@moxt-ai/mobius 0.0.166 → 0.0.167

package/dist/cli.js

@@ -7,7 +7,7 @@ var __export = (target, all) => {
 
 // src/cli.ts
 import { constants as constants2 } from "node:fs";
-import { mkdir as mkdir6, open as open6 } from "node:fs/promises";
+import { mkdir as mkdir7, open as open6 } from "node:fs/promises";
 import { resolve as resolve8 } from "node:path";
 
 // ../../node_modules/.pnpm/commander@15.0.0/node_modules/commander/lib/error.js
@@ -3381,21 +3381,16 @@ var program = new Command();
 // package.json
 var package_default = {
   name: "@moxt-ai/mobius",
-  version: "0.0.166",
+  version: "0.0.167",
   description: "Mobius CLI for pairing and running local AI agent services.",
   type: "module",
   bin: {
     mobius: "dist/cli.js"
   },
+  types: "./src/index.ts",
   exports: {
-    ".": {
-      types: "./dist/index.d.ts",
-      import: "./dist/index.js"
-    },
-    "./runtime": {
-      types: "./dist/runtime.d.ts",
-      import: "./dist/runtime.js"
-    }
+    ".": "./src/index.ts",
+    "./runtime": "./src/runtime.ts"
   },
   files: [
     "dist"
@@ -3404,7 +3399,18 @@ var package_default = {
     node: ">=22.13.0"
   },
   publishConfig: {
-    access: "public"
+    access: "public",
+    types: "./dist/index.d.ts",
+    exports: {
+      ".": {
+        types: "./dist/index.d.ts",
+        import: "./dist/index.js"
+      },
+      "./runtime": {
+        types: "./dist/runtime.d.ts",
+        import: "./dist/runtime.js"
+      }
+    }
   },
   repository: {
     type: "git",
@@ -29799,6 +29805,7 @@ var MAX_JSON_KEYS = 1e3;
 var SESSION_EVENT_V2_KIND = "session.event.v2";
 var boundedString = external_exports.string().max(MAX_CONTENT_LENGTH);
 var shortString = external_exports.string().max(2048);
+var externalContentKeySchema = external_exports.string().regex(/^[a-f0-9]{64}$/u);
 function boundedJsonIssue(value, depth = 0) {
   if (depth > MAX_JSON_DEPTH) {
     return "JSON nesting exceeds the maximum depth";
@@ -29866,6 +29873,30 @@ var imageContentSchema = external_exports.object({
   uri: boundedString.nullable().optional()
 }).readonly();
 var audioContentSchema = external_exports.object({ ...contentFields, data: boundedString, mimeType: shortString, type: external_exports.literal("audio") }).readonly();
+var externalImageContentSchema = external_exports.strictObject({
+  ...contentFields,
+  byteLength: external_exports.number().int().positive().safe(),
+  imageKey: externalContentKeySchema,
+  mimeType: shortString,
+  type: external_exports.literal("external_image"),
+  uri: boundedString.nullable().optional()
+}).readonly();
+var externalAudioContentSchema = external_exports.strictObject({
+  ...contentFields,
+  audioKey: externalContentKeySchema,
+  byteLength: external_exports.number().int().positive().safe(),
+  mimeType: shortString,
+  type: external_exports.literal("external_audio")
+}).readonly();
+var externalResourceContentSchema = external_exports.strictObject({
+  ...contentFields,
+  byteLength: external_exports.number().int().positive().safe(),
+  encoding: external_exports.enum(["binary", "text"]),
+  mimeType: shortString.nullable().optional(),
+  resourceKey: externalContentKeySchema,
+  type: external_exports.literal("external_resource"),
+  uri: boundedString
+}).readonly();
 var resourceLinkSchema = external_exports.object({
   ...contentFields,
   description: boundedString.nullable().optional(),
@@ -29898,7 +29929,10 @@ var contentBlockV2Schema = external_exports.discriminatedUnion("type", [
   imageContentSchema,
   audioContentSchema,
   resourceLinkSchema,
-  embeddedResourceSchema
+  embeddedResourceSchema,
+  externalImageContentSchema,
+  externalAudioContentSchema,
+  externalResourceContentSchema
 ]);
 var toolCallContentSchema = external_exports.discriminatedUnion("type", [
   external_exports.object({ _meta: optionalMetadata, content: contentBlockV2Schema, type: external_exports.literal("content") }).readonly(),
@@ -30710,11 +30744,11 @@ function createDaemonConfig(connection, agents = [], installableAgents = [], loc
 
 // src/daemon-manager.ts
 import { spawn as spawn6 } from "node:child_process";
-import { createHash as createHash8, randomBytes } from "node:crypto";
-import { readFile as readFile3, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
+import { createHash as createHash9, randomBytes } from "node:crypto";
+import { readFile as readFile4, unlink as unlink2, writeFile as writeFile5 } from "node:fs/promises";
 import { createConnection, createServer } from "node:net";
 import { tmpdir } from "node:os";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 
 // src/pairing/pair-local-machine.ts
 import { mkdir as mkdir5, realpath as realpath6, stat as stat5 } from "node:fs/promises";
@@ -31544,8 +31578,8 @@ var AuditStore = class {
 };
 
 // src/run-daemon.ts
-import { createHash as createHash7, randomUUID as randomUUID7 } from "node:crypto";
-import { join as join18 } from "node:path";
+import { createHash as createHash8, randomUUID as randomUUID8 } from "node:crypto";
+import { join as join19 } from "node:path";
 import { styleText } from "node:util";
 
 // src/acp/active-executions.ts
@@ -34917,7 +34951,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   sql2.raw = raw;
-  function join20(chunks, separator) {
+  function join21(chunks, separator) {
     const result = [];
     for (const [i, chunk] of chunks.entries()) {
       if (i > 0 && separator !== void 0) {
@@ -34927,7 +34961,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  sql2.join = join20;
+  sql2.join = join21;
   function identifier(value) {
     return new Name(value);
   }
@@ -37471,7 +37505,7 @@ var SQLiteSelectQueryBuilderBase = class extends TypedQueryBuilder {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
       for (const item of extractUsedTable(table)) this.usedTables.add(item);
-      if (typeof tableName === "string" && this.config.joins?.some((join20) => join20.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins?.some((join21) => join21.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (!this.isPartialSelect) {
@@ -38330,7 +38364,7 @@ var SQLiteUpdateBase = class extends QueryPromise {
   createJoin(joinType) {
     return (table, on) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join20) => join20.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins.some((join21) => join21.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (typeof on === "function") {
@@ -39653,6 +39687,7 @@ function recordsEqual(left, right) {
 }
 var AgentSession = class _AgentSession {
   #connection;
+  #contentExternalizer;
   #interactions;
   #additionalDirectories;
   #agentId;
@@ -39680,7 +39715,7 @@ var AgentSession = class _AgentSession {
   #sessionTitle = null;
   #sessionUpdatedAt = "";
   #turn = new IdleAcpTurn();
-  constructor(agent, cwd, additionalDirectories, mobiusSessionId, getObserver, store, metrics) {
+  constructor(agent, cwd, additionalDirectories, mobiusSessionId, getObserver, store, metrics, contentExternalizer) {
     this.#updates = new AgentUpdateStream((notification) => this.#processUpdate(notification));
     this.#additionalDirectories = [...additionalDirectories];
     this.#agentId = agent.id;
@@ -39700,8 +39735,9 @@ var AgentSession = class _AgentSession {
       observer: getObserver
     });
     this.#connection = new AgentConnection(agent, cwd, this);
+    this.#contentExternalizer = contentExternalizer;
   }
-  static async #start(options, getObserver, store, initialize, metrics) {
+  static async #start(options, getObserver, store, initialize, metrics, contentExternalizer) {
     for (let attempt = 1; attempt <= 2; attempt += 1) {
       options.signal.throwIfAborted();
       const unchanged = await metrics.measure(
@@ -39729,7 +39765,8 @@ var AgentSession = class _AgentSession {
           options.sessionId,
           getObserver,
           store,
-          metrics
+          metrics,
+          contentExternalizer
         )
       );
       try {
@@ -39752,19 +39789,21 @@ var AgentSession = class _AgentSession {
     }
     throw new AcpExecutionError("ACP agent initialization failed");
   }
-  static start = async (options, getObserver, store, metrics = unmeasuredOperationMetrics) => await _AgentSession.#start(
+  static start = async (options, getObserver, store, metrics, contentExternalizer) => await _AgentSession.#start(
     options,
     getObserver,
     store,
     async (runtime) => await runtime.initialize(options.signal, options.origin),
-    metrics
+    metrics,
+    contentExternalizer
   );
-  static startNativeSessionBrowser = async (options, getObserver, store) => await _AgentSession.#start(
+  static startNativeSessionBrowser = async (options, getObserver, store, contentExternalizer) => await _AgentSession.#start(
     options,
     getObserver,
     store,
     async (runtime) => await runtime.#initializeAgent(options.signal),
-    unmeasuredOperationMetrics
+    unmeasuredOperationMetrics,
+    contentExternalizer
   );
   belongsTo = (agentId, cwd, additionalDirectories) => this.#agentId === agentId && this.#cwd === cwd && arraysEqual(this.#additionalDirectories, additionalDirectories);
   usesEnvironment = (environment) => recordsEqual(this.#environment, environment);
@@ -40469,7 +40508,12 @@ var AgentSession = class _AgentSession {
   #processUpdate = async (notification) => {
     this.assertNativeSession(notification.sessionId);
     const update = notification.update;
-    const rawUpdate = decodeAcpSessionUpdateV2(JSON.stringify(update));
+    const externalized = await this.#contentExternalizer.update(
+      this.#mobiusSessionId,
+      update,
+      AbortSignal.timeout(3e4)
+    );
+    const rawUpdate = decodeAcpSessionUpdateV2(JSON.stringify(externalized));
     if (this.#sessionLoad.kind === "capturing") {
       await this.#sessionLoad.history.record(update, rawUpdate);
     } else {
@@ -40756,8 +40800,10 @@ var AgentQueryProcesses = class {
   #processes;
   #observer = new NullAcpSessionObserver();
   #store = new MemoryAcpSessionStore();
-  constructor(processes) {
+  #contentExternalizer;
+  constructor(processes, contentExternalizer) {
     this.#processes = processes;
+    this.#contentExternalizer = contentExternalizer;
     this.#processesByQuery = new RetainedAgentProcesses({
       touch: processes.touch,
       changed: processes.notifyChanged
@@ -40773,7 +40819,12 @@ var AgentQueryProcesses = class {
   async #startRetained(options) {
     const runtime = await this.#processes.startRetained(
       options.signal,
-      () => AgentSession.startNativeSessionBrowser(options, () => this.#observer, this.#store),
+      () => AgentSession.startNativeSessionBrowser(
+        options,
+        () => this.#observer,
+        this.#store,
+        this.#contentExternalizer
+      ),
       {
         isBusy: () => this.#processesByQuery.isBusy(options.sessionId),
         retire: (runtime2) => this.retire(options.sessionId, runtime2)
@@ -40849,7 +40900,8 @@ var AgentQueryProcesses = class {
       async () => await AgentSession.startNativeSessionBrowser(
         options,
         () => this.#observer,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        this.#contentExternalizer
       ),
       async (runtime) => {
         runtime.selectNativeSession(nativeSessionId);
@@ -40864,7 +40916,8 @@ var AgentQueryProcesses = class {
       async () => await AgentSession.startNativeSessionBrowser(
         options,
         () => this.#observer,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        this.#contentExternalizer
       ),
       async (runtime) => {
         runtime.selectNativeSession(nativeSessionId);
@@ -40880,6 +40933,220 @@ var AgentQueryProcesses = class {
   };
 };
 
+// src/external-content/acp-content-externalizer.ts
+var MAXIMUM_ENCODED_CONTENT_CHARACTERS = 4e6;
+function decodeBase64(data) {
+  if (data.length > MAXIMUM_ENCODED_CONTENT_CHARACTERS || data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/u.test(data)) {
+    throw new Error("The ACP embedded content is not valid bounded base64");
+  }
+  return Buffer.from(data, "base64");
+}
+var AcpContentExternalizer = class {
+  #store;
+  constructor(store) {
+    this.#store = store;
+  }
+  async #content(sessionId, content, signal) {
+    switch (content.type) {
+      case "text":
+      case "resource_link":
+        return content;
+      case "image": {
+        if (content.data.length === 0) {
+          return content;
+        }
+        const stored = await this.#store.put({
+          bytes: decodeBase64(content.data),
+          kind: "image",
+          mediaType: content.mimeType,
+          name: "image",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          byteLength: stored.byteLength,
+          imageKey: stored.key,
+          mimeType: content.mimeType,
+          type: "external_image",
+          uri: content.uri
+        };
+      }
+      case "audio": {
+        if (content.data.length === 0) {
+          return content;
+        }
+        const stored = await this.#store.put({
+          bytes: decodeBase64(content.data),
+          kind: "audio",
+          mediaType: content.mimeType,
+          name: "audio",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          audioKey: stored.key,
+          byteLength: stored.byteLength,
+          mimeType: content.mimeType,
+          type: "external_audio"
+        };
+      }
+      case "resource": {
+        const embedded = content.resource;
+        const encoding = "text" in embedded ? "text" : "binary";
+        const bytes = "text" in embedded ? Buffer.from(embedded.text, "utf8") : decodeBase64(embedded.blob);
+        if (bytes.byteLength === 0) {
+          return content;
+        }
+        const mediaType = embedded.mimeType ?? "application/octet-stream";
+        const stored = await this.#store.put({
+          bytes,
+          kind: "resource",
+          mediaType,
+          name: "resource",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          byteLength: stored.byteLength,
+          encoding,
+          mimeType: embedded.mimeType,
+          resourceKey: stored.key,
+          type: "external_resource",
+          uri: embedded.uri
+        };
+      }
+    }
+  }
+  async #toolContent(sessionId, item, signal) {
+    return item.type === "content" ? { ...item, content: await this.#content(sessionId, item.content, signal) } : item;
+  }
+  update = async (sessionId, update, signal) => {
+    switch (update.sessionUpdate) {
+      case "user_message_chunk":
+      case "agent_message_chunk":
+      case "agent_thought_chunk":
+      case "compaction_summary_chunk":
+        return { ...update, content: await this.#content(sessionId, update.content, signal) };
+      case "tool_call":
+      case "tool_call_update":
+        return update.content === void 0 || update.content === null ? update : {
+          ...update,
+          content: await Promise.all(
+            update.content.map(async (item) => await this.#toolContent(sessionId, item, signal))
+          )
+        };
+      case "compaction_update":
+        return update.summary === void 0 || update.summary === null ? update : {
+          ...update,
+          summary: await Promise.all(
+            update.summary.map(async (content) => await this.#content(sessionId, content, signal))
+          )
+        };
+      case "plan":
+      case "plan_update":
+      case "plan_removed":
+      case "available_commands_update":
+      case "current_mode_update":
+      case "config_option_update":
+      case "session_info_update":
+      case "usage_update":
+        return update;
+    }
+  };
+};
+
+// src/external-content/local-external-content-store.ts
+import { createHash as createHash3, randomUUID as randomUUID2 } from "node:crypto";
+import { lstat, mkdir as mkdir6, readFile as readFile3, realpath as realpath8, rename as rename4, rm as rm3, stat as stat7, writeFile as writeFile4 } from "node:fs/promises";
+import { dirname as dirname5, join as join16 } from "node:path";
+var contentRequest = /^mobius-content:(image|audio|resource):([a-f0-9]{64})$/u;
+var metadataSchema2 = external_exports.strictObject({
+  kind: external_exports.enum(["image", "audio", "resource"]),
+  mediaType: external_exports.string().min(1).max(2048).regex(/^[\u0020-\u007e]+$/u),
+  name: external_exports.string().min(1).max(500)
+});
+var UnretainedExternalContentStore = class {
+  put = async ({ bytes, signal }) => {
+    signal.throwIfAborted();
+    return { byteLength: bytes.byteLength, key: createHash3("sha256").update(bytes).digest("hex") };
+  };
+  resolve = (_sessionId, _request, signal) => {
+    signal.throwIfAborted();
+    return Promise.resolve(null);
+  };
+};
+function sessionScope(sessionId) {
+  return createHash3("sha256").update(sessionId).digest("hex");
+}
+async function atomicWrite(path3, bytes, signal) {
+  const temporary = `${path3}.${randomUUID2()}.tmp`;
+  try {
+    await writeFile4(temporary, bytes, { mode: 384, signal });
+    signal.throwIfAborted();
+    await rename4(temporary, path3);
+  } finally {
+    await rm3(temporary, { force: true });
+  }
+}
+var LocalExternalContentStore = class {
+  #root;
+  constructor(stateDirectory) {
+    this.#root = join16(stateDirectory, "tmp", "session-content");
+  }
+  put = async ({ bytes, kind, mediaType, name, sessionId, signal }) => {
+    signal.throwIfAborted();
+    const key = createHash3("sha256").update(bytes).digest("hex");
+    const directory = join16(this.#root, sessionScope(sessionId), kind);
+    await mkdir6(directory, { mode: 448, recursive: true });
+    signal.throwIfAborted();
+    const path3 = join16(directory, key);
+    await atomicWrite(path3, bytes, signal);
+    await atomicWrite(
+      `${path3}.json`,
+      Buffer.from(JSON.stringify(metadataSchema2.parse({ kind, mediaType, name })), "utf8"),
+      signal
+    );
+    return { byteLength: bytes.byteLength, key };
+  };
+  resolve = async (sessionId, request, signal) => {
+    const matched = contentRequest.exec(request);
+    if (matched === null) {
+      return null;
+    }
+    const kind = matched[1];
+    const key = matched[2];
+    if (kind !== "image" && kind !== "audio" && kind !== "resource" || key === void 0) {
+      return null;
+    }
+    const directory = join16(this.#root, sessionScope(sessionId), kind);
+    const path3 = join16(directory, key);
+    try {
+      const [resolvedDirectory, resolvedPath, file2, metadata] = await Promise.all([
+        realpath8(directory),
+        realpath8(path3),
+        lstat(path3),
+        readFile3(`${path3}.json`, "utf8").then((value) => metadataSchema2.parse(JSON.parse(value)))
+      ]);
+      signal.throwIfAborted();
+      if (!file2.isFile() || dirname5(resolvedPath) !== resolvedDirectory || metadata.kind !== kind) {
+        return null;
+      }
+      await stat7(resolvedPath);
+      signal.throwIfAborted();
+      return { mediaType: metadata.mediaType, name: metadata.name, path: resolvedPath };
+    } catch {
+      signal.throwIfAborted();
+      return null;
+    }
+  };
+};
+
 // src/native-sessions/chat-agent.ts
 function supportsNativeChat(agentId) {
   return agentId === "codex" || agentId === "claude" || agentId === "opencode" || agentId === "pi";
@@ -41096,7 +41363,7 @@ var AgentRuntimeManager = class {
     touch: this.#processes.touch,
     changed: this.#processes.notifyChanged
   });
-  #queryProcesses = new AgentQueryProcesses(this.#processes);
+  #queryProcesses;
   #executions = new ActiveExecutions();
   #agentSettingsObserver = new NullAcpSessionObserver();
   #nativeOperations = /* @__PURE__ */ new Set();
@@ -41104,13 +41371,16 @@ var AgentRuntimeManager = class {
   #nativeHistoryReader;
   #sessionIdentity;
   #onSessionStatusChanged;
+  #contentExternalizer;
   #observer;
-  constructor(observer = new NullAcpSessionObserver(), store = new MemoryAcpSessionStore(), nativeHistoryReader = null, sessionIdentity = "assigned", onSessionStatusChanged = () => void 0) {
+  constructor(observer = new NullAcpSessionObserver(), store = new MemoryAcpSessionStore(), nativeHistoryReader = null, sessionIdentity = "assigned", onSessionStatusChanged = () => void 0, contentExternalizer = new AcpContentExternalizer(new UnretainedExternalContentStore())) {
     this.#observer = observer;
     this.#store = store;
     this.#nativeHistoryReader = nativeHistoryReader;
     this.#sessionIdentity = sessionIdentity;
     this.#onSessionStatusChanged = onSessionStatusChanged;
+    this.#contentExternalizer = contentExternalizer;
+    this.#queryProcesses = new AgentQueryProcesses(this.#processes, contentExternalizer);
   }
   setObserver = (observer) => {
     this.#observer = observer;
@@ -41151,7 +41421,8 @@ var AgentRuntimeManager = class {
           options.origin === void 0 && this.#sessionIdentity === "native" && isNativeChatSessionId(options.agent.id, options.sessionId) && this.#store.read(options.sessionId) instanceof MissingAcpStoredSession ? { ...options, origin: { kind: "import", nativeSessionId: options.sessionId } } : options,
           () => this.#observer,
           this.#store,
-          metrics
+          metrics,
+          this.#contentExternalizer
         )
       );
     });
@@ -41166,7 +41437,13 @@ var AgentRuntimeManager = class {
       this.#store.remove(options.sessionId);
       return await this.#startRetainedSessionProcess(
         options,
-        async () => await AgentSession.start(options, () => this.#observer, this.#store, metrics)
+        async () => await AgentSession.start(
+          options,
+          () => this.#observer,
+          this.#store,
+          metrics,
+          this.#contentExternalizer
+        )
       );
     });
   }
@@ -41176,7 +41453,13 @@ var AgentRuntimeManager = class {
       await this.#retireSessionProcess(options.sessionId, existing, async () => await existing.close());
       const runtime = await this.#startRetainedSessionProcess(
         options,
-        async () => await AgentSession.start(options, () => this.#observer, this.#store)
+        async () => await AgentSession.start(
+          options,
+          () => this.#observer,
+          this.#store,
+          unmeasuredOperationMetrics,
+          this.#contentExternalizer
+        )
       );
       try {
         for (const desired of desiredConfigOptions) {
@@ -41272,7 +41555,9 @@ var AgentRuntimeManager = class {
           sessionId: `agent-settings-${crypto.randomUUID()}`
         },
         () => this.#agentSettingsObserver,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        unmeasuredOperationMetrics,
+        this.#contentExternalizer
       ),
       async (runtime) => {
         const prepared = runtime.prepared();
@@ -42325,9 +42610,9 @@ var FixedInstallationExecutor = class {
 };
 
 // src/authorization/workspace-directory.ts
-import { readdir as readdir3, realpath as realpath8, stat as stat7 } from "node:fs/promises";
+import { readdir as readdir3, realpath as realpath9, stat as stat8 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { basename as basename4, dirname as dirname5, isAbsolute as isAbsolute9, join as join16, normalize as normalize3, relative as relative4 } from "node:path";
+import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute9, join as join17, normalize as normalize3, relative as relative4 } from "node:path";
 
 // src/authorization/local-authorization-error.ts
 var LocalAuthorizationError = class extends Error {
@@ -42406,9 +42691,9 @@ var WorkspaceDirectoryService = class {
       throw new LocalAuthorizationError("The local directory path is invalid");
     }
     try {
-      const target = await realpath8(requested);
+      const target = await realpath9(requested);
       signal.throwIfAborted();
-      const metadata = await stat7(target);
+      const metadata = await stat8(target);
       signal.throwIfAborted();
       if (!isAbsolute9(target) || normalize3(target) !== target || !metadata.isDirectory()) {
         throw new LocalAuthorizationError("The selected location is not a directory");
@@ -42456,7 +42741,7 @@ var WorkspaceDirectoryService = class {
           continue;
         }
         try {
-          const path3 = await this.resolvePath(join16(target, child2.name), signal);
+          const path3 = await this.resolvePath(join17(target, child2.name), signal);
           entries.push({ directoryId: encodePath(path3), name: child2.name });
         } catch (cause) {
           signal.throwIfAborted();
@@ -42466,7 +42751,7 @@ var WorkspaceDirectoryService = class {
         }
       }
       entries.sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname5(target);
+      const parent = dirname6(target);
       return new WorkspaceDirectoryListing(
         id,
         this.label(target),
@@ -42492,15 +42777,15 @@ var WorkspaceDirectoryService = class {
 
 // src/daemon-diagnostic-log.ts
 import { appendFileSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync, statSync as statSync3, writeFileSync } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var MAXIMUM_DAEMON_LOG_BYTES = 1 * 1024 * 1024;
 var DaemonDiagnosticLog = class {
   #directory;
   #path;
   #maximumBytes;
   constructor(stateDirectory, maximumBytes = MAXIMUM_DAEMON_LOG_BYTES) {
-    this.#directory = join17(stateDirectory, "logs");
-    this.#path = join17(this.#directory, "daemon.log");
+    this.#directory = join18(stateDirectory, "logs");
+    this.#path = join18(this.#directory, "daemon.log");
     this.#maximumBytes = maximumBytes;
   }
   record = (diagnostic) => {
@@ -42545,7 +42830,7 @@ import { WebSocket as WebSocket2 } from "undici";
 import { WebSocket } from "undici";
 
 // src/prompt-artifact-resolver.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 import { fetch as fetch4 } from "undici";
 var ARTIFACT_SCHEME = "mobius-artifact:";
 var ARTIFACT_DOWNLOAD_TIMEOUT_MILLISECONDS = 2e4;
@@ -42683,7 +42968,7 @@ async function download(config2, command, reference, signal) {
       );
     }
     const bytes = await responseBytes(response, reference.byteLength, requestSignal);
-    if (createHash3("sha256").update(bytes).digest("hex") !== reference.sha256) {
+    if (createHash4("sha256").update(bytes).digest("hex") !== reference.sha256) {
       throw new PromptArtifactError(
         "artifact_integrity_failed",
         "The prompt artifact failed integrity validation"
@@ -42988,7 +43273,7 @@ var DaemonInstallationObserver = class {
 };
 
 // src/daemon-active-turn.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 function activeMessageCharacters(message) {
   return message.text.length + (message.role === "assistant" ? JSON.stringify(message.activities).length + JSON.stringify(message.content).length : 0);
 }
@@ -43022,7 +43307,7 @@ var ActiveDaemonTurn = class {
   #timeline;
   #sequence = 0;
   #interaction = null;
-  #epoch = decodeIdentifier(randomUUID2());
+  #epoch = decodeIdentifier(randomUUID3());
   constructor(command, attemptId) {
     this.attemptId = attemptId;
     this.command = command;
@@ -43084,7 +43369,7 @@ var ActiveDaemonTurn = class {
       if (!this.#activities.has(event.activityId)) {
         this.#timeline = [
           ...this.#timeline,
-          { activityId: event.activityId, id: decodeIdentifier(randomUUID2()), kind: "activity" }
+          { activityId: event.activityId, id: decodeIdentifier(randomUUID3()), kind: "activity" }
         ];
       }
       this.#activities.set(event.activityId, {
@@ -43105,7 +43390,7 @@ var ActiveDaemonTurn = class {
       if (previous === void 0) {
         this.#timeline = [
           ...this.#timeline,
-          { activityId: event.activityId, id: decodeIdentifier(randomUUID2()), kind: "activity" }
+          { activityId: event.activityId, id: decodeIdentifier(randomUUID3()), kind: "activity" }
         ];
       }
       this.#activities.set(event.activityId, {
@@ -43130,7 +43415,7 @@ var ActiveDaemonTurn = class {
           ...this.#timeline,
           {
             content: /* @__PURE__ */ new Map([[event.contentId, event.content]]),
-            id: decodeIdentifier(randomUUID2()),
+            id: decodeIdentifier(randomUUID3()),
             kind: "message",
             sourceMessageId: event.messageId,
             text: ""
@@ -43170,7 +43455,7 @@ var ActiveDaemonTurn = class {
         ...this.#timeline,
         {
           content: /* @__PURE__ */ new Map(),
-          id: decodeIdentifier(randomUUID2()),
+          id: decodeIdentifier(randomUUID3()),
           kind: "message",
           sourceMessageId: messageId,
           text: remaining.slice(0, ACTIVE_TURN_TEXT_CHUNK_LIMIT)
@@ -44146,7 +44431,7 @@ var readCodexFullHistory = async (agent, cwd, nativeSessionId, signal, nativeTur
 });
 
 // src/native-sessions/service.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 import { basename as basename5 } from "node:path";
 
 // src/native-sessions/acp-history.ts
@@ -44361,7 +44646,7 @@ var NativeSessionService = class {
       if (authorized === null) {
         return null;
       }
-      const entryId = decodeIdentifier(randomUUID3());
+      const entryId = decodeIdentifier(randomUUID4());
       if (this.#entries.size >= 5e3) {
         this.#entries.clear();
       }
@@ -44417,7 +44702,7 @@ var NativeSessionService = class {
             "invalid_native_session_response"
           );
         }
-        nextCursor = decodeIdentifier(randomUUID3());
+        nextCursor = decodeIdentifier(randomUUID4());
         if (this.#cursors.size >= 500) {
           this.#cursors.clear();
         }
@@ -44699,7 +44984,7 @@ var NativeSessionService = class {
 };
 
 // src/relay-connection/daemon-operation-state.ts
-import { createHash as createHash4, randomUUID as randomUUID4 } from "node:crypto";
+import { createHash as createHash5, randomUUID as randomUUID5 } from "node:crypto";
 var MAX_TERMINAL_RECEIPTS = 1024;
 function isTerminal(state) {
   return state === "succeeded" || state === "failed" || state === "cancelled";
@@ -44708,7 +44993,7 @@ var DaemonOperationState = class {
   #executions = /* @__PURE__ */ new Map();
   #terminalCount = 0;
   claimExecution = (commandId, sessionId, commandJson) => {
-    const commandHash = createHash4("sha256").update(commandJson).digest("hex");
+    const commandHash = createHash5("sha256").update(commandJson).digest("hex");
     const existing = this.#executions.get(commandId);
     if (existing !== void 0) {
       if (existing.sessionId !== sessionId || existing.commandHash !== commandHash) {
@@ -44716,7 +45001,7 @@ var DaemonOperationState = class {
       }
       return { attemptId: existing.attemptId, commandId, kind: "duplicate", state: existing.state };
     }
-    const attemptId = randomUUID4();
+    const attemptId = randomUUID5();
     this.#executions.set(commandId, { attemptId, commandHash, sessionId, state: "dispatching" });
     return { attemptId, commandId, kind: "accepted", state: "dispatching" };
   };
@@ -45052,7 +45337,7 @@ function createAgentCatalogRefreshHandler(dependencies) {
 import { WebSocket as WebSocket4 } from "undici";
 
 // src/agent-catalog/discover-agent-settings.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 
 // src/agent-catalog/agent-settings-base.ts
 var AgentSettingsConfigurationError = class extends Error {
@@ -45516,7 +45801,7 @@ function settingsRevision(agent, reportedAgentVersion, settings, modelEffort) {
     unsupportedModelIds: modelEffort.unsupportedModelIds,
     valuesByModel: {}
   };
-  return createHash5("sha256").update(
+  return createHash6("sha256").update(
     JSON.stringify({
       adapterVersion: agent.kind === "acp-adapter-process" ? agent.adapterVersion : agent.agentVersion,
       agentId: agent.id,
@@ -45667,7 +45952,7 @@ function createAgentSettingsDiscoveryHandler(dependencies) {
 
 // src/artifacts/local-file-streamer.ts
 import { createReadStream as createReadStream2 } from "node:fs";
-import { realpath as realpath9, stat as stat8 } from "node:fs/promises";
+import { realpath as realpath10, stat as stat9 } from "node:fs/promises";
 import { basename as basename6, isAbsolute as isAbsolute10, normalize as normalize4, resolve as resolve7 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var CHUNK_BYTES = 192 * 1024;
@@ -45695,7 +45980,7 @@ async function resolveFile(value, workingDirectory, signal) {
     return null;
   }
   try {
-    const target = await realpath9(requested);
+    const target = await realpath10(requested);
     signal.throwIfAborted();
     return isAbsolute10(target) && normalize4(target) === target ? target : null;
   } catch {
@@ -45703,23 +45988,24 @@ async function resolveFile(value, workingDirectory, signal) {
     return null;
   }
 }
-async function streamLocalFile(command, send2, signal, workingDirectory) {
-  const target = await resolveFile(command.path, workingDirectory, signal);
+async function streamLocalFile(command, send2, signal, workingDirectory, externalContent) {
+  const external = await externalContent.resolve(command.sessionId, command.path, signal);
+  const target = external?.path ?? await resolveFile(command.path, workingDirectory, signal);
   if (target === null) {
     throw new Error("The local file is unavailable");
   }
-  const before = await stat8(target);
+  const before = await stat9(target);
   signal.throwIfAborted();
   if (!before.isFile() || before.size < 1 || before.size > command.maxBytes) {
     throw new Error("The local file is too large to read");
   }
-  const raster = await readLocalRaster(target, signal);
+  const raster = external === null ? await readLocalRaster(target, signal) : null;
   send2({
     byteLength: before.size,
     kind: FILE_BEGIN_KIND,
-    mediaType: raster?.mimeType ?? "application/octet-stream",
+    mediaType: external?.mediaType ?? raster?.mimeType ?? "application/octet-stream",
     modifiedAt: before.mtime.toISOString(),
-    name: basename6(target) || "file",
+    name: external?.name ?? (basename6(target) || "file"),
     requestId: command.requestId,
     sessionId: command.sessionId
   });
@@ -45736,7 +46022,7 @@ async function streamLocalFile(command, send2, signal, workingDirectory) {
     });
     sequence += 1;
   }
-  const after = await stat8(target);
+  const after = await stat9(target);
   signal.throwIfAborted();
   if (after.size !== before.size || after.mtimeMs !== before.mtimeMs) {
     throw new Error("The local file changed during transfer");
@@ -45749,7 +46035,7 @@ async function streamLocalFile(command, send2, signal, workingDirectory) {
 }
 
 // src/daemon-history-commands.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 
 // src/authorization/resolve-session-directories.ts
 import { basename as basename7 } from "node:path";
@@ -46143,7 +46429,7 @@ async function executeSessionLiveHistoryPageLoad(socket, command, config2, direc
 }
 function replayEvent(sessionId, position, update) {
   const encoded = JSON.stringify(update);
-  const eventId = `native-${createHash6("sha256").update(sessionId).update(":").update(position.toString()).update(":").update(encoded).digest("hex")}`;
+  const eventId = `native-${createHash7("sha256").update(sessionId).update(":").update(position.toString()).update(":").update(encoded).digest("hex")}`;
   return {
     eventId,
     payload: update,
@@ -46226,7 +46512,7 @@ async function executeSessionLiveHistoryV2PageLoad(socket, command, config2, dir
 }
 
 // src/acp/session-config/apply-session-configuration.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 function invalidSessionConfiguration(message) {
   return new AcpExecutionError(message, {}, "invalid_session_configuration");
 }
@@ -46367,7 +46653,7 @@ async function applySessionConfigurationSelection(sessions, audit, options, sele
     booleanValue: selection.booleanValue,
     configId: selection.configId,
     cwd,
-    requestId: `cfg_${randomUUID5()}`,
+    requestId: `cfg_${randomUUID6()}`,
     sessionId,
     signal,
     value: selection.value,
@@ -47041,6 +47327,7 @@ function createDaemonCommandHandler({
   operations,
   publisher,
   eventLogV2,
+  externalContent,
   activeTurns,
   diagnostics,
   socket,
@@ -47149,7 +47436,8 @@ function createDaemonCommandHandler({
           command2,
           (message2) => send(socket, message2),
           signal,
-          sessions.findSessions([command2.sessionId])[0]?.cwd ?? null
+          sessions.findSessions([command2.sessionId])[0]?.cwd ?? null,
+          externalContent
         ).catch((error62) => {
           if (socket.readyState !== WebSocket6.OPEN || signal.aborted) {
             return;
@@ -47488,7 +47776,7 @@ function connectRelay(url2, signal) {
 }
 
 // src/relay-connection/liveness.ts
-import { randomUUID as randomUUID6 } from "node:crypto";
+import { randomUUID as randomUUID7 } from "node:crypto";
 var HEARTBEAT_ACK_TIMEOUT_MILLISECONDS = 1e4;
 var HEARTBEAT_INTERVAL_MILLISECONDS = 2e4;
 var RelayLivenessState = class {
@@ -47577,7 +47865,7 @@ var RelayConnectionLiveness = class {
       }
       throw new Error("Heartbeat was scheduled in an invalid state");
     }
-    const heartbeatId = randomUUID6();
+    const heartbeatId = randomUUID7();
     this.#state = new AwaitingHeartbeatAckState(
       heartbeatId,
       this.#timer.schedule(this.#handleTimeout, HEARTBEAT_ACK_TIMEOUT_MILLISECONDS)
@@ -47617,6 +47905,7 @@ async function runRelayConnection({
   operations,
   publisher,
   eventLogV2,
+  externalContent,
   activeTurns,
   connectionEpoch,
   diagnostics,
@@ -47640,6 +47929,7 @@ async function runRelayConnection({
     operations,
     publisher,
     eventLogV2,
+    externalContent,
     activeTurns,
     diagnostics,
     socket,
@@ -48118,7 +48408,7 @@ async function installDetectedAgentIntegrations(config2, installations, signal)
       {
         agentId: agent.id,
         kind: AGENT_INSTALL_REQUEST_KIND,
-        requestId: `automatic-integration-${randomUUID7()}`
+        requestId: `automatic-integration-${randomUUID8()}`
       },
       signal
     );
@@ -48137,8 +48427,9 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
     stateDirectory
   });
   const sessionStore = new SqliteAcpSessionStore(
-    join18(stateDirectory, "sessions", `${createHash7("sha256").update(config2.channelId).digest("hex")}.sqlite`)
+    join19(stateDirectory, "sessions", `${createHash8("sha256").update(config2.channelId).digest("hex")}.sqlite`)
   );
+  const externalContent = new LocalExternalContentStore(stateDirectory);
   const operations = new DaemonOperationState();
   const publisher = new DaemonSessionEventPublisher(sessionStore);
   const eventLogV2 = new DaemonSessionEventLogV2(publisher, sessionStore);
@@ -48159,7 +48450,8 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
       )).history : null
     },
     "native",
-    publisher.publishStatus
+    publisher.publishStatus,
+    new AcpContentExternalizer(externalContent)
   );
   const directories = new WorkspaceDirectoryService(config2.bindingId, config2.defaultWorkspace);
   const installationObserver = new DaemonInstallationObserver();
@@ -48273,6 +48565,7 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
           operations,
           publisher,
           eventLogV2,
+          externalContent,
           activeTurns,
           connectionEpoch,
           diagnostics,
@@ -48394,17 +48687,17 @@ var START_TIMEOUT_MILLISECONDS = 12e4;
 var MAXIMUM_MESSAGE_BYTES = 64 * 1024;
 var CONNECTION_ID_PATTERN2 = /^mcn_[a-f0-9]{32}$/;
 async function acquireManagerLock(stateDirectory) {
-  const path3 = join19(stateDirectory, "manager.lock");
+  const path3 = join20(stateDirectory, "manager.lock");
   for (let attempt = 0; attempt < 2; attempt += 1) {
     try {
-      await writeFile4(path3, `${process.pid.toString()}
+      await writeFile5(path3, `${process.pid.toString()}
 `, { flag: "wx", mode: 384 });
       return async () => await unlink2(path3).catch(() => void 0);
     } catch (cause) {
       if (!isNodeError2(cause, "EEXIST")) {
         throw cause;
       }
-      const encoded = await readFile3(path3, "utf8").catch(() => "");
+      const encoded = await readFile4(path3, "utf8").catch(() => "");
       const pid = Number(encoded.trim());
       if (Number.isSafeInteger(pid) && pid > 1) {
         try {
@@ -48425,16 +48718,16 @@ function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function controlSocketPath(stateDirectory) {
-  const installationHash = createHash8("sha256").update(stateDirectory).digest("hex").slice(0, 32);
-  return process.platform === "win32" ? `\\\\.\\pipe\\mobius-${installationHash}` : join19(tmpdir(), `mobius-${installationHash}.sock`);
+  const installationHash = createHash9("sha256").update(stateDirectory).digest("hex").slice(0, 32);
+  return process.platform === "win32" ? `\\\\.\\pipe\\mobius-${installationHash}` : join20(tmpdir(), `mobius-${installationHash}.sock`);
 }
 function controlTokenPath(stateDirectory) {
-  return join19(stateDirectory, "manager.token");
+  return join20(stateDirectory, "manager.token");
 }
 async function readOrCreateControlToken(stateDirectory) {
   const path3 = controlTokenPath(stateDirectory);
   try {
-    return (await readFile3(path3, "utf8")).trim();
+    return (await readFile4(path3, "utf8")).trim();
   } catch (cause) {
     if (!isNodeError2(cause, "ENOENT")) {
       throw cause;
@@ -48442,14 +48735,14 @@ async function readOrCreateControlToken(stateDirectory) {
   }
   const token = randomBytes(32).toString("base64url");
   try {
-    await writeFile4(path3, `${token}
+    await writeFile5(path3, `${token}
 `, { flag: "wx", mode: 384 });
     return token;
   } catch (cause) {
     if (!isNodeError2(cause, "EEXIST")) {
       throw cause;
     }
-    return (await readFile3(path3, "utf8")).trim();
+    return (await readFile4(path3, "utf8")).trim();
   }
 }
 function isNodeError2(error62, code) {
@@ -48761,7 +49054,7 @@ async function waitForManagerExit(stateDirectory, signal) {
   const deadline = AbortSignal.any([signal, AbortSignal.timeout(1e4)]);
   while (!deadline.aborted) {
     try {
-      await readFile3(join19(stateDirectory, "manager.lock"), "utf8");
+      await readFile4(join20(stateDirectory, "manager.lock"), "utf8");
     } catch (cause) {
       if (isNodeError2(cause, "ENOENT")) {
         return;
@@ -49039,7 +49332,7 @@ function createProgram() {
     const installation = await openMobiusCliInstallation(shutdown.signal, process.env);
     const localContext = new DaemonLocalContext(installation.stateDirectory, process.env);
     const defaultWorkspace = loadDefaultWorkspace(localContext.environment);
-    await mkdir6(defaultWorkspace, { recursive: true, mode: 448 });
+    await mkdir7(defaultWorkspace, { recursive: true, mode: 448 });
     const inventory = await discoverLocalAgentInventory({
       defaultWorkspace,
       environment: localContext.environment,