@moxt-ai/mobius 0.0.165 → 0.0.167

package/dist/cli.js

@@ -7,7 +7,7 @@ var __export = (target, all) => {
 
 // src/cli.ts
 import { constants as constants2 } from "node:fs";
-import { mkdir as mkdir6, open as open6 } from "node:fs/promises";
+import { mkdir as mkdir7, open as open6 } from "node:fs/promises";
 import { resolve as resolve8 } from "node:path";
 
 // ../../node_modules/.pnpm/commander@15.0.0/node_modules/commander/lib/error.js
@@ -3381,21 +3381,16 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@moxt-ai/mobius",
-  version: "0.0.165",
+  version: "0.0.167",
   description: "Mobius CLI for pairing and running local AI agent services.",
   type: "module",
   bin: {
     mobius: "dist/cli.js"
   },
+  types: "./src/index.ts",
   exports: {
-    ".": {
-      types: "./dist/index.d.ts",
-      import: "./dist/index.js"
-    },
-    "./runtime": {
-      types: "./dist/runtime.d.ts",
-      import: "./dist/runtime.js"
-    }
+    ".": "./src/index.ts",
+    "./runtime": "./src/runtime.ts"
   },
   files: [
     "dist"
@@ -3404,7 +3399,18 @@ var package_default = {
     node: ">=22.13.0"
   },
   publishConfig: {
-    access: "public"
+    access: "public",
+    types: "./dist/index.d.ts",
+    exports: {
+      ".": {
+        types: "./dist/index.d.ts",
+        import: "./dist/index.js"
+      },
+      "./runtime": {
+        types: "./dist/runtime.d.ts",
+        import: "./dist/runtime.js"
+      }
+    }
   },
   repository: {
     type: "git",
@@ -28411,61 +28417,61 @@ var DIRECTORY_IDENTIFIER_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,2047}$/;
 var DIRECTORY_IDENTIFIER = external_exports.string().min(1).max(2048).regex(DIRECTORY_IDENTIFIER_PATTERN);
 var SHORT_TEXT = external_exports.string().max(500);
 var LONG_TEXT = external_exports.string().max(1e5);
-var workspaceEntrySchema = external_exports.strictObject({
+var workspaceEntrySchema = external_exports.object({
   directoryId: DIRECTORY_IDENTIFIER,
   name: external_exports.string().min(1).max(255)
 }).readonly();
 var sessionStatusSchema = external_exports.discriminatedUnion("kind", [
-  external_exports.strictObject({ kind: external_exports.literal("idle") }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ kind: external_exports.literal("idle") }).readonly(),
+  external_exports.object({
     commandId: identifierStringSchema,
     kind: external_exports.literal("working")
   }).readonly()
 ]);
-var sessionStatusChangedEventSchema = external_exports.strictObject({
+var sessionStatusChangedEventSchema = external_exports.object({
   kind: external_exports.literal(SESSION_STATUS_CHANGED_KIND),
   sessionId: identifierStringSchema,
   status: sessionStatusSchema
 }).readonly();
-var sessionMetadataSchema = external_exports.strictObject({
+var sessionMetadataSchema = external_exports.object({
   additionalDirectories: external_exports.array(workspaceEntrySchema).max(16).readonly(),
   agentId: identifierStringSchema,
   directoryId: DIRECTORY_IDENTIFIER,
   directoryLabel: external_exports.string().min(1).max(2048),
   prompted: external_exports.boolean(),
   sessionId: identifierStringSchema,
-  status: sessionStatusSchema,
+  status: sessionStatusSchema.default({ kind: "idle" }),
   title: external_exports.string().max(500),
   updatedAt: external_exports.iso.datetime({ offset: true })
 }).readonly();
-var sessionListCommandSchema = external_exports.strictObject({
+var sessionListCommandSchema = external_exports.object({
   kind: external_exports.literal(SESSION_LIST_KIND),
   limit: external_exports.number().int().positive().max(500),
   requestId: identifierStringSchema
 }).readonly();
-var sessionsListedEventSchema = external_exports.strictObject({
+var sessionsListedEventSchema = external_exports.object({
   entries: external_exports.array(sessionMetadataSchema).max(500).readonly(),
   kind: external_exports.literal(SESSION_LISTED_KIND),
   requestId: identifierStringSchema
 }).readonly();
-var sessionQueryCommandSchema = external_exports.strictObject({
+var sessionQueryCommandSchema = external_exports.object({
   kind: external_exports.literal(SESSION_QUERY_KIND),
   requestId: identifierStringSchema,
   sessionIds: external_exports.array(identifierStringSchema).min(1).max(500).readonly()
 }).readonly();
-var sessionsQueriedEventSchema = external_exports.strictObject({
+var sessionsQueriedEventSchema = external_exports.object({
   entries: external_exports.array(sessionMetadataSchema).max(500).readonly(),
   kind: external_exports.literal(SESSION_QUERIED_KIND),
   requestId: identifierStringSchema
 }).readonly();
-var fileReadCommandSchema = external_exports.strictObject({
+var fileReadCommandSchema = external_exports.object({
   kind: external_exports.literal(FILE_READ_KIND),
   maxBytes: external_exports.number().int().positive().max(128 * 1024 * 1024),
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema,
   path: external_exports.string().min(1).max(4096)
 }).readonly();
-var fileBeginEventSchema = external_exports.strictObject({
+var fileBeginEventSchema = external_exports.object({
   byteLength: external_exports.number().int().positive().max(128 * 1024 * 1024),
   kind: external_exports.literal(FILE_BEGIN_KIND),
   mediaType: external_exports.string().min(1).max(255),
@@ -28474,26 +28480,26 @@ var fileBeginEventSchema = external_exports.strictObject({
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var fileChunkEventSchema = external_exports.strictObject({
+var fileChunkEventSchema = external_exports.object({
   data: external_exports.string().min(1).max(4e5),
   kind: external_exports.literal(FILE_CHUNK_KIND),
   requestId: identifierStringSchema,
   sequence: external_exports.number().int().nonnegative().max(1024),
   sessionId: identifierStringSchema
 }).readonly();
-var fileEndEventSchema = external_exports.strictObject({
+var fileEndEventSchema = external_exports.object({
   kind: external_exports.literal(FILE_END_KIND),
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var fileFailedEventSchema = external_exports.strictObject({
+var fileFailedEventSchema = external_exports.object({
   code: identifierStringSchema,
   kind: external_exports.literal(FILE_FAILED_KIND),
   message: external_exports.string().min(1).max(500),
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var configValueSchema = external_exports.strictObject({
+var configValueSchema = external_exports.object({
   description: SHORT_TEXT,
   groupId: external_exports.string().max(128),
   groupName: external_exports.string().max(255),
@@ -28504,7 +28510,7 @@ var configValueSchema = external_exports.strictObject({
   // by length alone.
   value: external_exports.string().max(500)
 }).readonly();
-var sessionConfigOptionSchema = external_exports.strictObject({
+var sessionConfigOptionSchema = external_exports.object({
   booleanValue: external_exports.boolean(),
   category: external_exports.string().max(128),
   currentValue: external_exports.string().max(500),
@@ -28515,7 +28521,7 @@ var sessionConfigOptionSchema = external_exports.strictObject({
   values: external_exports.array(configValueSchema).max(500).readonly()
 }).readonly();
 var sessionConfigOptionsSchema = external_exports.array(sessionConfigOptionSchema).max(100).readonly();
-var agentSettingSchema = external_exports.strictObject({
+var agentSettingSchema = external_exports.object({
   booleanValue: external_exports.boolean(),
   category: external_exports.string().max(128),
   defaultValue: external_exports.string().max(500),
@@ -28534,20 +28540,20 @@ var agentModelEffortResolutionSchema = external_exports.enum([
   AGENT_MODEL_EFFORT_RESOLUTION_ON_MODEL_SELECTION,
   AGENT_MODEL_EFFORT_RESOLUTION_UNAVAILABLE
 ]);
-var agentModelEffortSchema = external_exports.strictObject({
+var agentModelEffortSchema = external_exports.object({
   effortSettingId: external_exports.string().max(128),
   modelSettingId: external_exports.string().max(128),
   resolution: agentModelEffortResolutionSchema,
   unsupportedModelIds: external_exports.array(external_exports.string().min(1).max(500)).max(500).readonly().default([]),
   valuesByModel: external_exports.record(external_exports.string().min(1).max(500), external_exports.array(configValueSchema).max(500).readonly()).readonly()
 }).readonly();
-var agentSettingsDiscoverCommandSchema = external_exports.strictObject({
+var agentSettingsDiscoverCommandSchema = external_exports.object({
   agentId: identifierStringSchema,
   kind: external_exports.literal(AGENT_SETTINGS_DISCOVER_KIND),
   model: external_exports.string().min(1).max(500).optional(),
   requestId: identifierStringSchema
 }).readonly();
-var agentSettingsDiscoveredEventSchema = external_exports.strictObject({
+var agentSettingsDiscoveredEventSchema = external_exports.object({
   agentId: identifierStringSchema,
   agentName: external_exports.string().max(255),
   agentVersion: external_exports.string().max(128),
@@ -28557,27 +28563,27 @@ var agentSettingsDiscoveredEventSchema = external_exports.strictObject({
   settings: agentSettingsSchema,
   settingsRevision: external_exports.string().regex(/^[a-f0-9]{64}$/)
 }).readonly();
-var agentSettingsDiscoveryFailedEventSchema = external_exports.strictObject({
+var agentSettingsDiscoveryFailedEventSchema = external_exports.object({
   code: identifierStringSchema,
   kind: external_exports.literal(AGENT_SETTINGS_DISCOVERY_FAILED_KIND),
   message: external_exports.string().min(1).max(500),
   requestId: identifierStringSchema
 }).readonly();
-var agentCatalogRefreshCommandSchema = external_exports.strictObject({
+var agentCatalogRefreshCommandSchema = external_exports.object({
   kind: external_exports.literal(AGENT_CATALOG_REFRESH_KIND),
   requestId: identifierStringSchema
 }).readonly();
-var agentCatalogRefreshedEventSchema = external_exports.strictObject({
+var agentCatalogRefreshedEventSchema = external_exports.object({
   kind: external_exports.literal(AGENT_CATALOG_REFRESHED_KIND),
   requestId: identifierStringSchema
 }).readonly();
-var agentCatalogRefreshFailedEventSchema = external_exports.strictObject({
+var agentCatalogRefreshFailedEventSchema = external_exports.object({
   code: identifierStringSchema,
   kind: external_exports.literal(AGENT_CATALOG_REFRESH_FAILED_KIND),
   message: external_exports.string().min(1).max(500),
   requestId: identifierStringSchema
 }).readonly();
-var sessionConfigurationSelectionSchema = external_exports.strictObject({
+var sessionConfigurationSelectionSchema = external_exports.object({
   booleanValue: external_exports.boolean(),
   configId: identifierStringSchema,
   value: external_exports.string().max(500),
@@ -28591,7 +28597,7 @@ var AGENT_PERMISSION_MODES = Object.freeze([
   "workspace-write",
   "danger-full-access"
 ]);
-var agentExecutionConfigurationSchema = external_exports.strictObject({
+var agentExecutionConfigurationSchema = external_exports.object({
   model: sessionConfigurationSelectionSchema,
   permissionMode: external_exports.string().refine((value) => AGENT_PERMISSION_MODES.includes(value)),
   reasoningEffort: sessionConfigurationSelectionSchema
@@ -28635,7 +28641,7 @@ var sessionConfigurationSelectionsSchema = external_exports.array(sessionConfigu
     identifiers.add(selection.configId);
   }
 }).readonly();
-var sessionCapabilitiesSchema = external_exports.strictObject({
+var sessionCapabilitiesSchema = external_exports.object({
   additionalDirectories: external_exports.boolean(),
   audioPrompt: external_exports.boolean(),
   closeSession: external_exports.boolean(),
@@ -28649,22 +28655,22 @@ var sessionCapabilitiesSchema = external_exports.strictObject({
   steering: external_exports.boolean().default(false),
   unstableForkSession: external_exports.boolean().default(false)
 }).readonly();
-var sessionCommandSchema = external_exports.strictObject({
+var sessionCommandSchema = external_exports.object({
   description: SHORT_TEXT,
   inputHint: external_exports.string().max(255),
   name: external_exports.string().min(1).max(128)
 }).readonly();
-var permissionOptionSchema = external_exports.strictObject({
+var permissionOptionSchema = external_exports.object({
   kind: external_exports.enum(["allow_once", "allow_always", "reject_once", "reject_always"]),
   name: external_exports.string().min(1).max(255),
   optionId: external_exports.string().min(1).max(255)
 }).readonly();
-var elicitationOptionSchema = external_exports.strictObject({
+var elicitationOptionSchema = external_exports.object({
   description: SHORT_TEXT,
   label: external_exports.string().min(1).max(255),
   value: external_exports.string().max(500)
 }).readonly();
-var elicitationFieldSchema = external_exports.strictObject({
+var elicitationFieldSchema = external_exports.object({
   defaultBooleanValue: external_exports.boolean(),
   defaultNumberValue: external_exports.number().finite(),
   defaultStringValue: external_exports.string().max(1e4),
@@ -28682,7 +28688,7 @@ var elicitationFieldSchema = external_exports.strictObject({
   title: external_exports.string().min(1).max(255),
   type: external_exports.enum(["boolean", "integer", "multiselect", "number", "select", "string"])
 }).readonly();
-var displayContentSchema = external_exports.strictObject({
+var displayContentSchema = external_exports.object({
   artifactId: external_exports.string().max(128).default(""),
   data: external_exports.string().max(4e6),
   mimeType: external_exports.string().max(255),
@@ -28695,7 +28701,7 @@ var displayContentSchema = external_exports.strictObject({
   type: external_exports.enum(["diff", "image", "resource", "resource_link", "terminal", "text", "video"]),
   uri: external_exports.string().max(4096)
 }).readonly();
-var recordedDisplayContentSchema = external_exports.strictObject({
+var recordedDisplayContentSchema = external_exports.object({
   artifactId: external_exports.string().max(128).default(""),
   data: external_exports.string().max(4e6),
   mimeType: external_exports.string().max(255),
@@ -28708,25 +28714,25 @@ var recordedDisplayContentSchema = external_exports.strictObject({
   type: external_exports.enum(["diff", "image", "resource", "resource_link", "terminal", "text", "video"]),
   uri: external_exports.string().max(4096)
 }).readonly();
-var promptImageSchema = external_exports.strictObject({
+var promptImageSchema = external_exports.object({
   data: external_exports.string().min(1).max(4e6),
   mimeType: external_exports.string().min(1).max(255),
   name: external_exports.string().min(1).max(500)
 }).readonly();
-var promptResourceSchema = external_exports.strictObject({
+var promptResourceSchema = external_exports.object({
   mimeType: external_exports.string().max(255),
   name: external_exports.string().min(1).max(500),
   text: external_exports.string().max(1e6),
   type: external_exports.enum(["embedded", "link"]),
   uri: external_exports.string().min(1).max(4096)
 }).readonly();
-var workspaceListCommandSchema = external_exports.strictObject({
+var workspaceListCommandSchema = external_exports.object({
   bindingId: identifierStringSchema,
   directoryId: DIRECTORY_IDENTIFIER,
   kind: external_exports.literal(WORKSPACE_LIST_KIND),
   requestId: identifierStringSchema
 }).readonly();
-var workspaceEntriesEventSchema = external_exports.strictObject({
+var workspaceEntriesEventSchema = external_exports.object({
   bindingId: identifierStringSchema,
   directoryId: DIRECTORY_IDENTIFIER,
   directoryLabel: external_exports.string().min(1).max(2048),
@@ -28742,9 +28748,9 @@ var sessionIdentityFields = {
   directoryId: DIRECTORY_IDENTIFIER,
   sessionId: identifierStringSchema
 };
-var sessionPrepareCommandSchema = external_exports.strictObject({
+var sessionPrepareCommandSchema = external_exports.object({
   ...sessionIdentityFields,
-  configuration: external_exports.strictObject({
+  configuration: external_exports.object({
     booleanValue: external_exports.boolean(),
     configId: external_exports.string().min(1).max(128),
     value: external_exports.string().max(500),
@@ -28765,12 +28771,12 @@ var sessionPrepareCommandSchema = external_exports.strictObject({
   }
 }).readonly();
 var runtimeTimingsSchema = external_exports.array(
-  external_exports.strictObject({
+  external_exports.object({
     durationMilliseconds: external_exports.number().finite().nonnegative().max(12e4),
     name: external_exports.string().regex(/^[a-z][a-z0-9-]{0,63}$/)
   }).readonly()
 ).max(16).readonly();
-var sessionReadyEventSchema = external_exports.strictObject({
+var sessionReadyEventSchema = external_exports.object({
   additionalDirectories: external_exports.array(workspaceEntrySchema).max(16).readonly(),
   agentId: identifierStringSchema,
   agentName: external_exports.string().max(255),
@@ -28786,7 +28792,7 @@ var sessionReadyEventSchema = external_exports.strictObject({
   runtimeTimings: runtimeTimingsSchema.optional(),
   sessionId: identifierStringSchema
 }).readonly();
-var sessionConfigureCommandSchema = external_exports.strictObject({
+var sessionConfigureCommandSchema = external_exports.object({
   ...sessionIdentityFields,
   booleanValue: external_exports.boolean(),
   configId: external_exports.string().min(1).max(128),
@@ -28795,13 +28801,13 @@ var sessionConfigureCommandSchema = external_exports.strictObject({
   value: external_exports.string().max(500),
   valueType: external_exports.enum(["boolean", "select"])
 }).readonly();
-var sessionConfigUpdatedEventSchema = external_exports.strictObject({
+var sessionConfigUpdatedEventSchema = external_exports.object({
   configOptions: sessionConfigOptionsSchema,
   kind: external_exports.literal(SESSION_CONFIG_UPDATED_KIND),
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var sessionContextUsageUpdatedEventSchema = external_exports.strictObject({
+var sessionContextUsageUpdatedEventSchema = external_exports.object({
   costAmount: external_exports.number().finite().nonnegative(),
   costCurrency: external_exports.string().max(16),
   hasCost: external_exports.boolean(),
@@ -28811,7 +28817,7 @@ var sessionContextUsageUpdatedEventSchema = external_exports.strictObject({
   source: external_exports.literal("context").default("context"),
   used: external_exports.number().int().nonnegative()
 }).readonly();
-var sessionPromptUsageUpdatedEventSchema = external_exports.strictObject({
+var sessionPromptUsageUpdatedEventSchema = external_exports.object({
   _meta: promptMetadataSchema.nullable(),
   commandId: identifierStringSchema,
   kind: external_exports.literal(SESSION_USAGE_UPDATED_KIND),
@@ -28823,18 +28829,18 @@ var sessionUsageUpdatedEventSchema = external_exports.union([
   sessionContextUsageUpdatedEventSchema,
   sessionPromptUsageUpdatedEventSchema
 ]);
-var sessionCommandsUpdatedEventSchema = external_exports.strictObject({
+var sessionCommandsUpdatedEventSchema = external_exports.object({
   commands: external_exports.array(sessionCommandSchema).max(500).readonly(),
   kind: external_exports.literal(SESSION_COMMANDS_UPDATED_KIND),
   sessionId: identifierStringSchema
 }).readonly();
-var sessionInfoUpdatedEventSchema = external_exports.strictObject({
+var sessionInfoUpdatedEventSchema = external_exports.object({
   kind: external_exports.literal(SESSION_INFO_UPDATED_KIND),
   sessionId: identifierStringSchema,
   title: external_exports.string().max(500).nullable(),
   updatedAt: external_exports.string().max(128)
 }).readonly();
-var sessionPermissionRequestedEventSchema = external_exports.strictObject({
+var sessionPermissionRequestedEventSchema = external_exports.object({
   commandId: identifierStringSchema,
   interactionId: identifierStringSchema,
   kind: external_exports.literal(SESSION_PERMISSION_REQUESTED_KIND),
@@ -28844,21 +28850,21 @@ var sessionPermissionRequestedEventSchema = external_exports.strictObject({
   toolCallId: external_exports.string().min(1).max(255),
   toolKind: external_exports.string().max(64)
 }).readonly();
-var sessionPermissionRespondCommandSchema = external_exports.strictObject({
+var sessionPermissionRespondCommandSchema = external_exports.object({
   interactionId: identifierStringSchema,
   kind: external_exports.literal(SESSION_PERMISSION_RESPOND_KIND),
   optionId: external_exports.string().max(255),
   outcome: external_exports.enum(["cancelled", "selected"]),
   sessionId: identifierStringSchema
 }).readonly();
-var sessionPermissionResolvedEventSchema = external_exports.strictObject({
+var sessionPermissionResolvedEventSchema = external_exports.object({
   interactionId: identifierStringSchema,
   kind: external_exports.literal(SESSION_PERMISSION_RESOLVED_KIND),
   optionId: external_exports.string().max(255),
   outcome: external_exports.enum(["cancelled", "selected"]),
   sessionId: identifierStringSchema
 }).readonly();
-var sessionElicitationRequestedEventSchema = external_exports.strictObject({
+var sessionElicitationRequestedEventSchema = external_exports.object({
   accepted: external_exports.boolean(),
   commandId: identifierStringSchema,
   elicitationId: external_exports.string().max(255),
@@ -28870,20 +28876,20 @@ var sessionElicitationRequestedEventSchema = external_exports.strictObject({
   sessionId: identifierStringSchema,
   url: external_exports.string().max(4096)
 }).readonly();
-var sessionElicitationRespondCommandSchema = external_exports.strictObject({
+var sessionElicitationRespondCommandSchema = external_exports.object({
   action: external_exports.enum(["accept", "cancel", "decline"]),
   content: external_exports.string().max(1e5),
   interactionId: identifierStringSchema,
   kind: external_exports.literal(SESSION_ELICITATION_RESPOND_KIND),
   sessionId: identifierStringSchema
 }).readonly();
-var sessionElicitationResolvedEventSchema = external_exports.strictObject({
+var sessionElicitationResolvedEventSchema = external_exports.object({
   action: external_exports.enum(["accept", "cancel", "decline", "complete"]),
   interactionId: identifierStringSchema,
   kind: external_exports.literal(SESSION_ELICITATION_RESOLVED_KIND),
   sessionId: identifierStringSchema
 }).readonly();
-var sessionOperationFailedEventSchema = external_exports.strictObject({
+var sessionOperationFailedEventSchema = external_exports.object({
   code: identifierStringSchema,
   kind: external_exports.literal(SESSION_OPERATION_FAILED_KIND),
   message: external_exports.string().min(1).max(500),
@@ -28891,7 +28897,7 @@ var sessionOperationFailedEventSchema = external_exports.strictObject({
   runtimeTimings: runtimeTimingsSchema.optional(),
   sessionId: external_exports.string().max(128)
 }).readonly();
-var agentContentEventSchema = external_exports.strictObject({
+var agentContentEventSchema = external_exports.object({
   commandId: identifierStringSchema,
   content: displayContentSchema,
   contentId: identifierStringSchema,
@@ -28903,15 +28909,15 @@ var agentInstallIdentityFields = {
   agentId: identifierStringSchema,
   requestId: identifierStringSchema
 };
-var agentInstallRequestCommandSchema = external_exports.strictObject({
+var agentInstallRequestCommandSchema = external_exports.object({
   ...agentInstallIdentityFields,
   kind: external_exports.literal(AGENT_INSTALL_REQUEST_KIND)
 }).readonly();
-var agentInstallCancelCommandSchema = external_exports.strictObject({
+var agentInstallCancelCommandSchema = external_exports.object({
   kind: external_exports.literal(AGENT_INSTALL_CANCEL_KIND),
   requestId: identifierStringSchema
 }).readonly();
-var agentInstallStartedEventSchema = external_exports.strictObject({
+var agentInstallStartedEventSchema = external_exports.object({
   ...agentInstallIdentityFields,
   kind: external_exports.literal(AGENT_INSTALL_STARTED_KIND)
 }).readonly();
@@ -28922,23 +28928,23 @@ var installationStageSchema = external_exports.enum([
   "installing_adapter",
   "checking_acp"
 ]);
-var agentInstallProgressEventSchema = external_exports.strictObject({
+var agentInstallProgressEventSchema = external_exports.object({
   ...agentInstallIdentityFields,
   kind: external_exports.literal(AGENT_INSTALL_PROGRESS_KIND),
   stage: installationStageSchema
 }).readonly();
-var agentInstallCompletedEventSchema = external_exports.strictObject({
+var agentInstallCompletedEventSchema = external_exports.object({
   ...agentInstallIdentityFields,
   authenticationMayBeRequired: external_exports.boolean(),
   kind: external_exports.literal(AGENT_INSTALL_COMPLETED_KIND)
 }).readonly();
-var agentInstallFailedEventSchema = external_exports.strictObject({
+var agentInstallFailedEventSchema = external_exports.object({
   ...agentInstallIdentityFields,
   code: identifierStringSchema,
   kind: external_exports.literal(AGENT_INSTALL_FAILED_KIND),
   message: external_exports.string().min(1).max(500)
 }).readonly();
-var agentInstallCancelledEventSchema = external_exports.strictObject({
+var agentInstallCancelledEventSchema = external_exports.object({
   ...agentInstallIdentityFields,
   kind: external_exports.literal(AGENT_INSTALL_CANCELLED_KIND)
 }).readonly();
@@ -29101,6 +29107,17 @@ var ProtocolMessageError = class extends Error {
     this.name = "ProtocolMessageError";
   }
 };
+var UnsupportedProtocolMessageKindError = class extends Error {
+  code = "unsupported_protocol_message_kind";
+  direction;
+  messageKind;
+  constructor(direction, messageKind) {
+    super(`Unsupported ${direction} message kind: ${messageKind}`);
+    this.name = "UnsupportedProtocolMessageKindError";
+    this.direction = direction;
+    this.messageKind = messageKind;
+  }
+};
 function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -29118,13 +29135,6 @@ function parseJson2(encoded) {
   }
   return value;
 }
-function assertExactKeys(value, allowedKeys) {
-  for (const key of Object.keys(value)) {
-    if (!allowedKeys.includes(key)) {
-      throw new ProtocolMessageError(`Unexpected message field: ${key}`);
-    }
-  }
-}
 function readString2(value, key, maximumLength) {
   const field = value[key];
   if (typeof field !== "string" || field.length === 0 || field.length > maximumLength) {
@@ -29215,18 +29225,15 @@ function readActivityDetail(value) {
   }
   const kind = readString2(field, "kind", 32);
   if (kind === "available") {
-    assertExactKeys(field, ["artifactId", "kind"]);
     return {
       artifactId: readIdentifier(field, "artifactId"),
       kind
     };
   }
   if (kind === "unrecorded") {
-    assertExactKeys(field, ["kind"]);
     return { kind };
   }
   if (kind === "truncated") {
-    assertExactKeys(field, ["capturedBytes", "kind", "originalBytes"]);
     const capturedBytes = readSequence(field, "capturedBytes");
     const originalBytes = readSequence(field, "originalBytes");
     if (capturedBytes > originalBytes) {
@@ -29235,7 +29242,6 @@ function readActivityDetail(value) {
     return { capturedBytes, kind, originalBytes };
   }
   if (kind === "recorded") {
-    assertExactKeys(field, ["content", "input", "kind", "output"]);
     const contentValue = field["content"];
     if (!Array.isArray(contentValue) || contentValue.length > 100) {
       throw new ProtocolMessageError("Invalid recorded activity content");
@@ -29278,21 +29284,6 @@ function decodeMessageKind(encoded) {
 function decodeSessionPromptCommand(encoded) {
   const value = parseJson2(encoded);
   const hasSessionConfigurations = Object.hasOwn(value, "sessionConfigurations");
-  assertExactKeys(value, [
-    "additionalDirectoryIds",
-    "agentId",
-    "bindingId",
-    "commandId",
-    "directoryId",
-    "disposition",
-    "images",
-    "kind",
-    "prompt",
-    "resources",
-    ...hasSessionConfigurations ? ["sessionConfigurations"] : [],
-    "sessionId",
-    "targetCommandId"
-  ]);
   assertKind(value, SESSION_PROMPT_KIND);
   const prompt = readText(value, "prompt", MAX_PROMPT_LENGTH);
   const images = decodePromptImagesValue(value["images"]);
@@ -29332,7 +29323,6 @@ function decodeSessionPromptCommand(encoded) {
 }
 function decodeSessionCancelCommand(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["commandId", "kind", "sessionId"]);
   assertKind(value, SESSION_CANCEL_KIND);
   return {
     commandId: readIdentifier(value, "commandId"),
@@ -29342,7 +29332,6 @@ function decodeSessionCancelCommand(encoded) {
 }
 function decodeSessionPromptDispositionCommand(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["commandId", "disposition", "kind", "sessionId"]);
   assertKind(value, SESSION_PROMPT_DISPOSITION_KIND);
   if (readPromptDisposition(value) !== SessionPromptDisposition.Steer) {
     throw new ProtocolMessageError("Only queued prompts can be steered");
@@ -29356,7 +29345,6 @@ function decodeSessionPromptDispositionCommand(encoded) {
 }
 function decodeSessionQueuedEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["commandId", "kind", "sessionId"]);
   assertKind(value, SESSION_QUEUED_KIND);
   return {
     commandId: readIdentifier(value, "commandId"),
@@ -29367,12 +29355,10 @@ function decodeSessionQueuedEvent(encoded) {
 function decodeRuntimeLivenessReadyEvent(encoded) {
   const value = parseJson2(encoded);
   assertKind(value, RUNTIME_LIVENESS_READY_KIND);
-  assertExactKeys(value, ["kind"]);
   return { kind: RUNTIME_LIVENESS_READY_KIND };
 }
 function decodeRuntimeHeartbeatEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["heartbeatId", "kind"]);
   assertKind(value, RUNTIME_HEARTBEAT_KIND);
   return {
     heartbeatId: readIdentifier(value, "heartbeatId"),
@@ -29381,7 +29367,6 @@ function decodeRuntimeHeartbeatEvent(encoded) {
 }
 function decodeRuntimeHeartbeatAckEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["heartbeatId", "kind"]);
   assertKind(value, RUNTIME_HEARTBEAT_ACK_KIND);
   return {
     heartbeatId: readIdentifier(value, "heartbeatId"),
@@ -29390,7 +29375,6 @@ function decodeRuntimeHeartbeatAckEvent(encoded) {
 }
 function decodeSessionStartedEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["commandId", "epoch", "kind", "attemptId", "prompt", "sequence", "sessionId"]);
   assertKind(value, SESSION_STARTED_KIND);
   const sequence = readSequence(value, "sequence");
   if (sequence !== 0) {
@@ -29408,7 +29392,6 @@ function decodeSessionStartedEvent(encoded) {
 }
 function decodeAgentMessageDeltaEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["commandId", "epoch", "kind", "messageId", "sequence", "sessionId", "text"]);
   assertKind(value, AGENT_MESSAGE_DELTA_KIND);
   const sequence = readSequence(value, "sequence");
   if (sequence === 0) {
@@ -29426,23 +29409,6 @@ function decodeAgentMessageDeltaEvent(encoded) {
 }
 function decodeAgentActivityEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, [
-    "activityId",
-    "activityType",
-    "commandId",
-    "content",
-    "detail",
-    "input",
-    "kind",
-    "locations",
-    "name",
-    "output",
-    "sequence",
-    "sessionId",
-    "status",
-    "title",
-    "toolKind"
-  ]);
   assertKind(value, AGENT_ACTIVITY_KIND);
   return {
     activityId: readIdentifier(value, "activityId"),
@@ -29464,7 +29430,6 @@ function decodeAgentActivityEvent(encoded) {
 }
 function decodeSessionCompletedEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["commandId", "kind", "sessionId", "stopReason"]);
   assertKind(value, SESSION_COMPLETED_KIND);
   return {
     commandId: readIdentifier(value, "commandId"),
@@ -29475,7 +29440,6 @@ function decodeSessionCompletedEvent(encoded) {
 }
 function decodeSessionFailedEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["code", "commandId", "kind", "message", "sessionId"]);
   assertKind(value, SESSION_FAILED_KIND);
   return {
     code: readIdentifier(value, "code"),
@@ -29508,7 +29472,6 @@ function encodeRuntimeHeartbeatAckEvent(message) {
 }
 function decodeAgentActivityNarrationEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["activityId", "activityType", "commandId", "kind", "sequence", "sessionId", "text"]);
   assertKind(value, AGENT_ACTIVITY_NARRATION_KIND);
   return {
     activityId: readIdentifier(value, "activityId"),
@@ -29526,7 +29489,7 @@ var SESSION_HISTORY_CHARACTER_LIMIT = 256e3;
 var SESSION_HISTORY_MESSAGE_LIMIT = 1e3;
 var SESSION_HISTORY_PREVIEW_MESSAGE_LIMIT = 10;
 var SESSION_HISTORY_IMAGE_CHARACTER_LIMIT = 4e6;
-var historyImage = external_exports.strictObject({
+var historyImage = external_exports.object({
   data: external_exports.string().min(4).max(SESSION_HISTORY_IMAGE_CHARACTER_LIMIT).refine((data) => data.length % 4 === 0 && /^[A-Za-z0-9+/]*={0,2}$/.test(data)),
   mimeType: external_exports.enum(["image/png", "image/jpeg", "image/gif", "image/webp"]),
   name: external_exports.string().min(1).max(500)
@@ -29553,7 +29516,7 @@ function parseNativeHistoryText(text2) {
   });
   return { text: plainText, images };
 }
-var nativeMessageActivitySchema = external_exports.strictObject({
+var nativeMessageActivitySchema = external_exports.object({
   activityId: external_exports.string().min(1).max(128),
   activityType: external_exports.string().min(1).max(128),
   content: external_exports.array(displayContentSchema).max(100).readonly(),
@@ -29566,12 +29529,12 @@ var nativeMessageActivitySchema = external_exports.strictObject({
   title: external_exports.string().max(500),
   toolKind: external_exports.string().max(64)
 }).readonly();
-var userHistoryMessage = external_exports.strictObject({
+var userHistoryMessage = external_exports.object({
   role: external_exports.literal("user"),
   text: external_exports.string().max(SESSION_HISTORY_CHARACTER_LIMIT),
   images: external_exports.array(historyImage).max(8).readonly().optional()
 }).readonly();
-var assistantHistoryMessageSchema = external_exports.strictObject({
+var assistantHistoryMessageSchema = external_exports.object({
   activities: external_exports.array(nativeMessageActivitySchema).max(100).readonly().default([]),
   content: external_exports.array(displayContentSchema).max(100).readonly().default([]),
   role: external_exports.literal("assistant"),
@@ -29581,8 +29544,8 @@ var assistantHistoryMessageSchema = external_exports.strictObject({
   images: external_exports.array(historyImage).max(8).readonly().optional()
 }).readonly();
 var historyMessage = external_exports.discriminatedUnion("role", [userHistoryMessage, assistantHistoryMessageSchema]);
-var availableSessionHistoryObjectSchema = external_exports.strictObject({
-  streamPosition: external_exports.strictObject({
+var availableSessionHistoryObjectSchema = external_exports.object({
+  streamPosition: external_exports.object({
     commandId: identifierStringSchema,
     epoch: identifierStringSchema,
     sequence: external_exports.number().int().nonnegative()
@@ -29599,9 +29562,9 @@ var availableSessionHistoryObjectSchema = external_exports.strictObject({
   ).max(2e4).readonly().default([])
 });
 var availableSessionHistorySchema = availableSessionHistoryObjectSchema.readonly();
-var unavailableSessionHistoryObjectSchema = external_exports.strictObject({
+var unavailableSessionHistoryObjectSchema = external_exports.object({
   status: external_exports.literal("unavailable"),
-  cause: external_exports.strictObject({
+  cause: external_exports.object({
     code: external_exports.string().regex(/^[a-z][a-z0-9_]{0,127}$/),
     message: external_exports.string().min(1).max(1e3)
   }).readonly()
@@ -29634,7 +29597,7 @@ var envelope = {
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 };
-var activeTurnActivitySchema = external_exports.strictObject({
+var activeTurnActivitySchema = external_exports.object({
   activityId: external_exports.string().min(1).max(128),
   activityType: external_exports.string().min(1).max(128),
   content: external_exports.array(displayContentSchema).max(100).readonly(),
@@ -29647,13 +29610,13 @@ var activeTurnActivitySchema = external_exports.strictObject({
   title: external_exports.string().max(500),
   toolKind: external_exports.string().max(64)
 }).readonly();
-var activeTurnUserMessageSchema = external_exports.strictObject({
+var activeTurnUserMessageSchema = external_exports.object({
   id: identifierStringSchema,
   images: external_exports.array(promptImageSchema).max(8).readonly().optional(),
   role: external_exports.literal("user"),
   text: external_exports.string().max(SESSION_HISTORY_CHARACTER_LIMIT)
 }).readonly();
-var activeTurnAssistantMessageSchema = external_exports.strictObject({
+var activeTurnAssistantMessageSchema = external_exports.object({
   activities: external_exports.array(activeTurnActivitySchema).max(100).readonly().default([]),
   content: external_exports.array(displayContentSchema).max(100).readonly().default([]),
   id: identifierStringSchema,
@@ -29664,7 +29627,7 @@ var activeTurnMessageSchema = external_exports.discriminatedUnion("role", [
   activeTurnUserMessageSchema,
   activeTurnAssistantMessageSchema
 ]);
-var activeTurnSnapshotSchema = external_exports.strictObject({
+var activeTurnSnapshotSchema = external_exports.object({
   commandId: identifierStringSchema,
   epoch: identifierStringSchema,
   hasOlder: external_exports.boolean(),
@@ -29689,64 +29652,64 @@ var identity = {
   directoryId
 };
 var nativeSessionRequestSchema = external_exports.discriminatedUnion("action", [
-  external_exports.strictObject({ ...identity, action: external_exports.literal("create") }).readonly(),
-  external_exports.strictObject({ ...identity, action: external_exports.literal("active-turn"), targetSessionId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({ ...identity, action: external_exports.literal("preview"), entryId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({ ...identity, action: external_exports.literal("history"), entryId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({ ...identity, action: external_exports.literal("find"), nativeSessionId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ ...identity, action: external_exports.literal("create") }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("active-turn"), targetSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("preview"), entryId: identifierStringSchema }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("history"), entryId: identifierStringSchema }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("find"), nativeSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({
     ...identity,
     action: external_exports.literal("list"),
     cursor: identifierStringSchema.nullable()
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...identity,
     action: external_exports.enum(["import", "fork"]),
     entryId: identifierStringSchema,
     targetSessionId: identifierStringSchema
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...identity,
     action: external_exports.literal("fork-recorded"),
     targetSessionId: identifierStringSchema,
     throughCommandId: identifierStringSchema
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...identity,
     action: external_exports.literal("delete"),
     entryId: identifierStringSchema
   }).readonly()
 ]);
 var nativeSessionCommandSchema = external_exports.discriminatedUnion("action", [
-  external_exports.strictObject({ ...identity, action: external_exports.literal("create") }).readonly(),
-  external_exports.strictObject({ ...identity, action: external_exports.literal("active-turn"), targetSessionId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({ ...identity, action: external_exports.literal("preview"), entryId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({ ...identity, action: external_exports.literal("history"), entryId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({ ...identity, action: external_exports.literal("find"), nativeSessionId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ ...identity, action: external_exports.literal("create") }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("active-turn"), targetSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("preview"), entryId: identifierStringSchema }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("history"), entryId: identifierStringSchema }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("find"), nativeSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({
     ...identity,
     action: external_exports.literal("list"),
     cursor: identifierStringSchema.nullable()
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...identity,
     action: external_exports.enum(["import", "fork"]),
     entryId: identifierStringSchema,
     targetSessionId: identifierStringSchema
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...identity,
     action: external_exports.literal("fork-recorded"),
     targetSessionId: identifierStringSchema,
     throughCommandId: identifierStringSchema
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...identity,
     action: external_exports.literal("delete"),
     entryId: identifierStringSchema
   }).readonly()
 ]);
-var nativeSessionEntrySchema = external_exports.strictObject({
+var nativeSessionEntrySchema = external_exports.object({
   entryId: identifierStringSchema,
   mobiusSessionIds: external_exports.array(identifierStringSchema).max(500).readonly(),
   nativeSessionId: identifierStringSchema,
@@ -29754,20 +29717,20 @@ var nativeSessionEntrySchema = external_exports.strictObject({
   directoryId,
   directoryLabel: external_exports.string().min(1).max(2048),
   updatedAt: external_exports.iso.datetime({ offset: true }).nullable(),
-  additionalDirectories: external_exports.array(external_exports.strictObject({ directoryId, name: external_exports.string().min(1).max(255) }).readonly()).max(16).readonly()
+  additionalDirectories: external_exports.array(external_exports.object({ directoryId, name: external_exports.string().min(1).max(255) }).readonly()).max(16).readonly()
 }).readonly();
 var resultEnvelope = {
   ...envelope,
   kind: external_exports.literal(NATIVE_SESSION_RESULT_KIND)
 };
 var nativeSessionResultSchema = external_exports.discriminatedUnion("action", [
-  external_exports.strictObject({ ...resultEnvelope, action: external_exports.literal("create"), nativeSessionId: identifierStringSchema }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ ...resultEnvelope, action: external_exports.literal("create"), nativeSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({
     ...resultEnvelope,
     action: external_exports.literal("active-turn"),
     targetSessionId: identifierStringSchema,
     queued: external_exports.array(
-      external_exports.strictObject({
+      external_exports.object({
         commandId: identifierStringSchema,
         prompt: external_exports.string().max(1e5),
         images: external_exports.array(promptImageSchema).max(8).readonly()
@@ -29775,26 +29738,26 @@ var nativeSessionResultSchema = external_exports.discriminatedUnion("action", [
     ).readonly(),
     turn: activeTurnSnapshotSchema.nullable()
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...resultEnvelope,
     action: external_exports.literal("find"),
     entry: nativeSessionEntrySchema
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...resultEnvelope,
     action: external_exports.literal("list"),
     capabilities: sessionCapabilitiesSchema,
     entries: external_exports.array(nativeSessionEntrySchema).max(500).readonly(),
     nextCursor: identifierStringSchema.nullable()
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...resultEnvelope,
     action: external_exports.enum(["import", "fork", "fork-recorded"]),
     targetSessionId: identifierStringSchema,
     ready: sessionReadyEventSchema,
     title: external_exports.string().max(500)
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...resultEnvelope,
     action: external_exports.literal("preview"),
     entryId: identifierStringSchema,
@@ -29803,21 +29766,21 @@ var nativeSessionResultSchema = external_exports.discriminatedUnion("action", [
     history: sessionHistorySchema,
     title: external_exports.string().max(500)
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...resultEnvelope,
     action: external_exports.literal("history"),
     entryId: identifierStringSchema,
     history: sessionHistorySchema,
     title: external_exports.string().max(500)
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...resultEnvelope,
     action: external_exports.literal("delete"),
     entryId: identifierStringSchema,
     deletedSessionIds: external_exports.array(identifierStringSchema).max(500).readonly()
   }).readonly()
 ]);
-var nativeSessionCancelSchema = external_exports.strictObject({ ...envelope, kind: external_exports.literal(NATIVE_SESSION_CANCEL_KIND) }).readonly();
+var nativeSessionCancelSchema = external_exports.object({ ...envelope, kind: external_exports.literal(NATIVE_SESSION_CANCEL_KIND) }).readonly();
 function decode4(schema, encoded) {
   try {
     const value = JSON.parse(encoded);
@@ -29842,6 +29805,7 @@ var MAX_JSON_KEYS = 1e3;
 var SESSION_EVENT_V2_KIND = "session.event.v2";
 var boundedString = external_exports.string().max(MAX_CONTENT_LENGTH);
 var shortString = external_exports.string().max(2048);
+var externalContentKeySchema = external_exports.string().regex(/^[a-f0-9]{64}$/u);
 function boundedJsonIssue(value, depth = 0) {
   if (depth > MAX_JSON_DEPTH) {
     return "JSON nesting exceeds the maximum depth";
@@ -29893,23 +29857,47 @@ var boundedJsonSchema = external_exports.unknown().superRefine((value, context)
 });
 var metadataSchema = external_exports.record(external_exports.string().max(255), boundedJsonSchema).readonly();
 var optionalMetadata = metadataSchema.nullable().optional();
-var annotationsSchema = external_exports.strictObject({
+var annotationsSchema = external_exports.object({
   _meta: optionalMetadata,
   audience: external_exports.array(external_exports.enum(["assistant", "user"])).max(2).readonly().nullable().optional(),
   lastModified: shortString.nullable().optional(),
   priority: external_exports.number().finite().nullable().optional()
 }).readonly();
 var contentFields = { _meta: optionalMetadata, annotations: annotationsSchema.nullable().optional() };
-var textContentSchema = external_exports.strictObject({ ...contentFields, text: boundedString, type: external_exports.literal("text") }).readonly();
-var imageContentSchema = external_exports.strictObject({
+var textContentSchema = external_exports.object({ ...contentFields, text: boundedString, type: external_exports.literal("text") }).readonly();
+var imageContentSchema = external_exports.object({
   ...contentFields,
   data: boundedString,
   mimeType: shortString,
   type: external_exports.literal("image"),
   uri: boundedString.nullable().optional()
 }).readonly();
-var audioContentSchema = external_exports.strictObject({ ...contentFields, data: boundedString, mimeType: shortString, type: external_exports.literal("audio") }).readonly();
-var resourceLinkSchema = external_exports.strictObject({
+var audioContentSchema = external_exports.object({ ...contentFields, data: boundedString, mimeType: shortString, type: external_exports.literal("audio") }).readonly();
+var externalImageContentSchema = external_exports.strictObject({
+  ...contentFields,
+  byteLength: external_exports.number().int().positive().safe(),
+  imageKey: externalContentKeySchema,
+  mimeType: shortString,
+  type: external_exports.literal("external_image"),
+  uri: boundedString.nullable().optional()
+}).readonly();
+var externalAudioContentSchema = external_exports.strictObject({
+  ...contentFields,
+  audioKey: externalContentKeySchema,
+  byteLength: external_exports.number().int().positive().safe(),
+  mimeType: shortString,
+  type: external_exports.literal("external_audio")
+}).readonly();
+var externalResourceContentSchema = external_exports.strictObject({
+  ...contentFields,
+  byteLength: external_exports.number().int().positive().safe(),
+  encoding: external_exports.enum(["binary", "text"]),
+  mimeType: shortString.nullable().optional(),
+  resourceKey: externalContentKeySchema,
+  type: external_exports.literal("external_resource"),
+  uri: boundedString
+}).readonly();
+var resourceLinkSchema = external_exports.object({
   ...contentFields,
   description: boundedString.nullable().optional(),
   mimeType: shortString.nullable().optional(),
@@ -29919,19 +29907,19 @@ var resourceLinkSchema = external_exports.strictObject({
   type: external_exports.literal("resource_link"),
   uri: boundedString
 }).readonly();
-var textResourceSchema = external_exports.strictObject({
+var textResourceSchema = external_exports.object({
   _meta: optionalMetadata,
   mimeType: shortString.nullable().optional(),
   text: boundedString,
   uri: boundedString
 }).readonly();
-var blobResourceSchema = external_exports.strictObject({
+var blobResourceSchema = external_exports.object({
   _meta: optionalMetadata,
   blob: boundedString,
   mimeType: shortString.nullable().optional(),
   uri: boundedString
 }).readonly();
-var embeddedResourceSchema = external_exports.strictObject({
+var embeddedResourceSchema = external_exports.object({
   ...contentFields,
   resource: external_exports.union([textResourceSchema, blobResourceSchema]),
   type: external_exports.literal("resource")
@@ -29941,20 +29929,23 @@ var contentBlockV2Schema = external_exports.discriminatedUnion("type", [
   imageContentSchema,
   audioContentSchema,
   resourceLinkSchema,
-  embeddedResourceSchema
+  embeddedResourceSchema,
+  externalImageContentSchema,
+  externalAudioContentSchema,
+  externalResourceContentSchema
 ]);
 var toolCallContentSchema = external_exports.discriminatedUnion("type", [
-  external_exports.strictObject({ _meta: optionalMetadata, content: contentBlockV2Schema, type: external_exports.literal("content") }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ _meta: optionalMetadata, content: contentBlockV2Schema, type: external_exports.literal("content") }).readonly(),
+  external_exports.object({
     _meta: optionalMetadata,
     newText: boundedString,
     oldText: boundedString.nullable().optional(),
     path: boundedString,
     type: external_exports.literal("diff")
   }).readonly(),
-  external_exports.strictObject({ _meta: optionalMetadata, terminalId: shortString, type: external_exports.literal("terminal") }).readonly()
+  external_exports.object({ _meta: optionalMetadata, terminalId: shortString, type: external_exports.literal("terminal") }).readonly()
 ]);
-var toolCallLocationSchema = external_exports.strictObject({
+var toolCallLocationSchema = external_exports.object({
   _meta: optionalMetadata,
   line: external_exports.number().int().nonnegative().safe().nullable().optional(),
   path: boundedString
@@ -29983,40 +29974,40 @@ var toolPatchFields = {
   status: toolStatusSchema.nullable().optional(),
   title: boundedString.nullable().optional()
 };
-var planEntrySchema = external_exports.strictObject({
+var planEntrySchema = external_exports.object({
   _meta: optionalMetadata,
   content: boundedString,
   priority: external_exports.enum(["high", "medium", "low"]),
   status: external_exports.enum(["pending", "in_progress", "completed"])
 }).readonly();
 var planContentSchema = external_exports.discriminatedUnion("type", [
-  external_exports.strictObject({
+  external_exports.object({
     _meta: optionalMetadata,
     entries: external_exports.array(planEntrySchema).max(MAX_COLLECTION_SIZE).readonly(),
     planId: shortString,
     type: external_exports.literal("items")
   }).readonly(),
-  external_exports.strictObject({ _meta: optionalMetadata, planId: shortString, type: external_exports.literal("file"), uri: boundedString }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ _meta: optionalMetadata, planId: shortString, type: external_exports.literal("file"), uri: boundedString }).readonly(),
+  external_exports.object({
     _meta: optionalMetadata,
     content: boundedString,
     planId: shortString,
     type: external_exports.literal("markdown")
   }).readonly()
 ]);
-var commandSchema = external_exports.strictObject({
+var commandSchema = external_exports.object({
   _meta: optionalMetadata,
   description: boundedString,
-  input: external_exports.strictObject({ _meta: optionalMetadata, hint: boundedString }).readonly().nullable().optional(),
+  input: external_exports.object({ _meta: optionalMetadata, hint: boundedString }).readonly().nullable().optional(),
   name: shortString
 }).readonly();
-var configSelectOptionSchema = external_exports.strictObject({
+var configSelectOptionSchema = external_exports.object({
   _meta: optionalMetadata,
   description: boundedString.nullable().optional(),
   name: shortString,
   value: shortString
 }).readonly();
-var configSelectGroupSchema = external_exports.strictObject({
+var configSelectGroupSchema = external_exports.object({
   _meta: optionalMetadata,
   group: shortString,
   name: shortString,
@@ -30030,7 +30021,7 @@ var configBaseFields = {
   name: shortString
 };
 var sessionConfigOptionSchema2 = external_exports.discriminatedUnion("type", [
-  external_exports.strictObject({
+  external_exports.object({
     ...configBaseFields,
     currentValue: shortString,
     options: external_exports.union([
@@ -30039,7 +30030,7 @@ var sessionConfigOptionSchema2 = external_exports.discriminatedUnion("type", [
     ]),
     type: external_exports.literal("select")
   }).readonly(),
-  external_exports.strictObject({ ...configBaseFields, currentValue: external_exports.boolean(), type: external_exports.literal("boolean") }).readonly()
+  external_exports.object({ ...configBaseFields, currentValue: external_exports.boolean(), type: external_exports.literal("boolean") }).readonly()
 ]);
 var contentChunkFields = {
   _meta: optionalMetadata,
@@ -30047,10 +30038,10 @@ var contentChunkFields = {
   messageId: shortString.nullable().optional()
 };
 var acpSessionUpdateV2Schema = external_exports.discriminatedUnion("sessionUpdate", [
-  external_exports.strictObject({ ...contentChunkFields, sessionUpdate: external_exports.literal("user_message_chunk") }).readonly(),
-  external_exports.strictObject({ ...contentChunkFields, sessionUpdate: external_exports.literal("agent_message_chunk") }).readonly(),
-  external_exports.strictObject({ ...contentChunkFields, sessionUpdate: external_exports.literal("agent_thought_chunk") }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ ...contentChunkFields, sessionUpdate: external_exports.literal("user_message_chunk") }).readonly(),
+  external_exports.object({ ...contentChunkFields, sessionUpdate: external_exports.literal("agent_message_chunk") }).readonly(),
+  external_exports.object({ ...contentChunkFields, sessionUpdate: external_exports.literal("agent_thought_chunk") }).readonly(),
+  external_exports.object({
     _meta: optionalMetadata,
     content: external_exports.array(toolCallContentSchema).max(MAX_COLLECTION_SIZE).readonly().optional(),
     kind: toolKindSchema.optional(),
@@ -30063,43 +30054,43 @@ var acpSessionUpdateV2Schema = external_exports.discriminatedUnion("sessionUpdat
     title: boundedString,
     toolCallId: shortString
   }).readonly(),
-  external_exports.strictObject({ ...toolPatchFields, sessionUpdate: external_exports.literal("tool_call_update"), toolCallId: shortString }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ ...toolPatchFields, sessionUpdate: external_exports.literal("tool_call_update"), toolCallId: shortString }).readonly(),
+  external_exports.object({
     _meta: optionalMetadata,
     entries: external_exports.array(planEntrySchema).max(MAX_COLLECTION_SIZE).readonly(),
     sessionUpdate: external_exports.literal("plan")
   }).readonly(),
-  external_exports.strictObject({ _meta: optionalMetadata, plan: planContentSchema, sessionUpdate: external_exports.literal("plan_update") }).readonly(),
-  external_exports.strictObject({ _meta: optionalMetadata, planId: shortString, sessionUpdate: external_exports.literal("plan_removed") }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ _meta: optionalMetadata, plan: planContentSchema, sessionUpdate: external_exports.literal("plan_update") }).readonly(),
+  external_exports.object({ _meta: optionalMetadata, planId: shortString, sessionUpdate: external_exports.literal("plan_removed") }).readonly(),
+  external_exports.object({
     _meta: optionalMetadata,
     availableCommands: external_exports.array(commandSchema).max(MAX_COLLECTION_SIZE).readonly(),
     sessionUpdate: external_exports.literal("available_commands_update")
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     _meta: optionalMetadata,
     currentModeId: shortString,
     sessionUpdate: external_exports.literal("current_mode_update")
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     _meta: optionalMetadata,
     configOptions: external_exports.array(sessionConfigOptionSchema2).max(MAX_COLLECTION_SIZE).readonly(),
     sessionUpdate: external_exports.literal("config_option_update")
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     _meta: optionalMetadata,
     sessionUpdate: external_exports.literal("session_info_update"),
     title: boundedString.nullable().optional(),
     updatedAt: shortString.nullable().optional()
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     _meta: optionalMetadata,
-    cost: external_exports.strictObject({ _meta: optionalMetadata, amount: external_exports.number().finite(), currency: external_exports.string().max(16) }).readonly().nullable().optional(),
+    cost: external_exports.object({ _meta: optionalMetadata, amount: external_exports.number().finite(), currency: external_exports.string().max(16) }).readonly().nullable().optional(),
     sessionUpdate: external_exports.literal("usage_update"),
     size: external_exports.number().int().nonnegative().safe(),
     used: external_exports.number().int().nonnegative().safe()
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     _meta: optionalMetadata,
     compactionId: shortString,
     error: boundedString.nullable().optional(),
@@ -30107,7 +30098,7 @@ var acpSessionUpdateV2Schema = external_exports.discriminatedUnion("sessionUpdat
     status: shortString,
     summary: external_exports.array(contentBlockV2Schema).max(MAX_COLLECTION_SIZE).readonly().nullable().optional()
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     _meta: optionalMetadata,
     compactionId: shortString,
     content: contentBlockV2Schema,
@@ -30116,28 +30107,28 @@ var acpSessionUpdateV2Schema = external_exports.discriminatedUnion("sessionUpdat
 ]);
 var lifecycleBase = { commandId: identifierStringSchema };
 var lifecycleMetadataV2Schema = external_exports.discriminatedUnion("kind", [
-  external_exports.strictObject({ kind: external_exports.literal("session.queue.changed") }).readonly(),
-  external_exports.strictObject({ event: sessionPermissionRequestedEventSchema, kind: external_exports.literal("session.permission.requested") }).readonly(),
-  external_exports.strictObject({ event: sessionPermissionResolvedEventSchema, kind: external_exports.literal("session.permission.resolved") }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ kind: external_exports.literal("session.queue.changed") }).readonly(),
+  external_exports.object({ event: sessionPermissionRequestedEventSchema, kind: external_exports.literal("session.permission.requested") }).readonly(),
+  external_exports.object({ event: sessionPermissionResolvedEventSchema, kind: external_exports.literal("session.permission.resolved") }).readonly(),
+  external_exports.object({
     event: sessionElicitationRequestedEventSchema,
     kind: external_exports.literal("session.elicitation.requested")
   }).readonly(),
-  external_exports.strictObject({ event: sessionElicitationResolvedEventSchema, kind: external_exports.literal("session.elicitation.resolved") }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ event: sessionElicitationResolvedEventSchema, kind: external_exports.literal("session.elicitation.resolved") }).readonly(),
+  external_exports.object({
     ...lifecycleBase,
     content: external_exports.array(contentBlockV2Schema).min(1).max(100).readonly(),
     kind: external_exports.literal("prompt.requested")
   }).readonly(),
-  external_exports.strictObject({ ...lifecycleBase, attemptId: identifierStringSchema, epoch: identifierStringSchema, kind: external_exports.literal("prompt.started") }).readonly(),
-  external_exports.strictObject({ ...lifecycleBase, kind: external_exports.literal("prompt.completed"), stopReason: shortString }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ ...lifecycleBase, attemptId: identifierStringSchema, epoch: identifierStringSchema, kind: external_exports.literal("prompt.started") }).readonly(),
+  external_exports.object({ ...lifecycleBase, kind: external_exports.literal("prompt.completed"), stopReason: shortString }).readonly(),
+  external_exports.object({
     ...lifecycleBase,
     code: identifierStringSchema,
     kind: external_exports.literal("prompt.failed-before-start"),
     message: external_exports.string().min(1).max(500)
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     ...lifecycleBase,
     attemptId: identifierStringSchema,
     code: identifierStringSchema,
@@ -30146,19 +30137,19 @@ var lifecycleMetadataV2Schema = external_exports.discriminatedUnion("kind", [
   }).readonly()
 ]);
 var sessionEventPayloadV2Schema = external_exports.discriminatedUnion("type", [
-  external_exports.strictObject({ payload: acpSessionUpdateV2Schema, type: external_exports.literal("acp") }).readonly(),
-  external_exports.strictObject({ payload: lifecycleMetadataV2Schema, type: external_exports.literal("lifecycle-metadata") }).readonly()
+  external_exports.object({ payload: acpSessionUpdateV2Schema, type: external_exports.literal("acp") }).readonly(),
+  external_exports.object({ payload: lifecycleMetadataV2Schema, type: external_exports.literal("lifecycle-metadata") }).readonly()
 ]);
 var positionSchema = external_exports.string().regex(/^(0|[1-9][0-9]*)$/);
 var provenanceSchema = external_exports.discriminatedUnion("kind", [
-  external_exports.strictObject({ kind: external_exports.literal("original") }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ kind: external_exports.literal("original") }).readonly(),
+  external_exports.object({
     kind: external_exports.literal("imported"),
     sourceEventId: identifierStringSchema,
     sourcePosition: positionSchema,
     sourceSessionId: identifierStringSchema
   }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({
     kind: external_exports.literal("forked"),
     sourceEventId: identifierStringSchema,
     sourcePosition: positionSchema,
@@ -30173,15 +30164,15 @@ var sessionEventFieldsV2 = {
   sessionId: identifierStringSchema
 };
 var sessionEventV2Schema = external_exports.discriminatedUnion("type", [
-  external_exports.strictObject({ ...sessionEventFieldsV2, payload: acpSessionUpdateV2Schema, type: external_exports.literal("acp") }).readonly(),
-  external_exports.strictObject({
+  external_exports.object({ ...sessionEventFieldsV2, payload: acpSessionUpdateV2Schema, type: external_exports.literal("acp") }).readonly(),
+  external_exports.object({
     ...sessionEventFieldsV2,
     payload: lifecycleMetadataV2Schema,
     type: external_exports.literal("lifecycle-metadata")
   }).readonly()
 ]);
-var sessionExportV2Schema = external_exports.strictObject({
-  binding: external_exports.strictObject({
+var sessionExportV2Schema = external_exports.object({
+  binding: external_exports.object({
     bindingId: identifierStringSchema,
     runtimeId: identifierStringSchema
   }).readonly(),
@@ -30218,20 +30209,20 @@ var sessionExportV2Schema = external_exports.strictObject({
     eventIds.add(event.eventId);
   }
 });
-var mobiusSessionExportV2Schema = external_exports.strictObject({
+var mobiusSessionExportV2Schema = external_exports.object({
   formatVersion: external_exports.literal("2"),
   session: sessionExportV2Schema
 }).readonly();
-var sessionEventEnvelopeV2Schema = external_exports.strictObject({ event: sessionEventV2Schema, kind: external_exports.literal(SESSION_EVENT_V2_KIND) }).readonly();
-var sessionEventLogPageV2Schema = external_exports.strictObject({
+var sessionEventEnvelopeV2Schema = external_exports.object({ event: sessionEventV2Schema, kind: external_exports.literal(SESSION_EVENT_V2_KIND) }).readonly();
+var sessionEventLogPageV2Schema = external_exports.object({
   events: external_exports.array(sessionEventV2Schema).max(MAX_EVENT_COUNT).readonly(),
   nextCursor: external_exports.string().min(1).max(512).nullable(),
   tailCursor: external_exports.string().max(512),
   truncated: external_exports.boolean(),
   version: external_exports.literal(2)
 }).readonly();
-var nativeEventPageRequestV2Schema = external_exports.strictObject({ cursor: external_exports.string().min(1).max(512).nullable(), eventLimit: external_exports.number().int().min(1).max(1e4) }).readonly();
-var executingPromptRequestEventLogV2Schema = external_exports.strictObject({
+var nativeEventPageRequestV2Schema = external_exports.object({ cursor: external_exports.string().min(1).max(512).nullable(), eventLimit: external_exports.number().int().min(1).max(1e4) }).readonly();
+var executingPromptRequestEventLogV2Schema = external_exports.object({
   attemptId: identifierStringSchema,
   commandId: identifierStringSchema,
   epoch: identifierStringSchema,
@@ -30239,7 +30230,7 @@ var executingPromptRequestEventLogV2Schema = external_exports.strictObject({
   tailCursor: external_exports.string().max(512),
   truncated: external_exports.boolean()
 }).readonly();
-var nativeSessionEventsV2Schema = external_exports.strictObject({
+var nativeSessionEventsV2Schema = external_exports.object({
   executingPromptRequest: executingPromptRequestEventLogV2Schema.nullable(),
   history: sessionEventLogPageV2Schema
 }).readonly();
@@ -30274,14 +30265,14 @@ var decodeAcpSessionUpdateV2 = (value) => decode5(value, acpSessionUpdateV2Schem
 var SESSION_EVENT_KIND = "session.event";
 var SESSION_FORKED_KIND = "session.forked";
 var MAX_RECORDED_EVENT_LENGTH = 8 * 1024 * 1024;
-var sessionEventEnvelopeSchema = external_exports.strictObject({
+var sessionEventEnvelopeSchema = external_exports.object({
   kind: external_exports.literal(SESSION_EVENT_KIND),
   payload: external_exports.string().min(2).max(MAX_RECORDED_EVENT_LENGTH),
   sessionId: identifierStringSchema
 }).readonly();
 var SESSION_QUEUE_CHANGED_KIND = "session.queue.changed";
-var sessionQueueChangedSchema = external_exports.strictObject({ kind: external_exports.literal(SESSION_QUEUE_CHANGED_KIND), sessionId: identifierStringSchema }).readonly();
-var sessionForkedSchema = external_exports.strictObject({
+var sessionQueueChangedSchema = external_exports.object({ kind: external_exports.literal(SESSION_QUEUE_CHANGED_KIND), sessionId: identifierStringSchema }).readonly();
+var sessionForkedSchema = external_exports.object({
   kind: external_exports.literal(SESSION_FORKED_KIND),
   sessionId: identifierStringSchema,
   sourceSessionId: identifierStringSchema,
@@ -30353,7 +30344,7 @@ function decodeRecordedSessionEvent(encoded) {
     case SESSION_USAGE_UPDATED_KIND:
       return decodeSessionUsageUpdatedEvent(encoded);
     default:
-      throw new ProtocolMessageError("Unsupported recorded session event");
+      throw new UnsupportedProtocolMessageKindError("daemon-to-service", kind);
   }
 }
 var encodeRecordedSessionEvent = (event) => JSON.stringify(decodeRecordedSessionEvent(JSON.stringify(event)));
@@ -30366,7 +30357,7 @@ var SESSION_LIVE_HISTORY_PAGE_LOADED_KIND = "session.live-history.page.loaded";
 var SESSION_LIVE_HISTORY_V2_PAGE_LOAD_KIND = "session.live-history.v2.page.load";
 var SESSION_LIVE_HISTORY_V2_PAGE_LOADED_KIND = "session.live-history.v2.page.loaded";
 var directoryIdentifier = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,2047}$/);
-var sessionLiveHistoryLoadSchema = external_exports.strictObject({
+var sessionLiveHistoryLoadSchema = external_exports.object({
   additionalDirectoryIds: external_exports.array(directoryIdentifier).max(16).readonly(),
   agentId: identifierStringSchema,
   bindingId: identifierStringSchema,
@@ -30375,13 +30366,13 @@ var sessionLiveHistoryLoadSchema = external_exports.strictObject({
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var sessionLiveHistoryLoadedSchema = external_exports.strictObject({
+var sessionLiveHistoryLoadedSchema = external_exports.object({
   history: sessionHistorySchema,
   kind: external_exports.literal(SESSION_LIVE_HISTORY_LOADED_KIND),
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var sessionLiveHistoryPageLoadSchema = external_exports.strictObject({
+var sessionLiveHistoryPageLoadSchema = external_exports.object({
   additionalDirectoryIds: external_exports.array(directoryIdentifier).max(16).readonly(),
   agentId: identifierStringSchema,
   bindingId: identifierStringSchema,
@@ -30392,13 +30383,13 @@ var sessionLiveHistoryPageLoadSchema = external_exports.strictObject({
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var sessionLiveHistoryPageLoadedSchema = external_exports.strictObject({
+var sessionLiveHistoryPageLoadedSchema = external_exports.object({
   kind: external_exports.literal(SESSION_LIVE_HISTORY_PAGE_LOADED_KIND),
   page: nativeMessagePageSchema,
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var sessionLiveHistoryV2PageLoadSchema = external_exports.strictObject({
+var sessionLiveHistoryV2PageLoadSchema = external_exports.object({
   additionalDirectoryIds: external_exports.array(directoryIdentifier).max(16).readonly(),
   agentId: identifierStringSchema,
   bindingId: identifierStringSchema,
@@ -30409,7 +30400,7 @@ var sessionLiveHistoryV2PageLoadSchema = external_exports.strictObject({
   requestId: identifierStringSchema,
   sessionId: identifierStringSchema
 }).readonly();
-var sessionLiveHistoryV2PageLoadedSchema = external_exports.strictObject({
+var sessionLiveHistoryV2PageLoadedSchema = external_exports.object({
   events: nativeSessionEventsV2Schema,
   kind: external_exports.literal(SESSION_LIVE_HISTORY_V2_PAGE_LOADED_KIND),
   requestId: identifierStringSchema,
@@ -30555,7 +30546,7 @@ function decodeServiceToDaemonMessage(encoded) {
   const kind = decodeMessageKind(encoded);
   const signature = serviceToDaemonRegistry[kind];
   if (signature === void 0) {
-    throw new ProtocolMessageError(`Unsupported service-to-daemon message kind: ${kind}`);
+    throw new UnsupportedProtocolMessageKindError("service-to-daemon", kind);
   }
   return signature.decoder(encoded);
 }
@@ -30753,11 +30744,11 @@ function createDaemonConfig(connection, agents = [], installableAgents = [], loc
 
 // src/daemon-manager.ts
 import { spawn as spawn6 } from "node:child_process";
-import { createHash as createHash8, randomBytes } from "node:crypto";
-import { readFile as readFile3, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
+import { createHash as createHash9, randomBytes } from "node:crypto";
+import { readFile as readFile4, unlink as unlink2, writeFile as writeFile5 } from "node:fs/promises";
 import { createConnection, createServer } from "node:net";
 import { tmpdir } from "node:os";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 
 // src/pairing/pair-local-machine.ts
 import { mkdir as mkdir5, realpath as realpath6, stat as stat5 } from "node:fs/promises";
@@ -31587,8 +31578,8 @@ var AuditStore = class {
 };
 
 // src/run-daemon.ts
-import { createHash as createHash7, randomUUID as randomUUID7 } from "node:crypto";
-import { join as join18 } from "node:path";
+import { createHash as createHash8, randomUUID as randomUUID8 } from "node:crypto";
+import { join as join19 } from "node:path";
 import { styleText } from "node:util";
 
 // src/acp/active-executions.ts
@@ -34960,7 +34951,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   sql2.raw = raw;
-  function join20(chunks, separator) {
+  function join21(chunks, separator) {
     const result = [];
     for (const [i, chunk] of chunks.entries()) {
       if (i > 0 && separator !== void 0) {
@@ -34970,7 +34961,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  sql2.join = join20;
+  sql2.join = join21;
   function identifier(value) {
     return new Name(value);
   }
@@ -37514,7 +37505,7 @@ var SQLiteSelectQueryBuilderBase = class extends TypedQueryBuilder {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
       for (const item of extractUsedTable(table)) this.usedTables.add(item);
-      if (typeof tableName === "string" && this.config.joins?.some((join20) => join20.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins?.some((join21) => join21.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (!this.isPartialSelect) {
@@ -38373,7 +38364,7 @@ var SQLiteUpdateBase = class extends QueryPromise {
   createJoin(joinType) {
     return (table, on) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join20) => join20.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins.some((join21) => join21.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (typeof on === "function") {
@@ -39696,6 +39687,7 @@ function recordsEqual(left, right) {
 }
 var AgentSession = class _AgentSession {
   #connection;
+  #contentExternalizer;
   #interactions;
   #additionalDirectories;
   #agentId;
@@ -39723,7 +39715,7 @@ var AgentSession = class _AgentSession {
   #sessionTitle = null;
   #sessionUpdatedAt = "";
   #turn = new IdleAcpTurn();
-  constructor(agent, cwd, additionalDirectories, mobiusSessionId, getObserver, store, metrics) {
+  constructor(agent, cwd, additionalDirectories, mobiusSessionId, getObserver, store, metrics, contentExternalizer) {
     this.#updates = new AgentUpdateStream((notification) => this.#processUpdate(notification));
     this.#additionalDirectories = [...additionalDirectories];
     this.#agentId = agent.id;
@@ -39743,8 +39735,9 @@ var AgentSession = class _AgentSession {
       observer: getObserver
     });
     this.#connection = new AgentConnection(agent, cwd, this);
+    this.#contentExternalizer = contentExternalizer;
   }
-  static async #start(options, getObserver, store, initialize, metrics) {
+  static async #start(options, getObserver, store, initialize, metrics, contentExternalizer) {
     for (let attempt = 1; attempt <= 2; attempt += 1) {
       options.signal.throwIfAborted();
       const unchanged = await metrics.measure(
@@ -39772,7 +39765,8 @@ var AgentSession = class _AgentSession {
           options.sessionId,
           getObserver,
           store,
-          metrics
+          metrics,
+          contentExternalizer
         )
       );
       try {
@@ -39795,19 +39789,21 @@ var AgentSession = class _AgentSession {
     }
     throw new AcpExecutionError("ACP agent initialization failed");
   }
-  static start = async (options, getObserver, store, metrics = unmeasuredOperationMetrics) => await _AgentSession.#start(
+  static start = async (options, getObserver, store, metrics, contentExternalizer) => await _AgentSession.#start(
     options,
     getObserver,
     store,
     async (runtime) => await runtime.initialize(options.signal, options.origin),
-    metrics
+    metrics,
+    contentExternalizer
   );
-  static startNativeSessionBrowser = async (options, getObserver, store) => await _AgentSession.#start(
+  static startNativeSessionBrowser = async (options, getObserver, store, contentExternalizer) => await _AgentSession.#start(
     options,
     getObserver,
     store,
     async (runtime) => await runtime.#initializeAgent(options.signal),
-    unmeasuredOperationMetrics
+    unmeasuredOperationMetrics,
+    contentExternalizer
   );
   belongsTo = (agentId, cwd, additionalDirectories) => this.#agentId === agentId && this.#cwd === cwd && arraysEqual(this.#additionalDirectories, additionalDirectories);
   usesEnvironment = (environment) => recordsEqual(this.#environment, environment);
@@ -40512,7 +40508,12 @@ var AgentSession = class _AgentSession {
   #processUpdate = async (notification) => {
     this.assertNativeSession(notification.sessionId);
     const update = notification.update;
-    const rawUpdate = decodeAcpSessionUpdateV2(JSON.stringify(update));
+    const externalized = await this.#contentExternalizer.update(
+      this.#mobiusSessionId,
+      update,
+      AbortSignal.timeout(3e4)
+    );
+    const rawUpdate = decodeAcpSessionUpdateV2(JSON.stringify(externalized));
     if (this.#sessionLoad.kind === "capturing") {
       await this.#sessionLoad.history.record(update, rawUpdate);
     } else {
@@ -40799,8 +40800,10 @@ var AgentQueryProcesses = class {
   #processes;
   #observer = new NullAcpSessionObserver();
   #store = new MemoryAcpSessionStore();
-  constructor(processes) {
+  #contentExternalizer;
+  constructor(processes, contentExternalizer) {
     this.#processes = processes;
+    this.#contentExternalizer = contentExternalizer;
     this.#processesByQuery = new RetainedAgentProcesses({
       touch: processes.touch,
       changed: processes.notifyChanged
@@ -40816,7 +40819,12 @@ var AgentQueryProcesses = class {
   async #startRetained(options) {
     const runtime = await this.#processes.startRetained(
       options.signal,
-      () => AgentSession.startNativeSessionBrowser(options, () => this.#observer, this.#store),
+      () => AgentSession.startNativeSessionBrowser(
+        options,
+        () => this.#observer,
+        this.#store,
+        this.#contentExternalizer
+      ),
       {
         isBusy: () => this.#processesByQuery.isBusy(options.sessionId),
         retire: (runtime2) => this.retire(options.sessionId, runtime2)
@@ -40892,7 +40900,8 @@ var AgentQueryProcesses = class {
       async () => await AgentSession.startNativeSessionBrowser(
         options,
         () => this.#observer,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        this.#contentExternalizer
       ),
       async (runtime) => {
         runtime.selectNativeSession(nativeSessionId);
@@ -40907,7 +40916,8 @@ var AgentQueryProcesses = class {
       async () => await AgentSession.startNativeSessionBrowser(
         options,
         () => this.#observer,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        this.#contentExternalizer
       ),
       async (runtime) => {
         runtime.selectNativeSession(nativeSessionId);
@@ -40923,6 +40933,220 @@ var AgentQueryProcesses = class {
   };
 };
 
+// src/external-content/acp-content-externalizer.ts
+var MAXIMUM_ENCODED_CONTENT_CHARACTERS = 4e6;
+function decodeBase64(data) {
+  if (data.length > MAXIMUM_ENCODED_CONTENT_CHARACTERS || data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/u.test(data)) {
+    throw new Error("The ACP embedded content is not valid bounded base64");
+  }
+  return Buffer.from(data, "base64");
+}
+var AcpContentExternalizer = class {
+  #store;
+  constructor(store) {
+    this.#store = store;
+  }
+  async #content(sessionId, content, signal) {
+    switch (content.type) {
+      case "text":
+      case "resource_link":
+        return content;
+      case "image": {
+        if (content.data.length === 0) {
+          return content;
+        }
+        const stored = await this.#store.put({
+          bytes: decodeBase64(content.data),
+          kind: "image",
+          mediaType: content.mimeType,
+          name: "image",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          byteLength: stored.byteLength,
+          imageKey: stored.key,
+          mimeType: content.mimeType,
+          type: "external_image",
+          uri: content.uri
+        };
+      }
+      case "audio": {
+        if (content.data.length === 0) {
+          return content;
+        }
+        const stored = await this.#store.put({
+          bytes: decodeBase64(content.data),
+          kind: "audio",
+          mediaType: content.mimeType,
+          name: "audio",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          audioKey: stored.key,
+          byteLength: stored.byteLength,
+          mimeType: content.mimeType,
+          type: "external_audio"
+        };
+      }
+      case "resource": {
+        const embedded = content.resource;
+        const encoding = "text" in embedded ? "text" : "binary";
+        const bytes = "text" in embedded ? Buffer.from(embedded.text, "utf8") : decodeBase64(embedded.blob);
+        if (bytes.byteLength === 0) {
+          return content;
+        }
+        const mediaType = embedded.mimeType ?? "application/octet-stream";
+        const stored = await this.#store.put({
+          bytes,
+          kind: "resource",
+          mediaType,
+          name: "resource",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          byteLength: stored.byteLength,
+          encoding,
+          mimeType: embedded.mimeType,
+          resourceKey: stored.key,
+          type: "external_resource",
+          uri: embedded.uri
+        };
+      }
+    }
+  }
+  async #toolContent(sessionId, item, signal) {
+    return item.type === "content" ? { ...item, content: await this.#content(sessionId, item.content, signal) } : item;
+  }
+  update = async (sessionId, update, signal) => {
+    switch (update.sessionUpdate) {
+      case "user_message_chunk":
+      case "agent_message_chunk":
+      case "agent_thought_chunk":
+      case "compaction_summary_chunk":
+        return { ...update, content: await this.#content(sessionId, update.content, signal) };
+      case "tool_call":
+      case "tool_call_update":
+        return update.content === void 0 || update.content === null ? update : {
+          ...update,
+          content: await Promise.all(
+            update.content.map(async (item) => await this.#toolContent(sessionId, item, signal))
+          )
+        };
+      case "compaction_update":
+        return update.summary === void 0 || update.summary === null ? update : {
+          ...update,
+          summary: await Promise.all(
+            update.summary.map(async (content) => await this.#content(sessionId, content, signal))
+          )
+        };
+      case "plan":
+      case "plan_update":
+      case "plan_removed":
+      case "available_commands_update":
+      case "current_mode_update":
+      case "config_option_update":
+      case "session_info_update":
+      case "usage_update":
+        return update;
+    }
+  };
+};
+
+// src/external-content/local-external-content-store.ts
+import { createHash as createHash3, randomUUID as randomUUID2 } from "node:crypto";
+import { lstat, mkdir as mkdir6, readFile as readFile3, realpath as realpath8, rename as rename4, rm as rm3, stat as stat7, writeFile as writeFile4 } from "node:fs/promises";
+import { dirname as dirname5, join as join16 } from "node:path";
+var contentRequest = /^mobius-content:(image|audio|resource):([a-f0-9]{64})$/u;
+var metadataSchema2 = external_exports.strictObject({
+  kind: external_exports.enum(["image", "audio", "resource"]),
+  mediaType: external_exports.string().min(1).max(2048).regex(/^[\u0020-\u007e]+$/u),
+  name: external_exports.string().min(1).max(500)
+});
+var UnretainedExternalContentStore = class {
+  put = async ({ bytes, signal }) => {
+    signal.throwIfAborted();
+    return { byteLength: bytes.byteLength, key: createHash3("sha256").update(bytes).digest("hex") };
+  };
+  resolve = (_sessionId, _request, signal) => {
+    signal.throwIfAborted();
+    return Promise.resolve(null);
+  };
+};
+function sessionScope(sessionId) {
+  return createHash3("sha256").update(sessionId).digest("hex");
+}
+async function atomicWrite(path3, bytes, signal) {
+  const temporary = `${path3}.${randomUUID2()}.tmp`;
+  try {
+    await writeFile4(temporary, bytes, { mode: 384, signal });
+    signal.throwIfAborted();
+    await rename4(temporary, path3);
+  } finally {
+    await rm3(temporary, { force: true });
+  }
+}
+var LocalExternalContentStore = class {
+  #root;
+  constructor(stateDirectory) {
+    this.#root = join16(stateDirectory, "tmp", "session-content");
+  }
+  put = async ({ bytes, kind, mediaType, name, sessionId, signal }) => {
+    signal.throwIfAborted();
+    const key = createHash3("sha256").update(bytes).digest("hex");
+    const directory = join16(this.#root, sessionScope(sessionId), kind);
+    await mkdir6(directory, { mode: 448, recursive: true });
+    signal.throwIfAborted();
+    const path3 = join16(directory, key);
+    await atomicWrite(path3, bytes, signal);
+    await atomicWrite(
+      `${path3}.json`,
+      Buffer.from(JSON.stringify(metadataSchema2.parse({ kind, mediaType, name })), "utf8"),
+      signal
+    );
+    return { byteLength: bytes.byteLength, key };
+  };
+  resolve = async (sessionId, request, signal) => {
+    const matched = contentRequest.exec(request);
+    if (matched === null) {
+      return null;
+    }
+    const kind = matched[1];
+    const key = matched[2];
+    if (kind !== "image" && kind !== "audio" && kind !== "resource" || key === void 0) {
+      return null;
+    }
+    const directory = join16(this.#root, sessionScope(sessionId), kind);
+    const path3 = join16(directory, key);
+    try {
+      const [resolvedDirectory, resolvedPath, file2, metadata] = await Promise.all([
+        realpath8(directory),
+        realpath8(path3),
+        lstat(path3),
+        readFile3(`${path3}.json`, "utf8").then((value) => metadataSchema2.parse(JSON.parse(value)))
+      ]);
+      signal.throwIfAborted();
+      if (!file2.isFile() || dirname5(resolvedPath) !== resolvedDirectory || metadata.kind !== kind) {
+        return null;
+      }
+      await stat7(resolvedPath);
+      signal.throwIfAborted();
+      return { mediaType: metadata.mediaType, name: metadata.name, path: resolvedPath };
+    } catch {
+      signal.throwIfAborted();
+      return null;
+    }
+  };
+};
+
 // src/native-sessions/chat-agent.ts
 function supportsNativeChat(agentId) {
   return agentId === "codex" || agentId === "claude" || agentId === "opencode" || agentId === "pi";
@@ -41139,7 +41363,7 @@ var AgentRuntimeManager = class {
     touch: this.#processes.touch,
     changed: this.#processes.notifyChanged
   });
-  #queryProcesses = new AgentQueryProcesses(this.#processes);
+  #queryProcesses;
   #executions = new ActiveExecutions();
   #agentSettingsObserver = new NullAcpSessionObserver();
   #nativeOperations = /* @__PURE__ */ new Set();
@@ -41147,13 +41371,16 @@ var AgentRuntimeManager = class {
   #nativeHistoryReader;
   #sessionIdentity;
   #onSessionStatusChanged;
+  #contentExternalizer;
   #observer;
-  constructor(observer = new NullAcpSessionObserver(), store = new MemoryAcpSessionStore(), nativeHistoryReader = null, sessionIdentity = "assigned", onSessionStatusChanged = () => void 0) {
+  constructor(observer = new NullAcpSessionObserver(), store = new MemoryAcpSessionStore(), nativeHistoryReader = null, sessionIdentity = "assigned", onSessionStatusChanged = () => void 0, contentExternalizer = new AcpContentExternalizer(new UnretainedExternalContentStore())) {
     this.#observer = observer;
     this.#store = store;
     this.#nativeHistoryReader = nativeHistoryReader;
     this.#sessionIdentity = sessionIdentity;
     this.#onSessionStatusChanged = onSessionStatusChanged;
+    this.#contentExternalizer = contentExternalizer;
+    this.#queryProcesses = new AgentQueryProcesses(this.#processes, contentExternalizer);
   }
   setObserver = (observer) => {
     this.#observer = observer;
@@ -41194,7 +41421,8 @@ var AgentRuntimeManager = class {
           options.origin === void 0 && this.#sessionIdentity === "native" && isNativeChatSessionId(options.agent.id, options.sessionId) && this.#store.read(options.sessionId) instanceof MissingAcpStoredSession ? { ...options, origin: { kind: "import", nativeSessionId: options.sessionId } } : options,
           () => this.#observer,
           this.#store,
-          metrics
+          metrics,
+          this.#contentExternalizer
         )
       );
     });
@@ -41209,7 +41437,13 @@ var AgentRuntimeManager = class {
       this.#store.remove(options.sessionId);
       return await this.#startRetainedSessionProcess(
         options,
-        async () => await AgentSession.start(options, () => this.#observer, this.#store, metrics)
+        async () => await AgentSession.start(
+          options,
+          () => this.#observer,
+          this.#store,
+          metrics,
+          this.#contentExternalizer
+        )
       );
     });
   }
@@ -41219,7 +41453,13 @@ var AgentRuntimeManager = class {
       await this.#retireSessionProcess(options.sessionId, existing, async () => await existing.close());
       const runtime = await this.#startRetainedSessionProcess(
         options,
-        async () => await AgentSession.start(options, () => this.#observer, this.#store)
+        async () => await AgentSession.start(
+          options,
+          () => this.#observer,
+          this.#store,
+          unmeasuredOperationMetrics,
+          this.#contentExternalizer
+        )
       );
       try {
         for (const desired of desiredConfigOptions) {
@@ -41315,7 +41555,9 @@ var AgentRuntimeManager = class {
           sessionId: `agent-settings-${crypto.randomUUID()}`
         },
         () => this.#agentSettingsObserver,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        unmeasuredOperationMetrics,
+        this.#contentExternalizer
       ),
       async (runtime) => {
         const prepared = runtime.prepared();
@@ -42368,9 +42610,9 @@ var FixedInstallationExecutor = class {
 };
 
 // src/authorization/workspace-directory.ts
-import { readdir as readdir3, realpath as realpath8, stat as stat7 } from "node:fs/promises";
+import { readdir as readdir3, realpath as realpath9, stat as stat8 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { basename as basename4, dirname as dirname5, isAbsolute as isAbsolute9, join as join16, normalize as normalize3, relative as relative4 } from "node:path";
+import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute9, join as join17, normalize as normalize3, relative as relative4 } from "node:path";
 
 // src/authorization/local-authorization-error.ts
 var LocalAuthorizationError = class extends Error {
@@ -42449,9 +42691,9 @@ var WorkspaceDirectoryService = class {
       throw new LocalAuthorizationError("The local directory path is invalid");
     }
     try {
-      const target = await realpath8(requested);
+      const target = await realpath9(requested);
       signal.throwIfAborted();
-      const metadata = await stat7(target);
+      const metadata = await stat8(target);
       signal.throwIfAborted();
       if (!isAbsolute9(target) || normalize3(target) !== target || !metadata.isDirectory()) {
         throw new LocalAuthorizationError("The selected location is not a directory");
@@ -42499,7 +42741,7 @@ var WorkspaceDirectoryService = class {
           continue;
         }
         try {
-          const path3 = await this.resolvePath(join16(target, child2.name), signal);
+          const path3 = await this.resolvePath(join17(target, child2.name), signal);
           entries.push({ directoryId: encodePath(path3), name: child2.name });
         } catch (cause) {
           signal.throwIfAborted();
@@ -42509,7 +42751,7 @@ var WorkspaceDirectoryService = class {
         }
       }
       entries.sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname5(target);
+      const parent = dirname6(target);
       return new WorkspaceDirectoryListing(
         id,
         this.label(target),
@@ -42535,15 +42777,15 @@ var WorkspaceDirectoryService = class {
 
 // src/daemon-diagnostic-log.ts
 import { appendFileSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync, statSync as statSync3, writeFileSync } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var MAXIMUM_DAEMON_LOG_BYTES = 1 * 1024 * 1024;
 var DaemonDiagnosticLog = class {
   #directory;
   #path;
   #maximumBytes;
   constructor(stateDirectory, maximumBytes = MAXIMUM_DAEMON_LOG_BYTES) {
-    this.#directory = join17(stateDirectory, "logs");
-    this.#path = join17(this.#directory, "daemon.log");
+    this.#directory = join18(stateDirectory, "logs");
+    this.#path = join18(this.#directory, "daemon.log");
     this.#maximumBytes = maximumBytes;
   }
   record = (diagnostic) => {
@@ -42588,7 +42830,7 @@ import { WebSocket as WebSocket2 } from "undici";
 import { WebSocket } from "undici";
 
 // src/prompt-artifact-resolver.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 import { fetch as fetch4 } from "undici";
 var ARTIFACT_SCHEME = "mobius-artifact:";
 var ARTIFACT_DOWNLOAD_TIMEOUT_MILLISECONDS = 2e4;
@@ -42726,7 +42968,7 @@ async function download(config2, command, reference, signal) {
       );
     }
     const bytes = await responseBytes(response, reference.byteLength, requestSignal);
-    if (createHash3("sha256").update(bytes).digest("hex") !== reference.sha256) {
+    if (createHash4("sha256").update(bytes).digest("hex") !== reference.sha256) {
       throw new PromptArtifactError(
         "artifact_integrity_failed",
         "The prompt artifact failed integrity validation"
@@ -43031,7 +43273,7 @@ var DaemonInstallationObserver = class {
 };
 
 // src/daemon-active-turn.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 function activeMessageCharacters(message) {
   return message.text.length + (message.role === "assistant" ? JSON.stringify(message.activities).length + JSON.stringify(message.content).length : 0);
 }
@@ -43065,7 +43307,7 @@ var ActiveDaemonTurn = class {
   #timeline;
   #sequence = 0;
   #interaction = null;
-  #epoch = decodeIdentifier(randomUUID2());
+  #epoch = decodeIdentifier(randomUUID3());
   constructor(command, attemptId) {
     this.attemptId = attemptId;
     this.command = command;
@@ -43127,7 +43369,7 @@ var ActiveDaemonTurn = class {
       if (!this.#activities.has(event.activityId)) {
         this.#timeline = [
           ...this.#timeline,
-          { activityId: event.activityId, id: decodeIdentifier(randomUUID2()), kind: "activity" }
+          { activityId: event.activityId, id: decodeIdentifier(randomUUID3()), kind: "activity" }
         ];
       }
       this.#activities.set(event.activityId, {
@@ -43148,7 +43390,7 @@ var ActiveDaemonTurn = class {
       if (previous === void 0) {
         this.#timeline = [
           ...this.#timeline,
-          { activityId: event.activityId, id: decodeIdentifier(randomUUID2()), kind: "activity" }
+          { activityId: event.activityId, id: decodeIdentifier(randomUUID3()), kind: "activity" }
         ];
       }
       this.#activities.set(event.activityId, {
@@ -43173,7 +43415,7 @@ var ActiveDaemonTurn = class {
           ...this.#timeline,
           {
             content: /* @__PURE__ */ new Map([[event.contentId, event.content]]),
-            id: decodeIdentifier(randomUUID2()),
+            id: decodeIdentifier(randomUUID3()),
             kind: "message",
             sourceMessageId: event.messageId,
             text: ""
@@ -43213,7 +43455,7 @@ var ActiveDaemonTurn = class {
         ...this.#timeline,
         {
           content: /* @__PURE__ */ new Map(),
-          id: decodeIdentifier(randomUUID2()),
+          id: decodeIdentifier(randomUUID3()),
           kind: "message",
           sourceMessageId: messageId,
           text: remaining.slice(0, ACTIVE_TURN_TEXT_CHUNK_LIMIT)
@@ -44189,7 +44431,7 @@ var readCodexFullHistory = async (agent, cwd, nativeSessionId, signal, nativeTur
 });
 
 // src/native-sessions/service.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 import { basename as basename5 } from "node:path";
 
 // src/native-sessions/acp-history.ts
@@ -44404,7 +44646,7 @@ var NativeSessionService = class {
       if (authorized === null) {
         return null;
       }
-      const entryId = decodeIdentifier(randomUUID3());
+      const entryId = decodeIdentifier(randomUUID4());
       if (this.#entries.size >= 5e3) {
         this.#entries.clear();
       }
@@ -44460,7 +44702,7 @@ var NativeSessionService = class {
             "invalid_native_session_response"
           );
         }
-        nextCursor = decodeIdentifier(randomUUID3());
+        nextCursor = decodeIdentifier(randomUUID4());
         if (this.#cursors.size >= 500) {
           this.#cursors.clear();
         }
@@ -44742,7 +44984,7 @@ var NativeSessionService = class {
 };
 
 // src/relay-connection/daemon-operation-state.ts
-import { createHash as createHash4, randomUUID as randomUUID4 } from "node:crypto";
+import { createHash as createHash5, randomUUID as randomUUID5 } from "node:crypto";
 var MAX_TERMINAL_RECEIPTS = 1024;
 function isTerminal(state) {
   return state === "succeeded" || state === "failed" || state === "cancelled";
@@ -44751,7 +44993,7 @@ var DaemonOperationState = class {
   #executions = /* @__PURE__ */ new Map();
   #terminalCount = 0;
   claimExecution = (commandId, sessionId, commandJson) => {
-    const commandHash = createHash4("sha256").update(commandJson).digest("hex");
+    const commandHash = createHash5("sha256").update(commandJson).digest("hex");
     const existing = this.#executions.get(commandId);
     if (existing !== void 0) {
       if (existing.sessionId !== sessionId || existing.commandHash !== commandHash) {
@@ -44759,7 +45001,7 @@ var DaemonOperationState = class {
       }
       return { attemptId: existing.attemptId, commandId, kind: "duplicate", state: existing.state };
     }
-    const attemptId = randomUUID4();
+    const attemptId = randomUUID5();
     this.#executions.set(commandId, { attemptId, commandHash, sessionId, state: "dispatching" });
     return { attemptId, commandId, kind: "accepted", state: "dispatching" };
   };
@@ -45095,7 +45337,7 @@ function createAgentCatalogRefreshHandler(dependencies) {
 import { WebSocket as WebSocket4 } from "undici";
 
 // src/agent-catalog/discover-agent-settings.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 
 // src/agent-catalog/agent-settings-base.ts
 var AgentSettingsConfigurationError = class extends Error {
@@ -45559,7 +45801,7 @@ function settingsRevision(agent, reportedAgentVersion, settings, modelEffort) {
     unsupportedModelIds: modelEffort.unsupportedModelIds,
     valuesByModel: {}
   };
-  return createHash5("sha256").update(
+  return createHash6("sha256").update(
     JSON.stringify({
       adapterVersion: agent.kind === "acp-adapter-process" ? agent.adapterVersion : agent.agentVersion,
       agentId: agent.id,
@@ -45710,7 +45952,7 @@ function createAgentSettingsDiscoveryHandler(dependencies) {
 
 // src/artifacts/local-file-streamer.ts
 import { createReadStream as createReadStream2 } from "node:fs";
-import { realpath as realpath9, stat as stat8 } from "node:fs/promises";
+import { realpath as realpath10, stat as stat9 } from "node:fs/promises";
 import { basename as basename6, isAbsolute as isAbsolute10, normalize as normalize4, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var CHUNK_BYTES = 192 * 1024;
@@ -45738,7 +45980,7 @@ async function resolveFile(value, workingDirectory, signal) {
     return null;
   }
   try {
-    const target = await realpath9(requested);
+    const target = await realpath10(requested);
     signal.throwIfAborted();
     return isAbsolute10(target) && normalize4(target) === target ? target : null;
   } catch {
@@ -45746,23 +45988,24 @@ async function resolveFile(value, workingDirectory, signal) {
     return null;
   }
 }
-async function streamLocalFile(command, send2, signal, workingDirectory) {
-  const target = await resolveFile(command.path, workingDirectory, signal);
+async function streamLocalFile(command, send2, signal, workingDirectory, externalContent) {
+  const external = await externalContent.resolve(command.sessionId, command.path, signal);
+  const target = external?.path ?? await resolveFile(command.path, workingDirectory, signal);
   if (target === null) {
     throw new Error("The local file is unavailable");
   }
-  const before = await stat8(target);
+  const before = await stat9(target);
   signal.throwIfAborted();
   if (!before.isFile() || before.size < 1 || before.size > command.maxBytes) {
     throw new Error("The local file is too large to read");
   }
-  const raster = await readLocalRaster(target, signal);
+  const raster = external === null ? await readLocalRaster(target, signal) : null;
   send2({
     byteLength: before.size,
     kind: FILE_BEGIN_KIND,
-    mediaType: raster?.mimeType ?? "application/octet-stream",
+    mediaType: external?.mediaType ?? raster?.mimeType ?? "application/octet-stream",
     modifiedAt: before.mtime.toISOString(),
-    name: basename6(target) || "file",
+    name: external?.name ?? (basename6(target) || "file"),
     requestId: command.requestId,
     sessionId: command.sessionId
   });
@@ -45779,7 +46022,7 @@ async function streamLocalFile(command, send2, signal, workingDirectory) {
     });
     sequence += 1;
   }
-  const after = await stat8(target);
+  const after = await stat9(target);
   signal.throwIfAborted();
   if (after.size !== before.size || after.mtimeMs !== before.mtimeMs) {
     throw new Error("The local file changed during transfer");
@@ -45792,7 +46035,7 @@ async function streamLocalFile(command, send2, signal, workingDirectory) {
 }
 
 // src/daemon-history-commands.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 
 // src/authorization/resolve-session-directories.ts
 import { basename as basename7 } from "node:path";
@@ -46186,7 +46429,7 @@ async function executeSessionLiveHistoryPageLoad(socket, command, config2, direc
 }
 function replayEvent(sessionId, position, update) {
   const encoded = JSON.stringify(update);
-  const eventId = `native-${createHash6("sha256").update(sessionId).update(":").update(position.toString()).update(":").update(encoded).digest("hex")}`;
+  const eventId = `native-${createHash7("sha256").update(sessionId).update(":").update(position.toString()).update(":").update(encoded).digest("hex")}`;
   return {
     eventId,
     payload: update,
@@ -46269,7 +46512,7 @@ async function executeSessionLiveHistoryV2PageLoad(socket, command, config2, dir
 }
 
 // src/acp/session-config/apply-session-configuration.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 function invalidSessionConfiguration(message) {
   return new AcpExecutionError(message, {}, "invalid_session_configuration");
 }
@@ -46410,7 +46653,7 @@ async function applySessionConfigurationSelection(sessions, audit, options, sele
     booleanValue: selection.booleanValue,
     configId: selection.configId,
     cwd,
-    requestId: `cfg_${randomUUID5()}`,
+    requestId: `cfg_${randomUUID6()}`,
     sessionId,
     signal,
     value: selection.value,
@@ -47084,6 +47327,7 @@ function createDaemonCommandHandler({
   operations,
   publisher,
   eventLogV2,
+  externalContent,
   activeTurns,
   diagnostics,
   socket,
@@ -47192,7 +47436,8 @@ function createDaemonCommandHandler({
           command2,
           (message2) => send(socket, message2),
           signal,
-          sessions.findSessions([command2.sessionId])[0]?.cwd ?? null
+          sessions.findSessions([command2.sessionId])[0]?.cwd ?? null,
+          externalContent
         ).catch((error62) => {
           if (socket.readyState !== WebSocket6.OPEN || signal.aborted) {
             return;
@@ -47531,7 +47776,7 @@ function connectRelay(url2, signal) {
 }
 
 // src/relay-connection/liveness.ts
-import { randomUUID as randomUUID6 } from "node:crypto";
+import { randomUUID as randomUUID7 } from "node:crypto";
 var HEARTBEAT_ACK_TIMEOUT_MILLISECONDS = 1e4;
 var HEARTBEAT_INTERVAL_MILLISECONDS = 2e4;
 var RelayLivenessState = class {
@@ -47620,7 +47865,7 @@ var RelayConnectionLiveness = class {
       }
       throw new Error("Heartbeat was scheduled in an invalid state");
     }
-    const heartbeatId = randomUUID6();
+    const heartbeatId = randomUUID7();
     this.#state = new AwaitingHeartbeatAckState(
       heartbeatId,
       this.#timer.schedule(this.#handleTimeout, HEARTBEAT_ACK_TIMEOUT_MILLISECONDS)
@@ -47660,6 +47905,7 @@ async function runRelayConnection({
   operations,
   publisher,
   eventLogV2,
+  externalContent,
   activeTurns,
   connectionEpoch,
   diagnostics,
@@ -47683,6 +47929,7 @@ async function runRelayConnection({
     operations,
     publisher,
     eventLogV2,
+    externalContent,
     activeTurns,
     diagnostics,
     socket,
@@ -47800,6 +48047,14 @@ async function runRelayConnection({
           }
           commands.handle(message);
         } catch (error62) {
+          if (error62 instanceof UnsupportedProtocolMessageKindError) {
+            console.warn("Mobius daemon skipped an unsupported Relay message", {
+              code: error62.code,
+              direction: error62.direction,
+              messageKind: error62.messageKind
+            });
+            return;
+          }
           console.error("Mobius daemon rejected a message", error62);
           failAndClose(
             new Error("Relay sent an invalid protocol message", { cause: error62 }),
@@ -48153,7 +48408,7 @@ async function installDetectedAgentIntegrations(config2, installations, signal)
       {
         agentId: agent.id,
         kind: AGENT_INSTALL_REQUEST_KIND,
-        requestId: `automatic-integration-${randomUUID7()}`
+        requestId: `automatic-integration-${randomUUID8()}`
       },
       signal
     );
@@ -48172,8 +48427,9 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
     stateDirectory
   });
   const sessionStore = new SqliteAcpSessionStore(
-    join18(stateDirectory, "sessions", `${createHash7("sha256").update(config2.channelId).digest("hex")}.sqlite`)
+    join19(stateDirectory, "sessions", `${createHash8("sha256").update(config2.channelId).digest("hex")}.sqlite`)
   );
+  const externalContent = new LocalExternalContentStore(stateDirectory);
   const operations = new DaemonOperationState();
   const publisher = new DaemonSessionEventPublisher(sessionStore);
   const eventLogV2 = new DaemonSessionEventLogV2(publisher, sessionStore);
@@ -48194,7 +48450,8 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
       )).history : null
     },
     "native",
-    publisher.publishStatus
+    publisher.publishStatus,
+    new AcpContentExternalizer(externalContent)
   );
   const directories = new WorkspaceDirectoryService(config2.bindingId, config2.defaultWorkspace);
   const installationObserver = new DaemonInstallationObserver();
@@ -48308,6 +48565,7 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
           operations,
           publisher,
           eventLogV2,
+          externalContent,
           activeTurns,
           connectionEpoch,
           diagnostics,
@@ -48429,17 +48687,17 @@ var START_TIMEOUT_MILLISECONDS = 12e4;
 var MAXIMUM_MESSAGE_BYTES = 64 * 1024;
 var CONNECTION_ID_PATTERN2 = /^mcn_[a-f0-9]{32}$/;
 async function acquireManagerLock(stateDirectory) {
-  const path3 = join19(stateDirectory, "manager.lock");
+  const path3 = join20(stateDirectory, "manager.lock");
   for (let attempt = 0; attempt < 2; attempt += 1) {
     try {
-      await writeFile4(path3, `${process.pid.toString()}
+      await writeFile5(path3, `${process.pid.toString()}
 `, { flag: "wx", mode: 384 });
       return async () => await unlink2(path3).catch(() => void 0);
     } catch (cause) {
       if (!isNodeError2(cause, "EEXIST")) {
         throw cause;
       }
-      const encoded = await readFile3(path3, "utf8").catch(() => "");
+      const encoded = await readFile4(path3, "utf8").catch(() => "");
       const pid = Number(encoded.trim());
       if (Number.isSafeInteger(pid) && pid > 1) {
         try {
@@ -48460,16 +48718,16 @@ function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function controlSocketPath(stateDirectory) {
-  const installationHash = createHash8("sha256").update(stateDirectory).digest("hex").slice(0, 32);
-  return process.platform === "win32" ? `\\\\.\\pipe\\mobius-${installationHash}` : join19(tmpdir(), `mobius-${installationHash}.sock`);
+  const installationHash = createHash9("sha256").update(stateDirectory).digest("hex").slice(0, 32);
+  return process.platform === "win32" ? `\\\\.\\pipe\\mobius-${installationHash}` : join20(tmpdir(), `mobius-${installationHash}.sock`);
 }
 function controlTokenPath(stateDirectory) {
-  return join19(stateDirectory, "manager.token");
+  return join20(stateDirectory, "manager.token");
 }
 async function readOrCreateControlToken(stateDirectory) {
   const path3 = controlTokenPath(stateDirectory);
   try {
-    return (await readFile3(path3, "utf8")).trim();
+    return (await readFile4(path3, "utf8")).trim();
   } catch (cause) {
     if (!isNodeError2(cause, "ENOENT")) {
       throw cause;
@@ -48477,14 +48735,14 @@ async function readOrCreateControlToken(stateDirectory) {
   }
   const token = randomBytes(32).toString("base64url");
   try {
-    await writeFile4(path3, `${token}
+    await writeFile5(path3, `${token}
 `, { flag: "wx", mode: 384 });
     return token;
   } catch (cause) {
     if (!isNodeError2(cause, "EEXIST")) {
       throw cause;
     }
-    return (await readFile3(path3, "utf8")).trim();
+    return (await readFile4(path3, "utf8")).trim();
   }
 }
 function isNodeError2(error62, code) {
@@ -48796,7 +49054,7 @@ async function waitForManagerExit(stateDirectory, signal) {
   const deadline = AbortSignal.any([signal, AbortSignal.timeout(1e4)]);
   while (!deadline.aborted) {
     try {
-      await readFile3(join19(stateDirectory, "manager.lock"), "utf8");
+      await readFile4(join20(stateDirectory, "manager.lock"), "utf8");
     } catch (cause) {
       if (isNodeError2(cause, "ENOENT")) {
         return;
@@ -49074,7 +49332,7 @@ function createProgram() {
     const installation = await openMobiusCliInstallation(shutdown.signal, process.env);
     const localContext = new DaemonLocalContext(installation.stateDirectory, process.env);
     const defaultWorkspace = loadDefaultWorkspace(localContext.environment);
-    await mkdir6(defaultWorkspace, { recursive: true, mode: 448 });
+    await mkdir7(defaultWorkspace, { recursive: true, mode: 448 });
     const inventory = await discoverLocalAgentInventory({
       defaultWorkspace,
       environment: localContext.environment,