@moxt-ai/mobius 0.0.166 → 0.0.167

package/dist/runtime.js

@@ -5,7 +5,7 @@ var __export = (target, all) => {
 };
 
 // src/runtime.ts
-import { mkdir as mkdir6, realpath as realpath10, stat as stat9 } from "node:fs/promises";
+import { mkdir as mkdir7, realpath as realpath11, stat as stat10 } from "node:fs/promises";
 import { resolve as resolve8 } from "node:path";
 
 // ../../node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/external.js
@@ -21189,6 +21189,7 @@ var MAX_JSON_KEYS = 1e3;
 var SESSION_EVENT_V2_KIND = "session.event.v2";
 var boundedString = external_exports.string().max(MAX_CONTENT_LENGTH);
 var shortString = external_exports.string().max(2048);
+var externalContentKeySchema = external_exports.string().regex(/^[a-f0-9]{64}$/u);
 function boundedJsonIssue(value, depth = 0) {
   if (depth > MAX_JSON_DEPTH) {
     return "JSON nesting exceeds the maximum depth";
@@ -21256,6 +21257,30 @@ var imageContentSchema = external_exports.object({
   uri: boundedString.nullable().optional()
 }).readonly();
 var audioContentSchema = external_exports.object({ ...contentFields, data: boundedString, mimeType: shortString, type: external_exports.literal("audio") }).readonly();
+var externalImageContentSchema = external_exports.strictObject({
+  ...contentFields,
+  byteLength: external_exports.number().int().positive().safe(),
+  imageKey: externalContentKeySchema,
+  mimeType: shortString,
+  type: external_exports.literal("external_image"),
+  uri: boundedString.nullable().optional()
+}).readonly();
+var externalAudioContentSchema = external_exports.strictObject({
+  ...contentFields,
+  audioKey: externalContentKeySchema,
+  byteLength: external_exports.number().int().positive().safe(),
+  mimeType: shortString,
+  type: external_exports.literal("external_audio")
+}).readonly();
+var externalResourceContentSchema = external_exports.strictObject({
+  ...contentFields,
+  byteLength: external_exports.number().int().positive().safe(),
+  encoding: external_exports.enum(["binary", "text"]),
+  mimeType: shortString.nullable().optional(),
+  resourceKey: externalContentKeySchema,
+  type: external_exports.literal("external_resource"),
+  uri: boundedString
+}).readonly();
 var resourceLinkSchema = external_exports.object({
   ...contentFields,
   description: boundedString.nullable().optional(),
@@ -21288,7 +21313,10 @@ var contentBlockV2Schema = external_exports.discriminatedUnion("type", [
   imageContentSchema,
   audioContentSchema,
   resourceLinkSchema,
-  embeddedResourceSchema
+  embeddedResourceSchema,
+  externalImageContentSchema,
+  externalAudioContentSchema,
+  externalResourceContentSchema
 ]);
 var toolCallContentSchema = external_exports.discriminatedUnion("type", [
   external_exports.object({ _meta: optionalMetadata, content: contentBlockV2Schema, type: external_exports.literal("content") }).readonly(),
@@ -27183,8 +27211,8 @@ function createDaemonConfig(connection, agents = [], installableAgents = [], loc
 }
 
 // src/run-daemon.ts
-import { createHash as createHash6, randomUUID as randomUUID6 } from "node:crypto";
-import { join as join17 } from "node:path";
+import { createHash as createHash7, randomUUID as randomUUID7 } from "node:crypto";
+import { join as join18 } from "node:path";
 import { styleText } from "node:util";
 
 // src/acp/active-executions.ts
@@ -30556,7 +30584,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   sql2.raw = raw;
-  function join19(chunks, separator) {
+  function join20(chunks, separator) {
     const result = [];
     for (const [i, chunk] of chunks.entries()) {
       if (i > 0 && separator !== void 0) {
@@ -30566,7 +30594,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  sql2.join = join19;
+  sql2.join = join20;
   function identifier(value) {
     return new Name(value);
   }
@@ -33110,7 +33138,7 @@ var SQLiteSelectQueryBuilderBase = class extends TypedQueryBuilder {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
       for (const item of extractUsedTable(table)) this.usedTables.add(item);
-      if (typeof tableName === "string" && this.config.joins?.some((join19) => join19.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins?.some((join20) => join20.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (!this.isPartialSelect) {
@@ -33969,7 +33997,7 @@ var SQLiteUpdateBase = class extends QueryPromise {
   createJoin(joinType) {
     return (table, on) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join19) => join19.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins.some((join20) => join20.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (typeof on === "function") {
@@ -35292,6 +35320,7 @@ function recordsEqual(left, right) {
 }
 var AgentSession = class _AgentSession {
   #connection;
+  #contentExternalizer;
   #interactions;
   #additionalDirectories;
   #agentId;
@@ -35319,7 +35348,7 @@ var AgentSession = class _AgentSession {
   #sessionTitle = null;
   #sessionUpdatedAt = "";
   #turn = new IdleAcpTurn();
-  constructor(agent, cwd, additionalDirectories, mobiusSessionId, getObserver, store, metrics) {
+  constructor(agent, cwd, additionalDirectories, mobiusSessionId, getObserver, store, metrics, contentExternalizer) {
     this.#updates = new AgentUpdateStream((notification) => this.#processUpdate(notification));
     this.#additionalDirectories = [...additionalDirectories];
     this.#agentId = agent.id;
@@ -35339,8 +35368,9 @@ var AgentSession = class _AgentSession {
       observer: getObserver
     });
     this.#connection = new AgentConnection(agent, cwd, this);
+    this.#contentExternalizer = contentExternalizer;
   }
-  static async #start(options, getObserver, store, initialize, metrics) {
+  static async #start(options, getObserver, store, initialize, metrics, contentExternalizer) {
     for (let attempt = 1; attempt <= 2; attempt += 1) {
       options.signal.throwIfAborted();
       const unchanged = await metrics.measure(
@@ -35368,7 +35398,8 @@ var AgentSession = class _AgentSession {
           options.sessionId,
           getObserver,
           store,
-          metrics
+          metrics,
+          contentExternalizer
         )
       );
       try {
@@ -35391,19 +35422,21 @@ var AgentSession = class _AgentSession {
     }
     throw new AcpExecutionError("ACP agent initialization failed");
   }
-  static start = async (options, getObserver, store, metrics = unmeasuredOperationMetrics) => await _AgentSession.#start(
+  static start = async (options, getObserver, store, metrics, contentExternalizer) => await _AgentSession.#start(
     options,
     getObserver,
     store,
     async (runtime) => await runtime.initialize(options.signal, options.origin),
-    metrics
+    metrics,
+    contentExternalizer
   );
-  static startNativeSessionBrowser = async (options, getObserver, store) => await _AgentSession.#start(
+  static startNativeSessionBrowser = async (options, getObserver, store, contentExternalizer) => await _AgentSession.#start(
     options,
     getObserver,
     store,
     async (runtime) => await runtime.#initializeAgent(options.signal),
-    unmeasuredOperationMetrics
+    unmeasuredOperationMetrics,
+    contentExternalizer
   );
   belongsTo = (agentId, cwd, additionalDirectories) => this.#agentId === agentId && this.#cwd === cwd && arraysEqual(this.#additionalDirectories, additionalDirectories);
   usesEnvironment = (environment) => recordsEqual(this.#environment, environment);
@@ -36108,7 +36141,12 @@ var AgentSession = class _AgentSession {
   #processUpdate = async (notification) => {
     this.assertNativeSession(notification.sessionId);
     const update = notification.update;
-    const rawUpdate = decodeAcpSessionUpdateV2(JSON.stringify(update));
+    const externalized = await this.#contentExternalizer.update(
+      this.#mobiusSessionId,
+      update,
+      AbortSignal.timeout(3e4)
+    );
+    const rawUpdate = decodeAcpSessionUpdateV2(JSON.stringify(externalized));
     if (this.#sessionLoad.kind === "capturing") {
       await this.#sessionLoad.history.record(update, rawUpdate);
     } else {
@@ -36395,8 +36433,10 @@ var AgentQueryProcesses = class {
   #processes;
   #observer = new NullAcpSessionObserver();
   #store = new MemoryAcpSessionStore();
-  constructor(processes) {
+  #contentExternalizer;
+  constructor(processes, contentExternalizer) {
     this.#processes = processes;
+    this.#contentExternalizer = contentExternalizer;
     this.#processesByQuery = new RetainedAgentProcesses({
       touch: processes.touch,
       changed: processes.notifyChanged
@@ -36412,7 +36452,12 @@ var AgentQueryProcesses = class {
   async #startRetained(options) {
     const runtime = await this.#processes.startRetained(
       options.signal,
-      () => AgentSession.startNativeSessionBrowser(options, () => this.#observer, this.#store),
+      () => AgentSession.startNativeSessionBrowser(
+        options,
+        () => this.#observer,
+        this.#store,
+        this.#contentExternalizer
+      ),
       {
         isBusy: () => this.#processesByQuery.isBusy(options.sessionId),
         retire: (runtime2) => this.retire(options.sessionId, runtime2)
@@ -36488,7 +36533,8 @@ var AgentQueryProcesses = class {
       async () => await AgentSession.startNativeSessionBrowser(
         options,
         () => this.#observer,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        this.#contentExternalizer
       ),
       async (runtime) => {
         runtime.selectNativeSession(nativeSessionId);
@@ -36503,7 +36549,8 @@ var AgentQueryProcesses = class {
       async () => await AgentSession.startNativeSessionBrowser(
         options,
         () => this.#observer,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        this.#contentExternalizer
       ),
       async (runtime) => {
         runtime.selectNativeSession(nativeSessionId);
@@ -36519,6 +36566,220 @@ var AgentQueryProcesses = class {
   };
 };
 
+// src/external-content/acp-content-externalizer.ts
+var MAXIMUM_ENCODED_CONTENT_CHARACTERS = 4e6;
+function decodeBase64(data) {
+  if (data.length > MAXIMUM_ENCODED_CONTENT_CHARACTERS || data.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/u.test(data)) {
+    throw new Error("The ACP embedded content is not valid bounded base64");
+  }
+  return Buffer.from(data, "base64");
+}
+var AcpContentExternalizer = class {
+  #store;
+  constructor(store) {
+    this.#store = store;
+  }
+  async #content(sessionId, content, signal) {
+    switch (content.type) {
+      case "text":
+      case "resource_link":
+        return content;
+      case "image": {
+        if (content.data.length === 0) {
+          return content;
+        }
+        const stored = await this.#store.put({
+          bytes: decodeBase64(content.data),
+          kind: "image",
+          mediaType: content.mimeType,
+          name: "image",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          byteLength: stored.byteLength,
+          imageKey: stored.key,
+          mimeType: content.mimeType,
+          type: "external_image",
+          uri: content.uri
+        };
+      }
+      case "audio": {
+        if (content.data.length === 0) {
+          return content;
+        }
+        const stored = await this.#store.put({
+          bytes: decodeBase64(content.data),
+          kind: "audio",
+          mediaType: content.mimeType,
+          name: "audio",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          audioKey: stored.key,
+          byteLength: stored.byteLength,
+          mimeType: content.mimeType,
+          type: "external_audio"
+        };
+      }
+      case "resource": {
+        const embedded = content.resource;
+        const encoding = "text" in embedded ? "text" : "binary";
+        const bytes = "text" in embedded ? Buffer.from(embedded.text, "utf8") : decodeBase64(embedded.blob);
+        if (bytes.byteLength === 0) {
+          return content;
+        }
+        const mediaType = embedded.mimeType ?? "application/octet-stream";
+        const stored = await this.#store.put({
+          bytes,
+          kind: "resource",
+          mediaType,
+          name: "resource",
+          sessionId,
+          signal
+        });
+        return {
+          _meta: content._meta,
+          annotations: content.annotations,
+          byteLength: stored.byteLength,
+          encoding,
+          mimeType: embedded.mimeType,
+          resourceKey: stored.key,
+          type: "external_resource",
+          uri: embedded.uri
+        };
+      }
+    }
+  }
+  async #toolContent(sessionId, item, signal) {
+    return item.type === "content" ? { ...item, content: await this.#content(sessionId, item.content, signal) } : item;
+  }
+  update = async (sessionId, update, signal) => {
+    switch (update.sessionUpdate) {
+      case "user_message_chunk":
+      case "agent_message_chunk":
+      case "agent_thought_chunk":
+      case "compaction_summary_chunk":
+        return { ...update, content: await this.#content(sessionId, update.content, signal) };
+      case "tool_call":
+      case "tool_call_update":
+        return update.content === void 0 || update.content === null ? update : {
+          ...update,
+          content: await Promise.all(
+            update.content.map(async (item) => await this.#toolContent(sessionId, item, signal))
+          )
+        };
+      case "compaction_update":
+        return update.summary === void 0 || update.summary === null ? update : {
+          ...update,
+          summary: await Promise.all(
+            update.summary.map(async (content) => await this.#content(sessionId, content, signal))
+          )
+        };
+      case "plan":
+      case "plan_update":
+      case "plan_removed":
+      case "available_commands_update":
+      case "current_mode_update":
+      case "config_option_update":
+      case "session_info_update":
+      case "usage_update":
+        return update;
+    }
+  };
+};
+
+// src/external-content/local-external-content-store.ts
+import { createHash as createHash2, randomUUID } from "node:crypto";
+import { lstat, mkdir as mkdir4, readFile as readFile3, realpath as realpath7, rename as rename3, rm as rm3, stat as stat6, writeFile as writeFile3 } from "node:fs/promises";
+import { dirname as dirname4, join as join15 } from "node:path";
+var contentRequest = /^mobius-content:(image|audio|resource):([a-f0-9]{64})$/u;
+var metadataSchema2 = external_exports.strictObject({
+  kind: external_exports.enum(["image", "audio", "resource"]),
+  mediaType: external_exports.string().min(1).max(2048).regex(/^[\u0020-\u007e]+$/u),
+  name: external_exports.string().min(1).max(500)
+});
+var UnretainedExternalContentStore = class {
+  put = async ({ bytes, signal }) => {
+    signal.throwIfAborted();
+    return { byteLength: bytes.byteLength, key: createHash2("sha256").update(bytes).digest("hex") };
+  };
+  resolve = (_sessionId, _request, signal) => {
+    signal.throwIfAborted();
+    return Promise.resolve(null);
+  };
+};
+function sessionScope(sessionId) {
+  return createHash2("sha256").update(sessionId).digest("hex");
+}
+async function atomicWrite(path2, bytes, signal) {
+  const temporary = `${path2}.${randomUUID()}.tmp`;
+  try {
+    await writeFile3(temporary, bytes, { mode: 384, signal });
+    signal.throwIfAborted();
+    await rename3(temporary, path2);
+  } finally {
+    await rm3(temporary, { force: true });
+  }
+}
+var LocalExternalContentStore = class {
+  #root;
+  constructor(stateDirectory) {
+    this.#root = join15(stateDirectory, "tmp", "session-content");
+  }
+  put = async ({ bytes, kind, mediaType, name, sessionId, signal }) => {
+    signal.throwIfAborted();
+    const key = createHash2("sha256").update(bytes).digest("hex");
+    const directory = join15(this.#root, sessionScope(sessionId), kind);
+    await mkdir4(directory, { mode: 448, recursive: true });
+    signal.throwIfAborted();
+    const path2 = join15(directory, key);
+    await atomicWrite(path2, bytes, signal);
+    await atomicWrite(
+      `${path2}.json`,
+      Buffer.from(JSON.stringify(metadataSchema2.parse({ kind, mediaType, name })), "utf8"),
+      signal
+    );
+    return { byteLength: bytes.byteLength, key };
+  };
+  resolve = async (sessionId, request, signal) => {
+    const matched = contentRequest.exec(request);
+    if (matched === null) {
+      return null;
+    }
+    const kind = matched[1];
+    const key = matched[2];
+    if (kind !== "image" && kind !== "audio" && kind !== "resource" || key === void 0) {
+      return null;
+    }
+    const directory = join15(this.#root, sessionScope(sessionId), kind);
+    const path2 = join15(directory, key);
+    try {
+      const [resolvedDirectory, resolvedPath, file2, metadata] = await Promise.all([
+        realpath7(directory),
+        realpath7(path2),
+        lstat(path2),
+        readFile3(`${path2}.json`, "utf8").then((value) => metadataSchema2.parse(JSON.parse(value)))
+      ]);
+      signal.throwIfAborted();
+      if (!file2.isFile() || dirname4(resolvedPath) !== resolvedDirectory || metadata.kind !== kind) {
+        return null;
+      }
+      await stat6(resolvedPath);
+      signal.throwIfAborted();
+      return { mediaType: metadata.mediaType, name: metadata.name, path: resolvedPath };
+    } catch {
+      signal.throwIfAborted();
+      return null;
+    }
+  };
+};
+
 // src/native-sessions/chat-agent.ts
 function supportsNativeChat(agentId) {
   return agentId === "codex" || agentId === "claude" || agentId === "opencode" || agentId === "pi";
@@ -36735,7 +36996,7 @@ var AgentRuntimeManager = class {
     touch: this.#processes.touch,
     changed: this.#processes.notifyChanged
   });
-  #queryProcesses = new AgentQueryProcesses(this.#processes);
+  #queryProcesses;
   #executions = new ActiveExecutions();
   #agentSettingsObserver = new NullAcpSessionObserver();
   #nativeOperations = /* @__PURE__ */ new Set();
@@ -36743,13 +37004,16 @@ var AgentRuntimeManager = class {
   #nativeHistoryReader;
   #sessionIdentity;
   #onSessionStatusChanged;
+  #contentExternalizer;
   #observer;
-  constructor(observer = new NullAcpSessionObserver(), store = new MemoryAcpSessionStore(), nativeHistoryReader = null, sessionIdentity = "assigned", onSessionStatusChanged = () => void 0) {
+  constructor(observer = new NullAcpSessionObserver(), store = new MemoryAcpSessionStore(), nativeHistoryReader = null, sessionIdentity = "assigned", onSessionStatusChanged = () => void 0, contentExternalizer = new AcpContentExternalizer(new UnretainedExternalContentStore())) {
     this.#observer = observer;
     this.#store = store;
     this.#nativeHistoryReader = nativeHistoryReader;
     this.#sessionIdentity = sessionIdentity;
     this.#onSessionStatusChanged = onSessionStatusChanged;
+    this.#contentExternalizer = contentExternalizer;
+    this.#queryProcesses = new AgentQueryProcesses(this.#processes, contentExternalizer);
   }
   setObserver = (observer) => {
     this.#observer = observer;
@@ -36790,7 +37054,8 @@ var AgentRuntimeManager = class {
           options.origin === void 0 && this.#sessionIdentity === "native" && isNativeChatSessionId(options.agent.id, options.sessionId) && this.#store.read(options.sessionId) instanceof MissingAcpStoredSession ? { ...options, origin: { kind: "import", nativeSessionId: options.sessionId } } : options,
           () => this.#observer,
           this.#store,
-          metrics
+          metrics,
+          this.#contentExternalizer
         )
       );
     });
@@ -36805,7 +37070,13 @@ var AgentRuntimeManager = class {
       this.#store.remove(options.sessionId);
       return await this.#startRetainedSessionProcess(
         options,
-        async () => await AgentSession.start(options, () => this.#observer, this.#store, metrics)
+        async () => await AgentSession.start(
+          options,
+          () => this.#observer,
+          this.#store,
+          metrics,
+          this.#contentExternalizer
+        )
       );
     });
   }
@@ -36815,7 +37086,13 @@ var AgentRuntimeManager = class {
       await this.#retireSessionProcess(options.sessionId, existing, async () => await existing.close());
       const runtime = await this.#startRetainedSessionProcess(
         options,
-        async () => await AgentSession.start(options, () => this.#observer, this.#store)
+        async () => await AgentSession.start(
+          options,
+          () => this.#observer,
+          this.#store,
+          unmeasuredOperationMetrics,
+          this.#contentExternalizer
+        )
       );
       try {
         for (const desired of desiredConfigOptions) {
@@ -36911,7 +37188,9 @@ var AgentRuntimeManager = class {
           sessionId: `agent-settings-${crypto.randomUUID()}`
         },
         () => this.#agentSettingsObserver,
-        new MemoryAcpSessionStore()
+        new MemoryAcpSessionStore(),
+        unmeasuredOperationMetrics,
+        this.#contentExternalizer
       ),
       async (runtime) => {
         const prepared = runtime.prepared();
@@ -37964,9 +38243,9 @@ var FixedInstallationExecutor = class {
 };
 
 // src/authorization/workspace-directory.ts
-import { readdir as readdir2, realpath as realpath7, stat as stat6 } from "node:fs/promises";
+import { readdir as readdir2, realpath as realpath8, stat as stat7 } from "node:fs/promises";
 import { homedir as homedir2 } from "node:os";
-import { basename as basename3, dirname as dirname4, isAbsolute as isAbsolute9, join as join15, normalize as normalize3, relative as relative4 } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute9, join as join16, normalize as normalize3, relative as relative4 } from "node:path";
 
 // src/authorization/local-authorization-error.ts
 var LocalAuthorizationError = class extends Error {
@@ -38045,9 +38324,9 @@ var WorkspaceDirectoryService = class {
       throw new LocalAuthorizationError("The local directory path is invalid");
     }
     try {
-      const target = await realpath7(requested);
+      const target = await realpath8(requested);
       signal.throwIfAborted();
-      const metadata = await stat6(target);
+      const metadata = await stat7(target);
       signal.throwIfAborted();
       if (!isAbsolute9(target) || normalize3(target) !== target || !metadata.isDirectory()) {
         throw new LocalAuthorizationError("The selected location is not a directory");
@@ -38095,7 +38374,7 @@ var WorkspaceDirectoryService = class {
           continue;
         }
         try {
-          const path2 = await this.resolvePath(join15(target, child2.name), signal);
+          const path2 = await this.resolvePath(join16(target, child2.name), signal);
           entries.push({ directoryId: encodePath(path2), name: child2.name });
         } catch (cause) {
           signal.throwIfAborted();
@@ -38105,7 +38384,7 @@ var WorkspaceDirectoryService = class {
         }
       }
       entries.sort((a, b) => a.name.localeCompare(b.name));
-      const parent = dirname4(target);
+      const parent = dirname5(target);
       return new WorkspaceDirectoryListing(
         id,
         this.label(target),
@@ -38131,15 +38410,15 @@ var WorkspaceDirectoryService = class {
 
 // src/daemon-diagnostic-log.ts
 import { appendFileSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync, statSync as statSync3, writeFileSync } from "node:fs";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 var MAXIMUM_DAEMON_LOG_BYTES = 1 * 1024 * 1024;
 var DaemonDiagnosticLog = class {
   #directory;
   #path;
   #maximumBytes;
   constructor(stateDirectory, maximumBytes = MAXIMUM_DAEMON_LOG_BYTES) {
-    this.#directory = join16(stateDirectory, "logs");
-    this.#path = join16(this.#directory, "daemon.log");
+    this.#directory = join17(stateDirectory, "logs");
+    this.#path = join17(this.#directory, "daemon.log");
     this.#maximumBytes = maximumBytes;
   }
   record = (diagnostic) => {
@@ -38184,7 +38463,7 @@ import { WebSocket as WebSocket2 } from "undici";
 import { WebSocket } from "undici";
 
 // src/prompt-artifact-resolver.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { fetch as fetch3 } from "undici";
 var ARTIFACT_SCHEME = "mobius-artifact:";
 var ARTIFACT_DOWNLOAD_TIMEOUT_MILLISECONDS = 2e4;
@@ -38322,7 +38601,7 @@ async function download(config2, command, reference, signal) {
       );
     }
     const bytes = await responseBytes(response, reference.byteLength, requestSignal);
-    if (createHash2("sha256").update(bytes).digest("hex") !== reference.sha256) {
+    if (createHash3("sha256").update(bytes).digest("hex") !== reference.sha256) {
       throw new PromptArtifactError(
         "artifact_integrity_failed",
         "The prompt artifact failed integrity validation"
@@ -38627,7 +38906,7 @@ var DaemonInstallationObserver = class {
 };
 
 // src/daemon-active-turn.ts
-import { randomUUID } from "node:crypto";
+import { randomUUID as randomUUID2 } from "node:crypto";
 function activeMessageCharacters(message) {
   return message.text.length + (message.role === "assistant" ? JSON.stringify(message.activities).length + JSON.stringify(message.content).length : 0);
 }
@@ -38661,7 +38940,7 @@ var ActiveDaemonTurn = class {
   #timeline;
   #sequence = 0;
   #interaction = null;
-  #epoch = decodeIdentifier(randomUUID());
+  #epoch = decodeIdentifier(randomUUID2());
   constructor(command, attemptId) {
     this.attemptId = attemptId;
     this.command = command;
@@ -38723,7 +39002,7 @@ var ActiveDaemonTurn = class {
       if (!this.#activities.has(event.activityId)) {
         this.#timeline = [
           ...this.#timeline,
-          { activityId: event.activityId, id: decodeIdentifier(randomUUID()), kind: "activity" }
+          { activityId: event.activityId, id: decodeIdentifier(randomUUID2()), kind: "activity" }
         ];
       }
       this.#activities.set(event.activityId, {
@@ -38744,7 +39023,7 @@ var ActiveDaemonTurn = class {
       if (previous === void 0) {
         this.#timeline = [
           ...this.#timeline,
-          { activityId: event.activityId, id: decodeIdentifier(randomUUID()), kind: "activity" }
+          { activityId: event.activityId, id: decodeIdentifier(randomUUID2()), kind: "activity" }
         ];
       }
       this.#activities.set(event.activityId, {
@@ -38769,7 +39048,7 @@ var ActiveDaemonTurn = class {
           ...this.#timeline,
           {
             content: /* @__PURE__ */ new Map([[event.contentId, event.content]]),
-            id: decodeIdentifier(randomUUID()),
+            id: decodeIdentifier(randomUUID2()),
             kind: "message",
             sourceMessageId: event.messageId,
             text: ""
@@ -38809,7 +39088,7 @@ var ActiveDaemonTurn = class {
         ...this.#timeline,
         {
           content: /* @__PURE__ */ new Map(),
-          id: decodeIdentifier(randomUUID()),
+          id: decodeIdentifier(randomUUID2()),
           kind: "message",
           sourceMessageId: messageId,
           text: remaining.slice(0, ACTIVE_TURN_TEXT_CHUNK_LIMIT)
@@ -39785,7 +40064,7 @@ var readCodexFullHistory = async (agent, cwd, nativeSessionId, signal, nativeTur
 });
 
 // src/native-sessions/service.ts
-import { randomUUID as randomUUID2 } from "node:crypto";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { basename as basename4 } from "node:path";
 
 // src/native-sessions/acp-history.ts
@@ -40000,7 +40279,7 @@ var NativeSessionService = class {
       if (authorized === null) {
         return null;
       }
-      const entryId = decodeIdentifier(randomUUID2());
+      const entryId = decodeIdentifier(randomUUID3());
       if (this.#entries.size >= 5e3) {
         this.#entries.clear();
       }
@@ -40056,7 +40335,7 @@ var NativeSessionService = class {
             "invalid_native_session_response"
           );
         }
-        nextCursor = decodeIdentifier(randomUUID2());
+        nextCursor = decodeIdentifier(randomUUID3());
         if (this.#cursors.size >= 500) {
           this.#cursors.clear();
         }
@@ -40338,7 +40617,7 @@ var NativeSessionService = class {
 };
 
 // src/relay-connection/daemon-operation-state.ts
-import { createHash as createHash3, randomUUID as randomUUID3 } from "node:crypto";
+import { createHash as createHash4, randomUUID as randomUUID4 } from "node:crypto";
 var MAX_TERMINAL_RECEIPTS = 1024;
 function isTerminal(state) {
   return state === "succeeded" || state === "failed" || state === "cancelled";
@@ -40347,7 +40626,7 @@ var DaemonOperationState = class {
   #executions = /* @__PURE__ */ new Map();
   #terminalCount = 0;
   claimExecution = (commandId, sessionId, commandJson) => {
-    const commandHash = createHash3("sha256").update(commandJson).digest("hex");
+    const commandHash = createHash4("sha256").update(commandJson).digest("hex");
     const existing = this.#executions.get(commandId);
     if (existing !== void 0) {
       if (existing.sessionId !== sessionId || existing.commandHash !== commandHash) {
@@ -40355,7 +40634,7 @@ var DaemonOperationState = class {
       }
       return { attemptId: existing.attemptId, commandId, kind: "duplicate", state: existing.state };
     }
-    const attemptId = randomUUID3();
+    const attemptId = randomUUID4();
     this.#executions.set(commandId, { attemptId, commandHash, sessionId, state: "dispatching" });
     return { attemptId, commandId, kind: "accepted", state: "dispatching" };
   };
@@ -40691,7 +40970,7 @@ function createAgentCatalogRefreshHandler(dependencies) {
 import { WebSocket as WebSocket4 } from "undici";
 
 // src/agent-catalog/discover-agent-settings.ts
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 
 // src/agent-catalog/agent-settings-base.ts
 var AgentSettingsConfigurationError = class extends Error {
@@ -41155,7 +41434,7 @@ function settingsRevision(agent, reportedAgentVersion, settings, modelEffort) {
     unsupportedModelIds: modelEffort.unsupportedModelIds,
     valuesByModel: {}
   };
-  return createHash4("sha256").update(
+  return createHash5("sha256").update(
     JSON.stringify({
       adapterVersion: agent.kind === "acp-adapter-process" ? agent.adapterVersion : agent.agentVersion,
       agentId: agent.id,
@@ -41306,7 +41585,7 @@ function createAgentSettingsDiscoveryHandler(dependencies) {
 
 // src/artifacts/local-file-streamer.ts
 import { createReadStream as createReadStream2 } from "node:fs";
-import { realpath as realpath8, stat as stat7 } from "node:fs/promises";
+import { realpath as realpath9, stat as stat8 } from "node:fs/promises";
 import { basename as basename5, isAbsolute as isAbsolute10, normalize as normalize4, resolve as resolve5 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var CHUNK_BYTES = 192 * 1024;
@@ -41334,7 +41613,7 @@ async function resolveFile(value, workingDirectory, signal) {
     return null;
   }
   try {
-    const target = await realpath8(requested);
+    const target = await realpath9(requested);
     signal.throwIfAborted();
     return isAbsolute10(target) && normalize4(target) === target ? target : null;
   } catch {
@@ -41342,23 +41621,24 @@ async function resolveFile(value, workingDirectory, signal) {
     return null;
   }
 }
-async function streamLocalFile(command, send2, signal, workingDirectory) {
-  const target = await resolveFile(command.path, workingDirectory, signal);
+async function streamLocalFile(command, send2, signal, workingDirectory, externalContent) {
+  const external = await externalContent.resolve(command.sessionId, command.path, signal);
+  const target = external?.path ?? await resolveFile(command.path, workingDirectory, signal);
   if (target === null) {
     throw new Error("The local file is unavailable");
   }
-  const before = await stat7(target);
+  const before = await stat8(target);
   signal.throwIfAborted();
   if (!before.isFile() || before.size < 1 || before.size > command.maxBytes) {
     throw new Error("The local file is too large to read");
   }
-  const raster = await readLocalRaster(target, signal);
+  const raster = external === null ? await readLocalRaster(target, signal) : null;
   send2({
     byteLength: before.size,
     kind: FILE_BEGIN_KIND,
-    mediaType: raster?.mimeType ?? "application/octet-stream",
+    mediaType: external?.mediaType ?? raster?.mimeType ?? "application/octet-stream",
     modifiedAt: before.mtime.toISOString(),
-    name: basename5(target) || "file",
+    name: external?.name ?? (basename5(target) || "file"),
     requestId: command.requestId,
     sessionId: command.sessionId
   });
@@ -41375,7 +41655,7 @@ async function streamLocalFile(command, send2, signal, workingDirectory) {
     });
     sequence += 1;
   }
-  const after = await stat7(target);
+  const after = await stat8(target);
   signal.throwIfAborted();
   if (after.size !== before.size || after.mtimeMs !== before.mtimeMs) {
     throw new Error("The local file changed during transfer");
@@ -41388,7 +41668,7 @@ async function streamLocalFile(command, send2, signal, workingDirectory) {
 }
 
 // src/daemon-history-commands.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 
 // src/authorization/resolve-session-directories.ts
 import { basename as basename6 } from "node:path";
@@ -41782,7 +42062,7 @@ async function executeSessionLiveHistoryPageLoad(socket, command, config2, direc
 }
 function replayEvent(sessionId, position, update) {
   const encoded = JSON.stringify(update);
-  const eventId = `native-${createHash5("sha256").update(sessionId).update(":").update(position.toString()).update(":").update(encoded).digest("hex")}`;
+  const eventId = `native-${createHash6("sha256").update(sessionId).update(":").update(position.toString()).update(":").update(encoded).digest("hex")}`;
   return {
     eventId,
     payload: update,
@@ -41865,7 +42145,7 @@ async function executeSessionLiveHistoryV2PageLoad(socket, command, config2, dir
 }
 
 // src/acp/session-config/apply-session-configuration.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 function invalidSessionConfiguration(message) {
   return new AcpExecutionError(message, {}, "invalid_session_configuration");
 }
@@ -42006,7 +42286,7 @@ async function applySessionConfigurationSelection(sessions, audit, options, sele
     booleanValue: selection.booleanValue,
     configId: selection.configId,
     cwd,
-    requestId: `cfg_${randomUUID4()}`,
+    requestId: `cfg_${randomUUID5()}`,
     sessionId,
     signal,
     value: selection.value,
@@ -42680,6 +42960,7 @@ function createDaemonCommandHandler({
   operations,
   publisher,
   eventLogV2,
+  externalContent,
   activeTurns,
   diagnostics,
   socket,
@@ -42788,7 +43069,8 @@ function createDaemonCommandHandler({
           command2,
           (message2) => send(socket, message2),
           signal,
-          sessions.findSessions([command2.sessionId])[0]?.cwd ?? null
+          sessions.findSessions([command2.sessionId])[0]?.cwd ?? null,
+          externalContent
         ).catch((error62) => {
           if (socket.readyState !== WebSocket6.OPEN || signal.aborted) {
             return;
@@ -43127,7 +43409,7 @@ function connectRelay(url2, signal) {
 }
 
 // src/relay-connection/liveness.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
+import { randomUUID as randomUUID6 } from "node:crypto";
 var HEARTBEAT_ACK_TIMEOUT_MILLISECONDS = 1e4;
 var HEARTBEAT_INTERVAL_MILLISECONDS = 2e4;
 var RelayLivenessState = class {
@@ -43216,7 +43498,7 @@ var RelayConnectionLiveness = class {
       }
       throw new Error("Heartbeat was scheduled in an invalid state");
     }
-    const heartbeatId = randomUUID5();
+    const heartbeatId = randomUUID6();
     this.#state = new AwaitingHeartbeatAckState(
       heartbeatId,
       this.#timer.schedule(this.#handleTimeout, HEARTBEAT_ACK_TIMEOUT_MILLISECONDS)
@@ -43256,6 +43538,7 @@ async function runRelayConnection({
   operations,
   publisher,
   eventLogV2,
+  externalContent,
   activeTurns,
   connectionEpoch,
   diagnostics,
@@ -43279,6 +43562,7 @@ async function runRelayConnection({
     operations,
     publisher,
     eventLogV2,
+    externalContent,
     activeTurns,
     diagnostics,
     socket,
@@ -43757,7 +44041,7 @@ async function installDetectedAgentIntegrations(config2, installations, signal)
       {
         agentId: agent.id,
         kind: AGENT_INSTALL_REQUEST_KIND,
-        requestId: `automatic-integration-${randomUUID6()}`
+        requestId: `automatic-integration-${randomUUID7()}`
       },
       signal
     );
@@ -43776,8 +44060,9 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
     stateDirectory
   });
   const sessionStore = new SqliteAcpSessionStore(
-    join17(stateDirectory, "sessions", `${createHash6("sha256").update(config2.channelId).digest("hex")}.sqlite`)
+    join18(stateDirectory, "sessions", `${createHash7("sha256").update(config2.channelId).digest("hex")}.sqlite`)
   );
+  const externalContent = new LocalExternalContentStore(stateDirectory);
   const operations = new DaemonOperationState();
   const publisher = new DaemonSessionEventPublisher(sessionStore);
   const eventLogV2 = new DaemonSessionEventLogV2(publisher, sessionStore);
@@ -43798,7 +44083,8 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
       )).history : null
     },
     "native",
-    publisher.publishStatus
+    publisher.publishStatus,
+    new AcpContentExternalizer(externalContent)
   );
   const directories = new WorkspaceDirectoryService(config2.bindingId, config2.defaultWorkspace);
   const installationObserver = new DaemonInstallationObserver();
@@ -43912,6 +44198,7 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
           operations,
           publisher,
           eventLogV2,
+          externalContent,
           activeTurns,
           connectionEpoch,
           diagnostics,
@@ -43968,15 +44255,15 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer, opti
 }
 
 // src/pairing/pair-local-machine.ts
-import { mkdir as mkdir5, realpath as realpath9, stat as stat8 } from "node:fs/promises";
+import { mkdir as mkdir6, realpath as realpath10, stat as stat9 } from "node:fs/promises";
 import { hostname as hostname3 } from "node:os";
 import { basename as basename7, resolve as resolve7 } from "node:path";
 import { fetch as fetch4 } from "undici";
 
 // src/storage/runtime-installation-store.ts
-import { createHash as createHash7, randomUUID as randomUUID7 } from "node:crypto";
-import { mkdir as mkdir4, open as open5, readdir as readdir3, rename as rename3, unlink, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname5, join as join18, resolve as resolve6 } from "node:path";
+import { createHash as createHash8, randomUUID as randomUUID8 } from "node:crypto";
+import { mkdir as mkdir5, open as open5, readdir as readdir3, rename as rename4, unlink, writeFile as writeFile4 } from "node:fs/promises";
+import { dirname as dirname6, join as join19, resolve as resolve6 } from "node:path";
 var APPLICATION_ID_PATTERN = /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+){1,31}$/;
 var CONNECTION_ID_PATTERN = /^mcn_[a-f0-9]{32}$/;
 var INSTALLATION_ID_PATTERN = /^min_[a-f0-9]{32}$/;
@@ -44104,13 +44391,13 @@ function parseRelayOrigin(value) {
   return origin;
 }
 function connectionId() {
-  return `mcn_${randomUUID7().replaceAll("-", "")}`;
+  return `mcn_${randomUUID8().replaceAll("-", "")}`;
 }
 function installationId() {
-  return `min_${randomUUID7().replaceAll("-", "")}`;
+  return `min_${randomUUID8().replaceAll("-", "")}`;
 }
 function channelIndexFileName(channelId) {
-  return `mci_${createHash7("sha256").update(channelId).digest("hex")}.json`;
+  return `mci_${createHash8("sha256").update(channelId).digest("hex")}.json`;
 }
 function decodeInstallationPointer(value) {
   if (!isRecord9(value) || !hasExactKeys(value, INSTALLATION_POINTER_KEYS) || value["version"] !== 1) {
@@ -44218,15 +44505,15 @@ async function readJsonFile(path2, signal, missingCode) {
 }
 async function writeJsonAtomically(path2, value, signal) {
   signal.throwIfAborted();
-  const directory = dirname5(path2);
-  const temporaryPath = join18(directory, `.${randomUUID7()}.tmp`);
+  const directory = dirname6(path2);
+  const temporaryPath = join19(directory, `.${randomUUID8()}.tmp`);
   try {
-    await mkdir4(directory, { mode: 448, recursive: true });
+    await mkdir5(directory, { mode: 448, recursive: true });
     signal.throwIfAborted();
-    await writeFile3(temporaryPath, `${JSON.stringify(value, null, 2)}
+    await writeFile4(temporaryPath, `${JSON.stringify(value, null, 2)}
 `, { flag: "wx", mode: 384 });
     signal.throwIfAborted();
-    await rename3(temporaryPath, path2);
+    await rename4(temporaryPath, path2);
   } catch (cause) {
     await unlink(temporaryPath).catch(() => void 0);
     signal.throwIfAborted();
@@ -44245,16 +44532,16 @@ var RuntimeInstallationStore = class _RuntimeInstallationStore {
     this.applicationId = applicationId;
     this.installationId = installationId2;
     this.stateDirectory = stateDirectory;
-    this.#channelDirectory = join18(stateDirectory, "channels");
-    this.#connectionDirectory = join18(stateDirectory, "connections");
+    this.#channelDirectory = join19(stateDirectory, "channels");
+    this.#connectionDirectory = join19(stateDirectory, "connections");
   }
   static open = async (options, signal) => {
     signal.throwIfAborted();
     const applicationId = validateApplicationId(options.applicationId);
     const rootDirectory = resolve6(options.stateDirectory);
-    const applicationDirectory = join18(rootDirectory, "installations", applicationId);
+    const applicationDirectory = join19(rootDirectory, "installations", applicationId);
     try {
-      await mkdir4(applicationDirectory, { mode: 448, recursive: true });
+      await mkdir5(applicationDirectory, { mode: 448, recursive: true });
     } catch (cause) {
       throw new RuntimeInstallationStoreError(
         "installation_unavailable",
@@ -44265,9 +44552,9 @@ var RuntimeInstallationStore = class _RuntimeInstallationStore {
       );
     }
     const storedInstallationId = await readOrCreateInstallationId(applicationDirectory, signal);
-    const stateDirectory = join18(applicationDirectory, storedInstallationId);
+    const stateDirectory = join19(applicationDirectory, storedInstallationId);
     try {
-      await mkdir4(stateDirectory, { mode: 448, recursive: true });
+      await mkdir5(stateDirectory, { mode: 448, recursive: true });
     } catch (cause) {
       throw new RuntimeInstallationStoreError(
         "installation_unavailable",
@@ -44280,8 +44567,8 @@ var RuntimeInstallationStore = class _RuntimeInstallationStore {
     signal.throwIfAborted();
     return new _RuntimeInstallationStore(applicationId, storedInstallationId, stateDirectory);
   };
-  connectionPath = (connectionId2) => join18(this.#connectionDirectory, `${validateConnectionId(connectionId2)}.json`);
-  channelIndexPath = (channelId) => join18(this.#channelDirectory, channelIndexFileName(validateIdentifier(channelId, "invalid_channel_id")));
+  connectionPath = (connectionId2) => join19(this.#connectionDirectory, `${validateConnectionId(connectionId2)}.json`);
+  channelIndexPath = (channelId) => join19(this.#channelDirectory, channelIndexFileName(validateIdentifier(channelId, "invalid_channel_id")));
   readConnection = async (connectionId2, signal) => {
     const stored = decodeConnection(
       await readJsonFile(this.connectionPath(connectionId2), signal, "connection_not_found")
@@ -44443,7 +44730,7 @@ var RuntimeInstallationStore = class _RuntimeInstallationStore {
   };
 };
 async function readOrCreateInstallationId(applicationDirectory, signal) {
-  const pointerPath = join18(applicationDirectory, "current.json");
+  const pointerPath = join19(applicationDirectory, "current.json");
   try {
     return decodeInstallationPointer(await readJsonFile(pointerPath, signal, "installation_not_found")).installationId;
   } catch (cause) {
@@ -44453,7 +44740,7 @@ async function readOrCreateInstallationId(applicationDirectory, signal) {
   }
   const candidate = installationId();
   try {
-    await writeFile3(pointerPath, `${JSON.stringify({ installationId: candidate, version: 1 })}
+    await writeFile4(pointerPath, `${JSON.stringify({ installationId: candidate, version: 1 })}
 `, {
       flag: "wx",
       mode: 384
@@ -44537,9 +44824,9 @@ function validatePairingId(value) {
 async function resolveDefaultWorkspace2(path2) {
   const requestedWorkspace = resolve7(path2);
   try {
-    await mkdir5(requestedWorkspace, { recursive: true, mode: 448 });
-    const defaultWorkspace = await realpath9(requestedWorkspace);
-    const metadata = await stat8(defaultWorkspace);
+    await mkdir6(requestedWorkspace, { recursive: true, mode: 448 });
+    const defaultWorkspace = await realpath10(requestedWorkspace);
+    const metadata = await stat9(defaultWorkspace);
     if (!metadata.isDirectory()) {
       throw new PairingClientError("invalid_workspace", "The default workspace is not a directory");
     }
@@ -44773,9 +45060,9 @@ function loadMobiusRuntimeConnection(environment = process.env) {
 async function resolveWorkspace(path2) {
   const requested = resolve8(path2);
   try {
-    await mkdir6(requested, { recursive: true, mode: 448 });
-    const resolved = await realpath10(requested);
-    const metadata = await stat9(resolved);
+    await mkdir7(requested, { recursive: true, mode: 448 });
+    const resolved = await realpath11(requested);
+    const metadata = await stat10(resolved);
     if (!metadata.isDirectory()) {
       throw new MobiusRuntimeConfigurationError("The Runtime workspace is not a directory");
     }
@@ -44843,6 +45130,7 @@ var MobiusRuntimeEngine = class {
 export {
   DaemonLocalContext,
   DaemonReconnectTarget,
+  InProcessAcpAgentDefinition,
   MobiusRuntimeConfigurationError,
   MobiusRuntimeEngine,
   OpaqueDaemonReconnectTarget,