diff --git a/package-lock.json b/package-lock.json
index f1794ccd..64f082c2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2503,6 +2503,7 @@
     "node_modules/@nestjs/core": {
       "version": "11.1.27",
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "fast-safe-stringify": "2.1.1",
         "iterare": "1.2.1",
@@ -16140,7 +16141,7 @@
         "@beyondnet/evolith-agent-runtime": "*",
         "@nestjs/common": "11.1.27",
         "@nestjs/config": "4.0.4",
-        "@nestjs/core": "11.1.27",
+        "@nestjs/core": "^11.1.28",
         "@nestjs/platform-express": "11.1.28",
         "@opentelemetry/api": "^1.9.1",
         "@opentelemetry/auto-instrumentations-node": "^0.78.0",
@@ -16158,6 +16159,45 @@
         "typescript": "6.0.3"
       }
     },
+    "src/apps/agent-runtime-api/node_modules/@nestjs/core": {
+      "version": "11.1.28",
+      "resolved": "https://registry.npmjs.org/@nestjs/core/-/core-11.1.28.tgz",
+      "integrity": "sha512-06m63xIRj8+l8uOeh/8LnYupGubkyu4f+bPKIadaSui6vK9KpXgoz7HveT1yOVLcEt0M0oCOEW5EuEXZkEmBBQ==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-safe-stringify": "2.1.1",
+        "iterare": "1.2.1",
+        "path-to-regexp": "8.4.2",
+        "tslib": "2.8.1",
+        "uid": "2.0.2"
+      },
+      "engines": {
+        "node": ">= 20"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/nest"
+      },
+      "peerDependencies": {
+        "@nestjs/common": "^11.0.0",
+        "@nestjs/microservices": "^11.0.0",
+        "@nestjs/platform-express": "^11.0.0",
+        "@nestjs/websockets": "^11.0.0",
+        "reflect-metadata": "^0.1.12 || ^0.2.0",
+        "rxjs": "^7.1.0"
+      },
+      "peerDependenciesMeta": {
+        "@nestjs/microservices": {
+          "optional": true
+        },
+        "@nestjs/platform-express": {
+          "optional": true
+        },
+        "@nestjs/websockets": {
+          "optional": true
+        }
+      }
+    },
     "src/apps/core-api": {
       "version": "0.0.2",
       "license": "MIT",
@@ -16168,7 +16208,7 @@
         "@nestjs/cache-manager": "3.1.3",
         "@nestjs/common": "11.1.27",
         "@nestjs/config": "4.0.4",
-        "@nestjs/core": "11.1.27",
+        "@nestjs/core": "^11.1.28",
         "@nestjs/platform-express": "11.1.28",
         "@nestjs/swagger": "11.4.4",
         "@nestjs/terminus": "11.1.1",
@@ -16249,6 +16289,45 @@
         "rxjs": "^7.8.1"
       }
     },
+    "src/apps/core-api/node_modules/@nestjs/core": {
+      "version": "11.1.28",
+      "resolved": "https://registry.npmjs.org/@nestjs/core/-/core-11.1.28.tgz",
+      "integrity": "sha512-06m63xIRj8+l8uOeh/8LnYupGubkyu4f+bPKIadaSui6vK9KpXgoz7HveT1yOVLcEt0M0oCOEW5EuEXZkEmBBQ==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-safe-stringify": "2.1.1",
+        "iterare": "1.2.1",
+        "path-to-regexp": "8.4.2",
+        "tslib": "2.8.1",
+        "uid": "2.0.2"
+      },
+      "engines": {
+        "node": ">= 20"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/nest"
+      },
+      "peerDependencies": {
+        "@nestjs/common": "^11.0.0",
+        "@nestjs/microservices": "^11.0.0",
+        "@nestjs/platform-express": "^11.0.0",
+        "@nestjs/websockets": "^11.0.0",
+        "reflect-metadata": "^0.1.12 || ^0.2.0",
+        "rxjs": "^7.1.0"
+      },
+      "peerDependenciesMeta": {
+        "@nestjs/microservices": {
+          "optional": true
+        },
+        "@nestjs/platform-express": {
+          "optional": true
+        },
+        "@nestjs/websockets": {
+          "optional": true
+        }
+      }
+    },
     "src/apps/core-api/node_modules/keyv": {
       "version": "5.6.0",
       "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
@@ -16591,7 +16670,7 @@
         "@modelcontextprotocol/sdk": "1.29.0",
         "@nestjs/cache-manager": "3.1.3",
         "@nestjs/common": "11.1.27",
-        "@nestjs/core": "11.1.27",
+        "@nestjs/core": "^11.1.28",
         "@nestjs/platform-express": "11.1.28",
         "@open-policy-agent/opa-wasm": "1.10.0",
         "@opentelemetry/api": "1.9.1",
@@ -16650,6 +16729,45 @@
         "rxjs": "^7.8.1"
       }
     },
+    "src/packages/mcp-server/node_modules/@nestjs/core": {
+      "version": "11.1.28",
+      "resolved": "https://registry.npmjs.org/@nestjs/core/-/core-11.1.28.tgz",
+      "integrity": "sha512-06m63xIRj8+l8uOeh/8LnYupGubkyu4f+bPKIadaSui6vK9KpXgoz7HveT1yOVLcEt0M0oCOEW5EuEXZkEmBBQ==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-safe-stringify": "2.1.1",
+        "iterare": "1.2.1",
+        "path-to-regexp": "8.4.2",
+        "tslib": "2.8.1",
+        "uid": "2.0.2"
+      },
+      "engines": {
+        "node": ">= 20"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/nest"
+      },
+      "peerDependencies": {
+        "@nestjs/common": "^11.0.0",
+        "@nestjs/microservices": "^11.0.0",
+        "@nestjs/platform-express": "^11.0.0",
+        "@nestjs/websockets": "^11.0.0",
+        "reflect-metadata": "^0.1.12 || ^0.2.0",
+        "rxjs": "^7.1.0"
+      },
+      "peerDependenciesMeta": {
+        "@nestjs/microservices": {
+          "optional": true
+        },
+        "@nestjs/platform-express": {
+          "optional": true
+        },
+        "@nestjs/websockets": {
+          "optional": true
+        }
+      }
+    },
     "src/packages/mcp-server/node_modules/@typescript-eslint/parser": {
       "version": "8.64.0",
       "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.64.0.tgz",
@@ -16896,7 +17014,7 @@
         "@hono/node-server": "1.19.14",
         "@modelcontextprotocol/sdk": "1.29.0",
         "@nestjs/common": "11.1.27",
-        "@nestjs/core": "11.1.27",
+        "@nestjs/core": "^11.1.28",
         "@nestjs/platform-express": "11.1.28",
         "@open-policy-agent/opa-wasm": "1.10.0",
         "@opentelemetry/api": "1.9.1",
@@ -16942,6 +17060,45 @@
         "node": ">=18.0.0"
       }
     },
+    "src/sdk/cli/node_modules/@nestjs/core": {
+      "version": "11.1.28",
+      "resolved": "https://registry.npmjs.org/@nestjs/core/-/core-11.1.28.tgz",
+      "integrity": "sha512-06m63xIRj8+l8uOeh/8LnYupGubkyu4f+bPKIadaSui6vK9KpXgoz7HveT1yOVLcEt0M0oCOEW5EuEXZkEmBBQ==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-safe-stringify": "2.1.1",
+        "iterare": "1.2.1",
+        "path-to-regexp": "8.4.2",
+        "tslib": "2.8.1",
+        "uid": "2.0.2"
+      },
+      "engines": {
+        "node": ">= 20"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/nest"
+      },
+      "peerDependencies": {
+        "@nestjs/common": "^11.0.0",
+        "@nestjs/microservices": "^11.0.0",
+        "@nestjs/platform-express": "^11.0.0",
+        "@nestjs/websockets": "^11.0.0",
+        "reflect-metadata": "^0.1.12 || ^0.2.0",
+        "rxjs": "^7.1.0"
+      },
+      "peerDependenciesMeta": {
+        "@nestjs/microservices": {
+          "optional": true
+        },
+        "@nestjs/platform-express": {
+          "optional": true
+        },
+        "@nestjs/websockets": {
+          "optional": true
+        }
+      }
+    },
     "src/sdk/cli/node_modules/@typescript-eslint/parser": {
       "version": "8.64.0",
       "resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-8.64.0.tgz",
diff --git a/src/apps/agent-runtime-api/package.json b/src/apps/agent-runtime-api/package.json
index e08874d7..39bbd014 100644
--- a/src/apps/agent-runtime-api/package.json
+++ b/src/apps/agent-runtime-api/package.json
@@ -16,7 +16,7 @@
     "@beyondnet/evolith-agent-runtime": "*",
     "@nestjs/common": "11.1.27",
     "@nestjs/config": "4.0.4",
-    "@nestjs/core": "11.1.27",
+    "@nestjs/core": "11.1.28",
     "@nestjs/platform-express": "11.1.28",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/auto-instrumentations-node": "^0.78.0",
diff --git a/src/apps/core-api/package.json b/src/apps/core-api/package.json
index 42843377..dddf7d1c 100644
--- a/src/apps/core-api/package.json
+++ b/src/apps/core-api/package.json
@@ -27,7 +27,7 @@
     "@nestjs/cache-manager": "3.1.3",
     "@nestjs/common": "11.1.27",
     "@nestjs/config": "4.0.4",
-    "@nestjs/core": "11.1.27",
+    "@nestjs/core": "11.1.28",
     "@nestjs/platform-express": "11.1.28",
     "@nestjs/swagger": "11.4.4",
     "@nestjs/terminus": "11.1.1",
diff --git a/src/packages/mcp-server/package.json b/src/packages/mcp-server/package.json
index 100f89a2..25fc2f5a 100644
--- a/src/packages/mcp-server/package.json
+++ b/src/packages/mcp-server/package.json
@@ -45,7 +45,7 @@
     "@modelcontextprotocol/sdk": "1.29.0",
     "@nestjs/cache-manager": "3.1.3",
     "@nestjs/common": "11.1.27",
-    "@nestjs/core": "11.1.27",
+    "@nestjs/core": "11.1.28",
     "@nestjs/platform-express": "11.1.28",
     "@open-policy-agent/opa-wasm": "1.10.0",
     "@opentelemetry/api": "1.9.1",
diff --git a/src/sdk/cli/package.json b/src/sdk/cli/package.json
index 6bc901df..97dfef93 100644
--- a/src/sdk/cli/package.json
+++ b/src/sdk/cli/package.json
@@ -77,7 +77,7 @@
     "@hono/node-server": "1.19.14",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@nestjs/common": "11.1.27",
-    "@nestjs/core": "11.1.27",
+    "@nestjs/core": "11.1.28",
     "@nestjs/platform-express": "11.1.28",
     "@open-policy-agent/opa-wasm": "1.10.0",
     "@opentelemetry/api": "1.9.1",