@moxt-ai/mobius 0.0.23 → 0.0.25

package/dist/index.js

@@ -19006,7 +19006,9 @@ var sessionCapabilitiesSchema = external_exports.strictObject({
   imagePrompt: external_exports.boolean(),
   listSessions: external_exports.boolean(),
   loadSession: external_exports.boolean(),
+  promptQueueing: external_exports.boolean().default(false),
   resumeSession: external_exports.boolean(),
+  steering: external_exports.boolean().default(false),
   unstableForkSession: external_exports.boolean().default(false)
 }).readonly();
 var sessionCommandSchema = external_exports.strictObject({
@@ -19348,6 +19350,11 @@ var AGENT_ACTIVITY_LOCATION_LIMIT = 12;
 var AGENT_ACTIVITY_LOCATION_LENGTH_LIMIT = 1024;
 var SESSION_COMPLETED_KIND = "session.completed";
 var SESSION_FAILED_KIND = "session.failed";
+var SessionPromptDisposition = Object.freeze({
+  Queue: "queue",
+  Reject: "reject",
+  Steer: "steer"
+});
 
 // ../protocol/src/codecs/messages.ts
 var IDENTIFIER_PATTERN2 = /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/;
@@ -19422,6 +19429,19 @@ function readAllowedString(value, key, allowedValues) {
   }
   return field;
 }
+function readPromptDisposition(value) {
+  const field = value["disposition"];
+  if (field === void 0 || field === SessionPromptDisposition.Reject) {
+    return SessionPromptDisposition.Reject;
+  }
+  if (field === SessionPromptDisposition.Queue) {
+    return SessionPromptDisposition.Queue;
+  }
+  if (field === SessionPromptDisposition.Steer) {
+    return SessionPromptDisposition.Steer;
+  }
+  throw new ProtocolMessageError("Invalid value field: disposition");
+}
 function readSequence(value, key) {
   const field = value[key];
   if (typeof field !== "number" || !Number.isSafeInteger(field) || field < 0) {
@@ -19546,11 +19566,13 @@ function decodeSessionPromptCommand(encoded) {
     "bindingId",
     "commandId",
     "directoryId",
+    "disposition",
     "images",
     "kind",
     "prompt",
     "resources",
-    "sessionId"
+    "sessionId",
+    "targetCommandId"
   ]);
   assertKind(value, SESSION_PROMPT_KIND);
   const prompt = readText(value, "prompt", MAX_PROMPT_LENGTH);
@@ -19563,17 +19585,25 @@ function decodeSessionPromptCommand(encoded) {
   if (prompt.trim().length === 0 && images.length === 0 && resources.length === 0) {
     throw new ProtocolMessageError("Prompt must contain content");
   }
+  const disposition = readPromptDisposition(value);
+  const rawTargetCommandId = value["targetCommandId"];
+  const targetCommandId = rawTargetCommandId === void 0 ? "" : readText(value, "targetCommandId", 128);
+  if (disposition === SessionPromptDisposition.Reject && targetCommandId.length > 0 || disposition !== SessionPromptDisposition.Reject && !IDENTIFIER_PATTERN2.test(targetCommandId)) {
+    throw new ProtocolMessageError("Prompt disposition has an invalid target command");
+  }
   return {
     additionalDirectoryIds: readDirectoryIdentifiers(value, "additionalDirectoryIds", 16),
     agentId: readIdentifier(value, "agentId"),
     bindingId: readIdentifier(value, "bindingId"),
     commandId: readIdentifier(value, "commandId"),
     directoryId: readDirectoryIdentifier(value, "directoryId"),
+    disposition,
     images,
     kind: SESSION_PROMPT_KIND,
     prompt,
     resources,
-    sessionId: readIdentifier(value, "sessionId")
+    sessionId: readIdentifier(value, "sessionId"),
+    targetCommandId
   };
 }
 function decodeSessionCancelCommand(encoded) {
@@ -19623,11 +19653,12 @@ function decodeSessionStartedEvent(encoded) {
 }
 function decodeAgentMessageDeltaEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["commandId", "kind", "sessionId", "text"]);
+  assertExactKeys(value, ["commandId", "kind", "messageId", "sessionId", "text"]);
   assertKind(value, AGENT_MESSAGE_DELTA_KIND);
   return {
     commandId: readIdentifier(value, "commandId"),
     kind: AGENT_MESSAGE_DELTA_KIND,
+    messageId: value["messageId"] === void 0 ? "" : readText(value, "messageId", 255),
     sessionId: readIdentifier(value, "sessionId"),
     text: readString(value, "text", MAX_EVENT_TEXT_LENGTH)
   };
@@ -20273,6 +20304,8 @@ var sessionHistorySchema = external_exports.discriminatedUnion("status", [
 var NATIVE_SESSION_REQUEST_KIND = "native.session.request";
 var NATIVE_SESSION_RESULT_KIND = "native.session.result";
 var NATIVE_SESSION_CANCEL_KIND = "native.session.cancel";
+var NATIVE_SESSION_TURN_FORK_REQUEST_KIND = "native.session.turn-fork.request";
+var NATIVE_SESSION_TURN_FORK_KIND = "native.session.turn-fork";
 var identifier = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/);
 var directoryId = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,2047}$/);
 var envelope = {
@@ -20287,6 +20320,28 @@ var identity = {
   bindingId: identifier,
   directoryId
 };
+var turnForkIdentity = {
+  additionalDirectoryIds: external_exports.array(directoryId).max(16).readonly(),
+  agentId: identifier,
+  bindingId: identifier,
+  directoryId,
+  requestId: identifier,
+  sessionId: identifier,
+  sourceCommandId: identifier,
+  targetSessionId: identifier
+};
+var nativeSessionTurnForkRequestSchema = external_exports.strictObject({
+  ...turnForkIdentity,
+  kind: external_exports.literal(NATIVE_SESSION_TURN_FORK_REQUEST_KIND)
+}).readonly();
+var nativeSessionTurnForkCommandSchema = external_exports.strictObject({
+  ...turnForkIdentity,
+  kind: external_exports.literal(NATIVE_SESSION_TURN_FORK_KIND),
+  messageFingerprint: external_exports.string().regex(/^sha256:[a-f0-9]{64}$/),
+  messageId: external_exports.string().min(1).max(255),
+  messageOccurrence: external_exports.number().int().positive(),
+  title: external_exports.string().max(500)
+}).readonly();
 var nativeSessionCommandSchema = external_exports.discriminatedUnion("action", [
   external_exports.strictObject({
     ...identity,
@@ -20361,6 +20416,7 @@ function decode4(schema, encoded) {
 var decodeNativeSessionCommand = (encoded) => decode4(nativeSessionCommandSchema, encoded);
 var encodeNativeSessionResult = (value) => JSON.stringify(nativeSessionResultSchema.parse(value));
 var decodeNativeSessionCancel = (encoded) => decode4(nativeSessionCancelSchema, encoded);
+var decodeNativeSessionTurnForkCommand = (encoded) => decode4(nativeSessionTurnForkCommandSchema, encoded);
 
 // ../protocol/src/session-events.ts
 var SESSION_EVENT_KIND = "session.event";
@@ -20449,6 +20505,16 @@ var decodeSessionEventRejection = (encoded) => decode5(encoded, eventRejectionSc
 import { realpathSync, statSync } from "node:fs";
 
 // src/acp/session-capabilities.ts
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasTrueChildField(value, childKey, fieldKey) {
+  if (!isRecord3(value)) {
+    return false;
+  }
+  const child = Reflect.get(value, childKey);
+  return isRecord3(child) && Reflect.get(child, fieldKey) === true;
+}
 function unsupportedSessionCapabilities() {
   return Object.freeze({
     additionalDirectories: false,
@@ -20459,11 +20525,14 @@ function unsupportedSessionCapabilities() {
     imagePrompt: false,
     listSessions: false,
     loadSession: false,
+    promptQueueing: false,
     resumeSession: false,
+    steering: false,
     unstableForkSession: false
   });
 }
-function normalizeAcpCapabilities(capabilities) {
+function normalizeAcpCapabilities(initialized) {
+  const capabilities = initialized.agentCapabilities ?? {};
   const session = capabilities.sessionCapabilities;
   const prompt = capabilities.promptCapabilities;
   return Object.freeze({
@@ -20475,7 +20544,9 @@ function normalizeAcpCapabilities(capabilities) {
     imagePrompt: prompt?.image === true,
     listSessions: session?.list != null,
     loadSession: capabilities.loadSession === true,
+    promptQueueing: hasTrueChildField(capabilities._meta, "claudeCode", "promptQueueing"),
     resumeSession: session?.resume != null,
+    steering: hasTrueChildField(initialized._meta, "steering", "supported"),
     unstableForkSession: session?.fork != null
   });
 }
@@ -21036,9 +21107,9 @@ function readStateDirectory(environment = process.env) {
 }
 
 // src/config.ts
-function loadDefaultWorkspace() {
-  const { MOBIUS_DEFAULT_WORKSPACE: configuredWorkspace } = process.env;
-  return configuredWorkspace ?? join3(readStateDirectory(), "workspace");
+function loadDefaultWorkspace(environment = process.env) {
+  const { MOBIUS_DEFAULT_WORKSPACE: configuredWorkspace } = environment;
+  return configuredWorkspace ?? join3(readStateDirectory(environment), "workspace");
 }
 function createDaemonConfig(connection, agents = [], installableAgents = []) {
   return {
@@ -21092,7 +21163,7 @@ import {
 
 // src/acp/activity.ts
 var TRUNCATION_MARKER = "\n\u2026 output truncated by Mobius";
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var AcpActivity = class _AcpActivity {
@@ -21359,7 +21430,7 @@ function contentPhase(content) {
     return "";
   }
   const codex = metadata["codex"];
-  if (!isRecord3(codex)) {
+  if (!isRecord4(codex)) {
     return "";
   }
   const phase = codex["phase"];
@@ -21597,7 +21668,7 @@ var SessionConfigProtocolError = class extends Error {
     this.name = "SessionConfigProtocolError";
   }
 };
-function isRecord4(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readString2(value, fallback = "") {
@@ -21624,7 +21695,7 @@ function normalizeConfigValues(value) {
   }
   const normalized = [];
   for (const entry of value) {
-    if (!isRecord4(entry)) {
+    if (!isRecord5(entry)) {
       continue;
     }
     const groupedOptions = entry["options"];
@@ -21632,7 +21703,7 @@ function normalizeConfigValues(value) {
       const groupId = readString2(entry["group"]);
       const groupName = readString2(entry["name"]);
       for (const groupedOption of groupedOptions) {
-        if (isRecord4(groupedOption)) {
+        if (isRecord5(groupedOption)) {
           normalized.push(normalizeConfigValue(groupedOption, groupId, groupName));
         }
       }
@@ -21646,7 +21717,7 @@ function normalizeConfigOptions(value, modes) {
   const normalized = [];
   if (Array.isArray(value)) {
     for (const option2 of value) {
-      if (!isRecord4(option2)) {
+      if (!isRecord5(option2)) {
         continue;
       }
       const id = truncate2(readString2(option2["id"]), 128);
@@ -21685,12 +21756,12 @@ function normalizeConfigOptions(value, modes) {
       }
     }
   }
-  if (isRecord4(modes)) {
+  if (isRecord5(modes)) {
     const values = [];
     const availableModes = modes["availableModes"];
     if (Array.isArray(availableModes)) {
       for (const mode of availableModes) {
-        if (!isRecord4(mode)) {
+        if (!isRecord5(mode)) {
           continue;
         }
         const id = truncate2(readString2(mode["id"]), 500);
@@ -21768,7 +21839,7 @@ function ensureReasoningEffortOption(current) {
   return [...current.slice(0, MAXIMUM_CONFIG_OPTIONS - 2), model, unavailable];
 }
 function normalizeStandardLifecycle(response) {
-  const lifecycle = isRecord4(response) ? response : {};
+  const lifecycle = isRecord5(response) ? response : {};
   return ensureReasoningEffortOption(normalizeConfigOptions(lifecycle["configOptions"], lifecycle["modes"]));
 }
 function replaceStandardConfigOptions(current, value) {
@@ -21810,7 +21881,7 @@ var StandardSessionConfigProtocol = class {
       "ACP agent exited while changing session configuration",
       change.signal
     );
-    if (!isRecord4(response) || !Array.isArray(response["configOptions"])) {
+    if (!isRecord5(response) || !Array.isArray(response["configOptions"])) {
       throw new SessionConfigProtocolError("The Agent returned an invalid session configuration response");
     }
     return replaceStandardConfigOptions(current, response["configOptions"]);
@@ -21824,18 +21895,18 @@ var standardSessionConfigProtocol = new StandardSessionConfigProtocol();
 var LEGACY_MODEL_CONFIG_ID = "grok_build_legacy_model";
 var LEGACY_REASONING_EFFORT_CONFIG_ID = "grok_build_legacy_reasoning_effort";
 function legacyOptions(response) {
-  if (!isRecord4(response)) {
+  if (!isRecord5(response)) {
     return [];
   }
   const metadata = response["_meta"];
-  if (!isRecord4(metadata)) {
+  if (!isRecord5(metadata)) {
     return [];
   }
   const sessionConfig = metadata["x.ai/sessionConfig"];
-  if (!isRecord4(sessionConfig) || !Array.isArray(sessionConfig["options"])) {
+  if (!isRecord5(sessionConfig) || !Array.isArray(sessionConfig["options"])) {
     return [];
   }
-  return sessionConfig["options"].slice(0, 500).filter(isRecord4);
+  return sessionConfig["options"].slice(0, 500).filter(isRecord5);
 }
 function legacyValue(option2) {
   const value = readString2(option2["id"]);
@@ -21848,7 +21919,7 @@ function legacyValue(option2) {
   };
 }
 function modelsRecord(response) {
-  if (!isRecord4(response) || !isRecord4(response["models"])) {
+  if (!isRecord5(response) || !isRecord5(response["models"])) {
     return {};
   }
   return response["models"];
@@ -21867,7 +21938,7 @@ function legacyModelOptions(response) {
   }
   if (values.length === 0 && Array.isArray(models["availableModels"])) {
     for (const model of models["availableModels"]) {
-      if (!isRecord4(model)) {
+      if (!isRecord5(model)) {
         continue;
       }
       const value = readString2(model["modelId"]).slice(0, 500);
@@ -21947,7 +22018,7 @@ function legacyReasoningEffortOptions(response) {
   return [result];
 }
 function normalizeGrokLifecycle(response) {
-  const lifecycle = isRecord4(response) ? response : {};
+  const lifecycle = isRecord5(response) ? response : {};
   const standard = normalizeConfigOptions(lifecycle["configOptions"], lifecycle["modes"]);
   const normalized = [...standard];
   if (!normalized.some((option2) => option2.category === "model")) {
@@ -21966,11 +22037,11 @@ function updateCurrentValue2(current, category, value) {
   return current.map((option2) => option2.category === category ? { ...option2, currentValue: value } : option2);
 }
 function validateGrokResponse(response, modelId) {
-  if (!isRecord4(response) || !isRecord4(response["_meta"])) {
+  if (!isRecord5(response) || !isRecord5(response["_meta"])) {
     throw new SessionConfigProtocolError("Grok Build returned an invalid session configuration response");
   }
   const model = response["_meta"]["model"];
-  const appliedModel = isRecord4(model) ? model["Ok"] : model;
+  const appliedModel = isRecord5(model) ? model["Ok"] : model;
   if (appliedModel !== modelId) {
     throw new SessionConfigProtocolError("Grok Build returned an invalid session configuration response");
   }
@@ -22391,7 +22462,7 @@ function createWritableAcpStream(output2) {
       if (outputFailure !== void 0) {
         return Promise.reject(outputFailure);
       }
-      return new Promise((resolve5, reject) => {
+      return new Promise((resolve6, reject) => {
         pendingWriteFailures.add(reject);
         output2.write(chunk, (error61) => {
           pendingWriteFailures.delete(reject);
@@ -22404,7 +22475,7 @@ function createWritableAcpStream(output2) {
             reject(outputFailure);
             return;
           }
-          resolve5();
+          resolve6();
         });
       });
     }
@@ -22413,7 +22484,7 @@ function createWritableAcpStream(output2) {
 function truncate3(value, maximumLength) {
   return value.length <= maximumLength ? value : `${value.slice(0, Math.max(0, maximumLength - 1))}\u2026`;
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readString4(value, fallback = "") {
@@ -22422,6 +22493,11 @@ function readString4(value, fallback = "") {
 function arraysEqual(left, right) {
   return left.length === right.length && left.every((value, index) => value === right[index]);
 }
+function recordsEqual(left, right) {
+  const leftEntries = Object.entries(left);
+  const rightEntries = Object.entries(right);
+  return leftEntries.length === rightEntries.length && leftEntries.every(([name, value]) => right[name] === value);
+}
 function elicitationFieldType(value) {
   if (value === "boolean") {
     return "boolean";
@@ -22442,7 +22518,7 @@ function normalizeElicitationOptions(schema) {
   const oneOf = schema["oneOf"];
   if (Array.isArray(oneOf)) {
     for (const option2 of oneOf) {
-      if (isRecord5(option2) && typeof option2["const"] === "string") {
+      if (isRecord6(option2) && typeof option2["const"] === "string") {
         normalized.push({
           description: truncate3(readString4(option2["description"]), 500),
           label: truncate3(readString4(option2["title"], option2["const"]), 255),
@@ -22462,7 +22538,7 @@ function normalizeElicitationOptions(schema) {
     return normalized.slice(0, 200);
   }
   const items = schema["items"];
-  if (!isRecord5(items)) {
+  if (!isRecord6(items)) {
     return normalized;
   }
   const anyOf = items["anyOf"];
@@ -22475,7 +22551,7 @@ function numericString(value) {
   return typeof value === "number" && Number.isFinite(value) ? value.toString() : "";
 }
 function normalizeElicitationFields(requestedSchema) {
-  if (!isRecord5(requestedSchema) || !isRecord5(requestedSchema["properties"])) {
+  if (!isRecord6(requestedSchema) || !isRecord6(requestedSchema["properties"])) {
     return [];
   }
   const properties = requestedSchema["properties"];
@@ -22485,7 +22561,7 @@ function normalizeElicitationFields(requestedSchema) {
   );
   const normalized = [];
   for (const [name, property] of Object.entries(properties)) {
-    if (!isRecord5(property)) {
+    if (!isRecord6(property)) {
       continue;
     }
     const type = elicitationFieldType(property["type"]);
@@ -22576,7 +22652,7 @@ function validateElicitationContent(encoded, requestedSchema) {
       "invalid_elicitation_response"
     );
   }
-  if (!isRecord5(decoded) || !isRecord5(requestedSchema) || !isRecord5(requestedSchema["properties"])) {
+  if (!isRecord6(decoded) || !isRecord6(requestedSchema) || !isRecord6(requestedSchema["properties"])) {
     throw new AcpExecutionError(
       "Elicitation response does not match the requested form",
       {},
@@ -22596,7 +22672,7 @@ function validateElicitationContent(encoded, requestedSchema) {
   const validated = {};
   for (const [name, value] of Object.entries(decoded)) {
     const property = properties[name];
-    if (!isRecord5(property)) {
+    if (!isRecord6(property)) {
       throw new AcpExecutionError(
         `Elicitation field ${name} was not requested`,
         {},
@@ -22738,6 +22814,7 @@ var AcpProcessSession = class _AcpProcessSession {
   #child;
   #connection;
   #cwd;
+  #environment;
   #getObserver;
   #mobiusSessionId;
   #pendingElicitations = /* @__PURE__ */ new Map();
@@ -22759,7 +22836,9 @@ var AcpProcessSession = class _AcpProcessSession {
     imagePrompt: false,
     listSessions: false,
     loadSession: false,
+    promptQueueing: false,
     resumeSession: false,
+    steering: false,
     unstableForkSession: false
   };
   #commands = [];
@@ -22779,6 +22858,7 @@ var AcpProcessSession = class _AcpProcessSession {
     this.#additionalDirectories = [...additionalDirectories];
     this.#agentId = agent.id;
     this.#cwd = cwd;
+    this.#environment = agent.environment;
     this.#getObserver = getObserver;
     this.#mobiusSessionId = mobiusSessionId;
     this.#sessionConfigProtocol = sessionConfigProtocolForAgent(agent.id);
@@ -22802,9 +22882,9 @@ var AcpProcessSession = class _AcpProcessSession {
     stderr.on("data", (chunk) => {
       process.stderr.write(`[${agent.id}-acp] ${chunk}`);
     });
-    this.#processExit = new Promise((resolve5) => {
-      this.#child.once("error", resolve5);
-      this.#child.once("exit", resolve5);
+    this.#processExit = new Promise((resolve6) => {
+      this.#child.once("error", resolve6);
+      this.#child.once("exit", resolve6);
     });
     const stream = ndJsonStream(createWritableAcpStream(stdin), readableWebStream(stdout));
     this.#connection = createAcpClient(this).connect(stream);
@@ -22864,7 +22944,18 @@ var AcpProcessSession = class _AcpProcessSession {
     store,
     async (runtime) => await runtime.#initializeAgent(options.signal)
   );
+  static startSessionForkAtTurn = async (options, sourceNativeSessionId, forkPoint, getObserver, store) => await _AcpProcessSession.#start(
+    options,
+    getObserver,
+    store,
+    async (runtime) => await runtime.initialize(
+      options.signal,
+      { kind: "fork", nativeSessionId: sourceNativeSessionId },
+      forkPoint
+    )
+  );
   belongsTo = (agentId, cwd, additionalDirectories) => this.#agentId === agentId && this.#cwd === cwd && arraysEqual(this.#additionalDirectories, additionalDirectories);
+  usesEnvironment = (environment) => recordsEqual(this.#environment, environment);
   canRebind = () => !this.#prompted && !this.#turn.running;
   prepared = () => new AcpPreparedSession(
     this.#agentName,
@@ -22930,15 +23021,14 @@ var AcpProcessSession = class _AcpProcessSession {
         "unsupported_acp_protocol"
       );
     }
-    const capabilities = initialized.agentCapabilities ?? {};
-    this.#capabilities = normalizeAcpCapabilities(capabilities);
+    this.#capabilities = normalizeAcpCapabilities(initialized);
     this.#agentName = truncate3(initialized.agentInfo?.title ?? initialized.agentInfo?.name ?? this.#agentId, 255);
     this.#agentVersion = truncate3(
       this.#verifiedAgentVersion.length > 0 ? this.#verifiedAgentVersion : initialized.agentInfo?.version ?? "",
       128
     );
   }
-  initialize = async (signal, origin) => {
+  initialize = async (signal, origin, forkPoint) => {
     await this.#initializeAgent(signal);
     let stored = origin?.kind === "import" ? new FoundAcpStoredSession(
       new AcpStoredSession(
@@ -22970,6 +23060,13 @@ var AcpProcessSession = class _AcpProcessSession {
           "native_session_unsupported"
         );
       }
+      if (this.#additionalDirectories.length > 0 && !this.#capabilities.additionalDirectories) {
+        throw new AcpExecutionError(
+          "This Agent cannot restore additional working directories",
+          {},
+          "native_session_unsupported"
+        );
+      }
       const forked = await this.race(
         this.#connection.agent.request(
           methods3.agent.session.fork,
@@ -22977,7 +23074,21 @@ var AcpProcessSession = class _AcpProcessSession {
             sessionId: nativeSessionIdSchema.parse(origin.nativeSessionId),
             cwd: this.#cwd,
             additionalDirectories: [...this.#additionalDirectories],
-            mcpServers: []
+            mcpServers: [],
+            ...forkPoint === void 0 ? {} : {
+              _meta: {
+                jetbrains: {
+                  air: {
+                    fork: {
+                      version: 1,
+                      messageFingerprint: forkPoint.messageFingerprint,
+                      messageId: forkPoint.messageId,
+                      messageOccurrence: forkPoint.messageOccurrence
+                    }
+                  }
+                }
+              }
+            }
           },
           { cancellationSignal: signal }
         ),
@@ -23182,10 +23293,7 @@ var AcpProcessSession = class _AcpProcessSession {
     }
     return this.#configOptions;
   };
-  prompt = async (options) => {
-    if (this.#turn.running) {
-      throw new AcpExecutionError("Another prompt is already running in this conversation", {}, "session_busy");
-    }
+  buildPrompt = (options) => {
     if (options.images.length > 0 && !this.#capabilities.imagePrompt) {
       throw new AcpExecutionError(
         "The selected agent does not accept image prompts",
@@ -23234,6 +23342,13 @@ var AcpProcessSession = class _AcpProcessSession {
     if (prompt.length === 0) {
       throw new AcpExecutionError("A prompt must contain text or an attachment", {}, "empty_prompt");
     }
+    return prompt;
+  };
+  prompt = async (options) => {
+    if (this.#turn.running) {
+      throw new AcpExecutionError("Another prompt is already running in this conversation", {}, "session_busy");
+    }
+    const prompt = this.buildPrompt(options);
     this.#store.write(
       new AcpStoredSession(
         this.#mobiusSessionId,
@@ -23292,6 +23407,54 @@ var AcpProcessSession = class _AcpProcessSession {
       this.#turn = new IdleAcpTurn();
     }
   };
+  steer = async (options) => {
+    if (!this.#capabilities.steering) {
+      throw new AcpExecutionError(
+        "The selected agent does not support mid-turn steering",
+        {},
+        "steering_unsupported"
+      );
+    }
+    if (!this.#turn.running || this.#turn.commandId !== options.targetCommandId) {
+      throw new AcpExecutionError("The target turn is no longer active", {}, "steering_target_unavailable");
+    }
+    const prompt = this.buildPrompt(options);
+    const response = await this.race(
+      this.#connection.agent.request("_session/steering", {
+        _meta: { steering: { idleBehavior: "promptRequired" } },
+        prompt,
+        sessionId: this.#nativeSessionId
+      }),
+      "ACP agent exited during steering",
+      options.signal
+    );
+    if (!isRecord6(response)) {
+      throw new AcpExecutionError(
+        "ACP agent returned an invalid steering response",
+        {},
+        "acp_invalid_steering_response"
+      );
+    }
+    const outcome = response["outcome"];
+    if (outcome === "injected" || outcome === "startedNewTurn") {
+      return outcome;
+    }
+    if (outcome === "promptRequired") {
+      throw new AcpExecutionError(
+        "The target turn finished before steering could be injected",
+        {},
+        "steering_target_unavailable"
+      );
+    }
+    if (outcome === "failed") {
+      throw new AcpExecutionError("The Agent could not inject steering", {}, "steering_failed");
+    }
+    throw new AcpExecutionError(
+      "ACP agent returned an invalid steering response",
+      {},
+      "acp_invalid_steering_response"
+    );
+  };
   cancel = async () => {
     const capturedProcesses = await captureProcessTree(this.#child);
     try {
@@ -23532,7 +23695,7 @@ var AcpProcessSession = class _AcpProcessSession {
           );
         } else {
           await this.#turn.activities.finishNarrative();
-          await this.#turn.onText(update.content.text);
+          await this.#turn.onText(update.content.text, truncate3(update.messageId ?? "", 255));
         }
       } else {
         await this.#turn.activities.finishNarrative();
@@ -23758,6 +23921,7 @@ var AcpProcessSession = class _AcpProcessSession {
   };
 };
 var AcpSessionManager = class {
+  #activeCommandIds = /* @__PURE__ */ new Map();
   #nativeOperations = /* @__PURE__ */ new Set();
   #nativeBrowserObserver = new NullAcpSessionObserver();
   #nativeBrowserPreparing = /* @__PURE__ */ new Map();
@@ -23826,6 +23990,25 @@ var AcpSessionManager = class {
     this.#preparing.set(options.sessionId, operation);
     return await operation;
   }
+  async #startSessionForkAtTurnPreparation(options, sourceNativeSessionId, forkPoint) {
+    const operation = (async () => {
+      try {
+        const runtime = await AcpProcessSession.startSessionForkAtTurn(
+          options,
+          sourceNativeSessionId,
+          forkPoint,
+          () => this.#observer,
+          this.#store
+        );
+        this.#sessions.set(options.sessionId, runtime);
+        return runtime;
+      } finally {
+        this.#preparing.delete(options.sessionId);
+      }
+    })();
+    this.#preparing.set(options.sessionId, operation);
+    return await operation;
+  }
   async #replacePreparation(existing, options) {
     const operation = (async () => {
       try {
@@ -23842,6 +24025,58 @@ var AcpSessionManager = class {
     this.#preparing.set(options.sessionId, operation);
     return await operation;
   }
+  async #replaceExecutionPreparation(existing, options) {
+    const desiredConfigOptions = existing.prepared().configOptions;
+    const operation = (async () => {
+      try {
+        this.#sessions.delete(options.sessionId);
+        await existing.close();
+        this.#store.remove(options.sessionId);
+        const runtime = await AcpProcessSession.start(options, () => this.#observer, this.#store);
+        try {
+          for (const desired of desiredConfigOptions) {
+            const current = runtime.prepared().configOptions.find((option2) => option2.id === desired.id);
+            if (current === void 0 || current.type !== desired.type) {
+              continue;
+            }
+            if (desired.type === "boolean") {
+              if (current.booleanValue !== desired.booleanValue) {
+                await runtime.configure({
+                  ...options,
+                  booleanValue: desired.booleanValue,
+                  configId: desired.id,
+                  requestId: `execution-prepare-${desired.id}`,
+                  value: "",
+                  valueType: "boolean"
+                });
+              }
+              continue;
+            }
+            if (current.currentValue !== desired.currentValue && current.values.some((value) => value.value === desired.currentValue)) {
+              await runtime.configure({
+                ...options,
+                booleanValue: false,
+                configId: desired.id,
+                requestId: `execution-prepare-${desired.id}`,
+                value: desired.currentValue,
+                valueType: "select"
+              });
+            }
+          }
+        } catch (error61) {
+          await runtime.close();
+          this.#store.remove(options.sessionId);
+          throw error61;
+        }
+        this.#sessions.set(options.sessionId, runtime);
+        return runtime;
+      } finally {
+        this.#preparing.delete(options.sessionId);
+      }
+    })();
+    this.#preparing.set(options.sessionId, operation);
+    return await operation;
+  }
   prepareSession = async (options) => {
     const stored = this.#store.read(options.sessionId);
     if (stored instanceof DeletedAcpStoredSession) {
@@ -23880,6 +24115,35 @@ var AcpSessionManager = class {
     const runtime = await this.#startPreparation(options);
     return runtime.prepared();
   };
+  prepareExecutionSession = async (options) => {
+    const pending = this.#preparing.get(options.sessionId);
+    if (pending !== void 0) {
+      await pending;
+      return await this.prepareExecutionSession(options);
+    }
+    const existing = this.#sessions.get(options.sessionId);
+    if (existing === void 0) {
+      return (await this.#startPreparation(options)).prepared();
+    }
+    if (!existing.belongsTo(options.agent.id, options.cwd, options.additionalDirectories)) {
+      throw new AcpExecutionError(
+        "The agent or workspace cannot change after a conversation has started",
+        {},
+        "session_identity_mismatch"
+      );
+    }
+    if (existing.usesEnvironment(options.agent.environment)) {
+      return existing.prepared();
+    }
+    if (!existing.canRebind()) {
+      throw new AcpExecutionError(
+        "The execution environment cannot change after a conversation has started",
+        {},
+        "session_identity_mismatch"
+      );
+    }
+    return (await this.#replaceExecutionPreparation(existing, options)).prepared();
+  };
   prepareNativeSessionBrowser = async (options) => {
     const pending = this.#nativeBrowserPreparing.get(options.sessionId);
     if (pending !== void 0) {
@@ -23924,6 +24188,47 @@ var AcpSessionManager = class {
       }
     }
   };
+  steerPrompt = async (options) => {
+    if (this.#activeCommandIds.get(options.sessionId) !== options.targetCommandId) {
+      throw new AcpExecutionError("The target turn is no longer active", {}, "steering_target_unavailable");
+    }
+    const pending = this.#preparing.get(options.sessionId);
+    if (pending !== void 0) {
+      await pending;
+    }
+    if (this.#activeCommandIds.get(options.sessionId) !== options.targetCommandId) {
+      throw new AcpExecutionError("The target turn is no longer active", {}, "steering_target_unavailable");
+    }
+    const runtime = this.#sessions.get(options.sessionId);
+    if (runtime === void 0 || !runtime.belongsTo(options.agent.id, options.cwd, options.additionalDirectories)) {
+      throw new AcpExecutionError(
+        "The target turn execution context is unavailable",
+        {},
+        "steering_target_unavailable"
+      );
+    }
+    const deadlineController = new AbortController();
+    const deadline = setTimeout(
+      () => deadlineController.abort(
+        new AcpExecutionError("The steering request exceeded its deadline", {}, "steering_timeout")
+      ),
+      options.agent.promptTimeoutMilliseconds
+    );
+    deadline.unref();
+    try {
+      return await runtime.steer({
+        ...options,
+        signal: AbortSignal.any([options.signal, deadlineController.signal])
+      });
+    } catch (error61) {
+      if (error61 instanceof AcpExecutionError) {
+        throw error61;
+      }
+      throw new AcpExecutionError("ACP agent steering failed", { cause: error61 }, "steering_failed");
+    } finally {
+      clearTimeout(deadline);
+    }
+  };
   runPrompt = async (options) => {
     const stored = this.#store.read(options.sessionId);
     if (stored instanceof FoundAcpStoredSession && this.#nativeOperations.has(`${stored.session.agentId}:${stored.session.nativeSessionId}`)) {
@@ -23948,6 +24253,7 @@ var AcpSessionManager = class {
       signal: AbortSignal.any([options.signal, deadlineController.signal])
     };
     this.#activeSessionIds.add(options.sessionId);
+    this.#activeCommandIds.set(options.sessionId, options.commandId);
     try {
       if (this.#cancellationRequests.has(options.sessionId)) {
         return { stopReason: "cancelled" };
@@ -23987,6 +24293,9 @@ var AcpSessionManager = class {
     } finally {
       clearTimeout(deadline);
       this.#activeSessionIds.delete(options.sessionId);
+      if (this.#activeCommandIds.get(options.sessionId) === options.commandId) {
+        this.#activeCommandIds.delete(options.sessionId);
+      }
       this.#cancellationRequests.delete(options.sessionId);
     }
   };
@@ -24011,6 +24320,7 @@ var AcpSessionManager = class {
     this.#nativeBrowserSessions.clear();
     await Promise.all([...sessions, ...nativeBrowserSessions].map(async (session) => await session.close()));
   };
+  hasPreparedSession = (sessionId, agentId, cwd, additionalDirectories) => this.#sessions.get(sessionId)?.belongsTo(agentId, cwd, additionalDirectories) === true;
   ensureSession = async (options) => {
     const existing = this.#sessions.get(options.sessionId);
     if (existing !== void 0) {
@@ -24119,6 +24429,68 @@ var AcpSessionManager = class {
       this.#nativeOperations.delete(key);
     }
   };
+  forkSessionAtTurn = async (options, sourceSessionId, forkPoint) => {
+    if (sourceSessionId === options.sessionId) {
+      throw new AcpExecutionError(
+        "The fork destination must be a new conversation",
+        {},
+        "session_identity_mismatch"
+      );
+    }
+    const source = this.#store.read(sourceSessionId);
+    if (!(source instanceof FoundAcpStoredSession) || !source.session.prompted) {
+      throw new AcpExecutionError(
+        "The source conversation has no resumable native Agent session",
+        {},
+        "native_session_not_found"
+      );
+    }
+    if (source.session.agentId !== options.agent.id || source.session.cwd !== options.cwd || !arraysEqual(source.session.additionalDirectories, options.additionalDirectories)) {
+      throw new AcpExecutionError(
+        "The source conversation execution target does not match the fork request",
+        {},
+        "native_session_target_changed"
+      );
+    }
+    const key = `${options.agent.id}:${source.session.nativeSessionId}`;
+    const linked = this.#store.findNative(options.agent.id, source.session.nativeSessionId);
+    if (this.#nativeOperations.has(key) || linked.some((entry) => this.#activeSessionIds.has(entry.sessionId) || this.#preparing.has(entry.sessionId))) {
+      throw new AcpExecutionError(
+        "Wait for the source conversation's running operation to finish",
+        {},
+        "session_busy"
+      );
+    }
+    if (this.#sessions.has(options.sessionId) || this.#preparing.has(options.sessionId) || this.#store.read(options.sessionId) instanceof FoundAcpStoredSession || this.#store.read(options.sessionId) instanceof DeletedAcpStoredSession) {
+      throw new AcpExecutionError("The destination conversation already exists", {}, "session_identity_mismatch");
+    }
+    this.#nativeOperations.add(key);
+    try {
+      const runtime = await this.#startSessionForkAtTurnPreparation(
+        options,
+        source.session.nativeSessionId,
+        forkPoint
+      );
+      const openedKey = `${options.agent.id}:${runtime.nativeSessionId()}`;
+      this.#nativeOperations.add(openedKey);
+      try {
+        return {
+          history: await runtime.loadHistory(options.signal),
+          prepared: runtime.prepared(),
+          sessionId: options.sessionId
+        };
+      } catch (error61) {
+        this.#sessions.delete(options.sessionId);
+        this.#store.remove(options.sessionId);
+        await runtime.closeProcess();
+        throw error61;
+      } finally {
+        this.#nativeOperations.delete(openedKey);
+      }
+    } finally {
+      this.#nativeOperations.delete(key);
+    }
+  };
   deleteNativeSession = async (options, nativeSessionId) => {
     const runtime = await this.#ensureNativeSessionBrowser(options);
     const key = `${options.agent.id}:${nativeSessionId}`;
@@ -24263,7 +24635,8 @@ var LocalBotGrant = class {
   revocationEpoch;
   workspaceIdentityDigest;
   workspacePath;
-  constructor(localGrantId, botId, behaviorRevisionId, behaviorDigest, bindingId, bindingRevision, agent, agentIdentityDigest, workspacePath, workspaceIdentityDigest, allowedDeliveryTargetIds, expiresAt, revocationEpoch) {
+  workspaceRef;
+  constructor(localGrantId, botId, behaviorRevisionId, behaviorDigest, bindingId, bindingRevision, agent, agentIdentityDigest, workspaceRef, workspacePath, workspaceIdentityDigest, allowedDeliveryTargetIds, expiresAt, revocationEpoch) {
     this.localGrantId = localGrantId;
     this.botId = botId;
     this.behaviorRevisionId = behaviorRevisionId;
@@ -24272,6 +24645,7 @@ var LocalBotGrant = class {
     this.bindingRevision = bindingRevision;
     this.agent = agent;
     this.agentIdentityDigest = agentIdentityDigest;
+    this.workspaceRef = workspaceRef;
     this.workspacePath = workspacePath;
     this.workspaceIdentityDigest = workspaceIdentityDigest;
     this.allowedDeliveryTargetIds = Object.freeze([...allowedDeliveryTargetIds]);
@@ -24456,7 +24830,7 @@ var LocalBotGrantStore = class {
                   WHERE local_grant_id = ? AND bot_id = ?
                     AND behavior_revision_id = ? AND behavior_digest = ?
                     AND binding_id = ? AND binding_revision = ?
-                    AND agent_ref = ? AND workspace_ref = ?
+                    AND agent_ref = ?
                     AND revoked_at IS NULL AND expires_at > ?`
     ).get(
       command.localGrantId,
@@ -24466,7 +24840,6 @@ var LocalBotGrantStore = class {
       command.bindingId,
       command.bindingRevision,
       command.agentId,
-      command.directoryId,
       now
     );
     if (row === void 0) {
@@ -24489,7 +24862,8 @@ var LocalBotGrantStore = class {
       revalidateExecutable(agent.agentIdentity)
     ]);
     signal.throwIfAborted();
-    const workspacePath = await directories.resolve(bindingAuthorityId, command.directoryId, signal);
+    const workspaceRef = rowString(row, "workspace_ref");
+    const workspacePath = await directories.resolve(bindingAuthorityId, workspaceRef, signal);
     const currentAgentDigest = agentDigest(agent);
     const currentWorkspaceDigest = await workspaceDigest(workspacePath);
     signal.throwIfAborted();
@@ -24515,6 +24889,7 @@ var LocalBotGrantStore = class {
       command.bindingRevision,
       agent,
       currentAgentDigest,
+      workspaceRef,
       workspacePath,
       currentWorkspaceDigest,
       approvedTargets,
@@ -24683,7 +25058,7 @@ var BotMessageCommandError = class extends Error {
     this.name = "BotMessageCommandError";
   }
 };
-function isRecord6(value) {
+function isRecord7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function requiredEnvironment(environment, name) {
@@ -24734,21 +25109,21 @@ function decodeResponse(encoded) {
       cause
     });
   }
-  if (!isRecord6(value) || typeof value["ok"] !== "boolean") {
+  if (!isRecord7(value) || typeof value["ok"] !== "boolean") {
     throw new BotMessageCommandError("bot_service_unavailable", "The local Bot service returned invalid data");
   }
   if (value["ok"] === true && typeof value["outboundMessageId"] === "string") {
     return value["outboundMessageId"];
   }
   const error61 = value["error"];
-  if (value["ok"] === false && isRecord6(error61) && typeof error61["code"] === "string" && typeof error61["message"] === "string") {
+  if (value["ok"] === false && isRecord7(error61) && typeof error61["code"] === "string" && typeof error61["message"] === "string") {
     throw new BotMessageCommandError(error61["code"], error61["message"]);
   }
   throw new BotMessageCommandError("bot_service_unavailable", "The local Bot service returned invalid data");
 }
 async function requestLocalBotService(socketPath, payload, signal) {
   signal.throwIfAborted();
-  return await new Promise((resolve5, reject) => {
+  return await new Promise((resolve6, reject) => {
     const socket = createConnection(socketPath);
     const chunks = [];
     let length = 0;
@@ -24797,7 +25172,7 @@ async function requestLocalBotService(socketPath, payload, signal) {
       finished = true;
       signal.removeEventListener("abort", abort);
       try {
-        resolve5(decodeResponse(Buffer.concat(chunks).toString("utf8")));
+        resolve6(decodeResponse(Buffer.concat(chunks).toString("utf8")));
       } catch (error61) {
         reject(error61);
       } finally {
@@ -24850,7 +25225,7 @@ var BotOutboundIpcRequest = class {
     this.text = text;
   }
 };
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function decodeRequest(encoded) {
@@ -24860,7 +25235,7 @@ function decodeRequest(encoded) {
   } catch (cause) {
     throw new LocalBotAuthorizationError("invalid_request", "The local Bot request is invalid", { cause });
   }
-  if (!isRecord7(value)) {
+  if (!isRecord8(value)) {
     throw new LocalBotAuthorizationError("invalid_request", "The local Bot request is invalid");
   }
   const keys = Object.keys(value);
@@ -24910,10 +25285,10 @@ async function decodeRelayResponse(response) {
       cause
     });
   }
-  if (response.status === 202 && isRecord7(value) && typeof value["outboundMessageId"] === "string") {
+  if (response.status === 202 && isRecord8(value) && typeof value["outboundMessageId"] === "string") {
     return value["outboundMessageId"];
   }
-  if (isRecord7(value) && isRecord7(value["error"])) {
+  if (isRecord8(value) && isRecord8(value["error"])) {
     const error61 = value["error"];
     if (typeof error61["code"] === "string" && typeof error61["message"] === "string") {
       throw new LocalBotAuthorizationError(error61["code"], error61["message"]);
@@ -24946,17 +25321,17 @@ var BotOutboundIpcServer = class {
     if (this.#usesFilesystemSocket) {
       await mkdir(dirname3(this.#socketPath), { mode: 448, recursive: true });
       await unlink(this.#socketPath).catch((error61) => {
-        if (!isRecord7(error61) || error61["code"] !== "ENOENT") {
+        if (!isRecord8(error61) || error61["code"] !== "ENOENT") {
           throw error61;
         }
       });
     }
-    await new Promise((resolve5, reject) => {
+    await new Promise((resolve6, reject) => {
       const fail = (error61) => reject(error61);
       this.#server.once("error", fail);
       this.#server.listen(this.#socketPath, () => {
         this.#server.removeListener("error", fail);
-        resolve5();
+        resolve6();
       });
     });
     if (this.#usesFilesystemSocket) {
@@ -24969,10 +25344,10 @@ var BotOutboundIpcServer = class {
   };
   close = async () => {
     if (this.#server.listening) {
-      await new Promise((resolve5, reject) => {
+      await new Promise((resolve6, reject) => {
         this.#server.close((error61) => {
           if (error61 === void 0) {
-            resolve5();
+            resolve6();
             return;
           }
           reject(error61);
@@ -24981,7 +25356,7 @@ var BotOutboundIpcServer = class {
     }
     if (this.#usesFilesystemSocket) {
       await unlink(this.#socketPath).catch((error61) => {
-        if (!isRecord7(error61) || error61["code"] !== "ENOENT") {
+        if (!isRecord8(error61) || error61["code"] !== "ENOENT") {
           throw error61;
         }
       });
@@ -25228,7 +25603,7 @@ var ManagedNpmPackageError = class extends Error {
     this.name = "ManagedNpmPackageError";
   }
 };
-function isRecord8(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function packagePath(root, packageName) {
@@ -25250,7 +25625,7 @@ async function readJsonRecord(path2, maximumBytes) {
         );
       }
       const value = JSON.parse(await handle.readFile({ encoding: "utf8" }));
-      if (!isRecord8(value)) {
+      if (!isRecord9(value)) {
         throw new ManagedNpmPackageError(
           "managed_package_verification_failed",
           "The managed npm package metadata is invalid"
@@ -25276,7 +25651,7 @@ function readBinPath(packageMetadata, executableName) {
   if (typeof bin === "string") {
     return bin;
   }
-  if (isRecord8(bin) && typeof bin[executableName] === "string") {
+  if (isRecord9(bin) && typeof bin[executableName] === "string") {
     return bin[executableName];
   }
   throw new ManagedNpmPackageError(
@@ -25292,7 +25667,7 @@ function verifyPackageLockEntry(lock, definition, verifyDependencyClosure) {
     );
   }
   const packages = lock["packages"];
-  if (!isRecord8(packages)) {
+  if (!isRecord9(packages)) {
     throw new ManagedNpmPackageError(
       "managed_package_verification_failed",
       "The managed npm package lockfile is invalid"
@@ -25306,7 +25681,7 @@ function verifyPackageLockEntry(lock, definition, verifyDependencyClosure) {
     if (verifyDependencyClosure && normalizedKey.length > 0) {
       let resolved;
       try {
-        if (!normalizedKey.split("/").includes("node_modules") || !isRecord8(candidate) || typeof candidate["version"] !== "string" || candidate["version"].length === 0 || typeof candidate["integrity"] !== "string" || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(candidate["integrity"]) || typeof candidate["resolved"] !== "string") {
+        if (!normalizedKey.split("/").includes("node_modules") || !isRecord9(candidate) || typeof candidate["version"] !== "string" || candidate["version"].length === 0 || typeof candidate["integrity"] !== "string" || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(candidate["integrity"]) || typeof candidate["resolved"] !== "string") {
           throw new Error("Invalid locked dependency");
         }
         resolved = new URL(candidate["resolved"]);
@@ -25329,7 +25704,7 @@ function verifyPackageLockEntry(lock, definition, verifyDependencyClosure) {
       matches += 1;
     }
   }
-  if (matches !== 1 || !isRecord8(entry) || entry["integrity"] !== definition.integrity || entry["resolved"] !== definition.tarballUrl || entry["version"] !== definition.version) {
+  if (matches !== 1 || !isRecord9(entry) || entry["integrity"] !== definition.integrity || entry["resolved"] !== definition.tarballUrl || entry["version"] !== definition.version) {
     throw new ManagedNpmPackageError(
       "managed_package_verification_failed",
       "The managed npm package lockfile does not match the pinned artifact"
@@ -25959,7 +26334,7 @@ var ManagedAgentArchiveError = class extends Error {
     this.name = "ManagedAgentArchiveError";
   }
 };
-function isRecord9(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isContainedPath3(root, candidate) {
@@ -26016,7 +26391,7 @@ async function readManifest(path2) {
       );
     }
     const parsed = JSON.parse(await handle.readFile({ encoding: "utf8" }));
-    if (!isRecord9(parsed)) {
+    if (!isRecord10(parsed)) {
       throw new ManagedAgentArchiveError(
         "managed_archive_verification_failed",
         "The managed Agent archive manifest is invalid"
@@ -26709,7 +27084,7 @@ async function probeAcpReadiness(specification, agent, environment, defaultWorks
     await specification.verifyAcp(connection, initialized, defaultWorkspace, controller.signal);
     return new VerifiedAcpReadiness(
       normalizedVersion(initialized.agentInfo?.version ?? ""),
-      normalizeAcpCapabilities(initialized.agentCapabilities ?? {})
+      normalizeAcpCapabilities(initialized)
     );
   } catch (error61) {
     if (signal.aborted) {
@@ -26895,7 +27270,9 @@ var IDENTIFIER_PATTERN6 = /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/;
 var TOKEN_PATTERN2 = /^[a-zA-Z0-9_-]{32,256}$/;
 var MAX_CONNECTION_FILE_LENGTH = 16 * 1024;
 var CLAIM_RESPONSE_KEYS = ["channelId", "daemonToken", "runtimeId"];
-var SAVED_CONNECTION_KEYS = ["defaultWorkspace", "channelId", "daemonToken", "relayOrigin"];
+var REDEEM_RESPONSE_KEYS = ["channelId", "runtimeCredential", "runtimeId"];
+var LEGACY_SAVED_CONNECTION_KEYS = ["defaultWorkspace", "channelId", "daemonToken", "relayOrigin"];
+var SAVED_CONNECTION_KEYS = ["defaultWorkspace", "channelId", "relayOrigin", "runtimeCredential"];
 var PairingClientError = class extends Error {
   code;
   constructor(code, message, options = {}) {
@@ -26904,7 +27281,7 @@ var PairingClientError = class extends Error {
     this.name = "PairingClientError";
   }
 };
-function isRecord10(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasExactKeys(value, expectedKeys) {
@@ -26932,7 +27309,7 @@ function readSingleOption(arguments_, option2) {
 function assertKnownArguments(arguments_) {
   for (let index = 0; index < arguments_.length; index += 2) {
     const option2 = arguments_[index];
-    if (option2 !== "--url" && option2 !== "--code" && option2 !== "--workspace") {
+    if (option2 !== "--url" && option2 !== "--code" && option2 !== "--pairing" && option2 !== "--workspace") {
       throw new PairingClientError("invalid_arguments", `Unknown pairing option: ${option2 ?? "missing option"}`);
     }
   }
@@ -26972,10 +27349,17 @@ function parsePairCommand(arguments_) {
   assertKnownArguments(arguments_);
   return {
     code: parsePairingCode(readSingleOption(arguments_, "--code")),
+    pairingId: arguments_.includes("--pairing") ? validatePairingId(readSingleOption(arguments_, "--pairing")) : "",
     relayOrigin: parseRelayOrigin(readSingleOption(arguments_, "--url")),
     workspace: arguments_.includes("--workspace") ? readSingleOption(arguments_, "--workspace") : loadDefaultWorkspace()
   };
 }
+function validatePairingId(value) {
+  if (!IDENTIFIER_PATTERN6.test(value)) {
+    throw new PairingClientError("invalid_pairing_id", "The Runtime pairing ID is invalid");
+  }
+  return value;
+}
 function parseChannelArgument(arguments_) {
   if (arguments_.length !== 2 || arguments_[0] !== "--channel") {
     throw new PairingClientError("invalid_arguments", "Usage: mobius start --channel <channel-id>");
@@ -27020,9 +27404,9 @@ async function readJsonResponse(response) {
   }
 }
 function readRelayError(value) {
-  if (isRecord10(value)) {
+  if (isRecord11(value)) {
     const error61 = value["error"];
-    if (isRecord10(error61)) {
+    if (isRecord11(error61)) {
       const code = error61["code"];
       const message = error61["message"];
       if (typeof code === "string" && typeof message === "string") {
@@ -27032,17 +27416,17 @@ function readRelayError(value) {
   }
   return new PairingClientError("pairing_failed", "The relay could not pair this machine");
 }
-function decodeClaimResponse(value) {
-  if (!isRecord10(value) || !hasExactKeys(value, CLAIM_RESPONSE_KEYS)) {
+function decodePairingResponse(value, credentialField, expectedKeys) {
+  if (!isRecord11(value) || !hasExactKeys(value, expectedKeys)) {
     throw new PairingClientError("invalid_relay_response", "The relay returned an invalid pairing response");
   }
   const channelId = value["channelId"];
-  const daemonToken2 = value["daemonToken"];
+  const runtimeCredential = value[credentialField];
   const runtimeId = value["runtimeId"];
-  if (typeof channelId !== "string" || !IDENTIFIER_PATTERN6.test(channelId) || typeof daemonToken2 !== "string" || !TOKEN_PATTERN2.test(daemonToken2) || typeof runtimeId !== "string" || !IDENTIFIER_PATTERN6.test(runtimeId)) {
+  if (typeof channelId !== "string" || !IDENTIFIER_PATTERN6.test(channelId) || typeof runtimeCredential !== "string" || !TOKEN_PATTERN2.test(runtimeCredential) || typeof runtimeId !== "string" || !IDENTIFIER_PATTERN6.test(runtimeId)) {
     throw new PairingClientError("invalid_relay_response", "The relay returned an invalid pairing response");
   }
-  return { channelId, daemonToken: daemonToken2, runtimeId };
+  return { channelId, runtimeCredential, runtimeId };
 }
 async function claimPairing(options, defaultWorkspace, localAgents, installableAgents, signal) {
   const agents = localAgents.map((agent) => ({
@@ -27052,7 +27436,7 @@ async function claimPairing(options, defaultWorkspace, localAgents, installableA
     id: agent.id,
     label: agent.label
   }));
-  const endpoint = mobiusApiUrl(options.relayOrigin, "/pairings/claim");
+  const endpoint = options.pairingId.length > 0 ? mobiusApiUrl(options.relayOrigin, `/v1/runtime-pairings/${encodeURIComponent(options.pairingId)}/redeem`) : mobiusApiUrl(options.relayOrigin, "/pairings/claim");
   let response;
   try {
     response = await fetch3(endpoint, {
@@ -27075,10 +27459,10 @@ async function claimPairing(options, defaultWorkspace, localAgents, installableA
   if (!response.ok) {
     throw readRelayError(value);
   }
-  return decodeClaimResponse(value);
+  return options.pairingId.length > 0 ? decodePairingResponse(value, "runtimeCredential", REDEEM_RESPONSE_KEYS) : decodePairingResponse(value, "daemonToken", CLAIM_RESPONSE_KEYS);
 }
-async function persistConnection(channelId, relayOrigin, daemonToken2, defaultWorkspace) {
-  const connectionsDirectory = join14(readStateDirectory(), "connections");
+async function persistConnection(channelId, relayOrigin, runtimeCredential, defaultWorkspace, environment) {
+  const connectionsDirectory = join14(readStateDirectory(environment), "connections");
   await mkdir4(connectionsDirectory, { mode: 448, recursive: true });
   const connectionPath = join14(connectionsDirectory, `${channelId}.json`);
   const temporaryPath = join14(connectionsDirectory, `.${channelId}.${randomUUID3()}.tmp`);
@@ -27088,8 +27472,8 @@ async function persistConnection(channelId, relayOrigin, daemonToken2, defaultWo
       {
         defaultWorkspace,
         channelId,
-        daemonToken: daemonToken2,
-        relayOrigin: relayOrigin.toString()
+        relayOrigin: relayOrigin.toString(),
+        runtimeCredential
       },
       null,
       2
@@ -27101,25 +27485,25 @@ async function persistConnection(channelId, relayOrigin, daemonToken2, defaultWo
   return connectionPath;
 }
 function decodeSavedConnection(value, expectedChannelId) {
-  if (!isRecord10(value) || !hasExactKeys(value, SAVED_CONNECTION_KEYS)) {
+  if (!isRecord11(value) || !hasExactKeys(value, SAVED_CONNECTION_KEYS) && !hasExactKeys(value, LEGACY_SAVED_CONNECTION_KEYS)) {
     throw new PairingClientError("invalid_connection", "The saved connection is invalid");
   }
   const defaultWorkspace = value["defaultWorkspace"];
   const channelId = value["channelId"];
-  const daemonToken2 = value["daemonToken"];
+  const runtimeCredential = value["runtimeCredential"] ?? value["daemonToken"];
   const relayOrigin = value["relayOrigin"];
-  if (typeof defaultWorkspace !== "string" || typeof channelId !== "string" || channelId !== expectedChannelId || !IDENTIFIER_PATTERN6.test(channelId) || typeof daemonToken2 !== "string" || !TOKEN_PATTERN2.test(daemonToken2) || typeof relayOrigin !== "string") {
+  if (typeof defaultWorkspace !== "string" || typeof channelId !== "string" || channelId !== expectedChannelId || !IDENTIFIER_PATTERN6.test(channelId) || typeof runtimeCredential !== "string" || !TOKEN_PATTERN2.test(runtimeCredential) || typeof relayOrigin !== "string") {
     throw new PairingClientError("invalid_connection", "The saved connection is invalid");
   }
   return {
     defaultWorkspace,
     channelId,
-    daemonToken: daemonToken2,
-    relayOrigin: parseRelayOrigin(relayOrigin)
+    relayOrigin: parseRelayOrigin(relayOrigin),
+    runtimeCredential
   };
 }
-async function readSavedConnection(channelId) {
-  const connectionPath = join14(readStateDirectory(), "connections", `${channelId}.json`);
+async function readSavedConnection(channelId, environment) {
+  const connectionPath = join14(readStateDirectory(environment), "connections", `${channelId}.json`);
   let encoded = "";
   const handle = await open4(connectionPath, "r");
   try {
@@ -27141,8 +27525,8 @@ async function readSavedConnection(channelId) {
   return {
     defaultWorkspace: await resolveDefaultWorkspace(connection.defaultWorkspace),
     channelId: connection.channelId,
-    daemonToken: connection.daemonToken,
-    relayOrigin: connection.relayOrigin
+    relayOrigin: connection.relayOrigin,
+    runtimeCredential: connection.runtimeCredential
   };
 }
 function assertInventoryUsable(inventory) {
@@ -27150,15 +27534,12 @@ function assertInventoryUsable(inventory) {
     throw new PairingClientError("no_supported_agent", "No supported Agent is available for local discovery");
   }
 }
-function buildPairedDaemon(connection, connectionPath, inventory) {
+function buildPairedDaemon(connection, connectionPath, inventory, environment) {
   assertInventoryUsable(inventory);
-  const relayUrl = mobiusApiUrl(
-    connection.relayOrigin,
-    `/channels/${encodeURIComponent(connection.channelId)}/daemon`
-  );
+  const relayUrl = mobiusApiUrl(connection.relayOrigin, "/v1/runtimes/connect");
   relayUrl.protocol = relayUrl.protocol === "https:" ? "wss:" : "ws:";
-  relayUrl.searchParams.set("token", connection.daemonToken);
-  const auditDatabasePath = join14(readStateDirectory(), "audit", `${connection.channelId}.sqlite`);
+  relayUrl.searchParams.set("token", connection.runtimeCredential);
+  const auditDatabasePath = join14(readStateDirectory(environment), "audit", `${connection.channelId}.sqlite`);
   return {
     channelUrl: new URL(`/channels/${encodeURIComponent(connection.channelId)}`, connection.relayOrigin).toString(),
     config: createDaemonConfig(
@@ -27174,12 +27555,11 @@ function buildPairedDaemon(connection, connectionPath, inventory) {
     connectionPath
   };
 }
-async function pairLocalMachine(arguments_, signal = new AbortController().signal) {
-  const options = parsePairCommand(arguments_);
+async function pairRuntime(options, signal, environment) {
   const defaultWorkspace = await resolveDefaultWorkspace(options.workspace);
   const inventory = await discoverLocalAgentInventory({
     defaultWorkspace,
-    environment: process.env,
+    environment,
     signal
   });
   assertInventoryUsable(inventory);
@@ -27188,35 +27568,55 @@ async function pairLocalMachine(arguments_, signal = new AbortController().signa
   const connectionPath = await persistConnection(
     claim2.channelId,
     options.relayOrigin,
-    claim2.daemonToken,
-    defaultWorkspace
+    claim2.runtimeCredential,
+    defaultWorkspace,
+    environment
   );
   return buildPairedDaemon(
     {
       defaultWorkspace,
       channelId: claim2.channelId,
-      daemonToken: claim2.daemonToken,
-      relayOrigin: options.relayOrigin
+      relayOrigin: options.relayOrigin,
+      runtimeCredential: claim2.runtimeCredential
     },
     connectionPath,
-    inventory
+    inventory,
+    environment
   );
 }
-async function resumeLocalMachine(arguments_, signal = new AbortController().signal) {
-  const channelId = parseChannelArgument(arguments_);
-  const connectionPath = join14(readStateDirectory(), "connections", `${channelId}.json`);
-  const connection = await readSavedConnection(channelId);
+async function pairMobiusRuntime(options, signal, environment = process.env) {
+  return await pairRuntime(
+    {
+      code: parsePairingCode(options.pairingCode),
+      pairingId: validatePairingId(options.pairingId),
+      relayOrigin: parseRelayOrigin(options.relayOrigin),
+      workspace: options.defaultWorkspace
+    },
+    signal,
+    environment
+  );
+}
+async function pairLocalMachine(arguments_, signal = new AbortController().signal) {
+  return await pairRuntime(parsePairCommand(arguments_), signal, process.env);
+}
+async function resumeMobiusRuntime(channelId, signal, environment = process.env) {
+  const normalizedChannelId = validatePairingId(channelId);
+  const connectionPath = join14(readStateDirectory(environment), "connections", `${normalizedChannelId}.json`);
+  const connection = await readSavedConnection(normalizedChannelId, environment);
   const inventory = await discoverLocalAgentInventory({
     defaultWorkspace: connection.defaultWorkspace,
-    environment: process.env,
+    environment,
     signal
   });
-  return buildPairedDaemon(connection, connectionPath, inventory);
+  return buildPairedDaemon(connection, connectionPath, inventory, environment);
+}
+async function resumeLocalMachine(arguments_, signal = new AbortController().signal) {
+  return await resumeMobiusRuntime(parseChannelArgument(arguments_), signal, process.env);
 }
 
 // src/run-daemon.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { basename as basename3, join as join16 } from "node:path";
+import { basename as basename4, join as join16 } from "node:path";
 import { styleText } from "node:util";
 import { fetch as fetch6, WebSocket as WebSocket2 } from "undici";
 
@@ -27230,14 +27630,19 @@ var AgentCatalogPublishError = class extends Error {
     this.name = "AgentCatalogPublishError";
   }
 };
-function catalogEndpoint(relayUrl) {
-  const endpoint = new URL(relayUrl);
+function catalogEndpoint(config2) {
+  const endpoint = new URL(config2.relayUrl);
   endpoint.protocol = endpoint.protocol === "wss:" ? "https:" : "http:";
-  if (!endpoint.pathname.endsWith("/daemon")) {
-    throw new AgentCatalogPublishError("The Relay URL is invalid");
+  if (endpoint.pathname.endsWith("/daemon")) {
+    endpoint.pathname = `${endpoint.pathname.slice(0, -"/daemon".length)}/catalog`;
+    return endpoint;
   }
-  endpoint.pathname = `${endpoint.pathname.slice(0, -"/daemon".length)}/catalog`;
-  return endpoint;
+  const runtimePath = "/v1/runtimes/connect";
+  if (endpoint.pathname.endsWith(runtimePath)) {
+    endpoint.pathname = `${endpoint.pathname.slice(0, -runtimePath.length)}/channels/${encodeURIComponent(config2.channelId)}/catalog`;
+    return endpoint;
+  }
+  throw new AgentCatalogPublishError("The Relay URL is invalid");
 }
 async function publishAgentCatalog(config2, signal) {
   signal.throwIfAborted();
@@ -27246,7 +27651,7 @@ async function publishAgentCatalog(config2, signal) {
   let response;
   const catalog = config2.catalog.read();
   try {
-    response = await fetch4(catalogEndpoint(config2.relayUrl), {
+    response = await fetch4(catalogEndpoint(config2), {
       body: JSON.stringify({
         agents: catalog.agents.map((agent) => ({
           agentPath: agent.agentIdentity.requestedPath,
@@ -27929,6 +28334,7 @@ var EmbeddedBotContextApplicator = class {
 
 // src/native-sessions/service.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
+import { basename as basename3 } from "node:path";
 
 // src/native-sessions/codex-history.ts
 import { spawn as spawn4 } from "node:child_process";
@@ -28406,16 +28812,84 @@ var NativeSessionService = class {
       history: opened.history
     };
   };
-  authorizeEntry = async (command, options, info) => {
-    try {
-      const primary = await this.#directories.identify(command.bindingId, info.cwd, options.signal);
-      const additionalDirectories = [];
-      const additionalEntries = [];
-      const paths = /* @__PURE__ */ new Set([primary.path]);
-      for (const path2 of info.additionalDirectories) {
-        const directory = await this.#directories.identify(command.bindingId, path2, options.signal);
-        if (paths.has(directory.path)) {
-          throw new LocalAuthorizationError("Native session roots must be distinct");
+  executeTurnFork = async (command, signal) => {
+    signal.throwIfAborted();
+    const cwd = await this.#directories.resolve(this.#config.bindingId, command.directoryId, signal);
+    const additionalDirectories = [];
+    const additionalEntries = [];
+    const resolvedPaths = /* @__PURE__ */ new Set([cwd]);
+    for (const directoryId2 of command.additionalDirectoryIds) {
+      const path2 = await this.#directories.resolve(this.#config.bindingId, directoryId2, signal);
+      if (resolvedPaths.has(path2)) {
+        throw new LocalAuthorizationError("Workspace directories must resolve to distinct locations");
+      }
+      resolvedPaths.add(path2);
+      additionalDirectories.push(path2);
+      additionalEntries.push({ directoryId: directoryId2, name: basename3(path2) });
+    }
+    const listing = await this.#directories.list(this.#config.bindingId, command.directoryId, signal);
+    const opened = await this.#sessions.forkSessionAtTurn(
+      {
+        additionalDirectories,
+        agent: this.#config.catalog.find(command.agentId),
+        cwd,
+        sessionId: command.targetSessionId,
+        signal
+      },
+      command.sessionId,
+      {
+        messageFingerprint: command.messageFingerprint,
+        messageId: command.messageId,
+        messageOccurrence: command.messageOccurrence
+      }
+    );
+    signal.throwIfAborted();
+    const ready = {
+      additionalDirectories: additionalEntries,
+      agentId: command.agentId,
+      agentName: opened.prepared.agentName,
+      agentVersion: opened.prepared.agentVersion,
+      capabilities: opened.prepared.capabilities,
+      commands: opened.prepared.commands,
+      configOptions: opened.prepared.configOptions,
+      directoryId: command.directoryId,
+      directoryLabel: listing.directoryLabel,
+      kind: "session.ready",
+      requestId: command.requestId,
+      restored: true,
+      sessionId: opened.sessionId
+    };
+    this.#audit.record({
+      commandId: command.requestId,
+      details: {
+        agentId: command.agentId,
+        messageId: command.messageId,
+        sourceCommandId: command.sourceCommandId
+      },
+      event: "native_session_turn_forked",
+      sessionId: command.sessionId
+    });
+    return {
+      action: "fork",
+      history: opened.history,
+      kind: "native.session.result",
+      ready,
+      requestId: command.requestId,
+      sessionId: command.sessionId,
+      targetSessionId: command.targetSessionId,
+      title: command.title
+    };
+  };
+  authorizeEntry = async (command, options, info) => {
+    try {
+      const primary = await this.#directories.identify(command.bindingId, info.cwd, options.signal);
+      const additionalDirectories = [];
+      const additionalEntries = [];
+      const paths = /* @__PURE__ */ new Set([primary.path]);
+      for (const path2 of info.additionalDirectories) {
+        const directory = await this.#directories.identify(command.bindingId, path2, options.signal);
+        if (paths.has(directory.path)) {
+          throw new LocalAuthorizationError("Native session roots must be distinct");
         }
         paths.add(directory.path);
         additionalDirectories.push(directory.path);
@@ -28547,10 +29021,17 @@ function parseReference(resource) {
 function downloadUrl(config2, command, reference) {
   const url2 = new URL(config2.relayUrl);
   url2.protocol = url2.protocol === "wss:" ? "https:" : "http:";
-  if (!url2.pathname.endsWith("/daemon")) {
-    throw new PromptArtifactError("artifact_endpoint_invalid", "The Relay artifact endpoint is invalid");
+  let channelPath = "";
+  if (url2.pathname.endsWith("/daemon")) {
+    channelPath = url2.pathname.slice(0, -"/daemon".length);
+  } else {
+    const runtimePath = "/v1/runtimes/connect";
+    if (!url2.pathname.endsWith(runtimePath)) {
+      throw new PromptArtifactError("artifact_endpoint_invalid", "The Relay artifact endpoint is invalid");
+    }
+    channelPath = `${url2.pathname.slice(0, -runtimePath.length)}/channels/${encodeURIComponent(config2.channelId)}`;
   }
-  url2.pathname = `${url2.pathname.slice(0, -"/daemon".length)}/sessions/${encodeURIComponent(command.sessionId)}/commands/${encodeURIComponent(command.commandId)}/artifacts/${encodeURIComponent(reference.artifactId)}/content`;
+  url2.pathname = `${channelPath}/sessions/${encodeURIComponent(command.sessionId)}/commands/${encodeURIComponent(command.commandId)}/artifacts/${encodeURIComponent(reference.artifactId)}/content`;
   url2.searchParams.delete("liveness");
   return url2;
 }
@@ -28708,9 +29189,17 @@ var RelayConnectionError = class extends Error {
 };
 function connectRelay(url2, signal) {
   signal.throwIfAborted();
-  return new Promise((resolve5, reject) => {
-    const socket = new WebSocket(url2, {
-      dispatcher: environmentProxyDispatcher
+  return new Promise((resolve6, reject) => {
+    const endpoint = new URL(url2);
+    const headers = {};
+    if (endpoint.pathname.endsWith("/v1/runtimes/connect")) {
+      const runtimeCredential = endpoint.searchParams.get("token") ?? "";
+      endpoint.searchParams.delete("token");
+      headers["authorization"] = `Bearer ${runtimeCredential}`;
+    }
+    const socket = new WebSocket(endpoint, {
+      dispatcher: environmentProxyDispatcher,
+      headers
     });
     let finished = false;
     const timeout = setTimeout(onTimeout, CONNECTION_TIMEOUT_MILLISECONDS);
@@ -28749,7 +29238,7 @@ function connectRelay(url2, signal) {
       }
       finished = true;
       cleanup();
-      resolve5(socket);
+      resolve6(socket);
     };
     function onTimeout() {
       fail(new RelayConnectionError("relay_connection_timeout", "Relay connection timed out"));
@@ -28970,6 +29459,11 @@ var SessionEventOutbox = class {
     }
     this.#database.prepare(`UPDATE relay_turn_receipts SET state = ? WHERE command_id = ?`).run(state, commandId);
   };
+  isTerminalExecution = (commandId, sessionId) => {
+    const row = this.#database.prepare(`SELECT state FROM relay_turn_receipts WHERE command_id = ? AND session_id = ?`).get(commandId, sessionId);
+    const state = typeof row === "object" && row !== null ? Reflect.get(row, "state") : void 0;
+    return state === "succeeded" || state === "failed" || state === "cancelled";
+  };
   acknowledge = (acknowledgement) => {
     this.#database.prepare(
       `DELETE FROM relay_session_event_outbox
@@ -29326,10 +29820,17 @@ var ActiveTurnReconciliationError = class extends Error {
 function activeTurnReconciliationEndpoint(config2, turn) {
   const endpoint = new URL(config2.relayUrl);
   endpoint.protocol = endpoint.protocol === "wss:" ? "https:" : "http:";
-  if (!endpoint.pathname.endsWith("/daemon")) {
-    throw new ActiveTurnReconciliationError("The Relay URL is invalid");
+  let channelPath = "";
+  if (endpoint.pathname.endsWith("/daemon")) {
+    channelPath = endpoint.pathname.slice(0, -"/daemon".length);
+  } else {
+    const runtimePath = "/v1/runtimes/connect";
+    if (!endpoint.pathname.endsWith(runtimePath)) {
+      throw new ActiveTurnReconciliationError("The Relay URL is invalid");
+    }
+    channelPath = `${endpoint.pathname.slice(0, -runtimePath.length)}/channels/${encodeURIComponent(config2.channelId)}`;
   }
-  endpoint.pathname = `${endpoint.pathname.slice(0, -"/daemon".length)}/sessions/${encodeURIComponent(turn.command.sessionId)}/attempts/${encodeURIComponent(turn.attemptId)}/reconciliation`;
+  endpoint.pathname = `${channelPath}/sessions/${encodeURIComponent(turn.command.sessionId)}/attempts/${encodeURIComponent(turn.attemptId)}/reconciliation`;
   endpoint.searchParams.delete("liveness");
   return endpoint;
 }
@@ -29482,7 +29983,7 @@ async function resolveSessionDirectories(directories, bindingId, directoryId2, a
     additionalDirectories.push(directory);
     additionalDirectoryEntries.push({
       directoryId: additionalDirectoryId,
-      name: basename3(directory)
+      name: basename4(directory)
     });
   }
   return new ResolvedSessionDirectories(cwd, additionalDirectories, additionalDirectoryEntries);
@@ -29631,68 +30132,96 @@ async function executePrompt(outbox, publisher, command, config2, directories, a
       attemptId
     );
     const attachments = await resolvePromptArtifacts(config2, command, signal);
-    const result = await sessions.runPrompt({
-      additionalDirectories: resolved.additionalDirectories,
-      agent,
-      commandId: command.commandId,
-      cwd: resolved.cwd,
-      images: attachments.images,
-      onActivity: (activity) => {
-        publisher.recordAttempt(
-          command.sessionId,
-          encodeAgentActivityEvent({
-            activityId: activity.activityId,
-            activityType: activity.activityType,
-            commandId: command.commandId,
-            content: activity.content,
-            detail: activity.detail,
-            input: activity.input,
-            kind: AGENT_ACTIVITY_KIND,
-            locations: activity.locations,
-            name: activity.name,
-            output: activity.output,
-            sequence: activity.sequence,
-            sessionId: command.sessionId,
-            status: activity.status,
-            title: activity.title,
-            toolKind: activity.toolKind
-          }),
-          attemptId
-        );
-        return Promise.resolve();
-      },
-      onText: (text) => {
-        publisher.recordAttempt(
-          command.sessionId,
-          encodeAgentMessageDeltaEvent({
-            commandId: command.commandId,
-            kind: AGENT_MESSAGE_DELTA_KIND,
-            sessionId: command.sessionId,
-            text
-          }),
-          attemptId
+    let stopReason;
+    if (command.disposition === SessionPromptDisposition.Steer) {
+      await sessions.steerPrompt({
+        additionalDirectories: resolved.additionalDirectories,
+        agent,
+        commandId: command.commandId,
+        cwd: resolved.cwd,
+        images: attachments.images,
+        prompt: command.prompt,
+        resources: attachments.resources,
+        sessionId: command.sessionId,
+        signal,
+        targetCommandId: command.targetCommandId
+      });
+      stopReason = "steered";
+    } else {
+      if (command.disposition === SessionPromptDisposition.Queue && !outbox.isTerminalExecution(command.targetCommandId, command.sessionId)) {
+        throw new AcpExecutionError(
+          "The queued prompt target is unavailable",
+          {},
+          "prompt_queue_target_unavailable"
         );
-        return Promise.resolve();
-      },
-      prompt: command.prompt,
-      resources: attachments.resources,
-      sessionId: command.sessionId,
-      signal
-    });
+      }
+      const result = await sessions.runPrompt({
+        additionalDirectories: resolved.additionalDirectories,
+        agent,
+        commandId: command.commandId,
+        cwd: resolved.cwd,
+        disposition: command.disposition,
+        images: attachments.images,
+        onActivity: (activity) => {
+          publisher.recordAttempt(
+            command.sessionId,
+            encodeAgentActivityEvent({
+              activityId: activity.activityId,
+              activityType: activity.activityType,
+              commandId: command.commandId,
+              content: activity.content,
+              detail: activity.detail,
+              input: activity.input,
+              kind: AGENT_ACTIVITY_KIND,
+              locations: activity.locations,
+              name: activity.name,
+              output: activity.output,
+              sequence: activity.sequence,
+              sessionId: command.sessionId,
+              status: activity.status,
+              title: activity.title,
+              toolKind: activity.toolKind
+            }),
+            attemptId
+          );
+          return Promise.resolve();
+        },
+        onText: (text, messageId) => {
+          publisher.recordAttempt(
+            command.sessionId,
+            encodeAgentMessageDeltaEvent({
+              commandId: command.commandId,
+              kind: AGENT_MESSAGE_DELTA_KIND,
+              messageId,
+              sessionId: command.sessionId,
+              text
+            }),
+            attemptId
+          );
+          return Promise.resolve();
+        },
+        prompt: command.prompt,
+        resources: attachments.resources,
+        sessionId: command.sessionId,
+        signal,
+        targetCommandId: command.targetCommandId
+      });
+      stopReason = result.stopReason;
+    }
     publisher.recordAttempt(
       command.sessionId,
       encodeSessionCompletedEvent({
         commandId: command.commandId,
         kind: SESSION_COMPLETED_KIND,
         sessionId: command.sessionId,
-        stopReason: result.stopReason
+        stopReason
       }),
       attemptId
     );
-    outbox.transitionExecution(command.commandId, result.stopReason === "cancelled" ? "cancelled" : "succeeded");
+    outbox.transitionExecution(command.commandId, stopReason === "cancelled" ? "cancelled" : "succeeded");
     audit.record({
       commandId: command.commandId,
-      event: result.stopReason === "cancelled" ? "session_cancelled" : "session_completed",
+      event: stopReason === "cancelled" ? "session_cancelled" : "session_completed",
       sessionId: command.sessionId
     });
   } catch (error61) {
@@ -29736,12 +30265,6 @@ function botExecutionAgent(agent, contextHandle, socketPath) {
 }
 async function executeBotPrompt(outbox, publisher, command, config2, directories, audit, sessions, grants, contexts, applicator, ipc, attemptId, signal) {
   try {
-    if (command.additionalDirectoryIds.length > 0) {
-      throw new LocalBotAuthorizationError(
-        "binding_not_approved",
-        "The Bot execution requested unapproved additional directories"
-      );
-    }
     const deadline = Date.parse(command.executionDeadlineAt);
     const remaining = deadline - Date.now();
     if (!Number.isSafeInteger(deadline) || remaining <= 0) {
@@ -29755,6 +30278,32 @@ async function executeBotPrompt(outbox, publisher, command, config2, directories
       Date.now(),
       signal
     );
+    const requestedExecutionTargetOverridden = command.directoryId !== grant.workspaceRef || command.additionalDirectoryIds.length > 0;
+    if (requestedExecutionTargetOverridden && !(command.replyRoute instanceof OwnerBotReplyRoute)) {
+      throw new LocalBotAuthorizationError(
+        "binding_not_approved",
+        "Only a paired owner conversation can override the approved Bot workspace"
+      );
+    }
+    const resolved = await resolveSessionDirectories(
+      directories,
+      config2.bindingId,
+      command.directoryId,
+      command.additionalDirectoryIds,
+      signal
+    );
+    const executionTargetOverridden = resolved.cwd !== grant.workspacePath || resolved.additionalDirectories.length > 0;
+    if (executionTargetOverridden && !sessions.hasPreparedSession(
+      command.sessionId,
+      grant.agent.id,
+      resolved.cwd,
+      resolved.additionalDirectories
+    )) {
+      throw new LocalBotAuthorizationError(
+        "local_approval_required",
+        "Open this Bot conversation in the paired local Web app before using the selected workspace"
+      );
+    }
     const attachments = await resolvePromptArtifacts(config2, command, signal);
     const applied = await applicator.apply(command, grant, attachments.resources, signal);
     const lease = contexts.activate(command);
@@ -29762,6 +30311,13 @@ async function executeBotPrompt(outbox, publisher, command, config2, directories
       const deadlineSignal = AbortSignal.timeout(remaining);
       const executionSignal = AbortSignal.any([signal, deadlineSignal]);
       const agent = botExecutionAgent(grant.agent, lease.context.contextHandle, ipc.socketPath);
+      await sessions.prepareExecutionSession({
+        additionalDirectories: resolved.additionalDirectories,
+        agent,
+        cwd: resolved.cwd,
+        sessionId: command.sessionId,
+        signal: executionSignal
+      });
       audit.record({
         commandId: command.commandId,
         details: {
@@ -29786,10 +30342,10 @@ async function executeBotPrompt(outbox, publisher, command, config2, directories
         attemptId
       );
       const result = await sessions.runPrompt({
-        additionalDirectories: [],
+        additionalDirectories: resolved.additionalDirectories,
         agent,
         commandId: command.commandId,
-        cwd: grant.workspacePath,
+        cwd: resolved.cwd,
         images: attachments.images,
         onActivity: (activity) => {
           publisher.recordAttempt(
@@ -29815,12 +30371,13 @@ async function executeBotPrompt(outbox, publisher, command, config2, directories
           );
           return Promise.resolve();
         },
-        onText: (text) => {
+        onText: (text, messageId) => {
           publisher.recordAttempt(
             command.sessionId,
             encodeAgentMessageDeltaEvent({
               commandId: command.commandId,
               kind: AGENT_MESSAGE_DELTA_KIND,
+              messageId,
               sessionId: command.sessionId,
               text
             }),
@@ -29886,12 +30443,12 @@ function waitForRelayRetry(signal, timer) {
   if (signal.aborted) {
     return Promise.resolve();
   }
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const retry = timer.schedule(finish, RELAY_RECONNECT_DELAY_MILLISECONDS);
     function finish() {
       retry.cancel();
       signal.removeEventListener("abort", finish);
-      resolve5();
+      resolve6();
     }
     signal.addEventListener("abort", finish, { once: true });
   });
@@ -29928,7 +30485,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
   const nativeRequests = /* @__PURE__ */ new Map();
   installationObserver.connect(socket);
   try {
-    await new Promise((resolve5, reject) => {
+    await new Promise((resolve6, reject) => {
       let finished = false;
       const cleanup = () => {
         connectionRefresh.close();
@@ -29947,7 +30504,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
         }
         finished = true;
         cleanup();
-        resolve5();
+        resolve6();
       };
       const rejectConnection = () => {
         if (finished) {
@@ -30127,7 +30684,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
               try {
                 operationSignal.throwIfAborted();
                 if (previous.length > 0) {
-                  await new Promise((resolve6, reject2) => {
+                  await new Promise((resolve7, reject2) => {
                     const cancel = () => reject2(operationSignal.reason);
                     operationSignal.addEventListener("abort", cancel, {
                       once: true
@@ -30135,7 +30692,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
                     void Promise.all(previous.map((request) => request.completion)).then(
                       () => {
                         operationSignal.removeEventListener("abort", cancel);
-                        resolve6();
+                        resolve7();
                       },
                       (error61) => {
                         operationSignal.removeEventListener("abort", cancel);
@@ -30175,6 +30732,86 @@ async function runRelayConnection(config2, directories, audit, sessions, install
             });
             return;
           }
+          if (kind === NATIVE_SESSION_TURN_FORK_KIND) {
+            const command2 = decodeNativeSessionTurnForkCommand(encoded);
+            const previous = [...nativeRequests.values()].filter(
+              (request) => request.agentId === command2.agentId
+            );
+            if (nativeRequests.has(command2.requestId) || nativeRequests.size >= 4 || previous.some((request) => !request.controller.signal.aborted)) {
+              reportOperationFailure(
+                socket,
+                command2.requestId,
+                command2.sessionId,
+                new AcpExecutionError(
+                  "Another native session operation is running",
+                  {},
+                  "native_session_busy"
+                )
+              );
+              return;
+            }
+            const controller = new AbortController();
+            const operationSignal = AbortSignal.any([connectionController.signal, controller.signal]);
+            const timeout = timer.schedule(
+              () => controller.abort(
+                new AcpExecutionError(
+                  "Native session operation timed out",
+                  {},
+                  "native_session_timeout"
+                )
+              ),
+              9e4
+            );
+            const completion = (async () => {
+              try {
+                operationSignal.throwIfAborted();
+                if (previous.length > 0) {
+                  await new Promise((resolve7, reject2) => {
+                    const cancel = () => reject2(operationSignal.reason);
+                    operationSignal.addEventListener("abort", cancel, { once: true });
+                    void Promise.all(previous.map((request) => request.completion)).then(
+                      () => {
+                        operationSignal.removeEventListener("abort", cancel);
+                        resolve7();
+                      },
+                      (error61) => {
+                        operationSignal.removeEventListener("abort", cancel);
+                        reject2(error61);
+                      }
+                    );
+                  });
+                }
+                operationSignal.throwIfAborted();
+                const result = await nativeSessions.executeTurnFork(command2, operationSignal);
+                if (socket.readyState === WebSocket2.OPEN) {
+                  send(socket, encodeNativeSessionResult(result));
+                }
+              } catch (error61) {
+                const failure = operationSignal.aborted ? controller.signal.reason ?? new AcpExecutionError(
+                  "Native session operation cancelled",
+                  {},
+                  "native_session_cancelled"
+                ) : error61;
+                audit.record({
+                  commandId: command2.requestId,
+                  details: { code: operationErrorCode(failure) },
+                  event: "native_session_turn_fork_failed",
+                  sessionId: command2.sessionId
+                });
+                reportOperationFailure(socket, command2.requestId, command2.sessionId, failure);
+              } finally {
+                timeout.cancel();
+                nativeRequests.delete(command2.requestId);
+              }
+            })();
+            nativeRequests.set(command2.requestId, {
+              agentId: command2.agentId,
+              completion,
+              controller,
+              sessionId: command2.sessionId
+            });
+            return;
+          }
           if (kind === RUNTIME_LIVENESS_READY_KIND) {
             decodeRuntimeLivenessReadyEvent(encoded);
             connectionLiveness.start();
@@ -30328,7 +30965,9 @@ async function runRelayConnection(config2, directories, audit, sessions, install
           }
           const turn = new ActiveDaemonTurn(command, receipt.attemptId);
           activeTurns.set(command.commandId, turn);
-          activeAttemptIds.set(command.sessionId, receipt.attemptId);
+          if (command.disposition !== SessionPromptDisposition.Steer) {
+            activeAttemptIds.set(command.sessionId, receipt.attemptId);
+          }
           void executePrompt(
             outbox,
             publisher,
@@ -30515,6 +31154,147 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer) {
     }
   }
 }
+
+// src/runtime.ts
+import { mkdir as mkdir5, realpath as realpath8, stat as stat8 } from "node:fs/promises";
+import { dirname as dirname8, join as join17, resolve as resolve5 } from "node:path";
+var APP_CREDENTIAL_PATTERN = /^mapp_[a-zA-Z0-9_-]{22}_[a-zA-Z0-9_-]{43}$/;
+var CONVERSATION_CREDENTIAL_PATTERN = /^mconv_[a-zA-Z0-9_-]{22}_[a-zA-Z0-9_-]{43}$/;
+var IDENTIFIER_PATTERN8 = /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/;
+var RUNTIME_CREDENTIAL_PATTERN = /^[a-zA-Z0-9_-]{32,256}$/;
+var MobiusRuntimeConfigurationError = class extends Error {
+  code = "runtime_configuration_invalid";
+  constructor(message, options = {}) {
+    super(message, options);
+    this.name = "MobiusRuntimeConfigurationError";
+  }
+};
+var MobiusRuntimeState = class {
+};
+var IdleMobiusRuntimeState = class extends MobiusRuntimeState {
+};
+var RunningMobiusRuntimeState = class extends MobiusRuntimeState {
+};
+var FinishedMobiusRuntimeState = class extends MobiusRuntimeState {
+};
+function validateRuntimeRelay(relayUrl) {
+  if (relayUrl.protocol !== "ws:" && relayUrl.protocol !== "wss:") {
+    throw new MobiusRuntimeConfigurationError("The Runtime relay URL must use WebSocket transport");
+  }
+  const credential = relayUrl.searchParams.get("token") ?? "";
+  if (credential.length === 0) {
+    throw new MobiusRuntimeConfigurationError("The Runtime relay credential is required");
+  }
+  if (APP_CREDENTIAL_PATTERN.test(credential)) {
+    throw new MobiusRuntimeConfigurationError("An AppCredential cannot be held by a local Runtime");
+  }
+  if (CONVERSATION_CREDENTIAL_PATTERN.test(credential)) {
+    throw new MobiusRuntimeConfigurationError("A ConversationAccessToken cannot be held by a local Runtime");
+  }
+  if (!RUNTIME_CREDENTIAL_PATTERN.test(credential)) {
+    throw new MobiusRuntimeConfigurationError("The Runtime relay credential is invalid");
+  }
+}
+function validateRuntimeConfiguration(config2) {
+  validateRuntimeRelay(config2.relayUrl);
+}
+function requiredEnvironmentValue(environment, name) {
+  const value = environment[name]?.trim();
+  if (value === void 0 || value.length === 0) {
+    throw new MobiusRuntimeConfigurationError(`${name} is required`);
+  }
+  return value;
+}
+function relayUrlFromConnection(connection) {
+  let relayUrl;
+  try {
+    relayUrl = new URL(connection.relayUrl);
+  } catch (error61) {
+    throw new MobiusRuntimeConfigurationError("The Runtime relay URL is invalid", { cause: error61 });
+  }
+  relayUrl.searchParams.set("token", connection.runtimeCredential);
+  validateRuntimeRelay(relayUrl);
+  return relayUrl;
+}
+function loadMobiusRuntimeConnection(environment = process.env) {
+  const channelId = requiredEnvironmentValue(environment, "MOBIUS_CHANNEL_ID");
+  if (!IDENTIFIER_PATTERN8.test(channelId)) {
+    throw new MobiusRuntimeConfigurationError("MOBIUS_CHANNEL_ID is invalid");
+  }
+  return Object.freeze({
+    auditDatabasePath: environment["MOBIUS_AUDIT_DATABASE"]?.trim() || join17(readStateDirectory(environment), "audit", `${channelId}.sqlite`),
+    channelId,
+    defaultWorkspace: loadDefaultWorkspace(environment),
+    relayUrl: requiredEnvironmentValue(environment, "MOBIUS_RELAY_URL"),
+    runtimeCredential: requiredEnvironmentValue(environment, "MOBIUS_RELAY_TOKEN")
+  });
+}
+async function resolveWorkspace(path2) {
+  const requested = resolve5(path2);
+  try {
+    await mkdir5(requested, { recursive: true, mode: 448 });
+    const resolved = await realpath8(requested);
+    const metadata = await stat8(resolved);
+    if (!metadata.isDirectory()) {
+      throw new MobiusRuntimeConfigurationError("The Runtime workspace is not a directory");
+    }
+    return resolved;
+  } catch (error61) {
+    if (error61 instanceof MobiusRuntimeConfigurationError) {
+      throw error61;
+    }
+    throw new MobiusRuntimeConfigurationError("The Runtime workspace cannot be resolved", { cause: error61 });
+  }
+}
+async function createMobiusRuntimeEngine(connection, signal, environment = process.env) {
+  signal.throwIfAborted();
+  const relayUrl = relayUrlFromConnection(connection);
+  const defaultWorkspace = await resolveWorkspace(connection.defaultWorkspace);
+  const auditDatabasePath = resolve5(connection.auditDatabasePath);
+  await mkdir5(dirname8(auditDatabasePath), { recursive: true, mode: 448 });
+  const inventory = await discoverLocalAgentInventory({
+    defaultWorkspace,
+    environment,
+    signal
+  });
+  if (inventory.available.length + inventory.installable.length === 0) {
+    throw new MobiusRuntimeConfigurationError("No supported Agent is available for the local Runtime");
+  }
+  return new MobiusRuntimeEngine(
+    createDaemonConfig(
+      {
+        auditDatabasePath,
+        channelId: connection.channelId,
+        defaultWorkspace,
+        relayUrl
+      },
+      inventory.readyAgents(),
+      inventory.installable
+    )
+  );
+}
+var MobiusRuntimeEngine = class {
+  #config;
+  #state = new IdleMobiusRuntimeState();
+  constructor(config2) {
+    validateRuntimeConfiguration(config2);
+    this.#config = config2;
+  }
+  run = async (signal) => {
+    if (!(this.#state instanceof IdleMobiusRuntimeState)) {
+      throw new MobiusRuntimeConfigurationError("A Mobius Runtime engine can only be started once");
+    }
+    signal.throwIfAborted();
+    this.#state = new RunningMobiusRuntimeState();
+    const audit = new AuditStore(this.#config.auditDatabasePath);
+    try {
+      await runDaemon(this.#config, audit, signal);
+    } finally {
+      audit.close();
+      this.#state = new FinishedMobiusRuntimeState();
+    }
+  };
+};
 export {
   AcpExecutionError,
   AuditStore,
@@ -30522,12 +31302,18 @@ export {
   BotMessageCommandError,
   BotOutboundIpcServer,
   LocalAuthorizationError,
+  MobiusRuntimeConfigurationError,
+  MobiusRuntimeEngine,
   PairingClientError,
   createAcpClient,
+  createMobiusRuntimeEngine,
   executeBotMessageCommand,
   loadDaemonConfig,
+  loadMobiusRuntimeConnection,
   pairLocalMachine,
+  pairMobiusRuntime,
   resumeLocalMachine,
+  resumeMobiusRuntime,
   runAcpPrompt,
   runDaemon
 };