId, projectId);
-    if (!deleted) {
-      return reply.status(404).send({ success: false, error: "Project not found" });
-    }
+    const deleted = await this.projectStore.deleteProject(actor3.tenantId, project.id);
+    if (!deleted) return this.projectNotFound(reply);
     return { success: true };
   }
   // ==================== File Operations ====================
@@ -11907,8 +11982,8 @@ var WorkspaceController = class {
     }
   }
 };
-function registerWorkspaceRoutes(app2, projectCollaboration) {
-  const controller = new WorkspaceController(projectCollaboration);
+function registerWorkspaceRoutes(app2, projectCollaboration, projectAccess) {
+  const controller = new WorkspaceController(projectCollaboration, projectAccess);
   app2.get("/api/workspaces", controller.listWorkspaces.bind(controller));
   app2.post("/api/workspaces", controller.createWorkspace.bind(controller));
   app2.get(
@@ -11975,250 +12050,12 @@ function registerWorkspaceRoutes(app2, projectCollaboration) {
   return controller;
 }
 
-// src/services/collaboration/ProjectAccessService.ts
-import { randomUUID as randomUUID14 } from "crypto";
-var ProjectCollaborationError = class extends Error {
-  /** Creates a project collaboration error. */
-  constructor(code, statusCode, message) {
-    super(message);
-    this.code = code;
-    this.statusCode = statusCode;
-    this.name = "ProjectCollaborationError";
-  }
-};
-var allowedRoles = {
-  read: /* @__PURE__ */ new Set(["owner", "admin", "member", "viewer"]),
-  send: /* @__PURE__ */ new Set(["owner", "admin", "member"]),
-  manage: /* @__PURE__ */ new Set(["owner", "admin"])
-};
-var membershipConflictNames = /* @__PURE__ */ new Set([
-  "DuplicateProjectMembershipError",
-  "ProjectMembershipIdConflictError"
-]);
-function isProjectMembershipConflict(error) {
-  return error instanceof Error && membershipConflictNames.has(error.name);
-}
-var ProjectAccessService = class {
-  /** Creates a project access service from explicitly injected stores. */
-  constructor(deps) {
-    this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID14;
-  }
-  /** Returns the project and active membership when the user has the requested capability. */
-  async requireProjectAccess(input) {
-    const project = await this.deps.projectStore.getProjectById(input.tenantId, input.projectId);
-    if (!project) {
-      throw new ProjectCollaborationError("PROJECT_NOT_FOUND", 404, "Project not found");
-    }
-    if (project.kind === "public") {
-      return this.requirePublicProjectAccess(project, input);
-    }
-    const membership = await this.deps.membershipStore.findByUser(
-      input.tenantId,
-      input.projectId,
-      input.userId
-    );
-    if (project.kind === "personal") {
-      if (!this.isActiveMembership(membership, input)) this.accessDenied();
-      this.requireCapability(membership, input.capability);
-      return { project, membership };
-    }
-    if (this.isActiveMembership(membership, input) && this.hasCapability(membership, input.capability)) {
-      return { project, membership };
-    }
-    const tenantAdmin = await this.tenantAdminMembership(project, input);
-    if (this.isActiveMembership(membership, input)) {
-      if (tenantAdmin) return { project, membership: tenantAdmin };
-      this.requireCapability(membership, input.capability);
-    }
-    const memberships = await this.deps.membershipStore.list(input.tenantId, input.projectId);
-    if (memberships.length !== 0) {
-      if (tenantAdmin) return { project, membership: tenantAdmin };
-      this.accessDenied();
-    }
-    if (!tenantAdmin) this.accessDenied();
-    let claim;
-    try {
-      claim = await this.deps.membershipStore.createInitialOwner({
-        id: this.idFactory(),
-        tenantId: input.tenantId,
-        projectId: input.projectId,
-        userId: input.userId
-      });
-    } catch (error) {
-      if (isProjectMembershipConflict(error)) {
-        throw new ProjectCollaborationError(
-          "PROJECT_MEMBERSHIP_CONFLICT",
-          409,
-          "Project membership could not be initialized"
-        );
-      }
-      throw error;
-    }
-    if (claim.kind === "created" || claim.kind === "existing") {
-      return { project, membership: claim.membership };
-    }
-    const racedMembership = await this.deps.membershipStore.findByUser(
-      input.tenantId,
-      input.projectId,
-      input.userId
-    );
-    if (racedMembership?.status !== "active") this.accessDenied();
-    this.requireCapability(racedMembership, input.capability);
-    return { project, membership: racedMembership };
-  }
-  /** Authorizes an already-existing membership, or any tenant member for public rooms; never mutates persistence. */
-  async requireExistingProjectAccess(input) {
-    const project = await this.deps.projectStore.getProjectById(input.tenantId, input.projectId);
-    if (!project) throw new ProjectCollaborationError("PROJECT_NOT_FOUND", 404, "Project not found");
-    if (project.kind === "public") {
-      return this.requireExistingPublicProjectAccess(project, input);
-    }
-    const membership = await this.deps.membershipStore.findByUser(
-      input.tenantId,
-      input.projectId,
-      input.userId
-    );
-    const activeMembership = this.isActiveMembership(membership, input) ? membership : void 0;
-    if (project.kind === "personal") {
-      if (!activeMembership) this.accessDenied();
-      this.requireCapability(activeMembership, input.capability);
-      return { project, membership: activeMembership };
-    }
-    if (activeMembership && this.hasCapability(activeMembership, input.capability)) {
-      return { project, membership: activeMembership };
-    }
-    const tenantAdmin = await this.tenantAdminMembership(project, input);
-    if (tenantAdmin) return { project, membership: tenantAdmin };
-    if (activeMembership) this.requireCapability(activeMembership, input.capability);
-    this.accessDenied();
-  }
-  /**
-   * Authorizes roster visibility for any active participant (owner/admin/member/viewer).
-   * Mutating the roster requires `manage` separately; reading it never does, because every
-   * room participant needs the member list to render the room and derive their own capabilities.
-   */
-  async requireRosterAccess(input) {
-    const project = await this.deps.projectStore.getProjectById(input.tenantId, input.projectId);
-    if (!project) throw new ProjectCollaborationError("PROJECT_NOT_FOUND", 404, "Project not found");
-    return this.requireProjectAccess({
-      ...input,
-      capability: "read"
-    });
-  }
-  async requirePublicProjectAccess(project, input) {
-    const membership = await this.deps.membershipStore.findByUser(
-      input.tenantId,
-      input.projectId,
-      input.userId
-    );
-    if (membership?.status === "active") {
-      if (this.hasCapability(membership, input.capability)) return { project, membership };
-      const tenantAdmin = await this.tenantAdminMembership(project, input);
-      if (tenantAdmin) return { project, membership: tenantAdmin };
-      this.requireCapability(membership, input.capability);
-      return { project, membership };
-    }
-    const materialized = await this.materializePublicMembership(input);
-    this.requireCapability(materialized, input.capability);
-    return { project, membership: materialized };
-  }
-  async requireExistingPublicProjectAccess(project, input) {
-    const membership = await this.deps.membershipStore.findByUser(
-      input.tenantId,
-      input.projectId,
-      input.userId
-    );
-    if (membership?.status === "active") {
-      if (this.hasCapability(membership, input.capability)) return { project, membership };
-      const tenantAdmin = await this.tenantAdminMembership(project, input);
-      if (tenantAdmin) return { project, membership: tenantAdmin };
-      this.requireCapability(membership, input.capability);
-      return { project, membership };
-    }
-    if (membership) this.accessDenied();
-    const tenantLink = await this.deps.userTenantLinkStore.getLink(input.userId, input.tenantId);
-    if (!tenantLink) this.accessDenied();
-    const role = tenantLink.role === "owner" || tenantLink.role === "admin" ? "admin" : "member";
-    const synthetic = {
-      id: `public:${input.userId}`,
-      tenantId: input.tenantId,
-      projectId: input.projectId,
-      userId: input.userId,
-      role,
-      status: "active",
-      joinedAt: project.createdAt,
-      updatedAt: project.updatedAt
-    };
-    this.requireCapability(synthetic, input.capability);
-    return { project, membership: synthetic };
-  }
-  async materializePublicMembership(input) {
-    const tenantLink = await this.deps.userTenantLinkStore.getLink(input.userId, input.tenantId);
-    if (!tenantLink) this.accessDenied();
-    const existing = await this.deps.membershipStore.findByUser(
-      input.tenantId,
-      input.projectId,
-      input.userId
-    );
-    if (existing) this.accessDenied();
-    const role = tenantLink.role === "owner" || tenantLink.role === "admin" ? "admin" : "member";
-    try {
-      return await this.deps.membershipStore.create({
-        id: this.idFactory(),
-        tenantId: input.tenantId,
-        projectId: input.projectId,
-        userId: input.userId,
-        role,
-        status: "active"
-      });
-    } catch (error) {
-      if (isProjectMembershipConflict(error)) {
-        const raced = await this.deps.membershipStore.findByUser(
-          input.tenantId,
-          input.projectId,
-          input.userId
-        );
-        if (raced?.status === "active") return raced;
-      }
-      throw error;
-    }
-  }
-  hasCapability(membership, capability2) {
-    return allowedRoles[capability2].has(membership.role);
-  }
-  requireCapability(membership, capability2) {
-    if (!this.hasCapability(membership, capability2)) this.accessDenied();
-  }
-  async tenantAdminMembership(project, input) {
-    if (project.kind === "personal") return void 0;
-    const tenantLink = await this.deps.userTenantLinkStore.getLink(input.userId, input.tenantId);
-    if (tenantLink?.role !== "owner" && tenantLink?.role !== "admin") return void 0;
-    return {
-      id: `tenant-admin:${input.userId}`,
-      tenantId: input.tenantId,
-      projectId: project.id,
-      userId: input.userId,
-      role: "admin",
-      status: "active",
-      joinedAt: project.createdAt,
-      updatedAt: project.updatedAt
-    };
-  }
-  isActiveMembership(membership, input) {
-    return membership != null && membership.tenantId === input.tenantId && membership.projectId === input.projectId && membership.userId === input.userId && membership.status === "active";
-  }
-  accessDenied() {
-    throw new ProjectCollaborationError("PROJECT_ACCESS_DENIED", 403, "Project access denied");
-  }
-};
-
 // src/controllers/database-configs.ts
 import {
   getStoreLattice as getStoreLattice17,
   sqlDatabaseManager
 } from "@axiom-lattice/core";
-import { randomUUID as randomUUID15 } from "crypto";
+import { randomUUID as randomUUID14 } from "crypto";
 function getTenantId16(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) {
@@ -12296,7 +12133,7 @@ async function createDatabaseConfig(request, reply) {
         message: "Database configuration with this key already exists"
       };
     }
-    const id3 = body.id || randomUUID15();
+    const id3 = body.id || randomUUID14();
     const config = await store2.createConfig(tenantId, id3, body);
     try {
       sqlDatabaseManager.registerDatabase(tenantId, config.key, config.config);
@@ -12501,7 +12338,7 @@ import {
   metricsServerManager as metricsServerManager2,
   SemanticMetricsClient as SemanticMetricsClient2
 } from "@axiom-lattice/core";
-import { randomUUID as randomUUID16 } from "crypto";
+import { randomUUID as randomUUID15 } from "crypto";
 function getTenantId17(request) {
   const userTenantId = request.user?.tenantId;
   if (userTenantId) {
@@ -12582,7 +12419,7 @@ async function createMetricsServerConfig(request, reply) {
         message: "selectedDataSources is required for semantic metrics servers"
       };
     }
-    const id3 = body.id || randomUUID16();
+    const id3 = body.id || randomUUID15();
     const configData = {
       key: body.key,
       name: body.name,
@@ -13245,7 +13082,7 @@ import {
   McpLatticeManager,
   convertToConnection
 } from "@axiom-lattice/core";
-import { randomUUID as randomUUID17 } from "crypto";
+import { randomUUID as randomUUID16 } from "crypto";
 
 // src/services/mcpConfigSync.ts
 var MCP_CONFIG_CHANGED_TOPIC = "mcp-config-changed";
@@ -13364,7 +13201,7 @@ async function createMcpServerConfig(request, reply) {
         message: "MCP server configuration with this key already exists"
       };
     }
-    const id3 = body.id || randomUUID17();
+    const id3 = body.id || randomUUID16();
     const config = await store2.createConfig(tenantId, id3, body);
     try {
       await connectAndRegisterTools(config);
@@ -13726,562 +13563,6 @@ function registerMcpServerConfigRoutes(app2) {
   app2.post("/api/mcp-servers/test-tools", testMcpServerTools);
 }
 
-// src/routes/mcp-apps.ts
-import {
-  parseMcpUiRef
-} from "@axiom-lattice/protocols";
-import {
-  getSandboxPluginCatalog as getSandboxPluginCatalog2,
-  mcpManager as mcpManager2,
-  resolvePluginConnections,
-  verifyMcpUiScope
-} from "@axiom-lattice/core";
-
-// src/services/mcp-ui/UiResourceResolver.ts
-import { createHash as createHash3 } from "crypto";
-var DEFAULT_TTL_MS = 5 * 60 * 1e3;
-function publicFieldsOf(payload) {
-  return {
-    mimeType: payload.mimeType,
-    html: payload.html,
-    ...payload.csp !== void 0 ? { csp: payload.csp } : {},
-    ...payload.permissions !== void 0 ? { permissions: payload.permissions } : {},
-    ...payload.prefersBorder !== void 0 ? { prefersBorder: payload.prefersBorder } : {}
-  };
-}
-var UiResourceResolver = class {
-  constructor(deps) {
-    this.deps = deps;
-    this.inFlight = /* @__PURE__ */ new Map();
-  }
-  keyOf(ref) {
-    return ref.kind === "mcp" ? `mcp\0${ref.serverKey}\0${ref.resourceUri}` : `plugin\0${ref.pluginType}\0${ref.resource}`;
-  }
-  fullKey(tenantId, ref) {
-    return `${tenantId}\0${this.keyOf(ref)}`;
-  }
-  /**
-   * Resolve a UI resource for a tenant.
-   *
-   * @param tenantId Tenant scope.
-   * @param ref The fence ref.
-   * @returns Public UI resource payload (no cache metadata).
-   */
-  async resolve(tenantId, ref) {
-    const key = this.fullKey(tenantId, ref);
-    const ttl = this.deps.ttlMs ?? DEFAULT_TTL_MS;
-    const cached = await this.deps.store.get(key);
-    if (cached && Date.now() - cached.fetchedAt < ttl) return publicFieldsOf(cached);
-    const existing = this.inFlight.get(key);
-    if (existing) return existing;
-    const promise = this.fetchAndCache(tenantId, ref, key, cached);
-    this.inFlight.set(key, promise);
-    try {
-      return await promise;
-    } finally {
-      this.inFlight.delete(key);
-    }
-  }
-  /**
-   * Evict the cached entry for a tenant/ref.
-   *
-   * @param tenantId Tenant scope.
-   * @param ref The fence ref.
-   */
-  async invalidate(tenantId, ref) {
-    await this.deps.store.delete(this.fullKey(tenantId, ref));
-  }
-  /**
-   * Evict every cached plugin UI resource for a tenant.
-   *
-   * @param tenantId Tenant whose plugin UI resources to drop.
-   * @remarks Called when a tenant's plugin catalog changes so an edited
-   * `ui/*.html` is re-fetched instead of being served from the TTL cache
-   * (which is keyed by ref identity, not content).
-   */
-  async invalidateTenantPlugins(tenantId) {
-    await this.deps.store.deleteByPrefix(`${tenantId}\0plugin\0`);
-  }
-  async fetchAndCache(tenantId, ref, key, cached) {
-    try {
-      const fresh = ref.kind === "mcp" ? await this.deps.fetchMcp(tenantId, ref.serverKey, ref.resourceUri) : await this.deps.fetchPlugin(tenantId, ref.pluginType, ref.resource);
-      const entry = {
-        ...publicFieldsOf(fresh),
-        hash: createHash3("sha256").update(fresh.html).digest("hex"),
-        fetchedAt: Date.now()
-      };
-      await this.deps.store.set(key, entry);
-      return publicFieldsOf(fresh);
-    } catch (error) {
-      if (cached) return { ...publicFieldsOf(cached), stale: true };
-      throw error;
-    }
-  }
-};
-
-// src/services/mcp-ui/McpUiResourceCacheStore.ts
-var InMemoryMcpUiResourceCacheStore = class {
-  constructor() {
-    this.map = /* @__PURE__ */ new Map();
-  }
-  async get(key) {
-    return this.map.get(key);
-  }
-  async set(key, entry) {
-    this.map.set(key, entry);
-  }
-  async delete(key) {
-    this.map.delete(key);
-  }
-  async deleteByPrefix(prefix) {
-    for (const key of this.map.keys()) {
-      if (key.startsWith(prefix)) this.map.delete(key);
-    }
-  }
-};
-
-// src/services/mcp-ui/buildCsp.ts
-var DEFAULT_CSP = [
-  "default-src 'none'",
-  "script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'",
-  "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data:",
-  "media-src 'self' data:",
-  // Fonts are restricted to the document origin; declared `resourceDomains`
-  // are the only origins ever added (no `data:` — a base64-embedded font must
-  // be served from a declared origin).
-  "font-src 'self'",
-  "object-src 'none'",
-  "connect-src 'none'",
-  "frame-src 'none'",
-  "base-uri 'self'"
-].join("; ");
-var ORIGIN_PATTERN = /^(https?|wss?):\/\/(\*\.)?[^\s;,'"*]+$/;
-function declaredOrigins(domains) {
-  if (!Array.isArray(domains)) return [];
-  return domains.filter((domain) => typeof domain === "string" && ORIGIN_PATTERN.test(domain));
-}
-function buildCsp(csp) {
-  if (!csp) return DEFAULT_CSP;
-  const resourceOrigins = declaredOrigins(csp.resourceDomains);
-  const resource = resourceOrigins.join(" ");
-  const withResourceOrigins = (base) => resource ? `${base} ${resource}` : base;
-  const img = ["'self'", "data:", ...resourceOrigins].join(" ");
-  const connect = declaredOrigins(csp.connectDomains);
-  const frame = declaredOrigins(csp.frameDomains);
-  const baseUri = declaredOrigins(csp.baseUriDomains);
-  const parts = [
-    "default-src 'none'",
-    withResourceOrigins("script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'"),
-    withResourceOrigins("style-src 'self' 'unsafe-inline'"),
-    `img-src ${img}`,
-    `media-src ${["'self'", "data:", ...resourceOrigins].join(" ")}`,
-    withResourceOrigins("font-src 'self'"),
-    "object-src 'none'",
-    `connect-src ${connect.length ? connect.join(" ") : "'none'"}`,
-    `frame-src ${frame.length ? frame.join(" ") : "'none'"}`,
-    `base-uri ${baseUri.length ? baseUri.join(" ") : "'self'"}`
-  ];
-  return parts.join("; ");
-}
-
-// src/services/mcp-ui/sandboxPage.ts
-var DEFAULT_CSP_LITERAL = JSON.stringify(buildCsp(void 0));
-var SANDBOX_HTML = `<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>MCP App Sandbox</title>
-    <style>html, body { margin: 0; height: 100%; }</style>
-  </head>
-  <body>
-    <script>
-      (function () {
-        var HOST_READY = "ui/notifications/sandbox-proxy-ready";
-        var RESOURCE_READY = "ui/notifications/sandbox-resource-ready";
-        var CONTROL_PREFIX = "ui/notifications/sandbox-";
-        var DEFAULT_CSP = ${DEFAULT_CSP_LITERAL};
-
-        function withCsp(html, csp) {
-          var policy = typeof csp === "string" && csp.length > 0 ? csp : DEFAULT_CSP;
-          var escaped = policy.replace(/&/g, "&amp;").replace(/"/g, "&quot;");
-          var meta = '<meta http-equiv="Content-Security-Policy" content="' + escaped + '">';
-          // Insert at the very start (after an optional doctype) so the parser
-          // places the meta in the implicit head. Never search for a literal
-          // <head>: a resource could hide a decoy inside a comment/string and
-          // slip its real head past the splice.
-          var doctype = /^\\s*<!doctype[^>]*>/i.exec(html);
-          if (doctype) {
-            return html.slice(0, doctype[0].length) + meta + html.slice(doctype[0].length);
-          }
-          return meta + html;
-        }
-
-        // Size reporter injected into every View document. The host renders the
-        // View inside an opaque-origin iframe it cannot measure, so auto-height
-        // only happens when the View posts ui/notifications/size-changed. Most
-        // hand-written plugin apps never do; this script makes every app report
-        // its own content size. It only measures and postMessages \u2014 it never
-        // mutates the app's DOM.
-        var SIZE_REPORTER = [
-          "(function(){",
-          "function send(){",
-          "try{",
-          "var d=document.documentElement,b=document.body;",
-          "var w=Math.ceil(Math.max(d?d.scrollWidth:0,b?b.scrollWidth:0));",
-          "var h=Math.ceil(Math.max(d?d.scrollHeight:0,b?b.scrollHeight:0));",
-          "window.parent.postMessage({jsonrpc:'2.0',method:'ui/notifications/size-changed',params:{width:w,height:h}},'*');",
-          "}catch(e){}",
-          "}",
-          "send();",
-          "window.addEventListener('load',send);",
-          "if(typeof ResizeObserver!=='undefined'){",
-          "var ro=new ResizeObserver(send);",
-          "ro.observe(document.documentElement);",
-          "if(document.body)ro.observe(document.body);",
-          "}else{window.addEventListener('resize',send);}",
-          "})();"
-        ].join("");
-
-        function withSizeReporter(html) {
-          // Split the closing tag so this template literal never contains a
-          // literal script terminator that would end the sandbox page's own
-          // script block during HTML parsing.
-          var tag = "<scr" + "ipt>" + SIZE_REPORTER + "<" + "/scr" + "ipt>";
-          var lower = html.toLowerCase();
-          var bodyEnd = lower.lastIndexOf("</body>");
-          if (bodyEnd >= 0) return html.slice(0, bodyEnd) + tag + html.slice(bodyEnd);
-          return html + tag;
-        }
-
-        var inner = null;
-
-        window.parent.postMessage({ jsonrpc: "2.0", method: HOST_READY, params: {} }, "*");
-
-        window.addEventListener("message", function (event) {
-          if (event.source !== window.parent) return;
-          var data = event.data;
-          if (!data || typeof data !== "object") return;
-
-          if (data.method === RESOURCE_READY) {
-            var params = data.params || {};
-            if (inner && inner.parentNode) inner.parentNode.removeChild(inner);
-            inner = document.createElement("iframe");
-            inner.setAttribute("sandbox", params.sandbox || "allow-scripts");
-            inner.setAttribute("srcdoc", withCsp(withSizeReporter(String(params.html || "")), params.csp));
-            inner.style.cssText = "width:100%;height:100%;border:0;display:block";
-            document.body.appendChild(inner);
-            return;
-          }
-
-          if (typeof data.method === "string" && data.method.indexOf(CONTROL_PREFIX) === 0) return;
-          if (inner && inner.contentWindow) inner.contentWindow.postMessage(data, "*");
-        });
-
-        window.addEventListener("message", function (event) {
-          if (inner && event.source === inner.contentWindow) {
-            var data = event.data;
-            if (data && typeof data === "object" && typeof data.method === "string"
-              && data.method.indexOf(CONTROL_PREFIX) === 0) return;
-            window.parent.postMessage(event.data, "*");
-          }
-        });
-      })();
-    </script>
-  </body>
-</html>
-`;
-
-// src/routes/mcp-apps.ts
-var SANDBOX_HTML_CONTENT_TYPE = "text/html; charset=utf-8";
-var PluginMethodNotSupportedError = class extends Error {
-  /**
-   * @param method - Unsupported JSON-RPC method.
-   */
-  constructor(method) {
-    super(`plugin backend does not support ${method}`);
-    this.name = "PluginMethodNotSupportedError";
-  }
-};
-var McpAppScopeError = class extends Error {
-  /**
-   * @param status - HTTP status to return.
-   * @param code - Stable machine-readable denial code.
-   */
-  constructor(status, code) {
-    super(code);
-    this.status = status;
-    this.code = code;
-    this.name = "McpAppScopeError";
-  }
-};
-function denyScope(status, code, detail) {
-  console.warn(JSON.stringify({ event: "mcp-apps:scope-denied", ...detail, code }));
-  return new McpAppScopeError(status, code);
-}
-var ALLOWED_METHODS = /* @__PURE__ */ new Set(["tools/call", "tools/list", "resources/read"]);
-function asRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
-}
-function makeMcpAppHandlers(deps) {
-  return {
-    /**
-     * Resolve the `mcp_app` UI resource for a parsed ref.
-     *
-     * @param tenantId Tenant scope.
-     * @param rawRef Untrusted ref payload.
-     * @returns The resource payload plus a ready-to-use `cspPolicy` string
-     * ({@link buildCsp}, always non-empty), or a 400/502 error envelope.
-     */
-    async resource(tenantId, rawRef) {
-      const ref = parseMcpUiRef(rawRef);
-      if (!ref) return { status: 400, body: { error: "INVALID_REF" } };
-      if (ref.kind === "plugin" && ref.pluginType === "") {
-        return { status: 400, body: { error: "INVALID_REF" } };
-      }
-      try {
-        const payload = await deps.resolveUiResource(tenantId, ref);
-        return { status: 200, body: { ...payload, cspPolicy: buildCsp(payload.csp) } };
-      } catch (error) {
-        console.warn(JSON.stringify({
-          event: "mcp-apps:resource-failed",
-          tenantId,
-          kind: ref.kind,
-          error: error instanceof Error ? error.message : String(error)
-        }));
-        return { status: 502, body: { error: "RESOURCE_UNAVAILABLE" } };
-      }
-    },
-    /**
-     * Proxy an allow-listed JSON-RPC method for a parsed ref.
-     *
-     * @param tenantId Tenant scope.
-     * @param rawRef Untrusted ref payload.
-     * @param method JSON-RPC method name.
-     * @param params JSON-RPC params.
-     * @param context Request-scoped run context forwarded to `tools/call`.
-     * @returns The backend result, or a 400/403/502 error envelope.
-     */
-    async rpc(tenantId, rawRef, method, params, context) {
-      const ref = parseMcpUiRef(rawRef);
-      if (!ref) return { status: 400, body: { error: "INVALID_REF" } };
-      if (!ALLOWED_METHODS.has(method)) return { status: 403, body: { error: "METHOD_NOT_ALLOWED" } };
-      try {
-        if (method === "tools/call") {
-          const name = typeof params.name === "string" ? params.name : "";
-          if (name === "") return { status: 400, body: { error: "INVALID_PARAMS" } };
-          if ("pluginType" in ref && ref.pluginType === "") {
-            return { status: 400, body: { error: "INVALID_REF" } };
-          }
-          return {
-            status: 200,
-            body: await deps.callTool(tenantId, ref, name, asRecord(params.arguments) ?? {}, context)
-          };
-        }
-        if (method === "resources/read") {
-          const uri = typeof params.uri === "string" ? params.uri : "";
-          if (uri === "") return { status: 400, body: { error: "INVALID_PARAMS" } };
-          return { status: 200, body: await deps.readResource(tenantId, ref, uri) };
-        }
-        return { status: 200, body: { tools: await deps.listTools(tenantId, ref) } };
-      } catch (error) {
-        if (error instanceof McpAppScopeError) {
-          return { status: error.status, body: { error: error.code } };
-        }
-        if (error instanceof PluginToolScopeError) {
-          return { status: 403, body: { error: "PLUGIN_TOOL_SCOPE" } };
-        }
-        if (error instanceof PluginMethodNotSupportedError) {
-          return { status: 403, body: { error: "PLUGIN_METHOD_UNSUPPORTED" } };
-        }
-        const context2 = { tenantId, kind: ref.kind, method };
-        if (method === "resources/read") context2.uri = typeof params.uri === "string" ? params.uri : "";
-        if (method === "tools/call") context2.name = typeof params.name === "string" ? params.name : "";
-        console.warn(JSON.stringify({
-          event: "mcp-apps:rpc-failed",
-          ...context2,
-          error: error instanceof Error ? error.message : String(error)
-        }));
-        return { status: 502, body: { error: "RPC_FAILED" } };
-      }
-    }
-  };
-}
-async function fetchPluginUiResource(backend, tenantId, pluginType, resource) {
-  const plugin = await backend.resolvePlugin(tenantId, pluginType);
-  if (!plugin) throw new Error(`plugin "${pluginType}" not found`);
-  const tool = (plugin.meta.tools ?? []).find((t2) => t2.ui?.resource === resource);
-  if (!tool?.ui) throw new Error(`plugin "${pluginType}" has no tool declaring ui resource "${resource}"`);
-  const inline = plugin.meta.uiResources?.[resource];
-  if (inline) {
-    return {
-      mimeType: inline.mimeType ?? "text/html;profile=mcp-app",
-      html: inline.html,
-      csp: inline.csp ?? tool.ui.csp,
-      permissions: tool.ui.permissions,
-      prefersBorder: tool.ui.prefersBorder
-    };
-  }
-  const html = await backend.catalog.readPluginFile(tenantId, pluginType, resource);
-  return {
-    mimeType: "text/html",
-    html,
-    csp: tool.ui.csp,
-    permissions: tool.ui.permissions,
-    prefersBorder: tool.ui.prefersBorder
-  };
-}
-async function callPluginTool(backend, tenantId, ref, name, args, context, deps) {
-  const scope = ref.scope ? (deps?.verifyScope ?? verifyMcpUiScope)(ref.scope) : null;
-  if (ref.scope && !scope) {
-    throw denyScope(403, "SCOPE_INVALID", {
-      tenantId,
-      pluginType: ref.pluginType,
-      tool: name
-    });
-  }
-  if (scope) {
-    const mismatched = scope.tid !== tenantId || scope.plugin !== ref.pluginType || scope.resource !== ref.resource;
-    if (mismatched) {
-      throw denyScope(403, "SCOPE_MISMATCH", {
-        tenantId,
-        pluginType: ref.pluginType,
-        tool: name,
-        jti: scope.jti,
-        threadId: scope.thid
-      });
-    }
-  }
-  const manifest = await backend.catalog.getValidatedManifest(tenantId, ref.pluginType);
-  const rawConnectionKey = args.connectionKey;
-  const explicit = typeof rawConnectionKey === "string" ? rawConnectionKey : void 0;
-  const scoped = scope?.ck;
-  const connectionRelevant = Boolean(manifest?.connection) || scoped !== void 0;
-  if (connectionRelevant && (explicit !== void 0 ? explicit !== scoped : rawConnectionKey !== void 0)) {
-    throw denyScope(403, "CONNECTION_NOT_ALLOWED", {
-      tenantId,
-      pluginType: ref.pluginType,
-      tool: name,
-      jti: scope?.jti,
-      threadId: scope?.thid
-    });
-  }
-  let connection;
-  let connectionKey;
-  if (scoped !== void 0) {
-    const resolveConnections = deps?.resolveConnections ?? resolvePluginConnections;
-    const resolved = await resolveConnections(
-      ref.pluginType,
-      { connections: [scoped] },
-      { tenantId }
-    );
-    if (resolved.length === 0) {
-      throw denyScope(403, "CONNECTION_NOT_ALLOWED", {
-        tenantId,
-        pluginType: ref.pluginType,
-        tool: name,
-        jti: scope?.jti,
-        threadId: scope?.thid
-      });
-    }
-    connection = resolved[0].config;
-    connectionKey = resolved[0].key;
-  }
-  if (manifest?.connection && !connectionKey) {
-    throw denyScope(409, "CONNECTION_REQUIRED", {
-      tenantId,
-      pluginType: ref.pluginType,
-      tool: name,
-      jti: scope?.jti,
-      threadId: scope?.thid
-    });
-  }
-  const identity = scope ? {
-    workspaceId: scope.wid,
-    projectId: scope.pid,
-    threadId: scope.thid,
-    assistantId: scope.aid
-  } : {
-    workspaceId: context?.workspaceId,
-    projectId: context?.projectId
-  };
-  return invokePluginTool(backend, tenantId, ref.pluginType, name, args, {
-    ...identity,
-    ...connection === void 0 ? {} : { connection }
-  });
-}
-function createDefaultPluginBackend() {
-  return {
-    resolvePlugin: (tenantId, type) => resolveTenantPluginByType(tenantId, type),
-    catalog: {
-      readPluginFile: (tenantId, pluginType, relPath) => getSandboxPluginCatalog2().readPluginFile(tenantId, pluginType, relPath),
-      getValidatedManifest: (tenantId, pluginType) => getSandboxPluginCatalog2().getValidatedManifest(tenantId, pluginType),
-      getExecutor: () => getSandboxPluginCatalog2().getExecutor()
-    }
-  };
-}
-var uiResourceResolverSingleton;
-function getMcpUiResourceResolver() {
-  return uiResourceResolverSingleton;
-}
-function resolveMcpAppDeps(pluginBackend = createDefaultPluginBackend()) {
-  const uiResourceResolver = new UiResourceResolver({
-    store: new InMemoryMcpUiResourceCacheStore(),
-    fetchMcp: (tenantId, serverKey, resourceUri) => mcpManager2.readUiResource(tenantId, serverKey, resourceUri),
-    fetchPlugin: (tenantId, pluginType, resource) => fetchPluginUiResource(pluginBackend, tenantId, pluginType, resource)
-  });
-  uiResourceResolverSingleton = uiResourceResolver;
-  return {
-    resolveUiResource: (tenantId, ref) => uiResourceResolver.resolve(tenantId, ref),
-    callTool: (tenantId, ref, name, args, context) => ref.kind === "mcp" ? mcpManager2.callServerTool(tenantId, ref.serverKey, name, args) : callPluginTool(pluginBackend, tenantId, ref, name, args, context),
-    // Plugin refs reach these only after `tools/call`; the handler treats the
-    // rejection as an unsupported method (403). The branches are live because
-    // the pure handler deliberately delegates method policy to the deps.
-    readResource: (tenantId, ref, uri) => ref.kind === "mcp" ? mcpManager2.readServerResource(tenantId, ref.serverKey, uri) : Promise.reject(new PluginMethodNotSupportedError("resources/read")),
-    listTools: (tenantId, ref) => ref.kind === "mcp" ? mcpManager2.getAvailableTools(tenantId, ref.serverKey) : Promise.reject(new PluginMethodNotSupportedError("tools/list"))
-  };
-}
-function firstHeader(request, name) {
-  const header2 = request.headers[name];
-  return Array.isArray(header2) ? header2[0] : header2;
-}
-function tenantOf(request) {
-  const user = request.user;
-  return user?.tenantId ?? firstHeader(request, "x-tenant-id") ?? "default";
-}
-function runContextOf(request) {
-  return {
-    tenantId: tenantOf(request),
-    workspaceId: firstHeader(request, "x-workspace-id"),
-    projectId: firstHeader(request, "x-project-id")
-  };
-}
-function registerMcpAppRoutes(fastify2, deps = resolveMcpAppDeps()) {
-  const handlers = makeMcpAppHandlers(deps);
-  fastify2.get("/mcp-apps/sandbox.html", async (_request, reply) => {
-    return reply.header("content-type", SANDBOX_HTML_CONTENT_TYPE).header("x-content-type-options", "nosniff").header("cache-control", "no-store").send(SANDBOX_HTML);
-  });
-  fastify2.post("/api/mcp-apps/resource", async (request, reply) => {
-    const body = asRecord(request.body) ?? {};
-    const result = await handlers.resource(tenantOf(request), body.ref);
-    return reply.code(result.status).send(result.body);
-  });
-  fastify2.post("/api/mcp-apps/rpc", async (request, reply) => {
-    const body = asRecord(request.body) ?? {};
-    const params = asRecord(body.params) ?? {};
-    const context = runContextOf(request);
-    const result = await handlers.rpc(
-      context.tenantId,
-      body.ref,
-      String(body.method ?? ""),
-      params,
-      context
-    );
-    return reply.code(result.status).send(result.body);
-  });
-}
-
 // src/controllers/eval.ts
 import { getStoreLattice as getStoreLattice21, hasModelLatticeForTenant as hasModelLatticeForTenant2, modelLatticeManager as modelLatticeManager2 } from "@axiom-lattice/core";
 import { v4 as uuidv43 } from "uuid";
@@ -15431,6 +14712,16 @@ var AuthController = class {
   }
   async login(request, reply) {
     const { email, password } = request.body;
+    const rateLimit = await getRateLimitService().consume("auth.login", {
+      ip: request.ip
+    });
+    if (!rateLimit.allowed) {
+      return reply.header("Retry-After", String(rateLimit.retryAfterSeconds)).status(429).send({
+        success: false,
+        error: "RATE_LIMITED",
+        retryAfterSeconds: rateLimit.retryAfterSeconds
+      });
+    }
     try {
       const user = await this.userStore.getUserByEmail(email);
       if (!user) {
@@ -15799,7 +15090,7 @@ function isStaleConsoleSessionCredential(authHeader) {
 function bypassesConsoleAuth(request) {
   const path5 = request.url.split("?")[0];
   const method = request.method;
-  if (method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/bootstrap$/.test(path5) || (method === "GET" || method === "POST") && /^\/api\/web-apps\/[^/]+\/runtime\/threads$/.test(path5) || (method === "PATCH" || method === "DELETE") && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/messages$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/files\/(viewfile|downloadfile)$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/api\/assistants\/[^/]+\/threads\/[^/]+\/sandbox\/(viewfile|downloadfile)$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/(messages\/stream|abort|attachments)$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/interrupts\/[^/]+\/resume$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+\/join$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+\/cancel$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/chat$/.test(path5) || method === "GET" && /^\/embed\/[^/]+$/.test(path5) || method === "GET" && path5 === "/mcp-apps/sandbox.html" || (method === "POST" || method === "DELETE") && path5 === "/open/mcp" || (method === "POST" || method === "GET") && (path5 === "/mcp" || path5 === "/mcp/") || method === "POST" && path5 === "/open/session" || (method === "GET" || method === "POST") && path5.startsWith("/open/sandbox/files/")) return true;
+  if (method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/bootstrap$/.test(path5) || (method === "GET" || method === "POST") && /^\/api\/web-apps\/[^/]+\/runtime\/threads$/.test(path5) || (method === "PATCH" || method === "DELETE") && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/messages$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/files\/(viewfile|downloadfile)$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime\/api\/assistants\/[^/]+\/threads\/[^/]+\/sandbox\/(viewfile|downloadfile)$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/(messages\/stream|abort|attachments)$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime\/threads\/[^/]+\/interrupts\/[^/]+\/resume$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+\/join$/.test(path5) || method === "POST" && /^\/api\/web-apps\/[^/]+\/runtime(?:\/api)?\/assistants\/[^/]+\/threads\/[^/]+\/runs\/[^/]+\/cancel$/.test(path5) || method === "GET" && /^\/api\/web-apps\/[^/]+\/chat$/.test(path5) || method === "GET" && /^\/embed\/[^/]+$/.test(path5) || method === "GET" && path5 === "/mcp-apps/sandbox.html" || method === "GET" && /^\/api\/mcp-app-shares\/[^/]+\/bootstrap$/.test(path5) || method === "POST" && /^\/api\/mcp-app-shares\/[^/]+\/(resource|rpc|unlock)$/.test(path5) || (method === "POST" || method === "DELETE") && path5 === "/open/mcp" || (method === "POST" || method === "GET") && (path5 === "/mcp" || path5 === "/mcp/") || method === "POST" && path5 === "/open/session" || (method === "GET" || method === "POST") && path5.startsWith("/open/sandbox/files/")) return true;
   if (request.method === "GET" && (/^\/api\/a2a\/agents\/[^/]+\/\.well-known\/agent-card\.json$/.test(path5) || /^\/a2a\/(?:v1\/)?[^/]+\/\.well-known\/agent-card\.json$/.test(path5))) {
     return true;
   }
@@ -16221,7 +15512,7 @@ function registerChannelRoutes(app2, dependencies) {
 }
 
 // src/controllers/channel-installations.ts
-import { randomUUID as randomUUID18 } from "crypto";
+import { randomUUID as randomUUID17 } from "crypto";
 import {
   descriptorDataValue
 } from "@axiom-lattice/protocols";
@@ -16442,7 +15733,7 @@ async function createChannelInstallation(request, reply) {
       };
     }
     const store2 = await getInstallationStore();
-    const installationId = randomUUID18();
+    const installationId = randomUUID17();
     const createInput = {
       channel: body.channel,
       name: body.name,
@@ -17434,7 +16725,7 @@ async function getLocalA2ATemplates(_request, reply) {
 }
 
 // src/routes/a2a-test-connection.ts
-import { randomUUID as randomUUID19 } from "crypto";
+import { randomUUID as randomUUID18 } from "crypto";
 function describeTestConnectionError(error, agentCardUrl) {
   if (!(error instanceof Error)) {
     return `Failed to fetch agent card from ${agentCardUrl}: ${String(error)}`;
@@ -17474,7 +16765,7 @@ async function ensureLocalRuntimeForConnectionTest(localRuntime, agentCardUrl) {
     return { error: portValidation.error };
   }
   const state = await localA2AService.startProvider(
-    `test-${randomUUID19()}`,
+    `test-${randomUUID18()}`,
     testRuntime
   );
   if (state.status === "running") return { runtimeId: state.runtimeId };
@@ -17565,6 +16856,7 @@ import {
   ProjectTaskOwnerPolicyError as ProjectTaskOwnerPolicyError2,
   projectMutationMutex as projectMutationMutex2,
   projectTaskAdmissionNotifier,
+  projectRoomMessageNotifier,
   taskLifecycleNotifier as taskLifecycleNotifier2
 } from "@axiom-lattice/core";
 
@@ -17903,16 +17195,16 @@ function snapshotEnsureInput(input) {
 }
 
 // src/services/tasks/TaskCommandService.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 
 // src/services/collaboration/ProjectTaskRunService.ts
-import { randomUUID as randomUUID21 } from "crypto";
+import { randomUUID as randomUUID20 } from "crypto";
 import {
   createTaskRunBridge
 } from "@axiom-lattice/core";
 
 // src/services/collaboration/ProjectTaskRunPlanner.ts
-import { randomUUID as randomUUID20 } from "crypto";
+import { randomUUID as randomUUID19 } from "crypto";
 
 // src/services/collaboration/ProjectTaskRunProtocol.ts
 import {
@@ -18228,7 +17520,7 @@ var ProjectTaskRunPlanner = class {
     } catch (error) {
       throw asPlanError(error);
     }
-    const inputId = (this.deps.idFactory ?? randomUUID20)();
+    const inputId = (this.deps.idFactory ?? randomUUID19)();
     const actor3 = input.actor ?? SYSTEM_ACTOR;
     const userId = actor3.startsWith("user:") && actor3.length > "user:".length ? actor3.slice("user:".length) : void 0;
     const trustedContext = {
@@ -18371,7 +17663,7 @@ var ProjectTaskRunService = class {
       ...deps.idFactory === void 0 ? {} : { idFactory: deps.idFactory }
     });
     this.runBridge = createTaskRunBridge({ lifecycle: deps.lifecycle });
-    this.idFactory = deps.idFactory ?? randomUUID21;
+    this.idFactory = deps.idFactory ?? randomUUID20;
     this.log = deps.log ?? { warn: () => void 0 };
   }
   /**
@@ -19040,7 +18332,7 @@ var _TaskCommandService = class _TaskCommandService {
       threadId,
       summary: "User comment",
       detail: { markdown: text, type: "user_comment" },
-      fallbackEventKey: `task-comment:${task.id}:${createHash4("sha256").update(text).digest("hex")}`
+      fallbackEventKey: `task-comment:${task.id}:${createHash3("sha256").update(text).digest("hex")}`
     });
     const agent = this.deps.agents.getAgent(this.agentScope(task, threadId));
     await agent.addMessage({ input: { message: text } });
@@ -19728,7 +19020,7 @@ var AgentWebAppService = class {
   }
   async create(context, input) {
     await this.validateAssistant(context, input.assistantId);
-    const normalized = await this.validateConfig(context.tenantId, input);
+    const normalized = await this.validateConfig(context, input);
     return this.deps.webAppStore.create(context.tenantId, normalized);
   }
   async list(context, assistantId) {
@@ -19755,7 +19047,7 @@ var AgentWebAppService = class {
       identity: patch.identity ?? current3.identity
     };
     await this.validateAssistant(context, current3.assistantId);
-    const validated = await this.validateConfig(context.tenantId, effective);
+    const validated = await this.validateConfig(context, effective, current3);
     const update = {
       ...patch.name !== void 0 ? { name: validated.name } : {},
       ...Object.prototype.hasOwnProperty.call(patch, "description") ? { description: validated.description } : {},
@@ -19768,7 +19060,7 @@ var AgentWebAppService = class {
   }
   async enable(context, webAppId) {
     const current3 = await this.requireAuthorizedWebApp(context, webAppId);
-    await this.validateConfig(context.tenantId, current3);
+    await this.validateConfig(context, current3, current3);
     return this.writeSnapshot(context, current3, { status: "active" });
   }
   async disable(context, webAppId) {
@@ -19790,7 +19082,7 @@ var AgentWebAppService = class {
     if (await this.deps.configuredAgentResolver.exists(context.tenantId, assistantId)) return;
     throw new AgentWebAppError("ASSISTANT_NOT_FOUND", 404, "Assistant not found");
   }
-  async validateConfig(tenantId, input) {
+  async validateConfig(context, input, existing) {
     const allowedProjectIds = [...new Set(input.scope.allowedProjectIds)];
     if (!allowedProjectIds.length || !allowedProjectIds.includes(input.scope.defaultProjectId)) {
       throw new AgentWebAppError("PROJECT_SCOPE_INVALID", 400, "Default project must be in the project allowlist");
@@ -19798,13 +19090,28 @@ var AgentWebAppService = class {
     if (!input.features.projectSelector && allowedProjectIds.length !== 1) {
       throw new AgentWebAppError("PROJECT_SCOPE_INVALID", 400, "Disabled project selection requires exactly one project");
     }
+    const existingIds = new Set(existing?.scope.allowedProjectIds ?? []);
     for (const projectId of allowedProjectIds) {
-      if (!await this.deps.projectStore.getProjectById(tenantId, projectId)) {
+      if (!await this.deps.projectStore.getProjectById(context.tenantId, projectId)) {
         throw new AgentWebAppError("PROJECT_NOT_FOUND", 404, "Project not found");
       }
+      if (existingIds.has(projectId)) continue;
+      try {
+        await this.deps.projectAccess.requireExistingProjectAccess({
+          tenantId: context.tenantId,
+          userId: context.userId,
+          projectId,
+          capability: "read"
+        });
+      } catch (error) {
+        if (error instanceof ProjectCollaborationError) {
+          throw new AgentWebAppError("PROJECT_NOT_FOUND", 404, "Project not found");
+        }
+        throw error;
+      }
     }
     const scope = await this.validateModels(
-      tenantId,
+      context.tenantId,
       input.scope,
       input.features.modelSelector
     );
@@ -20013,7 +19320,7 @@ import { createHmac as createHmac3 } from "crypto";
 import { z as z5, ZodError as ZodError2 } from "zod";
 
 // src/services/agent-web-app/AgentWebAppRuntimeService.ts
-import { createHash as createHash5, randomUUID as randomUUID22 } from "crypto";
+import { createHash as createHash4, randomUUID as randomUUID21 } from "crypto";
 import { MessageChunkTypes as MessageChunkTypes3, parseAgentWebAppGenUIBlock, buildAffinityMissChunk as buildAffinityMissChunk2 } from "@axiom-lattice/protocols";
 import { getReplicaId as getReplicaId7, getThreadRunOwner as getThreadRunOwner2, normalizeAgentInterrupts as normalizeAgentInterrupts2 } from "@axiom-lattice/core";
 function isRecord9(value) {
@@ -20308,10 +19615,10 @@ ${formatFileRefsSection(refs)}` : input.content;
     const runtime = await this.resolveOwnedRuntime(webAppId, userId, threadId, selection);
     this.requireNamedFeature(runtime.webApp.features.attachments, "Attachments are disabled");
     if (!this.deps.saveProjectFile || !this.deps.attachmentRefs) this.fail("INTERNAL_ERROR", 500, "Attachment service is unavailable");
-    const userDigest = createHash5("sha256").update(userId, "utf8").digest("hex");
-    const contentDigest = createHash5("sha256").update(file.bytes).digest("hex");
+    const userDigest = createHash4("sha256").update(userId, "utf8").digest("hex");
+    const contentDigest = createHash4("sha256").update(file.bytes).digest("hex");
     const displayName = file.name;
-    const physicalName = `${randomUUID22()}-${sanitizePhysicalFilename(file.name)}`;
+    const physicalName = `${randomUUID21()}-${sanitizePhysicalFilename(file.name)}`;
     const saved = await this.deps.saveProjectFile({
       tenantId: runtime.webApp.tenantId,
       workspaceId: runtime.project.workspaceId,
@@ -20472,7 +19779,7 @@ ${formatFileRefsSection(refs)}` : input.content;
     const thread = await this.deps.threadStore.createThread(
       runtime.webApp.tenantId,
       runtime.webApp.assistantId,
-      randomUUID22(),
+      randomUUID21(),
       { metadata: this.metadata(runtime, userId, normalizeLabel(rawLabel)) }
     );
     return toRuntimeThread(thread);
@@ -20517,7 +19824,7 @@ function implicitThreadId(runtime, userId) {
     userId,
     runtime.project.id
   ]);
-  const bytes = createHash5("sha256").update(canonicalTuple, "utf8").digest().subarray(0, 16);
+  const bytes = createHash4("sha256").update(canonicalTuple, "utf8").digest().subarray(0, 16);
   bytes[6] = bytes[6] & 15 | 128;
   bytes[8] = bytes[8] & 63 | 128;
   const hex = bytes.toString("hex");
@@ -21331,17 +20638,19 @@ var CSS_CONTENT_TYPE = "text/css; charset=utf-8";
 var EXACT_ASSETS = {
   "agent-chat-loader.js": { contentType: JS_CONTENT_TYPE },
   "embed-page.js": { contentType: JS_CONTENT_TYPE },
-  "embed-page.css": { contentType: CSS_CONTENT_TYPE }
+  "embed-page.css": { contentType: CSS_CONTENT_TYPE },
+  "mcp-app-page.js": { contentType: JS_CONTENT_TYPE },
+  "mcp-app-page.css": { contentType: CSS_CONTENT_TYPE }
 };
-var HASHED_CHUNK_PATTERN = /^embed-page-[A-Za-z0-9._-]+\.(js|css)$/;
-var CHUNK_CSS_PATTERN = /^embed-page-[A-Za-z0-9._-]+\.css$/;
+var HASHED_CHUNK_PATTERN = /^(embed-page|mcp-app-page)-[A-Za-z0-9._-]+\.(js|css)$/;
+var CHUNK_CSS_PATTERN = /^(embed-page|mcp-app-page)-[A-Za-z0-9._-]+\.css$/;
 function resolveAsset(asset) {
   if (asset.includes("..")) return null;
   const exact2 = EXACT_ASSETS[asset];
   if (exact2 !== void 0) return { contentType: exact2.contentType, immutable: false };
   const hashed = HASHED_CHUNK_PATTERN.exec(asset);
   if (hashed) {
-    return { contentType: hashed[1] === "css" ? CSS_CONTENT_TYPE : JS_CONTENT_TYPE, immutable: true };
+    return { contentType: hashed[2] === "css" ? CSS_CONTENT_TYPE : JS_CONTENT_TYPE, immutable: true };
   }
   return null;
 }
@@ -21446,7 +20755,7 @@ function registerAgentWebAppEmbedRoutes(app2, deps = {}) {
 }
 
 // src/services/agent-web-app/AgentWebAppAttachmentRef.ts
-import { createCipheriv, createDecipheriv, createHash as createHash6, randomBytes as randomBytes2 } from "crypto";
+import { createCipheriv, createDecipheriv, createHash as createHash5, randomBytes as randomBytes2 } from "crypto";
 var TTL_MS = 15 * 6e4;
 function resolveAgentWebAppAttachmentSecret(consoleSecret) {
   return process.env.WEB_APP_ATTACHMENT_SECRET || process.env.AUTH_TOKEN_SECRET || process.env.JWT_SECRET || consoleSecret;
@@ -21455,7 +20764,7 @@ var AgentWebAppAttachmentRefService = class {
   constructor(secret, now = Date.now) {
     this.now = now;
     if (!secret) throw new Error("Attachment signing secret is required");
-    this.key = createHash6("sha256").update(secret, "utf8").digest();
+    this.key = createHash5("sha256").update(secret, "utf8").digest();
   }
   sign(input) {
     const payload = {
@@ -21517,7 +20826,7 @@ function decodeCanonical(value, expectedBytes) {
   return decoded;
 }
 function digestUser(userId) {
-  return createHash6("sha256").update(userId, "utf8").digest("hex");
+  return createHash5("sha256").update(userId, "utf8").digest("hex");
 }
 function isAttachmentPayload(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
@@ -21880,7 +21189,7 @@ function registerCapabilityBundleRoutes(app2, controller) {
 import { ZodError as ZodError3 } from "zod";
 
 // src/services/model-provider/ModelProviderService.ts
-import { randomUUID as randomUUID23 } from "crypto";
+import { randomUUID as randomUUID22 } from "crypto";
 import { toModelKey } from "@axiom-lattice/protocols";
 import {
   assertSafeUpstreamUrl,
@@ -22219,7 +21528,7 @@ var unsafeReasonToErrorCode = {
 var ModelProviderService = class {
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? (() => randomUUID23());
+    this.idFactory = deps.idFactory ?? (() => randomUUID22());
   }
   /**
    * List the tenant's provider configurations.
@@ -23410,12 +22719,12 @@ async function handleModelProviderChanged(payload, reconcile) {
 }
 
 // src/services/collaboration/ProjectRoomService.ts
-import { randomUUID as randomUUID24 } from "crypto";
+import { randomUUID as randomUUID23 } from "crypto";
 var ProjectRoomService = class {
   /** Creates a project room service from explicitly injected collaborators. */
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID24;
+    this.idFactory = deps.idFactory ?? randomUUID23;
   }
   /**
    * Authorizes read access and ensures the project's main room.
@@ -23475,7 +22784,7 @@ var ProjectRoomService = class {
 };
 
 // src/services/collaboration/ProjectMembershipService.ts
-import { randomUUID as randomUUID25 } from "crypto";
+import { randomUUID as randomUUID24 } from "crypto";
 var ProjectMembershipServiceError = class extends Error {
   constructor(code, statusCode, message) {
     super(message);
@@ -23484,14 +22793,14 @@ var ProjectMembershipServiceError = class extends Error {
     this.name = "ProjectMembershipServiceError";
   }
 };
-var membershipConflictNames2 = /* @__PURE__ */ new Set(["DuplicateProjectMembershipError", "ProjectMembershipIdConflictError"]);
+var membershipConflictNames = /* @__PURE__ */ new Set(["DuplicateProjectMembershipError", "ProjectMembershipIdConflictError"]);
 function isMembershipConflict(error) {
-  return error instanceof Error && membershipConflictNames2.has(error.name);
+  return error instanceof Error && membershipConflictNames.has(error.name);
 }
 var ProjectMembershipService = class {
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID25;
+    this.idFactory = deps.idFactory ?? randomUUID24;
     this.mutationMutex = deps.projectMutationMutex ?? projectMutationMutex;
   }
   async list(actor3) {
@@ -23621,7 +22930,7 @@ var ProjectMembershipService = class {
 };
 
 // src/services/collaboration/ProjectRosterService.ts
-import { randomUUID as randomUUID26 } from "crypto";
+import { randomUUID as randomUUID25 } from "crypto";
 var ProjectRosterServiceError = class extends Error {
   /** Creates a stable roster service error. */
   constructor(code, statusCode, message) {
@@ -23640,7 +22949,7 @@ var ProjectRosterService = class {
   /** Creates a roster service from explicitly injected collaborators. */
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID26;
+    this.idFactory = deps.idFactory ?? randomUUID25;
     this.mutationMutex = deps.projectMutationMutex ?? projectMutationMutex;
   }
   /**
@@ -23747,7 +23056,7 @@ var ProjectRosterService = class {
     const agent = (await this.deps.agents.list(actor3.tenantId, actor3.userId)).find((item) => item.assistantId === assistantId);
     if (!agent || agent.ownerUserId !== void 0) throw new ProjectRosterServiceError("ASSISTANT_NOT_FOUND", 404, "Agent not found");
     const room = await this.deps.roomStore.ensureMainRoom({
-      id: randomUUID26(),
+      id: randomUUID25(),
       tenantId: actor3.tenantId,
       workspaceId: project.workspaceId,
       projectId: actor3.projectId,
@@ -24091,7 +23400,7 @@ function virtualPublicProjectBot(project, room, agent, mentionName, now) {
 }
 
 // src/services/collaboration/RoomMessageService.ts
-import { createHash as createHash7, randomUUID as randomUUID27 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID26 } from "crypto";
 
 // src/services/collaboration/ProjectBotMembershipSnapshot.ts
 import { snapshotExactRecord as snapshotExactRecord5 } from "@axiom-lattice/protocols";
@@ -24180,7 +23489,7 @@ var RoomMessageService = class {
   constructor(deps, options = {}) {
     this.deps = deps;
     this.idempotentOutcomes = /* @__PURE__ */ new Map();
-    this.idFactory = deps.idFactory ?? randomUUID27;
+    this.idFactory = deps.idFactory ?? randomUUID26;
     const limit = options.idempotentOutcomeLimit ?? 1e3;
     if (!Number.isSafeInteger(limit) || limit < 1) throw new RangeError("idempotentOutcomeLimit must be a positive safe integer");
     this.idempotentOutcomeLimit = limit;
@@ -24394,7 +23703,7 @@ var RoomMessageService = class {
     let idempotencyKey;
     if (value.requestIdempotencyKey !== void 0) {
       if (typeof value.requestIdempotencyKey !== "string" || !/^[\x21-\x7e]{1,200}$/.test(value.requestIdempotencyKey.trim())) throw new RoomMessageServiceError("INVALID_MESSAGE", 400, "Invalid idempotency key");
-      idempotencyKey = `room-human:${actor3.userId}:${createHash7("sha256").update(value.requestIdempotencyKey.trim(), "utf8").digest("hex")}`;
+      idempotencyKey = `room-human:${actor3.userId}:${createHash6("sha256").update(value.requestIdempotencyKey.trim(), "utf8").digest("hex")}`;
     }
     return { text, mentions, botIds, ...value.replyToMessageId === void 0 ? {} : { replyToMessageId: value.replyToMessageId }, ...idempotencyKey === void 0 ? {} : { idempotencyKey } };
   }
@@ -24451,7 +23760,7 @@ function cloneRoomMessage(message) {
   };
 }
 function fingerprintRequest(input) {
-  return createHash7("sha256").update(JSON.stringify({
+  return createHash6("sha256").update(JSON.stringify({
     text: input.text,
     mentions: input.mentions,
     replyToMessageId: input.replyToMessageId ?? null
@@ -24466,7 +23775,7 @@ import { ZodError as ZodError4 } from "zod";
 import { toProjectRoomPublicMessage } from "@axiom-lattice/protocols";
 
 // src/services/collaboration/RoomInterruptService.ts
-import { randomUUID as randomUUID28 } from "crypto";
+import { randomUUID as randomUUID27 } from "crypto";
 var RESUMABLE_TASK_INTERRUPT_CODES = /* @__PURE__ */ new Set([
   "PROJECT_TASK_NOT_RESUMABLE",
   "PROJECT_TASK_NOT_READY",
@@ -24504,7 +23813,7 @@ var RoomInterruptService = class {
   /** Creates the service from explicitly injected stores and dispatcher. */
   constructor(deps) {
     this.deps = deps;
-    this.idFactory = deps.idFactory ?? randomUUID28;
+    this.idFactory = deps.idFactory ?? randomUUID27;
   }
   /** Resolves a pending clarify interrupt with no answers. */
   async skip(input) {
@@ -24867,7 +24176,7 @@ async function execute(reply, operation) {
 }
 
 // src/routes/cospace.ts
-import { randomUUID as randomUUID29 } from "crypto";
+import { randomUUID as randomUUID28 } from "crypto";
 import { ZodError as ZodError6 } from "zod";
 import {
   generateDirectHumanProjectId,
@@ -24901,7 +24210,7 @@ async function computeUnread(deps, tenantId, userId, roomId, lastMessage) {
   });
 }
 function registerCoSpaceRoutes(app2, deps) {
-  const idFactory = deps.idFactory ?? (() => randomUUID29());
+  const idFactory = deps.idFactory ?? (() => randomUUID28());
   app2.get(
     "/api/workspaces/:workspaceId/rooms",
     async (request, reply) => {
@@ -25868,7 +25177,7 @@ function exactValues(value, required, optional = []) {
 }
 
 // src/services/collaboration/CoordinatorWakeNotifier.ts
-import { randomUUID as randomUUID30 } from "crypto";
+import { randomUUID as randomUUID29 } from "crypto";
 import {
   snapshotExactRecord as snapshotExactRecord7
 } from "@axiom-lattice/protocols";
@@ -25884,7 +25193,7 @@ var CoordinatorWakeNotifier = class {
     this.accepted = /* @__PURE__ */ new Set();
     this.maxPending = deps.maxPending ?? 1024;
     if (!Number.isSafeInteger(this.maxPending) || this.maxPending < 1) throw new RangeError("maxPending must be a positive safe integer");
-    this.idFactory = deps.idFactory ?? randomUUID30;
+    this.idFactory = deps.idFactory ?? randomUUID29;
   }
   /** Admits one notification without awaiting any store or dispatch operation. */
   handle(value, anchorMessageId) {
@@ -26515,7 +25824,7 @@ var TaskInterruptCardProjector = class {
 };
 
 // src/services/collaboration/ProjectTaskObserver.ts
-import { createHash as createHash8 } from "crypto";
+import { createHash as createHash7 } from "crypto";
 import {
   createTaskRunBridge as createTaskRunBridge3,
   probeThreadRunOwner as defaultProbeThreadRunOwner
@@ -27086,7 +26395,7 @@ var ProjectTaskObserver = class {
       action: "activity",
       summary: "Project task recovery warning",
       detail: { type: "project_task_recovery_warning", phase, message },
-      eventKey: `project-task-recovery-warning:${task.id}:${phase}:${createHash8("sha256").update(message).digest("hex")}`
+      eventKey: `project-task-recovery-warning:${task.id}:${phase}:${createHash7("sha256").update(message).digest("hex")}`
     });
   }
   async safeWarning(task, phase, error) {
@@ -27329,7 +26638,7 @@ var ProjectTaskObserver = class {
     }
   }
   async persistOverflowWarning(event) {
-    const scopeDigest = createHash8("sha256").update(JSON.stringify([event.tenantId, event.workspaceId, event.projectId])).digest("hex");
+    const scopeDigest = createHash7("sha256").update(JSON.stringify([event.tenantId, event.workspaceId, event.projectId])).digest("hex");
     try {
       await this.deps.workItems.createIfAbsentByEventKey({
         tenantId: event.tenantId,
@@ -27434,7 +26743,7 @@ function combineSignals(left, right) {
 }
 
 // src/services/collaboration/RoomProjectionService.ts
-import { createHash as createHash9 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import {
   PROJECT_ROOM_TASK_DELEGATED_LABEL,
   PROJECT_ROOM_TASK_DELEGATED_SEPARATOR,
@@ -27655,7 +26964,7 @@ function safeRepairIdentity(value, scope) {
   return taskId && eventKey && tenantId === scope.tenantId && workspaceId === scope.workspaceId && projectId === scope.projectId ? { taskId, eventKey } : void 0;
 }
 function tupleKey(prefix, values) {
-  const digest = createHash9("sha256").update(JSON.stringify(values)).digest("hex");
+  const digest = createHash8("sha256").update(JSON.stringify(values)).digest("hex");
   return `${prefix}:${digest}`;
 }
 function parseProjectionInput(taskValue, itemValue) {
@@ -27815,7 +27124,7 @@ function isRecord10(value) {
 import { taskLifecycleNotifier } from "@axiom-lattice/core";
 
 // src/services/collaboration/ProjectRoomEventBroker.ts
-import { randomUUID as randomUUID31 } from "crypto";
+import { randomUUID as randomUUID30 } from "crypto";
 import {
   parseProjectRoomEventId,
   ProjectRoomBrokerCapacityError,
@@ -27846,7 +27155,7 @@ var ProjectRoomEventBroker = class {
     this.subscriberCount = 0;
     this.usageClock = 0;
     this.closed = false;
-    this.epoch = options.epoch ?? randomUUID31();
+    this.epoch = options.epoch ?? randomUUID30();
     if (!UUID_PATTERN.test(this.epoch)) {
       throw new TypeError("Project Room event epoch must be a lowercase canonical UUID");
     }
@@ -28234,7 +27543,7 @@ function snapshotJson(value, ancestors = /* @__PURE__ */ new Set()) {
 }
 
 // src/services/collaboration/ProjectRoomRealtimePublisher.ts
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 import {
   projectRoomUserEventScope,
   snapshotExactRecord as snapshotExactRecord11,
@@ -28356,7 +27665,7 @@ var BrokerProjectRoomRealtimePublisher = class {
     try {
       event = build();
       if (!event) throw new Error("Invalid Project Room realtime projection");
-      const dedupeKey = createHash10("sha256").update(JSON.stringify([type, event.scope.tenantId, event.scope.projectId, event.scope.roomId, event.sourceKey])).digest("hex");
+      const dedupeKey = createHash9("sha256").update(JSON.stringify([type, event.scope.tenantId, event.scope.projectId, event.scope.roomId, event.sourceKey])).digest("hex");
       if (this.sourceKeys.has(dedupeKey)) return;
       this.deps.broker.publish(event.scope, event.draft, event.sourceKey);
       this.sourceKeys.set(dedupeKey, true);
@@ -28601,12 +27910,21 @@ function createProjectRoomRealtimeRuntime(deps) {
     shutdownTimeoutMs: deps.shutdownTimeoutMs
   });
 }
+var PUSH_DEDUPE_LIMIT = 2e3;
 function withPushNotifier(target, notifier) {
+  const pushedMessageIds = /* @__PURE__ */ new Set();
   return new Proxy(target, {
     get(inner, prop, receiver) {
       if (prop === "messageCreated") {
         return (message) => {
           inner.messageCreated(message);
+          if (pushedMessageIds.has(message.id)) return;
+          pushedMessageIds.add(message.id);
+          while (pushedMessageIds.size > PUSH_DEDUPE_LIMIT) {
+            const oldest = pushedMessageIds.values().next().value;
+            if (oldest === void 0) break;
+            pushedMessageIds.delete(oldest);
+          }
           void notifier.notifyMessage(message).catch(() => void 0);
         };
       }
@@ -29491,6 +28809,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
   const taskWorkItemStore = getStoreLattice28("default", "taskWorkItem").store;
   const projectTaskEnabled = options.projectTaskEnabled ?? process.env.AXIOM_PROJECT_TASK_EXECUTION_ENABLED !== "false";
   const accessService = new ProjectAccessService({ projectStore, membershipStore: projectMembershipStore, userTenantLinkStore });
+  setA2AProjectAccess(accessService);
   const realtimeMode = resolveProjectRoomRealtimeMode();
   const realtimeLog = options.projectTaskLog ?? { warn: () => void 0 };
   const roomMessageRetention = createRoomMessageRetentionJob({
@@ -29521,7 +28840,14 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     log: realtimeLog
   }) : void 0;
   if (projectRoomRealtimeRuntime) {
-    app2.addHook("onClose", async () => projectRoomRealtimeRuntime?.close());
+    const runtime = projectRoomRealtimeRuntime;
+    const unsubscribeProjectRoomMessages = projectRoomMessageNotifier.subscribe((message) => {
+      runtime.publisher.messageCreated(message);
+    });
+    app2.addHook("onClose", async () => {
+      unsubscribeProjectRoomMessages();
+      await runtime.close();
+    });
     const workspaceRoomEventsService = new WorkspaceRoomEventsService({
       broker: projectRoomRealtimeRuntime.broker,
       listMemberRooms: createWorkspaceMemberRoomLister({
@@ -29664,7 +28990,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     });
   }
   if (projectTaskComposition) app2.addHook("onClose", async () => projectTaskComposition.lease.release());
-  const taskThreadService = projectTaskComposition?.lease.runtime.threads ?? new ProjectTaskThreadService({ threads: threadStore, idFactory: randomUUID32 });
+  const taskThreadService = projectTaskComposition?.lease.runtime.threads ?? new ProjectTaskThreadService({ threads: threadStore, idFactory: randomUUID31 });
   const taskLifecycle = projectTaskComposition?.lease.runtime.lifecycle ?? createTaskLifecycleService({ taskStore, workItemStore: taskWorkItemStore });
   const reassignmentAuthorizer = createProjectTaskReassignmentAuthorizer(
     new ProjectTaskOwnerPolicy(projectBotMembershipStore),
@@ -29845,7 +29171,8 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       configuredAgentResolver: createConfiguredAgentResolver({
         hydrate: (tenantId) => agentLatticeManager5.initializeStoredAssistantsForTenant(tenantId),
         has: (tenantId, assistantId) => agentLatticeManager5.hasAgentLatticeWithTenant(tenantId, assistantId)
-      })
+      }),
+      projectAccess: accessService
     })
   });
   registerAgentWebAppRuntimeRoutes(app2, {
@@ -29855,7 +29182,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
       userTenantLinkStore,
       ensureCoordinator: (scope) => coordinatorEnsurer.ensure(scope),
       log: realtimeLog
-    })),
+    }), accessService),
     taskController: createTaskController({
       access: {
         requireProjectAccess: async (input) => {
@@ -30151,7 +29478,7 @@ var registerLatticeRoutes = (app2, channelDeps, options = {}) => {
     userTenantLinkStore,
     ensureCoordinator: (scope) => coordinatorEnsurer.ensure(scope),
     log: realtimeLog
-  }));
+  }), accessService);
   registerDatabaseConfigRoutes(app2);
   registerMetricsServerConfigRoutes(app2);
   connectionRoutes(app2);
@@ -30349,7 +29676,7 @@ function tryCreateProjectTaskRuntime(input) {
 function createRuntime(input, stores, log2) {
   const controller = new AbortController();
   const mutex = new ProjectTaskExecutionMutex();
-  const threads = new ProjectTaskThreadService({ threads: input.threadStore, idFactory: randomUUID32 });
+  const threads = new ProjectTaskThreadService({ threads: input.threadStore, idFactory: randomUUID31 });
   const lifecycle = createTaskLifecycleService({ taskStore: input.taskStore, workItemStore: input.taskWorkItemStore });
   const projection = new RoomProjectionService({
     messages: input.projectRoomMessageStore,
@@ -30358,7 +29685,7 @@ function createRuntime(input, stores, log2) {
     warnings: input.taskWorkItemStore,
     log: log2,
     realtime: input.realtime,
-    idFactory: randomUUID32
+    idFactory: randomUUID31
   });
   const runService = new ProjectTaskRunService({
     tasks: input.taskStore,
@@ -31182,7 +30509,7 @@ var collectionRegistration = {
 
 // src/export_registrations/channel-installation.registration.ts
 import { getStoreLattice as getStoreLattice35 } from "@axiom-lattice/core";
-import { randomUUID as randomUUID33 } from "crypto";
+import { randomUUID as randomUUID32 } from "crypto";
 var UUID_PATTERN2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 var PUBLIC_CHANNELS = /* @__PURE__ */ new Set(["lark", "email", "slack", "wechat", "wecom"]);
 function isPublicChannel(channel) {
@@ -31344,7 +30671,7 @@ var channelInstallationRegistration = {
       }
       id3 = sourceId;
     } else {
-      id3 = randomUUID33();
+      id3 = randomUUID32();
     }
     await store2.createInstallation(tenantId, id3, createInput);
     return { newId: id3 };
@@ -31792,50 +31119,6 @@ var ChannelAdapterRegistry = class {
   }
 };
 
-// src/router/middlewares/channelSharedState.ts
-import { createClient as createClient2 } from "redis";
-var clientPromise;
-async function redis() {
-  const url = process.env.REDIS_URL?.trim();
-  if (!url) return void 0;
-  if (!clientPromise) {
-    clientPromise = (async () => {
-      const client = createClient2({ url });
-      client.on("error", () => void 0);
-      await client.connect();
-      return client;
-    })();
-  }
-  try {
-    const client = await clientPromise;
-    return client.isOpen ? client : void 0;
-  } catch {
-    clientPromise = void 0;
-    return void 0;
-  }
-}
-async function claimDedupKey(key, ttlMs) {
-  try {
-    const client = await redis();
-    if (!client) return void 0;
-    const result = await client.set(key, "1", { NX: true, PX: ttlMs });
-    return result === "OK";
-  } catch {
-    return void 0;
-  }
-}
-async function incrementRateCounter(key, windowMs) {
-  try {
-    const client = await redis();
-    if (!client) return void 0;
-    const count = await client.incr(key);
-    if (count === 1) await client.pExpire(key, windowMs);
-    return count;
-  } catch {
-    return void 0;
-  }
-}
-
 // src/router/middlewares/deduplication.ts
 var processedMessages = /* @__PURE__ */ new Map();
 function createDeduplicationMiddleware(ttlMs = 5 * 60 * 1e3) {
@@ -31948,7 +31231,7 @@ function createAuditLoggerMiddleware() {
 import { setBindingRegistry, setMenuRegistry, setEvalRunService } from "@axiom-lattice/core";
 
 // src/channels/wecom/WecomChannelAdapter.ts
-import { randomUUID as randomUUID34 } from "crypto";
+import { randomUUID as randomUUID33 } from "crypto";
 import { z as z13 } from "zod";
 import * as WecomAiBot from "@wecom/aibot-node-sdk";
 
@@ -32312,7 +31595,7 @@ function streamIdFor(replyTarget) {
   const key = replyKeyForTarget(replyTarget);
   let streamId = streamIdsByReqId.get(key);
   if (!streamId) {
-    streamId = randomUUID34();
+    streamId = randomUUID33();
     streamIdsByReqId.set(key, streamId);
     if (streamIdsByReqId.size > MAX_TRACKED_STREAMS) {
       const oldest = streamIdsByReqId.keys().next().value;
@@ -32904,7 +32187,7 @@ import {
   agentInstanceManager as agentInstanceManager13,
   createSandboxProvider,
   TokenCache,
-  mcpManager as mcpManager3,
+  mcpManager as mcpManager2,
   convertToConnection as convertToConnection2,
   createTrustedAgentMessageDispatcher as createTrustedAgentMessageDispatcher2,
   ChannelConnectionLeader,
@@ -32924,7 +32207,7 @@ import {
   COLLECTION_CHANGED_TOPIC,
   vectorStoreLatticeManager as vectorStoreLatticeManager2,
   observabilityLatticeManager,
-  getSandboxPluginCatalog as getSandboxPluginCatalog3,
+  getSandboxPluginCatalog as getSandboxPluginCatalog2,
   getSandBoxManager as getSandBoxManager4,
   installPluginHost,
   ThreadExecutionSupervisor,
@@ -32935,7 +32218,7 @@ import {
 } from "@axiom-lattice/core";
 
 // src/services/chunk/redisAppendLog.ts
-import { createClient as createClient3 } from "redis";
+import { createClient as createClient2 } from "redis";
 var VALUE_FIELD = "v";
 var START_ID = "0-0";
 var ChunkLogCorruptionError = class extends Error {
@@ -32952,7 +32235,7 @@ var ChunkLogCorruptionError = class extends Error {
   }
 };
 async function createRedisAppendLog(url, options = {}) {
-  const client = createClient3({
+  const client = createClient2({
     url,
     disableOfflineQueue: true,
     socket: {
@@ -33142,7 +32425,7 @@ function readField(fields, name) {
 }
 
 // src/services/run-cancel/RedisRunCancelNotifier.ts
-import { createClient as createClient4 } from "redis";
+import { createClient as createClient3 } from "redis";
 import {
   runCancelSignalSchema as runCancelSignalSchema2
 } from "@axiom-lattice/protocols";
@@ -33543,7 +32826,7 @@ function createRedisRunCancelNotifier(options) {
   });
 }
 function createNodeRedisClient2(url) {
-  const client = createClient4({
+  const client = createClient3({
     url,
     disableOfflineQueue: true,
     socket: {
@@ -33607,7 +32890,7 @@ import {
   snapshotExactRecord as snapshotExactRecord15,
   MessageChunkTypes as MessageChunkTypes4
 } from "@axiom-lattice/protocols";
-import { randomUUID as randomUUID35 } from "crypto";
+import { randomUUID as randomUUID34 } from "crypto";
 
 // src/services/channel-reply/channelReplyRuntimeRegistry.ts
 var active;
@@ -33962,7 +33245,7 @@ var _MessageRouter = class _MessageRouter {
         }
         if (!threadId) {
           const threadStore = getStoreLattice39("default", "thread").store;
-          const newThreadId = randomUUID35();
+          const newThreadId = randomUUID34();
           console.log({
             event: "dispatch:thread:create",
             agentId,
@@ -34001,7 +33284,7 @@ var _MessageRouter = class _MessageRouter {
           senderId: message.sender.id,
           contentLength: message.content.text.length
         }, "Dispatching to agent");
-        const inputMessageId = randomUUID35();
+        const inputMessageId = randomUUID34();
         const replyTarget = internalRoom ? correlatedRoomReplyTarget(message.replyTarget, inputMessageId) : message.replyTarget;
         const replyAdapter = replyTarget ? this.adapterRegistry.get(replyTarget.adapterChannel) : void 0;
         if (options.trustedMessageOptions && (!this.trustedDispatcher || !replyTarget || !replyAdapter)) {
@@ -34198,7 +33481,7 @@ var _MessageRouter = class _MessageRouter {
     };
     const runLedger = getStoreLattice39("default", "agentRun").store;
     const jobStore = getStoreLattice39("default", "channelReplyJob").store;
-    const runId = randomUUID35();
+    const runId = randomUUID34();
     await jobStore.create({
       runId,
       tenantId,
@@ -34850,14 +34133,14 @@ async function prepareProjectTaskRuntime(runtime, log2) {
 import { setPluginDeploymentService } from "@axiom-lattice/core";
 
 // src/services/plugins/PluginDeploymentService.ts
-import { randomUUID as randomUUID36 } from "crypto";
+import { randomUUID as randomUUID35 } from "crypto";
 import {
   PLUGIN_HOST_DIR,
   PluginDeploymentRuntimeRegistry
 } from "@axiom-lattice/core";
 
 // src/services/plugins/pluginDeploymentNaming.ts
-import { createHash as createHash11 } from "crypto";
+import { createHash as createHash10 } from "crypto";
 var PLUGIN_GUEST_PORT = 8080;
 var SANDBOX_NAME_HASH_LENGTH = 16;
 function pluginSandboxName(tenantId, pluginType) {
@@ -34867,7 +34150,7 @@ function pluginSandboxName(tenantId, pluginType) {
   if (!pluginType || typeof pluginType !== "string") {
     throw new Error("pluginSandboxName: pluginType must be a non-empty string");
   }
-  const hash = createHash11("sha256").update(`${tenantId}\0${pluginType}`).digest("hex").slice(0, SANDBOX_NAME_HASH_LENGTH);
+  const hash = createHash10("sha256").update(`${tenantId}\0${pluginType}`).digest("hex").slice(0, SANDBOX_NAME_HASH_LENGTH);
   return `plugin-${hash}`;
 }
 
@@ -34994,7 +34277,7 @@ var PluginDeploymentService = class {
       const failedAt = this.nowIso();
       await this.store.upsert(
         this.buildRecord({
-          id: existing?.id ?? randomUUID36(),
+          id: existing?.id ?? randomUUID35(),
           tenantId,
           pluginType,
           pluginVersion: manifest.version,
@@ -35016,7 +34299,7 @@ var PluginDeploymentService = class {
       );
     }
     const record = this.buildRecord({
-      id: existing?.id ?? randomUUID36(),
+      id: existing?.id ?? randomUUID35(),
       tenantId,
       pluginType,
       pluginVersion: manifest.version,
@@ -37444,7 +36727,7 @@ function createAgentRunRetentionJob(input) {
 }
 
 // src/services/run-task/RedisRunTaskWake.ts
-import { createClient as createClient5 } from "redis";
+import { createClient as createClient4 } from "redis";
 var RUN_TASK_WAKE_CHANNEL = "run-task:wake";
 var DEFAULT_OPERATION_TIMEOUT_MS = 2e3;
 var DEFAULT_RETRY_DELAYS_MS = [500, 2e3, 5e3, 1e4];
@@ -37837,7 +37120,7 @@ function createConfiguredRedisRunTaskWake(options) {
   return createRedisRunTaskWake({ ...options, url });
 }
 function createNodeRedisClient3(url) {
-  const client = createClient5({
+  const client = createClient4({
     url,
     disableOfflineQueue: true,
     socket: {
@@ -38928,7 +38211,7 @@ async function restoreMcpConnections() {
     logger8.info(`Restoring ${configs.length} MCP server connections...`);
     const deps = {
       store: store2,
-      manager: mcpManager3,
+      manager: mcpManager2,
       convertToConnection: convertToConnection2
     };
     const results = await Promise.allSettled(
@@ -38966,6 +38249,8 @@ var start = async (config) => {
       logger8 = loggerLattice.client;
     }
     app.decorate("loggerLattice", loggerLattice);
+    const rateLimitService = createRateLimitService(config?.rateLimits);
+    setRateLimitService(rateLimitService);
     const observabilityProvider = observabilityLatticeManager.getDefault();
     if (observabilityProvider) {
       try {
@@ -39205,9 +38490,9 @@ var start = async (config) => {
       projectRoomRealtimeRuntime
     });
     try {
-      const { A2AAuthService: A2AAuthService2, parseEnvKeys: parseEnvKeys2 } = await import("./A2AAuthService-7UGQ7GMW.mjs");
-      const { registerA2AStandardRoutes } = await import("./a2a-standard-VL5I7B4W.mjs");
-      const a2a = await import("./a2a-BHBLACJV.mjs");
+      const { A2AAuthService: A2AAuthService2, parseEnvKeys: parseEnvKeys2 } = await import("./A2AAuthService-UKN53ZGP.mjs");
+      const { registerA2AStandardRoutes } = await import("./a2a-standard-MD7WNDTP.mjs");
+      const a2a = await import("./a2a-YLKZE5JG.mjs");
       const a2aKeyStore = getStoreLattice42("default", "a2aApiKey").store;
       const assistantStore = getStoreLattice42("default", "assistant").store;
       const projectStore = getStoreLattice42("default", "project").store;
@@ -39236,18 +38521,17 @@ var start = async (config) => {
       });
     }
     try {
-      const { registerOpenRoutes } = await import("./open-7ED27I5B.mjs");
-      const { registerOpenSessionRoutes } = await import("./open-session-2Y7XJJW2.mjs");
-      const { registerOpenCatalogRoutes } = await import("./open-catalog-SZQ435AY.mjs");
-      const { registerOpenFilesRoutes } = await import("./open-files-V3R2BFTV.mjs");
+      const { registerOpenRoutes } = await import("./open-27ZPLBIW.mjs");
+      const { registerOpenSessionRoutes } = await import("./open-session-CLZT3HVG.mjs");
+      const { registerOpenCatalogRoutes } = await import("./open-catalog-NVGP6SQP.mjs");
+      const { registerOpenFilesRoutes } = await import("./open-files-JPB2NBL6.mjs");
       const { registerOpenAuditRoutes } = await import("./open-audit-UJ3NXCGW.mjs");
-      const { registerOpenExposureRoutes } = await import("./open-exposure-I3DN2X4E.mjs");
-      const { openLattice } = await import("./openLattice-Q6M5S6CY.mjs");
-      const { OpenRateLimiter } = await import("./openRateLimiter-XEOL3A5G.mjs");
+      const { registerOpenExposureRoutes } = await import("./open-exposure-HGYT5VFC.mjs");
+      const { openLattice } = await import("./openLattice-D5YTSZBY.mjs");
       const { createKbProvider } = await import("./kbProvider-2D6DZ34N.mjs");
       const { createOpenSandboxProvider } = await import("./sandboxProvider-FILMFVIM.mjs");
       const { createAgentProvider } = await import("./agentProvider-X4FVQPKW.mjs");
-      const { registerExposedPluginTools } = await import("./registerExposedPlugins-6GCOE64C.mjs");
+      const { registerExposedPluginTools } = await import("./registerExposedPlugins-2JGXSMAL.mjs");
       const { CollectionService: CollectionService2 } = await import("./collection_service-RTRJEQFL.mjs");
       openLattice.register(createKbProvider(new CollectionService2()));
       openLattice.register(createOpenSandboxProvider());
@@ -39263,18 +38547,7 @@ var start = async (config) => {
         })
       );
       await registerExposedPluginTools();
-      const openRateLimitPerMinute = Number(
-        process.env.OPEN_RATE_LIMIT_PER_MINUTE
-      );
-      const openAgentRateLimitPerMinute = Number(
-        process.env.OPEN_AGENT_RATE_LIMIT_PER_MINUTE
-      );
-      registerOpenRoutes(app, {
-        rateLimiter: new OpenRateLimiter({
-          ...Number.isFinite(openRateLimitPerMinute) && openRateLimitPerMinute > 0 ? { defaultPerMinute: openRateLimitPerMinute } : {},
-          ...Number.isFinite(openAgentRateLimitPerMinute) && openAgentRateLimitPerMinute > 0 ? { agentPerMinute: openAgentRateLimitPerMinute } : {}
-        })
-      });
+      registerOpenRoutes(app, { rateLimits: rateLimitService });
       registerOpenSessionRoutes(app);
       registerOpenCatalogRoutes(app);
       registerOpenFilesRoutes(app);
@@ -39287,7 +38560,7 @@ var start = async (config) => {
       });
     }
     try {
-      const { registerGatewaySandboxOpenCredentialProvider } = await import("./sandboxOpenCredentialProvider-AT227D4N.mjs");
+      const { registerGatewaySandboxOpenCredentialProvider } = await import("./sandboxOpenCredentialProvider-RTYOYRCT.mjs");
       registerGatewaySandboxOpenCredentialProvider((error) => {
         logger8.warn("sandbox open-credential provider failed", { error });
       });
@@ -39319,7 +38592,7 @@ var start = async (config) => {
           wiring: {
             store: pluginDeploymentStore,
             sandboxManager: getSandBoxManager4(),
-            catalog: getSandboxPluginCatalog3(),
+            catalog: getSandboxPluginCatalog2(),
             installPluginHost,
             limits: readPluginDeploymentLimits(),
             serviceKey: process.env.MICROSANDBOX_API_KEY,
@@ -39346,7 +38619,7 @@ var start = async (config) => {
       }
     }
     try {
-      const { ResourceController } = await import("./resources-DAU5ZIPB.mjs");
+      const { ResourceController } = await import("./resources-YD5DOPGD.mjs");
       const sharedResourceStore = getStoreLattice42("default", "sharedResource").store;
       const cache = new TokenCache();
       const resourceController = new ResourceController({
@@ -39356,6 +38629,13 @@ var start = async (config) => {
         logger: logger8
       });
       registerResourceRoutes(app, resourceController);
+      const { registerMcpAppShareRoutes } = await import("./mcp-app-shares-SHPBJQXS.mjs");
+      const { makeMcpAppHandlers, resolveMcpAppDeps } = await import("./mcp-apps-QVUK6UBA.mjs");
+      registerMcpAppShareRoutes(app, {
+        store: sharedResourceStore,
+        handlers: makeMcpAppHandlers(resolveMcpAppDeps()),
+        rateLimits: rateLimitService
+      });
       logger8.info("Resource share routes registered");
     } catch (err) {
       logger8.warn("Resource share infrastructure unavailable", {
@@ -39435,7 +38715,6 @@ var start = async (config) => {
         "assistant-changed": (payload) => handleAssistantChanged(payload, async (tenantId) => {
           await agentLatticeManager6.initializeStoredAssistantsForTenant(tenantId);
           invalidateAgentReflectionCache(tenantId);
-          invalidatePluginReflectionCache(tenantId);
         }),
         [AGENT_LIFECYCLE_TOPIC]: async (payload) => {
           handleAgentLifecycle(payload);
@@ -39443,7 +38722,7 @@ var start = async (config) => {
         [A2A_KEY_CHANGED_TOPIC]: (payload) => handleA2AKeyChanged(payload, () => refreshStoreKeyMap()),
         [MCP_CONFIG_CHANGED_TOPIC]: (payload) => reconcileMcpConfigChange(payload, {
           store: getStoreLattice42("default", "mcp").store,
-          manager: mcpManager3,
+          manager: mcpManager2,
           convertToConnection: convertToConnection2
         }),
         [COLLECTION_CHANGED_TOPIC]: async (payload) => {
@@ -39455,8 +38734,7 @@ var start = async (config) => {
         [PLUGIN_CATALOG_CHANGED_TOPIC]: async (payload) => {
           const tenantId = payload?.tenantId;
           if (typeof tenantId === "string" && tenantId.length > 0) {
-            getSandboxPluginCatalog3().invalidate(tenantId);
-            invalidatePluginReflectionCache(tenantId);
+            getSandboxPluginCatalog2().invalidate(tenantId);
             invalidateAgentReflectionCache(tenantId);
             await getMcpUiResourceResolver()?.invalidateTenantPlugins(tenantId);
           }