@moxt-ai/mobius 0.0.335 → 0.0.337

package/dist/runtime.js

@@ -55,30 +55,17 @@ import { realpathSync, statSync } from "node:fs";
 // src/util/process/executable.ts
 import { spawn } from "node:child_process";
 import { stat as stat2 } from "node:fs/promises";
-import { join as join6, resolve as resolve2 } from "node:path";
+import { join as join3, resolve as resolve2 } from "node:path";
 
-// src/util/platform/linux.ts
+// src/util/process/platform/linux.ts
 import { constants as constants2, readdirSync, readFileSync } from "node:fs";
 import { access as access2, readdir, readFile, realpath as realpath2, stat } from "node:fs/promises";
-import { isAbsolute, join as join2 } from "node:path";
+import { join } from "node:path";
 
-// src/util/platform/posix.ts
+// src/util/process/platform/posix.ts
 import { execFile } from "node:child_process";
 import { constants } from "node:fs";
-import { access, chmod, lstat, realpath, unlink } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-
-// src/util/filesystem/path-error.ts
-var LocalPathError = class extends Error {
-  code = "unsafe_local_path";
-  constructor(message, options = {}) {
-    super(message, options);
-    this.name = "LocalPathError";
-  }
-};
-
-// src/util/platform/posix.ts
+import { access, realpath } from "node:fs/promises";
 var PROCESS_TABLE_TIMEOUT_MILLISECONDS = 1e3;
 var PROCESS_TABLE_OUTPUT_LIMIT_BYTES = 1024 * 1024;
 function parseProcessTable(output2) {
@@ -158,22 +145,7 @@ function terminateProcess(child, signal) {
   }
   child.kill(signal);
 }
-async function removeControlSocket(path7) {
-  try {
-    await unlink(path7);
-  } catch (cause) {
-    if (!(cause instanceof Error) || !("code" in cause) || cause.code !== "ENOENT") {
-      throw cause;
-    }
-  }
-}
 var posixOperations = {
-  controlSocketPath: (installationHash) => join(tmpdir(), `mobius-${installationHash}.sock`),
-  prepareControlSocket: removeControlSocket,
-  secureControlSocket: async (path7) => {
-    await chmod(path7, 384);
-  },
-  removeControlSocket,
   pathDelimiter: ":",
   environmentValue: (environment, name2) => environment[name2],
   executableExtensions: () => [""],
@@ -185,21 +157,10 @@ var posixOperations = {
   executableLaunch: (command, args) => ({ command, arguments: args }),
   spawnOptions: { detached: true, windowsHide: true },
   signalCapturedProcesses,
-  terminateProcess,
-  validatePathPermissions: async (path7, directory, privateAccess, signal) => {
-    signal.throwIfAborted();
-    const metadata = await lstat(path7);
-    if (process.getuid === void 0 || metadata.uid !== process.getuid()) {
-      throw new LocalPathError("Path is not user-owned");
-    }
-    if (privateAccess) {
-      await chmod(path7, directory ? 448 : 384);
-    }
-    signal.throwIfAborted();
-  }
+  terminateProcess
 };
 
-// src/util/platform/linux.ts
+// src/util/process/platform/linux.ts
 function appendLinuxProcessTableEntry(entries, processId, encoded) {
   const closingParenthesis = encoded.lastIndexOf(")");
   if (!encoded.startsWith(`${processId.toString()} (`) || closingParenthesis < 0) {
@@ -229,7 +190,7 @@ async function readLinuxProcessTable() {
         appendLinuxProcessTableEntry(
           entries,
           processId,
-          await readFile(join2("/proc", directory.name, "stat"), "utf8")
+          await readFile(join("/proc", directory.name, "stat"), "utf8")
         );
       } catch {
       }
@@ -254,7 +215,7 @@ function readLinuxProcessTableSynchronously() {
         appendLinuxProcessTableEntry(
           entries,
           processId,
-          readFileSync(join2("/proc", directory.name, "stat"), "utf8")
+          readFileSync(join("/proc", directory.name, "stat"), "utf8")
         );
       } catch {
       }
@@ -287,7 +248,7 @@ async function readLinuxProcessTableWithFallback() {
 }
 function processExists2(processId) {
   try {
-    const encoded = readFileSync(join2("/proc", processId.toString(), "stat"), "utf8");
+    const encoded = readFileSync(join("/proc", processId.toString(), "stat"), "utf8");
     const closingParenthesis = encoded.lastIndexOf(")");
     if (closingParenthesis >= 0) {
       const processState = encoded.slice(closingParenthesis + 1).trimStart().charAt(0);
@@ -299,80 +260,25 @@ function processExists2(processId) {
   }
   return processExists(processId);
 }
-var linuxPlatform = {
+var linuxProcessPlatform = {
   ...posixOperations,
   readProcessTable: readLinuxProcessTableWithFallback,
   readProcessTableSynchronously: readLinuxProcessTableSynchronously,
-  processExists: processExists2,
-  claudeCodeExecutablePaths: (environment) => {
-    const homeDirectory = environment["HOME"];
-    return homeDirectory !== void 0 && isAbsolute(homeDirectory) ? [join2(homeDirectory, ".local", "bin", "claude")] : [];
-  }
+  processExists: processExists2
 };
 
-// src/util/platform/macos.ts
-import { isAbsolute as isAbsolute2, join as join4 } from "node:path";
-
-// src/util/platform/claude-desktop.ts
-import { readdirSync as readdirSync2 } from "node:fs";
-import { join as join3 } from "node:path";
-function installedDirectories(directory) {
-  try {
-    return readdirSync2(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
-  } catch (cause) {
-    if (cause instanceof Error && "code" in cause && (cause.code === "ENOENT" || cause.code === "ENOTDIR" || cause.code === "EACCES")) {
-      return [];
-    }
-    throw cause;
-  }
-}
-function claudeDesktopExecutablePaths(roots, executablePaths) {
-  const paths = [];
-  for (const root of roots) {
-    const versions = installedDirectories(root).filter((version2) => /^\d+\.\d+\.\d+$/.test(version2)).toSorted((left, right) => right.localeCompare(left, "en", { numeric: true }));
-    for (const version2 of versions) {
-      const directory = join3(root, version2);
-      const installations = [
-        directory,
-        ...installedDirectories(directory).map((build) => join3(directory, build))
-      ];
-      for (const installation of installations) {
-        for (const executablePath of executablePaths) {
-          paths.push(join3(installation, ...executablePath));
-        }
-      }
-    }
-  }
-  return paths;
-}
-
-// src/util/platform/macos.ts
-var macosPlatform = {
+// src/util/process/platform/macos.ts
+var macosProcessPlatform = {
   ...posixOperations,
   readProcessTable: () => readProcessTableWithPs("/bin/ps"),
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: (environment) => {
-    const paths = ["/opt/homebrew/bin/claude", "/usr/local/bin/claude"];
-    const homeDirectory = environment["HOME"];
-    if (homeDirectory !== void 0 && isAbsolute2(homeDirectory)) {
-      paths.unshift(join4(homeDirectory, ".local", "bin", "claude"));
-      paths.push(
-        ...claudeDesktopExecutablePaths(
-          [join4(homeDirectory, "Library", "Application Support", "Claude", "claude-code")],
-          [["claude.app", "Contents", "MacOS", "claude"], ["claude"]]
-        )
-      );
-    }
-    return paths;
-  }
+  processExists
 };
 
-// src/util/platform/windows.ts
+// src/util/process/platform/windows.ts
 import { execFile as execFile2 } from "node:child_process";
 import { readFile as readFile2, realpath as realpath3 } from "node:fs/promises";
-import { dirname, extname, isAbsolute as isAbsolute3, join as join5, resolve } from "node:path";
-import { promisify } from "node:util";
+import { dirname, extname, join as join2, resolve } from "node:path";
 
 // src/util/process/process-error.ts
 var ProcessExecutionError = class extends Error {
@@ -384,28 +290,10 @@ var ProcessExecutionError = class extends Error {
   }
 };
 
-// src/util/platform/windows.ts
-var execute = promisify(execFile2);
+// src/util/process/platform/windows.ts
 function environmentValue(environment, name2) {
   return Object.entries(environment).find(([key]) => key.toUpperCase() === name2.toUpperCase())?.[1];
 }
-function desktopClaudeExecutablePaths(environment) {
-  const roots = [];
-  const localAppData = environmentValue(environment, "LOCALAPPDATA");
-  if (localAppData !== void 0 && isAbsolute3(localAppData)) {
-    const dataDirectory = join5(localAppData, "Claude-Data");
-    for (const installation of installedDirectories(dataDirectory)) {
-      if (installation.startsWith("claude_")) {
-        roots.push(join5(dataDirectory, installation, "claude-code"));
-      }
-    }
-  }
-  const appData = environmentValue(environment, "APPDATA");
-  if (appData !== void 0 && isAbsolute3(appData)) {
-    roots.push(join5(appData, "Claude", "claude-code"));
-  }
-  return claudeDesktopExecutablePaths(roots, [["claude.exe"]]);
-}
 function executableExtensions(executableName, environment) {
   if (/\.[a-zA-Z0-9]+$/.test(executableName)) {
     return [""];
@@ -464,7 +352,7 @@ function readProcessTable() {
   }
   return new Promise((resolveTable) => {
     execFile2(
-      join5(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
+      join2(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
       [
         "-NoLogo",
         "-NoProfile",
@@ -497,71 +385,7 @@ function terminateProcess2(child, signal) {
   }
   child.kill(signal);
 }
-var windowsPermissions = `
-$ErrorActionPreference = 'Stop'
-$ProgressPreference = 'SilentlyContinue'
-$item = Get-Item -LiteralPath $env:MOBIUS_PERMISSION_PATH -Force
-if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'Unsafe path' }
-$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
-$acl = $item.GetAccessControl()
-$owner = $acl.GetOwner([Security.Principal.SecurityIdentifier])
-if ($owner -ne $sid -and -not ($owner.Value -eq 'S-1-5-32-544' -and ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator))) { throw 'Path is not user-owned' }
-if ($env:MOBIUS_PERMISSION_PRIVATE -eq '1') {
-    if ($item.PSIsContainer) {
-        $private = New-Object Security.AccessControl.DirectorySecurity
-        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
-    } else {
-        $private = New-Object Security.AccessControl.FileSecurity
-        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'Allow')
-    }
-    $private.SetOwner($sid)
-    $private.SetAccessRuleProtection($true, $false)
-    $private.AddAccessRule($rule)
-    $item.SetAccessControl($private)
-}
-`;
-var windowsPermissionsTimeoutMs = 3e4;
-async function validatePathPermissions(path7, _directory, privateAccess, signal) {
-  signal.throwIfAborted();
-  const systemRoot = environmentValue(process.env, "SystemRoot");
-  if (systemRoot === void 0) {
-    throw new LocalPathError("Windows system directory is unavailable");
-  }
-  try {
-    await execute(
-      join5(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
-      [
-        "-NoLogo",
-        "-NoProfile",
-        "-NonInteractive",
-        "-EncodedCommand",
-        Buffer.from(windowsPermissions, "utf16le").toString("base64")
-      ],
-      {
-        env: {
-          ...process.env,
-          MOBIUS_PERMISSION_PATH: path7,
-          MOBIUS_PERMISSION_PRIVATE: privateAccess ? "1" : "0"
-        },
-        windowsHide: true,
-        signal: AbortSignal.any([signal, AbortSignal.timeout(windowsPermissionsTimeoutMs)]),
-        timeout: windowsPermissionsTimeoutMs,
-        maxBuffer: 16384
-      }
-    );
-  } catch (cause) {
-    signal.throwIfAborted();
-    throw new LocalPathError("The local path permissions could not be secured", { cause });
-  }
-}
-var windowsPlatform = {
-  controlSocketPath: (installationHash) => `\\\\.\\pipe\\mobius-${installationHash}`,
-  prepareControlSocket: async () => {
-  },
-  secureControlSocket: async () => {
-  },
-  removeControlSocket: async () => {
-  },
+var windowsProcessPlatform = {
   pathDelimiter: ";",
   environmentValue,
   executableExtensions,
@@ -570,44 +394,29 @@ var windowsPlatform = {
   spawnOptions: { detached: false, windowsHide: true },
   signalCapturedProcesses: signalCapturedProcesses2,
   terminateProcess: terminateProcess2,
-  validatePathPermissions,
   readProcessTable,
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: (environment) => {
-    const paths = [];
-    const userProfile = environmentValue(environment, "USERPROFILE");
-    if (userProfile !== void 0 && isAbsolute3(userProfile)) {
-      paths.push(join5(userProfile, ".local", "bin", "claude.exe"));
-    }
-    const localAppData = environmentValue(environment, "LOCALAPPDATA");
-    if (localAppData !== void 0 && isAbsolute3(localAppData)) {
-      paths.push(join5(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"));
-    }
-    paths.push(...desktopClaudeExecutablePaths(environment));
-    return paths;
-  }
+  processExists
 };
 
-// src/util/platform/index.ts
+// src/util/process/platform/index.ts
 var fallbackPlatform = {
   ...posixOperations,
   readProcessTable: () => readProcessTableWithPs("/usr/bin/ps"),
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: () => []
+  processExists
 };
 var platforms = /* @__PURE__ */ new Map([
-  ["linux", linuxPlatform],
-  ["darwin", macosPlatform],
-  ["win32", windowsPlatform]
+  ["linux", linuxProcessPlatform],
+  ["darwin", macosProcessPlatform],
+  ["win32", windowsProcessPlatform]
 ]);
-function platformSupportFor(platform2) {
+function processPlatformSupportFor(platform2) {
   return platforms.get(platform2) ?? fallbackPlatform;
 }
 
 // src/util/process/executable.ts
-var hostPlatform = platformSupportFor(process.platform);
+var hostPlatform = processPlatformSupportFor(process.platform);
 var DEFAULT_OUTPUT_LIMIT_BYTES = 16 * 1024;
 var PROCESS_GRACEFUL_STOP_TIMEOUT_MILLISECONDS = 1e3;
 var PROCESS_FORCED_STOP_TIMEOUT_MILLISECONDS = 5e3;
@@ -650,7 +459,7 @@ var ProcessResult = class {
 async function resolveExecutablePath(requestedPath2, platform2 = process.platform) {
   const absoluteRequestedPath = resolve2(requestedPath2);
   try {
-    const resolvedPath = await platformSupportFor(platform2).resolveExecutableTarget(absoluteRequestedPath);
+    const resolvedPath = await processPlatformSupportFor(platform2).resolveExecutableTarget(absoluteRequestedPath);
     const metadata = await stat2(resolvedPath);
     if (!metadata.isFile()) {
       return null;
@@ -670,7 +479,7 @@ async function resolveExecutablePath(requestedPath2, platform2 = process.platfor
   }
 }
 async function findExecutableOnPath(executableName, environment, platform2 = process.platform) {
-  const support = platformSupportFor(platform2);
+  const support = processPlatformSupportFor(platform2);
   const encodedPath = support.environmentValue(environment, "PATH") ?? "";
   const separator = support.pathDelimiter;
   const extensions = support.executableExtensions(executableName, environment);
@@ -679,7 +488,7 @@ async function findExecutableOnPath(executableName, environment, platform2 = pro
       continue;
     }
     for (const extension of extensions) {
-      const requestedPath2 = resolve2(join6(entry, `${executableName}${extension}`));
+      const requestedPath2 = resolve2(join3(entry, `${executableName}${extension}`));
       const executable = await resolveExecutablePath(requestedPath2, platform2);
       if (executable !== null) {
         return executable;
@@ -20920,7 +20729,7 @@ async function runCleanup(...actions) {
 }
 
 // src/acp/adapter/live-sessions.ts
-import { isAbsolute as isAbsolute4, resolve as resolve3 } from "node:path";
+import { isAbsolute, resolve as resolve3 } from "node:path";
 import { methods as methods3 } from "@agentclientprotocol/sdk";
 
 // ../mobius-sdk/src/protocol/platform/mobius-api.ts
@@ -20993,17 +20802,6 @@ var ProtocolMessageError = class extends Error {
     this.name = "ProtocolMessageError";
   }
 };
-var UnsupportedProtocolMessageKindError = class extends Error {
-  code = "unsupported_protocol_message_kind";
-  direction;
-  messageKind;
-  constructor(direction, messageKind) {
-    super(`Unsupported ${direction} message kind: ${messageKind}`);
-    this.name = "UnsupportedProtocolMessageKindError";
-    this.direction = direction;
-    this.messageKind = messageKind;
-  }
-};
 function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -22507,7 +22305,129 @@ var sessionWireEventSchema = external_exports.union([
 var sessionWireEnvelopeSchema = external_exports.object({
   kind: external_exports.literal(SESSION_EVENT_KIND),
   events: external_exports.array(sessionWireEventSchema).min(1).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly()
-}).readonly();
+}).passthrough().readonly();
+var knownContentBlockTypes = /* @__PURE__ */ new Set([
+  "text",
+  "image",
+  "audio",
+  "resource_link",
+  "resource",
+  "external_image",
+  "external_audio",
+  "external_resource"
+]);
+var knownToolCallContentTypes = /* @__PURE__ */ new Set(["content", "diff", "terminal"]);
+var knownPlanTypes = /* @__PURE__ */ new Set(["items", "file", "markdown"]);
+var knownConfigOptionTypes = /* @__PURE__ */ new Set(["select", "boolean"]);
+var knownSessionUpdates = /* @__PURE__ */ new Set([
+  "user_message_chunk",
+  "agent_message_chunk",
+  "agent_thought_chunk",
+  "tool_call",
+  "tool_call_update",
+  "plan",
+  "plan_update",
+  "plan_removed",
+  "available_commands_update",
+  "current_mode_update",
+  "config_option_update",
+  "session_info_update",
+  "usage_update",
+  "compaction_update",
+  "compaction_summary_chunk"
+]);
+var knownLifecycleKinds = /* @__PURE__ */ new Set([
+  "session.queue.changed",
+  "session.permission.requested",
+  "session.permission.resolved",
+  "session.elicitation.requested",
+  "session.elicitation.resolved",
+  "prompt.requested",
+  "prompt.started",
+  "prompt.completed",
+  "prompt.failed-before-start",
+  "prompt.failed"
+]);
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasUnknownDiscriminator(value, key, known) {
+  if (!isRecord3(value)) {
+    return false;
+  }
+  const variant = value[key];
+  return typeof variant === "string" && !known.has(variant);
+}
+function containsUnknownContentBlock(value) {
+  return hasUnknownDiscriminator(value, "type", knownContentBlockTypes);
+}
+function containsUnknownToolCallContent(value) {
+  if (hasUnknownDiscriminator(value, "type", knownToolCallContentTypes)) {
+    return true;
+  }
+  return isRecord3(value) && value["type"] === "content" && containsUnknownContentBlock(value["content"]);
+}
+function arrayContainsUnknown(value, predicate) {
+  return Array.isArray(value) && value.some(predicate);
+}
+function containsUnknownAcpVariant(payload) {
+  const update = payload["sessionUpdate"];
+  if (typeof update !== "string") {
+    return false;
+  }
+  if (!knownSessionUpdates.has(update)) {
+    return true;
+  }
+  if (["user_message_chunk", "agent_message_chunk", "agent_thought_chunk", "compaction_summary_chunk"].includes(
+    update
+  )) {
+    return containsUnknownContentBlock(payload["content"]);
+  }
+  if (update === "tool_call" || update === "tool_call_update") {
+    return arrayContainsUnknown(payload["content"], containsUnknownToolCallContent);
+  }
+  if (update === "plan_update") {
+    return hasUnknownDiscriminator(payload["plan"], "type", knownPlanTypes);
+  }
+  if (update === "config_option_update") {
+    return arrayContainsUnknown(
+      payload["configOptions"],
+      (option) => hasUnknownDiscriminator(option, "type", knownConfigOptionTypes)
+    );
+  }
+  if (update === "compaction_update") {
+    return arrayContainsUnknown(payload["summary"], containsUnknownContentBlock);
+  }
+  return false;
+}
+function isKnownSessionEventVariant(value) {
+  if (!isRecord3(value)) {
+    return true;
+  }
+  const type = value["type"];
+  if (typeof type !== "string") {
+    return true;
+  }
+  if (type === "acp") {
+    const payload = value["payload"];
+    return !isRecord3(payload) || !containsUnknownAcpVariant(payload);
+  }
+  if (type === "lifecycle-metadata") {
+    const payload = value["payload"];
+    if (!isRecord3(payload)) {
+      return true;
+    }
+    const kind = payload["kind"];
+    if (typeof kind === "string" && !knownLifecycleKinds.has(kind)) {
+      return false;
+    }
+    return kind !== "prompt.requested" || !arrayContainsUnknown(payload["content"], containsUnknownContentBlock);
+  }
+  return false;
+}
+function filterKnownSessionEventVariants(events) {
+  return Array.isArray(events) ? events.filter(isKnownSessionEventVariant) : events;
+}
 var sessionEventBatchSchema = external_exports.array(sessionEventSchema).min(1).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
 var sessionLiveEventBatchSchema = external_exports.array(sessionLiveEventSchema).min(1).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
 var sessionExportSchema = external_exports.object({
@@ -22593,10 +22513,28 @@ function decode4(value, schema) {
 function encode3(value, schema) {
   return JSON.stringify(decode4(value, schema));
 }
+function sanitizeKnownNativeSessionEvents(value) {
+  const input2 = inputValue(value);
+  if (!isRecord3(input2)) {
+    return input2;
+  }
+  const page = input2["events"];
+  const queuedPromptRequests = input2["queuedPromptRequests"];
+  return {
+    ...input2,
+    events: isRecord3(page) ? { ...page, events: filterKnownSessionEventVariants(page["events"]) } : page,
+    queuedPromptRequests: Array.isArray(queuedPromptRequests) ? queuedPromptRequests.filter(
+      (prompt) => !isRecord3(prompt) || !arrayContainsUnknown(prompt["content"], containsUnknownContentBlock)
+    ) : queuedPromptRequests
+  };
+}
+var knownSessionLiveEventBatchSchema = external_exports.array(sessionLiveEventSchema).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
 var decodeSessionEvent = (value) => decode4(value, sessionEventSchema);
+var decodeKnownSessionEventPayload = (value) => isKnownSessionEventVariant(value) ? decode4(value, sessionEventPayloadSchema) : null;
 var decodeSessionEventEnvelope = (value) => decode4(value, sessionEventEnvelopeSchema);
 var encodeSessionEventEnvelope = (value) => encode3(value, sessionEventEnvelopeSchema);
 var decodeAcpSessionUpdate = (value) => decode4(value, acpSessionUpdateSchema);
+var decodeKnownNativeSessionEvents = (value) => decode4(sanitizeKnownNativeSessionEvents(value), nativeSessionEventsSchema);
 
 // ../mobius-sdk/src/protocol/session/observability/history.ts
 var SESSION_HISTORY_PAGE_LOAD_KIND = "session.live-history.v2.page.load";
@@ -22627,6 +22565,30 @@ var pageLoadedFields = {
 };
 var sessionHistoryPageLoadedSchema = external_exports.object({ ...pageLoadedFields, kind: external_exports.literal(SESSION_HISTORY_PAGE_LOADED_KIND) }).readonly();
 var sessionPreviewHistoryPageLoadedSchema = external_exports.object({ ...pageLoadedFields, kind: external_exports.literal(SESSION_PREVIEW_HISTORY_PAGE_LOADED_KIND) }).readonly();
+var wireNativeSessionEventsSchema = external_exports.object({
+  events: external_exports.object({
+    events: external_exports.array(external_exports.unknown()).max(1e4).readonly(),
+    nextCursor: external_exports.string().min(1).max(512).nullable(),
+    sessionGenerationId: identifierStringSchema,
+    tailCursor: external_exports.string().max(512),
+    throughPosition: external_exports.string().regex(/^(0|[1-9][0-9]*)$/u).optional(),
+    truncated: external_exports.boolean(),
+    version: external_exports.literal(2)
+  }).passthrough().readonly(),
+  queuedPromptRequests: external_exports.array(external_exports.unknown()).max(1e3).readonly()
+}).passthrough().readonly();
+var sessionHistoryWirePageLoadedSchema = external_exports.object({
+  events: wireNativeSessionEventsSchema,
+  kind: external_exports.literal(SESSION_HISTORY_PAGE_LOADED_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).passthrough().readonly();
+var sessionPreviewHistoryWirePageLoadedSchema = external_exports.object({
+  events: wireNativeSessionEventsSchema,
+  kind: external_exports.literal(SESSION_PREVIEW_HISTORY_PAGE_LOADED_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).passthrough().readonly();
 function decode5(schema, encoded) {
   try {
     const value = JSON.parse(encoded);
@@ -22635,10 +22597,21 @@ function decode5(schema, encoded) {
     throw new ProtocolMessageError("Invalid live Session history message", { cause });
   }
 }
+function decodeLoaded(schema, encoded) {
+  try {
+    const value = JSON.parse(encoded);
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+      return schema.parse(value);
+    }
+    return schema.parse({ ...value, events: decodeKnownNativeSessionEvents(Reflect.get(value, "events")) });
+  } catch (cause) {
+    throw new ProtocolMessageError("Invalid live Session history message", { cause });
+  }
+}
 var decodeSessionHistoryPageLoad = (encoded) => decode5(sessionHistoryPageLoadSchema, encoded);
-var decodeSessionHistoryPageLoaded = (encoded) => decode5(sessionHistoryPageLoadedSchema, encoded);
+var decodeSessionHistoryPageLoaded = (encoded) => decodeLoaded(sessionHistoryPageLoadedSchema, encoded);
 var decodeSessionPreviewHistoryPageLoad = (encoded) => decode5(sessionPreviewHistoryPageLoadSchema, encoded);
-var decodeSessionPreviewHistoryPageLoaded = (encoded) => decode5(sessionPreviewHistoryPageLoadedSchema, encoded);
+var decodeSessionPreviewHistoryPageLoaded = (encoded) => decodeLoaded(sessionPreviewHistoryPageLoadedSchema, encoded);
 var encodeSessionHistoryPageLoad = (value) => JSON.stringify(sessionHistoryPageLoadSchema.parse(value));
 var encodeSessionHistoryPageLoaded = (value) => JSON.stringify(sessionHistoryPageLoadedSchema.parse(value));
 var encodeSessionPreviewHistoryPageLoad = (value) => JSON.stringify(sessionPreviewHistoryPageLoadSchema.parse(value));
@@ -22879,13 +22852,28 @@ var serviceToDaemonSignatures = {
   )
 };
 var serviceToDaemonRegistry = serviceToDaemonSignatures;
-function decodeServiceToDaemonMessage(encoded) {
+var knownNativeActions = /* @__PURE__ */ new Set(["active-turn", "find", "list", "import", "fork"]);
+function isRecord4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasUnknownDiscriminator2(value, key, known) {
+  if (!isRecord4(value)) {
+    return false;
+  }
+  const variant = value[key];
+  return typeof variant === "string" && !known.has(variant);
+}
+function hasUnknownServiceVariant(kind, value) {
+  return kind === NATIVE_SESSION_REQUEST_KIND && hasUnknownDiscriminator2(value, "action", knownNativeActions);
+}
+function decodeKnownServiceToDaemonMessage(encoded) {
   const kind = decodeMessageKind(encoded);
   const signature = serviceToDaemonRegistry[kind];
   if (signature === void 0) {
-    throw new UnsupportedProtocolMessageKindError("service-to-daemon", kind);
+    return null;
   }
-  return signature.decoder(encoded);
+  const value = parseJson(encoded);
+  return hasUnknownServiceVariant(kind, value) ? null : signature.decoder(encoded);
 }
 var daemonToServiceSignatures = {
   [SESSION_CLOSED_KIND]: defineMessageSignature(
@@ -23101,7 +23089,7 @@ var SessionConfigProtocolError = class extends Error {
     this.name = "SessionConfigProtocolError";
   }
 };
-function isRecord3(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readString3(value, fallback = "") {
@@ -23132,7 +23120,7 @@ function normalizeConfigValues(value) {
   }
   const normalized = [];
   for (const entry of value) {
-    if (!isRecord3(entry)) {
+    if (!isRecord5(entry)) {
       continue;
     }
     const groupedOptions = entry["options"];
@@ -23140,7 +23128,7 @@ function normalizeConfigValues(value) {
       const groupId = readString3(entry["group"]);
       const groupName = readString3(entry["name"]);
       for (const groupedOption of groupedOptions) {
-        if (isRecord3(groupedOption)) {
+        if (isRecord5(groupedOption)) {
           const normalizedValue = normalizeConfigValue(groupedOption, groupId, groupName);
           if (normalizedValue !== void 0) {
             normalized.push(normalizedValue);
@@ -23165,7 +23153,7 @@ function normalizeConfigOptions(value, modes) {
   const normalized = [];
   if (Array.isArray(value)) {
     for (const option of value) {
-      if (!isRecord3(option)) {
+      if (!isRecord5(option)) {
         continue;
       }
       const id = truncate2(readString3(option["id"]), 128);
@@ -23205,12 +23193,12 @@ function normalizeConfigOptions(value, modes) {
       }
     }
   }
-  if (isRecord3(modes)) {
+  if (isRecord5(modes)) {
     const values = [];
     const availableModes = modes["availableModes"];
     if (Array.isArray(availableModes)) {
       for (const mode of availableModes) {
-        if (!isRecord3(mode)) {
+        if (!isRecord5(mode)) {
           continue;
         }
         const id = truncate2(readString3(mode["id"]), 500);
@@ -23243,7 +23231,7 @@ function normalizeConfigOptions(value, modes) {
   return normalized.slice(0, MAXIMUM_CONFIG_OPTIONS);
 }
 function normalizeStandardLifecycle(response) {
-  const lifecycle = isRecord3(response) ? response : {};
+  const lifecycle = isRecord5(response) ? response : {};
   return normalizeConfigOptions(lifecycle["configOptions"], lifecycle["modes"]);
 }
 function replaceStandardConfigOptions(current, value) {
@@ -23285,7 +23273,7 @@ var StandardSessionConfigProtocol = class {
       "ACP agent exited while changing session configuration",
       change.signal
     );
-    if (!isRecord3(response) || !Array.isArray(response["configOptions"])) {
+    if (!isRecord5(response) || !Array.isArray(response["configOptions"])) {
       throw new SessionConfigProtocolError("The Agent returned an invalid session configuration response");
     }
     return replaceStandardConfigOptions(current, response["configOptions"]);
@@ -23594,7 +23582,7 @@ var AcpSessionConnector = class {
 };
 
 // src/acp/adapter/live-sessions.ts
-var absolutePathSchema = external_exports.string().min(1).refine(isAbsolute4);
+var absolutePathSchema = external_exports.string().min(1).refine(isAbsolute);
 var targetSchema = external_exports.object({
   nativeSessionId: nativeSessionIdSchema,
   cwd: absolutePathSchema,
@@ -24924,7 +24912,7 @@ import { createHash as createHash3 } from "node:crypto";
 import { spawn as spawn2 } from "node:child_process";
 
 // src/acp/harness/codex/app-server-protocol.ts
-import { isAbsolute as isAbsolute5 } from "node:path";
+import { isAbsolute as isAbsolute2 } from "node:path";
 var boundedText = (maximum) => external_exports.string().max(maximum);
 var jsonValue = external_exports.lazy(() => external_exports.unknown());
 var requestIdSchema = external_exports.union([external_exports.number(), external_exports.string()]).refine((value) => typeof value === "number" || value.length <= 256);
@@ -24996,7 +24984,7 @@ var imageGenerationItemSchema = external_exports.object({
 });
 var threadItemSchema = external_exports.discriminatedUnion("type", [
   imageGenerationItemSchema,
-  external_exports.object({ type: external_exports.literal("imageView"), id: boundedText(256), path: boundedText(32768).refine(isAbsolute5) }),
+  external_exports.object({ type: external_exports.literal("imageView"), id: boundedText(256), path: boundedText(32768).refine(isAbsolute2) }),
   external_exports.object({
     id: boundedText(256),
     text: boundedText(1e6),
@@ -25474,7 +25462,7 @@ var CodexAppServerClient = class {
 import { createHash } from "node:crypto";
 
 // src/acp/content/raster.ts
-import { basename, isAbsolute as isAbsolute6, normalize } from "node:path";
+import { basename, isAbsolute as isAbsolute3, normalize } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // src/storage/files/local-files.ts
@@ -25581,13 +25569,13 @@ function sniffRasterMime(bytes) {
 }
 async function resolveCanonicalPath(requested, signal) {
   signal.throwIfAborted();
-  if (!isAbsolute6(requested) || requested.includes("\0") || normalize(requested) !== requested) {
+  if (!isAbsolute3(requested) || requested.includes("\0") || normalize(requested) !== requested) {
     return null;
   }
   try {
     const target = await canonicalPath(requested);
     signal.throwIfAborted();
-    if (!isAbsolute6(target) || normalize(target) !== target) {
+    if (!isAbsolute3(target) || normalize(target) !== target) {
       return null;
     }
     return target;
@@ -25618,7 +25606,7 @@ function parseLocalImageUri(uri) {
       return null;
     }
   }
-  if (!isAbsolute6(trimmed) && /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
+  if (!isAbsolute3(trimmed) && /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
     return null;
   }
   return trimmed;
@@ -26884,12 +26872,12 @@ async function replayCodexHistory(client2, threadId, emit, signal) {
 
 // src/storage/session/temporary-session-event-cache.ts
 import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir as tmpdir2 } from "node:os";
-import { join as join8 } from "node:path";
+import { tmpdir } from "node:os";
+import { join as join5 } from "node:path";
 
 // src/storage/sqlite/local-databases.ts
 import { createHash as createHash2 } from "node:crypto";
-import { join as join7 } from "node:path";
+import { join as join4 } from "node:path";
 
 // src/generated/acp-session-store-migrations.ts
 var acpSessionStoreMigrations = [
@@ -27432,7 +27420,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   _sql.raw = raw;
-  function join32(chunks, separator) {
+  function join34(chunks, separator) {
     const result = [];
     for (const [i, chunk] of chunks.entries()) {
       if (i > 0 && separator !== void 0) result.push(separator);
@@ -27440,7 +27428,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  _sql.join = join32;
+  _sql.join = join34;
   function identifier2(value) {
     return new Name(value);
   }
@@ -29161,7 +29149,7 @@ var SQLiteSelectBase = class extends TypedQueryBuilder {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
       for (const item of extractUsedTable(table)) this.usedTables.add(item);
-      if (typeof tableName === "string" && this.config.joins?.some((join32) => join32.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+      if (typeof tableName === "string" && this.config.joins?.some((join34) => join34.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
       if (!this.isPartialSelect) {
         if (Object.keys(this.joinsNotNullableMap).length === 1 && typeof baseTableName === "string") this.config.fields = { [baseTableName]: this.config.fields };
         if (typeof tableName === "string" && !is(table, SQL)) {
@@ -30707,7 +30695,7 @@ var SQLiteDialect = class {
       if (!joins2) return;
       const withEntries = Object.entries(joins2).filter(([_, v]) => v);
       if (!withEntries.length) return;
-      return sql.join(withEntries.map(([k2, join32]) => {
+      return sql.join(withEntries.map(([k2, join34]) => {
         const relation = tableConfig.relations[k2];
         const isSingle2 = is(relation, One);
         const targetTable = aliasedTable(relation.targetTable, `d${currentDepth + 1}`);
@@ -30718,7 +30706,7 @@ var SQLiteDialect = class {
           table: targetTable,
           mode: isSingle2 ? "first" : "many",
           schema,
-          queryConfig: join32,
+          queryConfig: join34,
           tableConfig: schema[relation.targetTableName],
           relationWhere: filter,
           isNested: true,
@@ -30732,7 +30720,7 @@ var SQLiteDialect = class {
           key: k2,
           selection: innerQuery.selection,
           isArray: !isSingle2,
-          isOptional: (relation.optional ?? false) || join32 !== true && !!join32.where
+          isOptional: (relation.optional ?? false) || join34 !== true && !!join34.where
         });
         const jsonColumns = sql.join(innerQuery.selection.map((s) => {
           return sql`${sql.raw(this.escapeString(s.key))}, ${s.selection ? sql`${jsonb}(${sql.identifier(s.key)})` : sql.identifier(s.key)}`;
@@ -31086,7 +31074,7 @@ var SQLiteUpdateBase = class {
   createJoin(joinType) {
     return ((table, on2) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join32) => join32.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+      if (typeof tableName === "string" && this.config.joins.some((join34) => join34.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
       if (typeof on2 === "function") {
         const from = this.config.from ? is(table, SQLiteTable) ? table[Table.Symbol.Columns] : is(table, Subquery) ? table._.selectedFields : is(table, SQLiteViewBase) ? table[ViewBaseConfig].selectedFields : void 0 : void 0;
         on2 = on2(new Proxy(this.config.table[Table.Symbol.Columns], new SelectionProxyHandler({
@@ -31870,8 +31858,8 @@ var LocalSqliteDatabase = class {
 function channelSessionDatabasePaths(stateDirectory, channelId) {
   const channelHash = createHash2("sha256").update(channelId).digest("hex");
   return {
-    events: join7(stateDirectory, "sessions", `${channelHash}.events.sqlite`),
-    sessions: join7(stateDirectory, "sessions", `${channelHash}.sqlite`)
+    events: join4(stateDirectory, "sessions", `${channelHash}.events.sqlite`),
+    sessions: join4(stateDirectory, "sessions", `${channelHash}.sqlite`)
   };
 }
 var openAcpSessionDatabase = (path7) => new LocalSqliteDatabase(path7, "ACP Session database", acpSessionStoreMigrations);
@@ -32049,11 +32037,11 @@ var SessionEventCacheTable = class {
 
 // src/storage/session/temporary-session-event-cache.ts
 function openTemporarySessionEventCache() {
-  const directory = mkdtempSync(join8(tmpdir2(), "mobius-preview-events-"));
+  const directory = mkdtempSync(join5(tmpdir(), "mobius-preview-events-"));
   const removeFiles = () => rmSync(directory, { recursive: true, force: true });
   try {
     return {
-      table: new SessionEventCacheTable(openSessionEventCacheDatabase(join8(directory, "events.sqlite"))),
+      table: new SessionEventCacheTable(openSessionEventCacheDatabase(join5(directory, "events.sqlite"))),
       removeFiles
     };
   } catch (error62) {
@@ -32345,7 +32333,7 @@ var toolImageSchema = external_exports.union([
     file: external_exports.object({ base64: external_exports.string(), type: external_exports.string() })
   }).transform(({ file: file2 }) => ({ type: "image", data: file2.base64, mimeType: file2.type }))
 ]);
-function isRecord4(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 var AcpContentExternalizer = class {
@@ -32452,13 +32440,13 @@ var AcpContentExternalizer = class {
       }
       return result2;
     }
-    if (!isRecord4(value)) {
+    if (!isRecord6(value)) {
       return value;
     }
     const image = toolImageSchema.safeParse(value);
     if (image.success && image.data.data.length > 0) {
       const prepared = await this.#content(sessionId, image.data, signal);
-      if (isRecord4(prepared.event) && typeof prepared.event["imageKey"] === "string") {
+      if (isRecord6(prepared.event) && typeof prepared.event["imageKey"] === "string") {
         images.set(prepared.event["imageKey"], prepared);
       } else {
         images.set(`unavailable:${images.size}`, prepared);
@@ -32489,7 +32477,7 @@ var AcpContentExternalizer = class {
       const prepared = await this.#content(sessionId, content, signal);
       agentContent.push({ ...item, content: prepared.agent });
       eventContent.push({ ...item, content: prepared.event });
-      if (isRecord4(prepared.event) && typeof prepared.event["imageKey"] === "string") {
+      if (isRecord6(prepared.event) && typeof prepared.event["imageKey"] === "string") {
         images.delete(prepared.event["imageKey"]);
       }
     }
@@ -32563,13 +32551,13 @@ var RuntimeAgentDependencies = class {
 
 // src/daemon/pairing/pair-local-machine.ts
 import { hostname as hostname3 } from "node:os";
-import { basename as basename6, join as join24, resolve as resolve16 } from "node:path";
+import { basename as basename6, join as join26, resolve as resolve16 } from "node:path";
 import { fetch as fetch3 } from "undici";
 
 // package.json
 var package_default = {
   name: "@moxt-ai/mobius",
-  version: "0.0.335",
+  version: "0.0.337",
   description: "Mobius CLI for pairing and running local AI agent services.",
   type: "module",
   bin: {
@@ -32751,7 +32739,7 @@ import { existsSync as existsSync3 } from "node:fs";
 import * as fs3 from "node:fs/promises";
 import * as os3 from "node:os";
 import * as path6 from "node:path";
-import { promisify as promisify2 } from "node:util";
+import { promisify } from "node:util";
 import { agent as acpAgent, CreateElicitationResponse as CreateElicitationResponse2, methods as methods7, ndJsonStream, RequestError as RequestError6 } from "@agentclientprotocol/sdk";
 
 // ../../node_modules/.pnpm/@anthropic-ai+claude-agent-sdk@0.3.257_@anthropic-ai+sdk@0.122.0_zod@4.6.5__@modelconte_b0b90ed00d211c5955785f7de7f8dbf4/node_modules/@anthropic-ai/claude-agent-sdk/sdk.mjs
@@ -69847,7 +69835,7 @@ var DESTINATIONS = /* @__PURE__ */ new Set([
 ]);
 var BEHAVIORS = /* @__PURE__ */ new Set(["allow", "deny", "ask"]);
 var MODES = /* @__PURE__ */ new Set(["default", "acceptEdits", "bypassPermissions", "plan", "dontAsk", "auto"]);
-function isRecord5(value) {
+function isRecord7(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
 function isDestination(value) {
@@ -69864,13 +69852,13 @@ function safePlainString(value, maxLength) {
   });
 }
 function isRule(value) {
-  if (!isRecord5(value) || !safePlainString(value.toolName, MAX_TOOL_NAME_LENGTH)) {
+  if (!isRecord7(value) || !safePlainString(value.toolName, MAX_TOOL_NAME_LENGTH)) {
     return false;
   }
   return value.ruleContent === void 0 || safePlainString(value.ruleContent, MAX_RULE_CONTENT_LENGTH);
 }
 function isKnownUpdate(value) {
-  if (!isRecord5(value) || !isDestination(value.destination) || typeof value.type !== "string") {
+  if (!isRecord7(value) || !isDestination(value.destination) || typeof value.type !== "string") {
     return false;
   }
   switch (value.type) {
@@ -72117,7 +72105,7 @@ var SessionModeManager = class {
 
 // src/acp/harness/claude/upstream/dist/acp-agent.js
 var CLAUDE_CONFIG_DIR = process.env.CLAUDE_CONFIG_DIR ?? path6.join(os3.homedir(), ".claude");
-var execFileAsync = promisify2(execFile3);
+var execFileAsync = promisify(execFile3);
 var ZERO_USAGE = Object.freeze({
   input_tokens: 0,
   output_tokens: 0,
@@ -76884,6 +76872,237 @@ var ClaudeAgentConnection = class extends EndpointAgentConnection {
   }
 };
 
+// src/util/platform/linux.ts
+import { isAbsolute as isAbsolute8, join as join13 } from "node:path";
+
+// src/util/platform/posix.ts
+import { chmod, lstat as lstat2, unlink as unlink2 } from "node:fs/promises";
+import { tmpdir as tmpdir2 } from "node:os";
+import { join as join12 } from "node:path";
+
+// src/util/filesystem/path-error.ts
+var LocalPathError = class extends Error {
+  code = "unsafe_local_path";
+  constructor(message, options = {}) {
+    super(message, options);
+    this.name = "LocalPathError";
+  }
+};
+
+// src/util/platform/posix.ts
+async function removeControlSocket(path7) {
+  try {
+    await unlink2(path7);
+  } catch (cause) {
+    if (!(cause instanceof Error) || !("code" in cause) || cause.code !== "ENOENT") {
+      throw cause;
+    }
+  }
+}
+var posixOperations2 = {
+  controlSocketPath: (installationHash) => join12(tmpdir2(), `mobius-${installationHash}.sock`),
+  prepareControlSocket: removeControlSocket,
+  secureControlSocket: async (path7) => {
+    await chmod(path7, 384);
+  },
+  removeControlSocket,
+  validatePathPermissions: async (path7, directory, privateAccess, signal) => {
+    signal.throwIfAborted();
+    const metadata = await lstat2(path7);
+    if (process.getuid === void 0 || metadata.uid !== process.getuid()) {
+      throw new LocalPathError("Path is not user-owned");
+    }
+    if (privateAccess) {
+      await chmod(path7, directory ? 448 : 384);
+    }
+    signal.throwIfAborted();
+  }
+};
+
+// src/util/platform/linux.ts
+var linuxPlatform = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: (environment) => {
+    const homeDirectory = environment["HOME"];
+    return homeDirectory !== void 0 && isAbsolute8(homeDirectory) ? [join13(homeDirectory, ".local", "bin", "claude")] : [];
+  }
+};
+
+// src/util/platform/macos.ts
+import { isAbsolute as isAbsolute9, join as join15 } from "node:path";
+
+// src/util/platform/claude-desktop.ts
+import { readdirSync as readdirSync3 } from "node:fs";
+import { join as join14 } from "node:path";
+function installedDirectories(directory) {
+  try {
+    return readdirSync3(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+  } catch (cause) {
+    if (cause instanceof Error && "code" in cause && (cause.code === "ENOENT" || cause.code === "ENOTDIR" || cause.code === "EACCES")) {
+      return [];
+    }
+    throw cause;
+  }
+}
+function claudeDesktopExecutablePaths(roots, executablePaths) {
+  const paths = [];
+  for (const root of roots) {
+    const versions = installedDirectories(root).filter((version2) => /^\d+\.\d+\.\d+$/.test(version2)).toSorted((left, right) => right.localeCompare(left, "en", { numeric: true }));
+    for (const version2 of versions) {
+      const directory = join14(root, version2);
+      const installations = [
+        directory,
+        ...installedDirectories(directory).map((build) => join14(directory, build))
+      ];
+      for (const installation of installations) {
+        for (const executablePath of executablePaths) {
+          paths.push(join14(installation, ...executablePath));
+        }
+      }
+    }
+  }
+  return paths;
+}
+
+// src/util/platform/macos.ts
+var macosPlatform = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: (environment) => {
+    const paths = ["/opt/homebrew/bin/claude", "/usr/local/bin/claude"];
+    const homeDirectory = environment["HOME"];
+    if (homeDirectory !== void 0 && isAbsolute9(homeDirectory)) {
+      paths.unshift(join15(homeDirectory, ".local", "bin", "claude"));
+      paths.push(
+        ...claudeDesktopExecutablePaths(
+          [join15(homeDirectory, "Library", "Application Support", "Claude", "claude-code")],
+          [["claude.app", "Contents", "MacOS", "claude"], ["claude"]]
+        )
+      );
+    }
+    return paths;
+  }
+};
+
+// src/util/platform/windows.ts
+import { execFile as execFile4 } from "node:child_process";
+import { isAbsolute as isAbsolute10, join as join16 } from "node:path";
+import { promisify as promisify2 } from "node:util";
+var execute = promisify2(execFile4);
+function environmentValue2(environment, name2) {
+  return Object.entries(environment).find(([key]) => key.toUpperCase() === name2.toUpperCase())?.[1];
+}
+function desktopClaudeExecutablePaths(environment) {
+  const roots = [];
+  const localAppData = environmentValue2(environment, "LOCALAPPDATA");
+  if (localAppData !== void 0 && isAbsolute10(localAppData)) {
+    const dataDirectory = join16(localAppData, "Claude-Data");
+    for (const installation of installedDirectories(dataDirectory)) {
+      if (installation.startsWith("claude_")) {
+        roots.push(join16(dataDirectory, installation, "claude-code"));
+      }
+    }
+  }
+  const appData = environmentValue2(environment, "APPDATA");
+  if (appData !== void 0 && isAbsolute10(appData)) {
+    roots.push(join16(appData, "Claude", "claude-code"));
+  }
+  return claudeDesktopExecutablePaths(roots, [["claude.exe"]]);
+}
+var windowsPermissions = `
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+$item = Get-Item -LiteralPath $env:MOBIUS_PERMISSION_PATH -Force
+if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'Unsafe path' }
+$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
+$acl = $item.GetAccessControl()
+$owner = $acl.GetOwner([Security.Principal.SecurityIdentifier])
+if ($owner -ne $sid -and -not ($owner.Value -eq 'S-1-5-32-544' -and ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator))) { throw 'Path is not user-owned' }
+if ($env:MOBIUS_PERMISSION_PRIVATE -eq '1') {
+    if ($item.PSIsContainer) {
+        $private = New-Object Security.AccessControl.DirectorySecurity
+        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
+    } else {
+        $private = New-Object Security.AccessControl.FileSecurity
+        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'Allow')
+    }
+    $private.SetOwner($sid)
+    $private.SetAccessRuleProtection($true, $false)
+    $private.AddAccessRule($rule)
+    $item.SetAccessControl($private)
+}
+`;
+var windowsPermissionsTimeoutMs = 3e4;
+async function validatePathPermissions(path7, _directory, privateAccess, signal) {
+  signal.throwIfAborted();
+  const systemRoot = environmentValue2(process.env, "SystemRoot");
+  if (systemRoot === void 0) {
+    throw new LocalPathError("Windows system directory is unavailable");
+  }
+  try {
+    await execute(
+      join16(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
+      [
+        "-NoLogo",
+        "-NoProfile",
+        "-NonInteractive",
+        "-EncodedCommand",
+        Buffer.from(windowsPermissions, "utf16le").toString("base64")
+      ],
+      {
+        env: {
+          ...process.env,
+          MOBIUS_PERMISSION_PATH: path7,
+          MOBIUS_PERMISSION_PRIVATE: privateAccess ? "1" : "0"
+        },
+        windowsHide: true,
+        signal: AbortSignal.any([signal, AbortSignal.timeout(windowsPermissionsTimeoutMs)]),
+        timeout: windowsPermissionsTimeoutMs,
+        maxBuffer: 16384
+      }
+    );
+  } catch (cause) {
+    signal.throwIfAborted();
+    throw new LocalPathError("The local path permissions could not be secured", { cause });
+  }
+}
+var windowsPlatform = {
+  controlSocketPath: (installationHash) => `\\\\.\\pipe\\mobius-${installationHash}`,
+  prepareControlSocket: async () => {
+  },
+  secureControlSocket: async () => {
+  },
+  removeControlSocket: async () => {
+  },
+  validatePathPermissions,
+  claudeCodeExecutablePaths: (environment) => {
+    const paths = [];
+    const userProfile = environmentValue2(environment, "USERPROFILE");
+    if (userProfile !== void 0 && isAbsolute10(userProfile)) {
+      paths.push(join16(userProfile, ".local", "bin", "claude.exe"));
+    }
+    const localAppData = environmentValue2(environment, "LOCALAPPDATA");
+    if (localAppData !== void 0 && isAbsolute10(localAppData)) {
+      paths.push(join16(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"));
+    }
+    paths.push(...desktopClaudeExecutablePaths(environment));
+    return paths;
+  }
+};
+
+// src/util/platform/index.ts
+var fallbackPlatform2 = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: () => []
+};
+var platforms2 = /* @__PURE__ */ new Map([
+  ["linux", linuxPlatform],
+  ["darwin", macosPlatform],
+  ["win32", windowsPlatform]
+]);
+function platformSupportFor(platform2) {
+  return platforms2.get(platform2) ?? fallbackPlatform2;
+}
+
 // src/agent/discovery/version-output.ts
 function normalizeVersionOutput(output2) {
   return output2.trim().split(/\r?\n/, 1)[0]?.trim().slice(0, 128) ?? "";
@@ -77981,7 +78200,7 @@ var CodexAgentSpecification = class extends InProcessAcpAgentSpecification {
 
 // src/agent/specification/vendors/pi-agent.ts
 import { createHash as createHash4 } from "node:crypto";
-import { join as join20 } from "node:path";
+import { join as join22 } from "node:path";
 import {
   methods as methods11
 } from "@agentclientprotocol/sdk";
@@ -77996,7 +78215,7 @@ import {
 import { spawnSync } from "node:child_process";
 import { randomUUID as randomUUID10 } from "node:crypto";
 import { existsSync as existsSync7, readdirSync as readdirSync6, readFileSync as readFileSync8, realpathSync as realpathSync4, statSync as statSync4, unlinkSync as unlinkSync2 } from "node:fs";
-import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute13, join as join19 } from "node:path";
+import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute13, join as join21 } from "node:path";
 import { RequestError as RequestError10 } from "@agentclientprotocol/sdk";
 
 // src/acp/harness/pi/upstream/dist/pi-rpc/process.js
@@ -78454,7 +78673,7 @@ function maybeAuthRequiredError(err) {
 }
 
 // src/acp/harness/pi/upstream/dist/acp/paths.js
-import { join as join15 } from "node:path";
+import { join as join17 } from "node:path";
 
 // src/acp/harness/pi/upstream/dist/acp/environment.js
 import { homedir as homedir2 } from "node:os";
@@ -78464,10 +78683,10 @@ function environmentHome(environment) {
 
 // src/acp/harness/pi/upstream/dist/acp/paths.js
 function getPiAcpDir(environment = process.env) {
-  return join15(environmentHome(environment), ".pi", "pi-acp");
+  return join17(environmentHome(environment), ".pi", "pi-acp");
 }
 function getPiAcpSessionMapPath(environment = process.env) {
-  return join15(getPiAcpDir(environment), "session-map.json");
+  return join17(getPiAcpDir(environment), "session-map.json");
 }
 
 // src/acp/harness/pi/upstream/dist/acp/pi-commands.js
@@ -78512,15 +78731,15 @@ function toAvailableCommandsFromPiGetCommands(data, opts) {
 
 // src/acp/harness/pi/upstream/dist/acp/pi-sessions.js
 import { closeSync as closeSync2, existsSync as existsSync4, openSync as openSync2, readdirSync as readdirSync4, readFileSync as readFileSync3, readSync as readSync2, statSync as statSync3 } from "node:fs";
-import { isAbsolute as isAbsolute11, join as join16, resolve as resolve10 } from "node:path";
+import { isAbsolute as isAbsolute11, join as join18, resolve as resolve10 } from "node:path";
 var DEFAULT_TAIL_BYTES = 256 * 1024;
 var DEFAULT_HEAD_BYTES = 64 * 1024;
 function getPiAgentDir(environment) {
   const configured = environment["PI_CODING_AGENT_DIR"];
-  return configured ? resolve10(configured) : join16(environmentHome(environment), ".pi", "agent");
+  return configured ? resolve10(configured) : join18(environmentHome(environment), ".pi", "agent");
 }
 function readSessionDirFromSettings(agentDir) {
-  const settingsPath = join16(agentDir, "settings.json");
+  const settingsPath = join18(agentDir, "settings.json");
   try {
     if (!existsSync4(settingsPath)) {
       return null;
@@ -78541,7 +78760,7 @@ function readSessionDirFromSettings(agentDir) {
 }
 function getPiSessionsDir(environment = process.env) {
   const agentDir = getPiAgentDir(environment);
-  return readSessionDirFromSettings(agentDir) ?? join16(agentDir, "sessions");
+  return readSessionDirFromSettings(agentDir) ?? join18(agentDir, "sessions");
 }
 function getPiSessionDiscoveryDirs(environment) {
   const discoveryDirectories = [getPiSessionsDir(environment)];
@@ -78552,7 +78771,7 @@ function getPiSessionDiscoveryDirs(environment) {
       if (!entry.isDirectory()) {
         continue;
       }
-      const directory = join16(mobiusSessionsRoot, entry.name);
+      const directory = join18(mobiusSessionsRoot, entry.name);
       if (!discoveryDirectories.includes(directory)) {
         discoveryDirectories.push(directory);
       }
@@ -78569,7 +78788,7 @@ function walkJsonlFiles(dir, out2) {
   }
   for (const e of entries) {
     const name2 = typeof e.name === "string" ? e.name : String(e.name);
-    const p = join16(dir, name2);
+    const p = join18(dir, name2);
     if (e.isDirectory()) {
       walkJsonlFiles(p, out2);
     } else if (e.isFile() && name2.endsWith(".jsonl")) {
@@ -78838,7 +79057,7 @@ function findPiSession(sessionId, environment = process.env) {
 
 // src/acp/harness/pi/upstream/dist/acp/pi-settings.js
 import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
-import { join as join17, resolve as resolve11 } from "node:path";
+import { join as join19, resolve as resolve11 } from "node:path";
 function isObject2(x) {
   return Boolean(x) && typeof x === "object" && !Array.isArray(x);
 }
@@ -78867,7 +79086,7 @@ function readJsonFile(path7) {
   }
 }
 function getMergedSettings(cwd, environment) {
-  const globalSettingsPath = join17(getAgentDir(environment), "settings.json");
+  const globalSettingsPath = join19(getAgentDir(environment), "settings.json");
   const projectSettingsPath = resolve11(cwd, ".pi", "settings.json");
   const global2 = readJsonFile(globalSettingsPath);
   const project = readJsonFile(projectSettingsPath);
@@ -78875,7 +79094,7 @@ function getMergedSettings(cwd, environment) {
 }
 function getAgentDir(environment = process.env) {
   const configured = environment["PI_CODING_AGENT_DIR"];
-  return configured ? resolve11(configured) : join17(environmentHome(environment), ".pi", "agent");
+  return configured ? resolve11(configured) : join19(environmentHome(environment), ".pi", "agent");
 }
 function getEnableSkillCommands(cwd, environment = process.env) {
   const merged = getMergedSettings(cwd, environment);
@@ -79131,7 +79350,7 @@ var SessionStore = class {
 
 // src/acp/harness/pi/upstream/dist/acp/slash-commands.js
 import { existsSync as existsSync6, readdirSync as readdirSync5, readFileSync as readFileSync6 } from "node:fs";
-import { join as join18, resolve as resolve12 } from "node:path";
+import { join as join20, resolve as resolve12 } from "node:path";
 function parseFrontmatter(content) {
   const frontmatter = {};
   if (!content.startsWith("---")) {
@@ -79159,7 +79378,7 @@ function loadCommandsFromDir(dir, source, subdir = "") {
   try {
     const entries = readdirSync5(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = join18(dir, entry.name);
+      const fullPath = join20(dir, entry.name);
       if (entry.isDirectory()) {
         const newSubdir = subdir ? `${subdir}:${entry.name}` : entry.name;
         commands.push(...loadCommandsFromDir(fullPath, source, newSubdir));
@@ -79199,7 +79418,7 @@ function loadCommandsFromDir(dir, source, subdir = "") {
 }
 function loadSlashCommands(cwd, environment = process.env) {
   const commands = [];
-  const userDir = join18(environmentHome(environment), ".pi", "agent", "prompts");
+  const userDir = join20(environmentHome(environment), ".pi", "agent", "prompts");
   const projectDir = resolve12(cwd, ".pi", "prompts");
   commands.push(...loadCommandsFromDir(userDir, "user"));
   commands.push(...loadCommandsFromDir(projectDir, "project"));
@@ -80846,7 +81065,7 @@ ${JSON.stringify(stats, null, 2)}`;
             if (piPath) {
               const resolved = realpathSync4(piPath);
               const pkgRoot = dirname8(dirname8(resolved));
-              const p = join19(pkgRoot, "CHANGELOG.md");
+              const p = join21(pkgRoot, "CHANGELOG.md");
               if (existsSync7(p)) {
                 return p;
               }
@@ -80857,7 +81076,7 @@ ${JSON.stringify(stats, null, 2)}`;
             const npmRoot = spawnSync("npm", ["root", "-g"], { encoding: "utf-8" });
             const root = String(npmRoot.stdout ?? "").trim();
             if (root) {
-              const p = join19(root, "@earendil-works", "pi-coding-agent", "CHANGELOG.md");
+              const p = join21(root, "@earendil-works", "pi-coding-agent", "CHANGELOG.md");
               if (existsSync7(p)) {
                 return p;
               }
@@ -80951,7 +81170,7 @@ ${JSON.stringify(stats, null, 2)}`;
           return { stopReason: "end_turn" };
         }
         const safeSessionId = session.sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-        const outputPath = join19(session.cwd, `pi-session-${safeSessionId}.html`);
+        const outputPath = join21(session.cwd, `pi-session-${safeSessionId}.html`);
         let resultPath = "";
         try {
           const result2 = await session.proc.exportHtml(outputPath);
@@ -81665,7 +81884,7 @@ function buildStartupInfo(opts) {
     md.push("");
   };
   const contextItems = [];
-  const contextPath = join19(opts.cwd, "AGENTS.md");
+  const contextPath = join21(opts.cwd, "AGENTS.md");
   if (existsSync7(contextPath)) {
     contextItems.push(contextPath);
   }
@@ -81674,7 +81893,7 @@ function buildStartupInfo(opts) {
   const pushSkillFromRoot = (root) => {
     try {
       for (const e of readdirSync6(root)) {
-        const p = join19(root, e);
+        const p = join21(root, e);
         try {
           const st2 = statSync4(p);
           if (st2.isFile() && e.toLowerCase().endsWith(".md")) {
@@ -81699,7 +81918,7 @@ function buildStartupInfo(opts) {
           if (name2 === "node_modules" || name2 === ".git") {
             continue;
           }
-          const p = join19(dir, name2);
+          const p = join21(dir, name2);
           let st2;
           try {
             st2 = statSync4(p);
@@ -81716,16 +81935,16 @@ function buildStartupInfo(opts) {
     } catch {
     }
   };
-  const globalSkillsDir = join19(getAgentDir(opts.environment), "skills");
+  const globalSkillsDir = join21(getAgentDir(opts.environment), "skills");
   pushSkillFromRoot(globalSkillsDir);
   const home = opts.environment["HOME"] ?? opts.environment["USERPROFILE"] ?? "";
-  const legacyAgentsSkillsDir = join19(home, ".agents", "skills");
+  const legacyAgentsSkillsDir = join21(home, ".agents", "skills");
   pushSkillFromRoot(legacyAgentsSkillsDir);
-  const projectSkillsDir = join19(opts.cwd, ".pi", "skills");
+  const projectSkillsDir = join21(opts.cwd, ".pi", "skills");
   pushSkillFromRoot(projectSkillsDir);
   addSection("Skills", skillsItems);
   const promptsItems = [];
-  const promptsDir = join19(home, ".pi", "agent", "prompts");
+  const promptsDir = join21(home, ".pi", "agent", "prompts");
   try {
     const prompts = readdirSync6(promptsDir).filter((f) => f.endsWith(".md"));
     for (const f of prompts) {
@@ -81735,17 +81954,17 @@ function buildStartupInfo(opts) {
   }
   addSection("Prompts", promptsItems);
   const extItems = [];
-  const extDir = join19(home, ".pi", "agent", "extensions");
+  const extDir = join21(home, ".pi", "agent", "extensions");
   try {
     const exts = readdirSync6(extDir).filter((f) => f.endsWith(".ts") || f.endsWith(".js"));
     for (const f of exts) {
-      extItems.push(join19(extDir, f));
+      extItems.push(join21(extDir, f));
     }
   } catch {
   }
   const settingsPaths = [
-    join19(getAgentDir(opts.environment), "settings.json"),
-    join19(opts.cwd, ".pi", "settings.json")
+    join21(getAgentDir(opts.environment), "settings.json"),
+    join21(opts.cwd, ".pi", "settings.json")
   ];
   for (const settingsPath of settingsPaths) {
     try {
@@ -81943,7 +82162,7 @@ var PiAgentSpecification = class extends InProcessAcpAgentSpecification {
   // keeps the adapter's opt-in capability flag enabled for every launch it owns.
   createLaunchEnvironment = async (_agent, context) => {
     const workspaceHash = createHash4("sha256").update(context.defaultWorkspace).digest("hex").slice(0, 24);
-    const sessionDirectory = join20(context.dataDirectory, "agents", "pi", "sessions", workspaceHash);
+    const sessionDirectory = join22(context.dataDirectory, "agents", "pi", "sessions", workspaceHash);
     return Object.freeze({
       PI_ACP_ENABLE_EMBEDDED_CONTEXT: "true",
       MOBIUS_PI_SESSION_DIR: sessionDirectory
@@ -82594,7 +82813,7 @@ var AgentCatalogPublishError = class extends Error {
     this.name = "AgentCatalogPublishError";
   }
 };
-function isRecord6(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isSafeRelayErrorMessage(value) {
@@ -82607,7 +82826,7 @@ async function rejectedCatalogError(response) {
   } catch {
     return new AgentCatalogPublishError("The Relay rejected the Agent catalog update");
   }
-  if (!isRecord6(value) || !isRecord6(value["error"])) {
+  if (!isRecord8(value) || !isRecord8(value["error"])) {
     return new AgentCatalogPublishError("The Relay rejected the Agent catalog update");
   }
   const code = value["error"]["code"];
@@ -82676,7 +82895,7 @@ async function publishAgentCatalog(config2, signal) {
 }
 
 // src/runtime/config.ts
-import { join as join22, resolve as resolve14 } from "node:path";
+import { join as join24, resolve as resolve14 } from "node:path";
 
 // src/util/serial-task-queue.ts
 var SerialTaskQueue = class {
@@ -82749,19 +82968,19 @@ var LocalAgentCatalog = class {
 
 // src/storage/state-directory.ts
 import { homedir as homedir3 } from "node:os";
-import { join as join21, resolve as resolve13 } from "node:path";
+import { join as join23, resolve as resolve13 } from "node:path";
 var stateRootSchema = external_exports.string().brand();
 function readStateDirectory(environment = process.env) {
   const configured = environment["MOBIUS_STATE_DIRECTORY"]?.trim();
   return stateRootSchema.parse(
-    configured !== void 0 && configured.length > 0 ? resolve13(configured) : join21(homedir3(), ".mobius")
+    configured !== void 0 && configured.length > 0 ? resolve13(configured) : join23(homedir3(), ".mobius")
   );
 }
 
 // src/runtime/config.ts
 function loadDefaultWorkspace(dataDirectory, environment = process.env) {
   const { MOBIUS_DEFAULT_WORKSPACE: configuredWorkspace } = environment;
-  return configuredWorkspace ?? join22(dataDirectory, "workspace");
+  return configuredWorkspace ?? join24(dataDirectory, "workspace");
 }
 var RuntimeLocalContext = class {
   environment;
@@ -82870,7 +83089,7 @@ import { resolve as resolve15 } from "node:path";
 // src/storage/installation/installation-files.ts
 import { createHash as createHash5, randomUUID as randomUUID12 } from "node:crypto";
 import { mkdir as mkdir4, open as open5, readdir as readdir5, rename as rename3, unlink as unlink3, writeFile } from "node:fs/promises";
-import { dirname as dirname9, join as join23 } from "node:path";
+import { dirname as dirname9, join as join25 } from "node:path";
 
 // src/util/node-error.ts
 function isNodeError(error62, code) {
@@ -82893,23 +83112,23 @@ var STATE_ROOT_ENTRY_NAMES = new Set(Object.values(STATE_ROOT_LAYOUT));
 // src/storage/installation/installation-files.ts
 var MAXIMUM_FILE_BYTES = 16 * 1024;
 function applicationDirectory(root, applicationId) {
-  return join23(root, STATE_ROOT_LAYOUT.installations, applicationId);
+  return join25(root, STATE_ROOT_LAYOUT.installations, applicationId);
 }
 function installationPointerPath(applicationDirectory2) {
-  return join23(applicationDirectory2, "current.json");
+  return join25(applicationDirectory2, "current.json");
 }
 var installationDirectorySchema = external_exports.string().brand();
 function installationDirectory(applicationDirectory2, installationId2) {
-  return installationDirectorySchema.parse(join23(applicationDirectory2, installationId2));
+  return installationDirectorySchema.parse(join25(applicationDirectory2, installationId2));
 }
 function connectionDirectory(installationDirectory2) {
-  return join23(installationDirectory2, "connections");
+  return join25(installationDirectory2, "connections");
 }
 function connectionFilePath(connectionDirectory2, connectionId2) {
-  return join23(connectionDirectory2, `${connectionId2}.json`);
+  return join25(connectionDirectory2, `${connectionId2}.json`);
 }
 function channelIndexFilePath(installationDirectory2, channelId) {
-  return join23(installationDirectory2, "channels", `mci_${createHash5("sha256").update(channelId).digest("hex")}.json`);
+  return join25(installationDirectory2, "channels", `mci_${createHash5("sha256").update(channelId).digest("hex")}.json`);
 }
 async function readInstallationFile(path7) {
   let handle;
@@ -82931,7 +83150,7 @@ async function readInstallationFile(path7) {
 async function writeInstallationFile(path7, text2, signal) {
   signal.throwIfAborted();
   const directory = dirname9(path7);
-  const temporaryPath = join23(directory, `.${randomUUID12()}.tmp`);
+  const temporaryPath = join25(directory, `.${randomUUID12()}.tmp`);
   try {
     await mkdir4(directory, { mode: 448, recursive: true });
     signal.throwIfAborted();
@@ -83029,7 +83248,7 @@ var RuntimeInstallationStoreError = class extends Error {
     this.name = "RuntimeInstallationStoreError";
   }
 };
-function isRecord7(value) {
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function hasExactKeys(value, expectedKeys) {
@@ -83096,7 +83315,7 @@ function installationId() {
   return `min_${randomUUID13().replaceAll("-", "")}`;
 }
 function decodeInstallationPointer(value) {
-  if (!isRecord7(value) || !hasExactKeys(value, INSTALLATION_POINTER_KEYS) || value["version"] !== 1) {
+  if (!isRecord9(value) || !hasExactKeys(value, INSTALLATION_POINTER_KEYS) || value["version"] !== 1) {
     throw new RuntimeInstallationStoreError("invalid_installation", "The local installation record is invalid");
   }
   const storedInstallationId = value["installationId"];
@@ -83106,7 +83325,7 @@ function decodeInstallationPointer(value) {
   return { installationId: validateInstallationId(storedInstallationId) };
 }
 function decodeChannelIndex(value) {
-  if (!isRecord7(value) || !hasExactKeys(value, CHANNEL_INDEX_KEYS) || value["version"] !== 1) {
+  if (!isRecord9(value) || !hasExactKeys(value, CHANNEL_INDEX_KEYS) || value["version"] !== 1) {
     throw new RuntimeInstallationStoreError("invalid_connection", "The saved Runtime connection is invalid");
   }
   const applicationId = value["applicationId"];
@@ -83156,7 +83375,7 @@ function decodeVerifiedConnection(value) {
   );
 }
 function decodeConnection(value) {
-  if (!isRecord7(value)) {
+  if (!isRecord9(value)) {
     throw new RuntimeInstallationStoreError("invalid_connection", "The saved Runtime connection is invalid");
   }
   return decodeVerifiedConnection(value);
@@ -83769,7 +83988,10 @@ function legacyState(receipt) {
   if (receipt.outcome === null) {
     return receipt.started ? "running" : "dispatching";
   }
-  const event = sessionEventPayloadSchema.parse(JSON.parse(receipt.outcome));
+  const event = decodeKnownSessionEventPayload(JSON.parse(receipt.outcome));
+  if (event === null) {
+    return "failed";
+  }
   return event.type === "lifecycle-metadata" && event.payload.kind === "prompt.completed" ? event.payload.stopReason === "cancelled" ? "cancelled" : "succeeded" : "failed";
 }
 var ExecutionReceiptTable = class {
@@ -84578,7 +84800,11 @@ var storedSessionConfigurationsSchema = external_exports.array(
     external_exports.object({ configId: external_exports.string().max(128), type: external_exports.literal("select"), value: external_exports.string().max(500) })
   ])
 ).max(100);
-var decodeStoredSessionConfigurations = (value) => storedSessionConfigurationsSchema.parse(value);
+var decodeStoredSessionConfigurations = (value) => storedSessionConfigurationsSchema.parse(
+  Array.isArray(value) ? value.filter(
+    (configuration) => typeof configuration !== "object" || configuration === null || !("type" in configuration) || typeof configuration.type !== "string" || configuration.type === "boolean" || configuration.type === "select"
+  ) : value
+);
 var SessionConfigurations = class {
   #selected = [];
   stored = () => this.#selected;
@@ -87092,7 +87318,7 @@ var ExecutionReceipts = class {
   };
   outcome = (commandId) => {
     const receipt = this.#executions.get(commandId);
-    return receipt?.outcome === null || receipt === void 0 ? void 0 : sessionEventPayloadSchema.parse(JSON.parse(receipt.outcome));
+    return receipt?.outcome === null || receipt === void 0 ? void 0 : decodeKnownSessionEventPayload(JSON.parse(receipt.outcome)) ?? void 0;
   };
   /** Reserves an unseen command for cancellation before a delayed prompt can claim its identity. */
   recordCancellationBeforeAdmission = (commandId, sessionId) => {
@@ -87155,7 +87381,10 @@ var ExecutionReceipts = class {
           code: "runtime_restarted",
           message: "The local runtime restarted before this request started"
         }
-      } : sessionEventPayloadSchema.parse(JSON.parse(receipt.outcome));
+      } : decodeKnownSessionEventPayload(JSON.parse(receipt.outcome));
+      if (event === null) {
+        continue;
+      }
       const recordedAt = receipt.outcome === null ? (/* @__PURE__ */ new Date()).toISOString() : external_exports.object({ recordedAt: external_exports.string() }).parse(JSON.parse(receipt.outcome)).recordedAt;
       recovered.push({ sessionId: receipt.sessionId, event, recordedAt });
       if (receipt.outcome === null) {
@@ -87577,7 +87806,7 @@ var SessionTurns = class {
 
 // src/session/workspace/workspace-directory.ts
 import { homedir as homedir4 } from "node:os";
-import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute15, join as join25, normalize as normalize2, relative as relative2 } from "node:path";
+import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute15, join as join27, normalize as normalize2, relative as relative2 } from "node:path";
 var WorkspaceDirectoryListing = class {
   directoryId;
   directoryLabel;
@@ -87699,7 +87928,7 @@ var WorkspaceDirectoryService = class {
           continue;
         }
         try {
-          const path7 = await this.resolvePath(join25(target, child.name), signal);
+          const path7 = await this.resolvePath(join27(target, child.name), signal);
           entries.push({ directoryId: encodePath(path7), name: child.name });
         } catch (cause) {
           signal.throwIfAborted();
@@ -87847,12 +88076,12 @@ function buildSessionLayer(options) {
 
 // src/session/content/external-content-store.ts
 import { createHash as createHash7 } from "node:crypto";
-import { join as join27 } from "node:path";
+import { join as join29 } from "node:path";
 
 // src/storage/files/scratch-directory.ts
 import { randomUUID as randomUUID17 } from "node:crypto";
 import { lstat as lstat4, mkdir as mkdir5, readdir as readdir6, readFile as readFile6, realpath as realpath7, rename as rename4, rm as rm3, stat as stat6, utimes, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname11, join as join26 } from "node:path";
+import { dirname as dirname11, join as join28 } from "node:path";
 async function atomicWrite(path7, bytes, signal) {
   const temporary = `${path7}.${randomUUID17()}.tmp`;
   try {
@@ -87866,7 +88095,7 @@ async function atomicWrite(path7, bytes, signal) {
 var ScratchDirectory = class {
   #root;
   constructor(parent) {
-    this.#root = join26(parent, randomUUID17());
+    this.#root = join28(parent, randomUUID17());
   }
   /** Refreshes this directory's lease and removes sibling directories whose lease is older than `leaseMilliseconds`. */
   refreshLease = async (leaseMilliseconds) => {
@@ -87877,7 +88106,7 @@ var ScratchDirectory = class {
       if (!directory.isDirectory() || !/^[a-f0-9-]{36}$/u.test(directory.name)) {
         continue;
       }
-      const path7 = join26(dirname11(this.#root), directory.name);
+      const path7 = join28(dirname11(this.#root), directory.name);
       if (path7 === this.#root) {
         continue;
       }
@@ -87892,10 +88121,10 @@ var ScratchDirectory = class {
   };
   /** Writes `bytes` atomically to `<group>/<name>` with owner-only permissions and returns the path. */
   write = async (group, name2, bytes, signal) => {
-    const directory = join26(this.#root, group);
+    const directory = join28(this.#root, group);
     await mkdir5(directory, { mode: 448, recursive: true });
     signal.throwIfAborted();
-    const path7 = join26(directory, name2);
+    const path7 = join28(directory, name2);
     await atomicWrite(path7, bytes, signal);
     return path7;
   };
@@ -87942,7 +88171,7 @@ var LocalExternalContentStore = class {
   #expirationTimer;
   #cleanup = Promise.resolve();
   constructor(stateDirectory) {
-    this.#scratch = new ScratchDirectory(join27(stateDirectory, "tmp", "session-content"));
+    this.#scratch = new ScratchDirectory(join29(stateDirectory, "tmp", "session-content"));
     this.#expirationTimer = setInterval(() => {
       void this.#expire().catch(() => void 0);
     }, 6e4);
@@ -88325,11 +88554,11 @@ var AgentProcessPool = class {
 };
 
 // src/runtime/observability/diagnostic-log.ts
-import { join as join30 } from "node:path";
+import { join as join32 } from "node:path";
 
 // src/storage/logs/bounded-log.ts
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync9, renameSync as renameSync2, statSync as statSync5, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join28 } from "node:path";
+import { join as join30 } from "node:path";
 var BoundedLineLog = class {
   #path;
   #maximumBytes;
@@ -88338,7 +88567,7 @@ var BoundedLineLog = class {
   #onWriteFailure;
   constructor(directory, filename, maximumBytes, onWriteFailure = () => void 0) {
     this.#directory = directory;
-    this.#path = join28(directory, filename);
+    this.#path = join30(directory, filename);
     this.#maximumBytes = maximumBytes;
     this.#onWriteFailure = onWriteFailure;
   }
@@ -88389,21 +88618,21 @@ var BoundedLineLog = class {
 
 // src/storage/logs/log-files.ts
 import { readFileSync as readFileSync10 } from "node:fs";
-import { join as join29, relative as relative3 } from "node:path";
+import { join as join31, relative as relative3 } from "node:path";
 var DAEMON_LOG_FILENAME = "daemon.log";
 var WORKER_LIFECYCLE_LOG_FILENAME = "worker-lifecycle.log";
 function unhandledRejectionLogFilename(role) {
   return `unhandled-rejections-${role}.log`;
 }
 function logDirectory(stateDirectory) {
-  return join29(stateDirectory, "logs");
+  return join31(stateDirectory, "logs");
 }
 function processLogPaths(stateDirectory) {
   return [
     WORKER_LIFECYCLE_LOG_FILENAME,
     unhandledRejectionLogFilename("manager"),
     unhandledRejectionLogFilename("worker")
-  ].map((filename) => join29(logDirectory(stateDirectory), filename));
+  ].map((filename) => join31(logDirectory(stateDirectory), filename));
 }
 function readLogText(path7) {
   try {
@@ -88459,7 +88688,7 @@ var RuntimeDiagnosticLog = class {
     this.#maximumBytes = maximumBytes;
     const processLogsDirectory = options.processLogsDirectory;
     this.#sources = [
-      { maximumBytes, path: join30(directory, DAEMON_LOG_FILENAME) },
+      { maximumBytes, path: join32(directory, DAEMON_LOG_FILENAME) },
       // The process logs a Runtime does not own, but must read to explain its own deaths.
       ...processLogsDirectory === void 0 ? [] : processLogPaths(processLogsDirectory).map((path7) => ({ maximumBytes: null, path: path7 }))
     ];
@@ -89442,7 +89671,7 @@ function createContentWriteCommands(context) {
 import { WebSocket as WebSocket5 } from "undici";
 
 // src/session/content/session-files.ts
-import { basename as basename8, extname as extname2, isAbsolute as isAbsolute16, join as join31, normalize as normalize3, resolve as resolve17 } from "node:path";
+import { basename as basename8, extname as extname2, isAbsolute as isAbsolute16, join as join33, normalize as normalize3, resolve as resolve17 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function requestedPath(value) {
   if (value.includes("\0")) {
@@ -89466,7 +89695,7 @@ async function resolveFile(value, workingDirectory, signal) {
   if (isAbsolute16(requested.path) && normalize3(requested.path) !== requested.path) {
     return null;
   }
-  const candidates = requested.explicitUrl || workingDirectory === null ? [requested.path] : isAbsolute16(requested.path) ? [join31(workingDirectory, requested.path), requested.path] : [resolve17(workingDirectory, requested.path)];
+  const candidates = requested.explicitUrl || workingDirectory === null ? [requested.path] : isAbsolute16(requested.path) ? [join33(workingDirectory, requested.path), requested.path] : [resolve17(workingDirectory, requested.path)];
   for (const candidate of candidates) {
     if (!isAbsolute16(candidate) || normalize3(candidate) !== candidate) {
       continue;
@@ -91234,35 +91463,6 @@ function closeRelaySocket(socket, code, reason) {
     }
   }
 }
-function readCommandCorrelation(encoded) {
-  let value;
-  try {
-    value = JSON.parse(encoded);
-  } catch {
-    return { requestId: "unsupported", sessionId: "" };
-  }
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    return { requestId: "unsupported", sessionId: "" };
-  }
-  const requestId = Reflect.get(value, "requestId");
-  const sessionId = Reflect.get(value, "sessionId");
-  return {
-    requestId: typeof requestId === "string" && isIdentifier(requestId) ? requestId : "unsupported",
-    sessionId: typeof sessionId === "string" && isIdentifier(sessionId) ? sessionId : ""
-  };
-}
-function rejectUnsupportedCommand(socket, correlation, rejection) {
-  if (socket.readyState !== WebSocket8.OPEN) {
-    return;
-  }
-  send(socket, {
-    code: rejection.code,
-    kind: SESSION_OPERATION_FAILED_KIND,
-    message: "The Relay sent a command this daemon does not support",
-    requestId: correlation.requestId,
-    sessionId: correlation.sessionId
-  });
-}
 async function runRelayConnection({
   resolveAgent,
   config: config2,
@@ -91415,7 +91615,10 @@ async function runRelayConnection({
           return;
         }
         try {
-          const message = decodeServiceToDaemonMessage(encoded);
+          const message = decodeKnownServiceToDaemonMessage(encoded);
+          if (message === null) {
+            return;
+          }
           const kind = message.kind;
           if (kind === RUNTIME_LIVENESS_READY_KIND) {
             if (ready) {
@@ -91433,26 +91636,6 @@ async function runRelayConnection({
           }
           commands.dispatch(message);
         } catch (error62) {
-          if (error62 instanceof UnsupportedProtocolMessageKindError) {
-            const correlation = readCommandCorrelation(encoded);
-            console.warn("Mobius daemon rejected an unsupported Relay command", {
-              code: error62.code,
-              direction: error62.direction,
-              messageKind: error62.messageKind
-            });
-            diagnostics.daemonDiagnostic(
-              "relay_command_unsupported",
-              correlation.requestId,
-              {
-                code: error62.code,
-                direction: error62.direction,
-                messageKind: error62.messageKind
-              },
-              error62
-            );
-            rejectUnsupportedCommand(socket, correlation, error62);
-            return;
-          }
           console.error("Mobius daemon rejected a message", error62);
           failAndClose(
             new Error("Relay sent an invalid protocol message", { cause: error62 }),