@moxt-ai/mobius 0.0.336 → 0.0.338

package/dist/runtime.js

@@ -55,30 +55,17 @@ import { realpathSync, statSync } from "node:fs";
 // src/util/process/executable.ts
 import { spawn } from "node:child_process";
 import { stat as stat2 } from "node:fs/promises";
-import { join as join6, resolve as resolve2 } from "node:path";
+import { join as join3, resolve as resolve2 } from "node:path";
 
-// src/util/platform/linux.ts
+// src/util/process/platform/linux.ts
 import { constants as constants2, readdirSync, readFileSync } from "node:fs";
 import { access as access2, readdir, readFile, realpath as realpath2, stat } from "node:fs/promises";
-import { isAbsolute, join as join2 } from "node:path";
+import { join } from "node:path";
 
-// src/util/platform/posix.ts
+// src/util/process/platform/posix.ts
 import { execFile } from "node:child_process";
 import { constants } from "node:fs";
-import { access, chmod, lstat, realpath, unlink } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-
-// src/util/filesystem/path-error.ts
-var LocalPathError = class extends Error {
-  code = "unsafe_local_path";
-  constructor(message, options = {}) {
-    super(message, options);
-    this.name = "LocalPathError";
-  }
-};
-
-// src/util/platform/posix.ts
+import { access, realpath } from "node:fs/promises";
 var PROCESS_TABLE_TIMEOUT_MILLISECONDS = 1e3;
 var PROCESS_TABLE_OUTPUT_LIMIT_BYTES = 1024 * 1024;
 function parseProcessTable(output2) {
@@ -158,22 +145,7 @@ function terminateProcess(child, signal) {
   }
   child.kill(signal);
 }
-async function removeControlSocket(path7) {
-  try {
-    await unlink(path7);
-  } catch (cause) {
-    if (!(cause instanceof Error) || !("code" in cause) || cause.code !== "ENOENT") {
-      throw cause;
-    }
-  }
-}
 var posixOperations = {
-  controlSocketPath: (installationHash) => join(tmpdir(), `mobius-${installationHash}.sock`),
-  prepareControlSocket: removeControlSocket,
-  secureControlSocket: async (path7) => {
-    await chmod(path7, 384);
-  },
-  removeControlSocket,
   pathDelimiter: ":",
   environmentValue: (environment, name2) => environment[name2],
   executableExtensions: () => [""],
@@ -185,21 +157,10 @@ var posixOperations = {
   executableLaunch: (command, args) => ({ command, arguments: args }),
   spawnOptions: { detached: true, windowsHide: true },
   signalCapturedProcesses,
-  terminateProcess,
-  validatePathPermissions: async (path7, directory, privateAccess, signal) => {
-    signal.throwIfAborted();
-    const metadata = await lstat(path7);
-    if (process.getuid === void 0 || metadata.uid !== process.getuid()) {
-      throw new LocalPathError("Path is not user-owned");
-    }
-    if (privateAccess) {
-      await chmod(path7, directory ? 448 : 384);
-    }
-    signal.throwIfAborted();
-  }
+  terminateProcess
 };
 
-// src/util/platform/linux.ts
+// src/util/process/platform/linux.ts
 function appendLinuxProcessTableEntry(entries, processId, encoded) {
   const closingParenthesis = encoded.lastIndexOf(")");
   if (!encoded.startsWith(`${processId.toString()} (`) || closingParenthesis < 0) {
@@ -229,7 +190,7 @@ async function readLinuxProcessTable() {
         appendLinuxProcessTableEntry(
           entries,
           processId,
-          await readFile(join2("/proc", directory.name, "stat"), "utf8")
+          await readFile(join("/proc", directory.name, "stat"), "utf8")
         );
       } catch {
       }
@@ -254,7 +215,7 @@ function readLinuxProcessTableSynchronously() {
         appendLinuxProcessTableEntry(
           entries,
           processId,
-          readFileSync(join2("/proc", directory.name, "stat"), "utf8")
+          readFileSync(join("/proc", directory.name, "stat"), "utf8")
         );
       } catch {
       }
@@ -287,7 +248,7 @@ async function readLinuxProcessTableWithFallback() {
 }
 function processExists2(processId) {
   try {
-    const encoded = readFileSync(join2("/proc", processId.toString(), "stat"), "utf8");
+    const encoded = readFileSync(join("/proc", processId.toString(), "stat"), "utf8");
     const closingParenthesis = encoded.lastIndexOf(")");
     if (closingParenthesis >= 0) {
       const processState = encoded.slice(closingParenthesis + 1).trimStart().charAt(0);
@@ -299,80 +260,25 @@ function processExists2(processId) {
   }
   return processExists(processId);
 }
-var linuxPlatform = {
+var linuxProcessPlatform = {
   ...posixOperations,
   readProcessTable: readLinuxProcessTableWithFallback,
   readProcessTableSynchronously: readLinuxProcessTableSynchronously,
-  processExists: processExists2,
-  claudeCodeExecutablePaths: (environment) => {
-    const homeDirectory = environment["HOME"];
-    return homeDirectory !== void 0 && isAbsolute(homeDirectory) ? [join2(homeDirectory, ".local", "bin", "claude")] : [];
-  }
+  processExists: processExists2
 };
 
-// src/util/platform/macos.ts
-import { isAbsolute as isAbsolute2, join as join4 } from "node:path";
-
-// src/util/platform/claude-desktop.ts
-import { readdirSync as readdirSync2 } from "node:fs";
-import { join as join3 } from "node:path";
-function installedDirectories(directory) {
-  try {
-    return readdirSync2(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
-  } catch (cause) {
-    if (cause instanceof Error && "code" in cause && (cause.code === "ENOENT" || cause.code === "ENOTDIR" || cause.code === "EACCES")) {
-      return [];
-    }
-    throw cause;
-  }
-}
-function claudeDesktopExecutablePaths(roots, executablePaths) {
-  const paths = [];
-  for (const root of roots) {
-    const versions = installedDirectories(root).filter((version2) => /^\d+\.\d+\.\d+$/.test(version2)).toSorted((left, right) => right.localeCompare(left, "en", { numeric: true }));
-    for (const version2 of versions) {
-      const directory = join3(root, version2);
-      const installations = [
-        directory,
-        ...installedDirectories(directory).map((build) => join3(directory, build))
-      ];
-      for (const installation of installations) {
-        for (const executablePath of executablePaths) {
-          paths.push(join3(installation, ...executablePath));
-        }
-      }
-    }
-  }
-  return paths;
-}
-
-// src/util/platform/macos.ts
-var macosPlatform = {
+// src/util/process/platform/macos.ts
+var macosProcessPlatform = {
   ...posixOperations,
   readProcessTable: () => readProcessTableWithPs("/bin/ps"),
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: (environment) => {
-    const paths = ["/opt/homebrew/bin/claude", "/usr/local/bin/claude"];
-    const homeDirectory = environment["HOME"];
-    if (homeDirectory !== void 0 && isAbsolute2(homeDirectory)) {
-      paths.unshift(join4(homeDirectory, ".local", "bin", "claude"));
-      paths.push(
-        ...claudeDesktopExecutablePaths(
-          [join4(homeDirectory, "Library", "Application Support", "Claude", "claude-code")],
-          [["claude.app", "Contents", "MacOS", "claude"], ["claude"]]
-        )
-      );
-    }
-    return paths;
-  }
+  processExists
 };
 
-// src/util/platform/windows.ts
+// src/util/process/platform/windows.ts
 import { execFile as execFile2 } from "node:child_process";
 import { readFile as readFile2, realpath as realpath3 } from "node:fs/promises";
-import { dirname, extname, isAbsolute as isAbsolute3, join as join5, resolve } from "node:path";
-import { promisify } from "node:util";
+import { dirname, extname, join as join2, resolve } from "node:path";
 
 // src/util/process/process-error.ts
 var ProcessExecutionError = class extends Error {
@@ -384,28 +290,10 @@ var ProcessExecutionError = class extends Error {
   }
 };
 
-// src/util/platform/windows.ts
-var execute = promisify(execFile2);
+// src/util/process/platform/windows.ts
 function environmentValue(environment, name2) {
   return Object.entries(environment).find(([key]) => key.toUpperCase() === name2.toUpperCase())?.[1];
 }
-function desktopClaudeExecutablePaths(environment) {
-  const roots = [];
-  const localAppData = environmentValue(environment, "LOCALAPPDATA");
-  if (localAppData !== void 0 && isAbsolute3(localAppData)) {
-    const dataDirectory = join5(localAppData, "Claude-Data");
-    for (const installation of installedDirectories(dataDirectory)) {
-      if (installation.startsWith("claude_")) {
-        roots.push(join5(dataDirectory, installation, "claude-code"));
-      }
-    }
-  }
-  const appData = environmentValue(environment, "APPDATA");
-  if (appData !== void 0 && isAbsolute3(appData)) {
-    roots.push(join5(appData, "Claude", "claude-code"));
-  }
-  return claudeDesktopExecutablePaths(roots, [["claude.exe"]]);
-}
 function executableExtensions(executableName, environment) {
   if (/\.[a-zA-Z0-9]+$/.test(executableName)) {
     return [""];
@@ -464,7 +352,7 @@ function readProcessTable() {
   }
   return new Promise((resolveTable) => {
     execFile2(
-      join5(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
+      join2(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
       [
         "-NoLogo",
         "-NoProfile",
@@ -497,71 +385,7 @@ function terminateProcess2(child, signal) {
   }
   child.kill(signal);
 }
-var windowsPermissions = `
-$ErrorActionPreference = 'Stop'
-$ProgressPreference = 'SilentlyContinue'
-$item = Get-Item -LiteralPath $env:MOBIUS_PERMISSION_PATH -Force
-if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'Unsafe path' }
-$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
-$acl = $item.GetAccessControl()
-$owner = $acl.GetOwner([Security.Principal.SecurityIdentifier])
-if ($owner -ne $sid -and -not ($owner.Value -eq 'S-1-5-32-544' -and ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator))) { throw 'Path is not user-owned' }
-if ($env:MOBIUS_PERMISSION_PRIVATE -eq '1') {
-    if ($item.PSIsContainer) {
-        $private = New-Object Security.AccessControl.DirectorySecurity
-        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
-    } else {
-        $private = New-Object Security.AccessControl.FileSecurity
-        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'Allow')
-    }
-    $private.SetOwner($sid)
-    $private.SetAccessRuleProtection($true, $false)
-    $private.AddAccessRule($rule)
-    $item.SetAccessControl($private)
-}
-`;
-var windowsPermissionsTimeoutMs = 3e4;
-async function validatePathPermissions(path7, _directory, privateAccess, signal) {
-  signal.throwIfAborted();
-  const systemRoot = environmentValue(process.env, "SystemRoot");
-  if (systemRoot === void 0) {
-    throw new LocalPathError("Windows system directory is unavailable");
-  }
-  try {
-    await execute(
-      join5(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
-      [
-        "-NoLogo",
-        "-NoProfile",
-        "-NonInteractive",
-        "-EncodedCommand",
-        Buffer.from(windowsPermissions, "utf16le").toString("base64")
-      ],
-      {
-        env: {
-          ...process.env,
-          MOBIUS_PERMISSION_PATH: path7,
-          MOBIUS_PERMISSION_PRIVATE: privateAccess ? "1" : "0"
-        },
-        windowsHide: true,
-        signal: AbortSignal.any([signal, AbortSignal.timeout(windowsPermissionsTimeoutMs)]),
-        timeout: windowsPermissionsTimeoutMs,
-        maxBuffer: 16384
-      }
-    );
-  } catch (cause) {
-    signal.throwIfAborted();
-    throw new LocalPathError("The local path permissions could not be secured", { cause });
-  }
-}
-var windowsPlatform = {
-  controlSocketPath: (installationHash) => `\\\\.\\pipe\\mobius-${installationHash}`,
-  prepareControlSocket: async () => {
-  },
-  secureControlSocket: async () => {
-  },
-  removeControlSocket: async () => {
-  },
+var windowsProcessPlatform = {
   pathDelimiter: ";",
   environmentValue,
   executableExtensions,
@@ -570,44 +394,29 @@ var windowsPlatform = {
   spawnOptions: { detached: false, windowsHide: true },
   signalCapturedProcesses: signalCapturedProcesses2,
   terminateProcess: terminateProcess2,
-  validatePathPermissions,
   readProcessTable,
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: (environment) => {
-    const paths = [];
-    const userProfile = environmentValue(environment, "USERPROFILE");
-    if (userProfile !== void 0 && isAbsolute3(userProfile)) {
-      paths.push(join5(userProfile, ".local", "bin", "claude.exe"));
-    }
-    const localAppData = environmentValue(environment, "LOCALAPPDATA");
-    if (localAppData !== void 0 && isAbsolute3(localAppData)) {
-      paths.push(join5(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"));
-    }
-    paths.push(...desktopClaudeExecutablePaths(environment));
-    return paths;
-  }
+  processExists
 };
 
-// src/util/platform/index.ts
+// src/util/process/platform/index.ts
 var fallbackPlatform = {
   ...posixOperations,
   readProcessTable: () => readProcessTableWithPs("/usr/bin/ps"),
   readProcessTableSynchronously: () => [],
-  processExists,
-  claudeCodeExecutablePaths: () => []
+  processExists
 };
 var platforms = /* @__PURE__ */ new Map([
-  ["linux", linuxPlatform],
-  ["darwin", macosPlatform],
-  ["win32", windowsPlatform]
+  ["linux", linuxProcessPlatform],
+  ["darwin", macosProcessPlatform],
+  ["win32", windowsProcessPlatform]
 ]);
-function platformSupportFor(platform2) {
+function processPlatformSupportFor(platform2) {
   return platforms.get(platform2) ?? fallbackPlatform;
 }
 
 // src/util/process/executable.ts
-var hostPlatform = platformSupportFor(process.platform);
+var hostPlatform = processPlatformSupportFor(process.platform);
 var DEFAULT_OUTPUT_LIMIT_BYTES = 16 * 1024;
 var PROCESS_GRACEFUL_STOP_TIMEOUT_MILLISECONDS = 1e3;
 var PROCESS_FORCED_STOP_TIMEOUT_MILLISECONDS = 5e3;
@@ -650,7 +459,7 @@ var ProcessResult = class {
 async function resolveExecutablePath(requestedPath2, platform2 = process.platform) {
   const absoluteRequestedPath = resolve2(requestedPath2);
   try {
-    const resolvedPath = await platformSupportFor(platform2).resolveExecutableTarget(absoluteRequestedPath);
+    const resolvedPath = await processPlatformSupportFor(platform2).resolveExecutableTarget(absoluteRequestedPath);
     const metadata = await stat2(resolvedPath);
     if (!metadata.isFile()) {
       return null;
@@ -670,7 +479,7 @@ async function resolveExecutablePath(requestedPath2, platform2 = process.platfor
   }
 }
 async function findExecutableOnPath(executableName, environment, platform2 = process.platform) {
-  const support = platformSupportFor(platform2);
+  const support = processPlatformSupportFor(platform2);
   const encodedPath = support.environmentValue(environment, "PATH") ?? "";
   const separator = support.pathDelimiter;
   const extensions = support.executableExtensions(executableName, environment);
@@ -679,7 +488,7 @@ async function findExecutableOnPath(executableName, environment, platform2 = pro
       continue;
     }
     for (const extension of extensions) {
-      const requestedPath2 = resolve2(join6(entry, `${executableName}${extension}`));
+      const requestedPath2 = resolve2(join3(entry, `${executableName}${extension}`));
       const executable = await resolveExecutablePath(requestedPath2, platform2);
       if (executable !== null) {
         return executable;
@@ -20920,7 +20729,7 @@ async function runCleanup(...actions) {
 }
 
 // src/acp/adapter/live-sessions.ts
-import { isAbsolute as isAbsolute4, resolve as resolve3 } from "node:path";
+import { isAbsolute, resolve as resolve3 } from "node:path";
 import { methods as methods3 } from "@agentclientprotocol/sdk";
 
 // ../mobius-sdk/src/protocol/platform/mobius-api.ts
@@ -21443,145 +21252,6 @@ var encodeSessionRenameCommand = (message) => encodeZodMessage(message, sessionR
 var decodeSessionRenamedEvent = (encoded) => decodeZodMessage(encoded, sessionRenamedEventSchema);
 var encodeSessionRenamedEvent = (message) => encodeZodMessage(message, sessionRenamedEventSchema);
 
-// ../mobius-sdk/src/protocol/session/files/index.ts
-var FILE_READ_KIND = "file.read";
-var FILE_BEGIN_KIND = "file.begin";
-var FILE_END_KIND = "file.end";
-var FILE_FAILED_KIND = "file.failed";
-var CONTENT_WRITE_KIND = "content.write";
-var CONTENT_COMMIT_KIND = "content.commit";
-var CONTENT_READY_KIND = "content.ready";
-var CONTENT_AVAILABLE_KIND = "content.available";
-var CONTENT_CHUNK_MAX_BYTES = 192 * 1024;
-var CONTENT_WRITE_MAX_BYTES = 32 * 1024 * 1024;
-var PROMPT_IMAGE_MAX_BYTES = 5e6;
-var CONTENT_CHUNK_MAGIC = new Uint8Array([77, 66, 67, 49]);
-var CONTENT_CHUNK_HEADER_BYTES = CONTENT_CHUNK_MAGIC.byteLength + 1 + 4;
-var fileReadCommandSchema = external_exports.object({
-  kind: external_exports.literal(FILE_READ_KIND),
-  maxBytes: external_exports.number().int().positive().max(128 * 1024 * 1024),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema,
-  path: external_exports.string().min(1).max(4096)
-}).readonly();
-var fileBeginEventSchema = external_exports.object({
-  byteLength: external_exports.number().int().positive().max(128 * 1024 * 1024),
-  kind: external_exports.literal(FILE_BEGIN_KIND),
-  mediaType: external_exports.string().min(1).max(255),
-  modifiedAt: external_exports.iso.datetime({ offset: true }),
-  name: external_exports.string().min(1).max(500),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var contentWriteCommandSchema = external_exports.object({
-  byteLength: external_exports.number().int().positive().max(CONTENT_WRITE_MAX_BYTES),
-  contentKey: external_exports.string().regex(/^[a-f0-9]{64}$/u),
-  contentKind: external_exports.enum(["image", "resource"]),
-  kind: external_exports.literal(CONTENT_WRITE_KIND),
-  mediaType: external_exports.string().min(1).max(255),
-  name: external_exports.string().min(1).max(500),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var contentCommitCommandSchema = external_exports.object({
-  kind: external_exports.literal(CONTENT_COMMIT_KIND),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var contentReadyEventSchema = external_exports.object({
-  kind: external_exports.literal(CONTENT_READY_KIND),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var contentAvailableEventSchema = external_exports.object({
-  byteLength: external_exports.number().int().positive().max(CONTENT_WRITE_MAX_BYTES),
-  contentKey: external_exports.string().regex(/^[a-f0-9]{64}$/u),
-  kind: external_exports.literal(CONTENT_AVAILABLE_KIND),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-function binaryBytes(value) {
-  if (value instanceof ArrayBuffer) {
-    return new Uint8Array(value);
-  }
-  if (ArrayBuffer.isView(value)) {
-    return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-  }
-  throw new Error("Content chunk must be a binary WebSocket frame");
-}
-function encodeContentChunkFrame(frame) {
-  if (!isIdentifier(frame.requestId)) {
-    throw new Error("Content chunk request identifier is invalid");
-  }
-  if (!Number.isSafeInteger(frame.sequence) || frame.sequence < 0 || frame.sequence > 4294967295) {
-    throw new Error("Content chunk sequence is invalid");
-  }
-  if (frame.bytes.byteLength < 1 || frame.bytes.byteLength > CONTENT_CHUNK_MAX_BYTES) {
-    throw new Error("Content chunk size is invalid");
-  }
-  const requestId = new TextEncoder().encode(frame.requestId);
-  if (requestId.byteLength > 255) {
-    throw new Error("Content chunk request identifier is too long");
-  }
-  const encoded = new Uint8Array(CONTENT_CHUNK_HEADER_BYTES + requestId.byteLength + frame.bytes.byteLength);
-  encoded.set(CONTENT_CHUNK_MAGIC, 0);
-  encoded[CONTENT_CHUNK_MAGIC.byteLength] = requestId.byteLength;
-  new DataView(encoded.buffer).setUint32(CONTENT_CHUNK_MAGIC.byteLength + 1, frame.sequence);
-  encoded.set(requestId, CONTENT_CHUNK_HEADER_BYTES);
-  encoded.set(frame.bytes, CONTENT_CHUNK_HEADER_BYTES + requestId.byteLength);
-  return encoded;
-}
-function decodeContentChunkFrame(value) {
-  const encoded = binaryBytes(value);
-  if (encoded.byteLength <= CONTENT_CHUNK_HEADER_BYTES || !CONTENT_CHUNK_MAGIC.every((byte, index2) => encoded[index2] === byte)) {
-    throw new Error("Content chunk frame header is invalid");
-  }
-  const requestIdLength = encoded[CONTENT_CHUNK_MAGIC.byteLength] ?? 0;
-  const payloadOffset = CONTENT_CHUNK_HEADER_BYTES + requestIdLength;
-  if (requestIdLength < 1 || payloadOffset >= encoded.byteLength) {
-    throw new Error("Content chunk frame length is invalid");
-  }
-  const requestId = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(
-    encoded.subarray(CONTENT_CHUNK_HEADER_BYTES, payloadOffset)
-  );
-  const bytes = encoded.slice(payloadOffset);
-  const sequence = new DataView(encoded.buffer, encoded.byteOffset, encoded.byteLength).getUint32(
-    CONTENT_CHUNK_MAGIC.byteLength + 1
-  );
-  if (!isIdentifier(requestId) || bytes.byteLength > CONTENT_CHUNK_MAX_BYTES) {
-    throw new Error("Content chunk frame is invalid");
-  }
-  return { bytes, requestId, sequence };
-}
-var fileEndEventSchema = external_exports.object({
-  kind: external_exports.literal(FILE_END_KIND),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var fileFailedEventSchema = external_exports.object({
-  code: identifierStringSchema,
-  kind: external_exports.literal(FILE_FAILED_KIND),
-  message: external_exports.string().min(1).max(500),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var decodeFileReadCommand = (encoded) => decodeZodMessage(encoded, fileReadCommandSchema);
-var encodeFileReadCommand = (message) => encodeZodMessage(message, fileReadCommandSchema);
-var decodeFileBeginEvent = (encoded) => decodeZodMessage(encoded, fileBeginEventSchema);
-var encodeFileBeginEvent = (message) => encodeZodMessage(message, fileBeginEventSchema);
-var decodeFileEndEvent = (encoded) => decodeZodMessage(encoded, fileEndEventSchema);
-var encodeFileEndEvent = (message) => encodeZodMessage(message, fileEndEventSchema);
-var decodeFileFailedEvent = (encoded) => decodeZodMessage(encoded, fileFailedEventSchema);
-var encodeFileFailedEvent = (message) => encodeZodMessage(message, fileFailedEventSchema);
-var decodeContentWriteCommand = (encoded) => decodeZodMessage(encoded, contentWriteCommandSchema);
-var encodeContentWriteCommand = (message) => encodeZodMessage(message, contentWriteCommandSchema);
-var decodeContentCommitCommand = (encoded) => decodeZodMessage(encoded, contentCommitCommandSchema);
-var encodeContentCommitCommand = (message) => encodeZodMessage(message, contentCommitCommandSchema);
-var decodeContentReadyEvent = (encoded) => decodeZodMessage(encoded, contentReadyEventSchema);
-var encodeContentReadyEvent = (message) => encodeZodMessage(message, contentReadyEventSchema);
-var decodeContentAvailableEvent = (encoded) => decodeZodMessage(encoded, contentAvailableEventSchema);
-var encodeContentAvailableEvent = (message) => encodeZodMessage(message, contentAvailableEventSchema);
-
 // ../mobius-sdk/src/protocol/shared/tool-input.ts
 var MAX_CONTENT_LENGTH = 1e6;
 var MAX_COLLECTION_SIZE = 1e3;
@@ -21738,433 +21408,7 @@ var encodeSessionPermissionRespondCommand = (message) => encodeZodMessage(messag
 var decodeSessionElicitationRespondCommand = (encoded) => decodeZodMessage(encoded, sessionElicitationRespondCommandSchema);
 var encodeSessionElicitationRespondCommand = (message) => encodeZodMessage(message, sessionElicitationRespondCommandSchema);
 
-// ../mobius-sdk/src/protocol/session/lifecycle/index.ts
-var SESSION_PREPARE_KIND = "session.prepare";
-var SESSION_READY_KIND = "session.ready";
-var SESSION_LIST_KIND = "session.list";
-var SESSION_LISTED_KIND = "session.listed";
-var SESSION_QUERY_KIND = "session.query";
-var SESSION_QUERIED_KIND = "session.queried";
-var SESSION_RESTORE_KIND = "session.restore";
-var SESSION_RESTORED_KIND = "session.restored";
-var SESSION_CLOSE_KIND = "session.close";
-var SESSION_CLOSED_KIND = "session.closed";
-var SESSION_CLOSE_NOTICE_KIND = "session.close.notice";
-var SESSION_CLOSED_ERROR_CODE = "session_closed";
-var SESSION_STATUS_CHANGED_KIND = "session.status.changed";
-var SESSION_COMMANDS_UPDATED_KIND = "session.commands.updated";
-var SESSION_INFO_UPDATED_KIND = "session.info.updated";
-var SESSION_OPERATION_FAILED_KIND = "session.operation.failed";
-var sessionStatusChangedEventSchema = external_exports.object({
-  kind: external_exports.literal(SESSION_STATUS_CHANGED_KIND),
-  sessionId: identifierStringSchema,
-  status: sessionStatusSchema
-}).readonly();
-var sessionMetadataSchema = external_exports.object({
-  additionalDirectories: external_exports.array(workspaceEntrySchema).max(16).readonly(),
-  agentId: identifierStringSchema,
-  directoryId: DIRECTORY_IDENTIFIER,
-  directoryLabel: external_exports.string().min(1).max(MAX_WORKSPACE_PATH_LENGTH),
-  prompted: external_exports.boolean(),
-  sessionId: identifierStringSchema,
-  status: sessionStatusSchema.default({ kind: "idle" }),
-  title: external_exports.string().max(500),
-  updatedAt: external_exports.iso.datetime({ offset: true })
-}).readonly();
-var sessionListCommandSchema = external_exports.object({
-  kind: external_exports.literal(SESSION_LIST_KIND),
-  limit: external_exports.number().int().positive().max(500),
-  requestId: identifierStringSchema
-}).readonly();
-var sessionsListedEventSchema = external_exports.object({
-  entries: external_exports.array(sessionMetadataSchema).max(500).readonly(),
-  kind: external_exports.literal(SESSION_LISTED_KIND),
-  requestId: identifierStringSchema
-}).readonly();
-var sessionQueryCommandSchema = external_exports.object({
-  kind: external_exports.literal(SESSION_QUERY_KIND),
-  requestId: identifierStringSchema,
-  sessionIds: external_exports.array(identifierStringSchema).min(1).max(500).readonly()
-}).readonly();
-var sessionsQueriedEventSchema = external_exports.object({
-  entries: external_exports.array(sessionMetadataSchema).max(500).readonly(),
-  kind: external_exports.literal(SESSION_QUERIED_KIND),
-  requestId: identifierStringSchema
-}).readonly();
-var sessionRestoreCommandSchema = external_exports.object({
-  kind: external_exports.literal(SESSION_RESTORE_KIND),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var sessionCloseCommandSchema = external_exports.object({
-  kind: external_exports.literal(SESSION_CLOSE_KIND),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var sessionPrepareCommandSchema = external_exports.object({
-  ...sessionIdentityFields,
-  configuration: external_exports.object({
-    booleanValue: external_exports.boolean(),
-    configId: external_exports.string().min(1).max(128),
-    value: external_exports.string().max(500),
-    valueType: external_exports.enum(["boolean", "select"])
-  }).readonly().optional(),
-  kind: external_exports.literal(SESSION_PREPARE_KIND),
-  requestId: identifierStringSchema,
-  sessionState: external_exports.literal("provisioned").optional(),
-  /** Marks an inspection-only Session preparation. */
-  transient: external_exports.boolean().optional()
-}).superRefine((command, context) => {
-  if (command.transient === true && command.sessionState === "provisioned") {
-    context.addIssue({
-      code: "custom",
-      message: "A transient Session cannot already be provisioned",
-      path: ["sessionState"]
-    });
-  }
-}).readonly();
-var runtimeTimingsSchema = external_exports.array(
-  external_exports.object({
-    durationMilliseconds: external_exports.number().finite().nonnegative().max(12e4),
-    name: external_exports.string().regex(/^[a-z][a-z0-9-]{0,63}$/)
-  }).readonly()
-).max(16).readonly();
-var sessionReadyEventSchema = external_exports.object({
-  additionalDirectories: external_exports.array(workspaceEntrySchema).max(16).readonly(),
-  agentId: identifierStringSchema,
-  agentName: external_exports.string().max(255),
-  agentVersion: external_exports.string().max(128),
-  capabilities: sessionCapabilitiesSchema,
-  commands: external_exports.array(sessionCommandSchema).max(500).readonly(),
-  configOptions: sessionConfigOptionsSchema,
-  configurationRevision: identifierStringSchema.optional(),
-  directoryId: DIRECTORY_IDENTIFIER,
-  directoryLabel: external_exports.string().min(1).max(MAX_WORKSPACE_PATH_LENGTH),
-  kind: external_exports.literal(SESSION_READY_KIND),
-  requestId: identifierStringSchema,
-  restored: external_exports.boolean(),
-  runtimeTimings: runtimeTimingsSchema.optional(),
-  sessionId: identifierStringSchema
-}).readonly();
-var sessionRestoredEventSchema = external_exports.object({
-  entry: sessionMetadataSchema,
-  kind: external_exports.literal(SESSION_RESTORED_KIND),
-  ready: sessionReadyEventSchema,
-  requestId: identifierStringSchema
-}).readonly();
-var sessionClosedEventSchema = external_exports.object({
-  kind: external_exports.literal(SESSION_CLOSED_KIND),
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-}).readonly();
-var sessionCloseNoticeEventSchema = external_exports.object({
-  kind: external_exports.literal(SESSION_CLOSE_NOTICE_KIND),
-  reason: external_exports.string().min(1).max(500),
-  sessionId: identifierStringSchema
-}).readonly();
-var sessionCommandsUpdatedEventSchema = external_exports.object({
-  commands: external_exports.array(sessionCommandSchema).max(500).readonly(),
-  kind: external_exports.literal(SESSION_COMMANDS_UPDATED_KIND),
-  sessionId: identifierStringSchema
-}).readonly();
-var sessionInfoUpdatedEventSchema = external_exports.object({
-  kind: external_exports.literal(SESSION_INFO_UPDATED_KIND),
-  projectId: identifierStringSchema.optional(),
-  sessionId: identifierStringSchema,
-  title: external_exports.string().max(500).nullable(),
-  updatedAt: external_exports.string().max(128)
-}).readonly();
-var sessionOperationFailedEventSchema = external_exports.object({
-  code: identifierStringSchema,
-  kind: external_exports.literal(SESSION_OPERATION_FAILED_KIND),
-  message: external_exports.string().min(1).max(500),
-  requestId: identifierStringSchema,
-  runtimeTimings: runtimeTimingsSchema.optional(),
-  sessionId: external_exports.string().max(128)
-}).readonly();
-var decodeSessionListCommand = (encoded) => decodeZodMessage(encoded, sessionListCommandSchema);
-var encodeSessionListCommand = (message) => encodeZodMessage(message, sessionListCommandSchema);
-var decodeSessionsListedEvent = (encoded) => decodeZodMessage(encoded, sessionsListedEventSchema);
-var encodeSessionsListedEvent = (message) => encodeZodMessage(message, sessionsListedEventSchema);
-var decodeSessionQueryCommand = (encoded) => decodeZodMessage(encoded, sessionQueryCommandSchema);
-var encodeSessionQueryCommand = (message) => encodeZodMessage(message, sessionQueryCommandSchema);
-var decodeSessionsQueriedEvent = (encoded) => decodeZodMessage(encoded, sessionsQueriedEventSchema);
-var encodeSessionsQueriedEvent = (message) => encodeZodMessage(message, sessionsQueriedEventSchema);
-var decodeSessionRestoreCommand = (encoded) => decodeZodMessage(encoded, sessionRestoreCommandSchema);
-var encodeSessionRestoreCommand = (message) => encodeZodMessage(message, sessionRestoreCommandSchema);
-var decodeSessionRestoredEvent = (encoded) => decodeZodMessage(encoded, sessionRestoredEventSchema);
-var encodeSessionRestoredEvent = (message) => encodeZodMessage(message, sessionRestoredEventSchema);
-var decodeSessionCloseCommand = (encoded) => decodeZodMessage(encoded, sessionCloseCommandSchema);
-var encodeSessionCloseCommand = (message) => encodeZodMessage(message, sessionCloseCommandSchema);
-var decodeSessionClosedEvent = (encoded) => decodeZodMessage(encoded, sessionClosedEventSchema);
-var encodeSessionClosedEvent = (message) => encodeZodMessage(message, sessionClosedEventSchema);
-var decodeSessionCloseNoticeEvent = (encoded) => decodeZodMessage(encoded, sessionCloseNoticeEventSchema);
-var encodeSessionCloseNoticeEvent = (message) => encodeZodMessage(message, sessionCloseNoticeEventSchema);
-var decodeSessionStatusChangedEvent = (encoded) => decodeZodMessage(encoded, sessionStatusChangedEventSchema);
-var encodeSessionStatusChangedEvent = (message) => encodeZodMessage(message, sessionStatusChangedEventSchema);
-var decodeSessionPrepareCommand = (encoded) => decodeZodMessage(encoded, sessionPrepareCommandSchema);
-var encodeSessionPrepareCommand = (message) => encodeZodMessage(message, sessionPrepareCommandSchema);
-var decodeSessionReadyEvent = (encoded) => decodeZodMessage(encoded, sessionReadyEventSchema);
-var encodeSessionReadyEvent = (message) => encodeZodMessage(message, sessionReadyEventSchema);
-var decodeSessionInfoUpdatedEvent = (encoded) => decodeZodMessage(encoded, sessionInfoUpdatedEventSchema);
-var encodeSessionInfoUpdatedEvent = (message) => encodeZodMessage(message, sessionInfoUpdatedEventSchema);
-var decodeSessionOperationFailedEvent = (encoded) => decodeZodMessage(encoded, sessionOperationFailedEventSchema);
-var encodeSessionOperationFailedEvent = (message) => encodeZodMessage(message, sessionOperationFailedEventSchema);
-
-// ../mobius-sdk/src/protocol/session/prompt/commands.ts
-var SESSION_PROMPT_KIND = "session.prompt";
-var SESSION_PROMPT_DISPOSITION_KIND = "session.prompt.disposition";
-var SESSION_CANCEL_KIND = "session.cancel";
-var SESSION_CANCEL_BEFORE_START_KIND = "session.cancel-before-start";
-var SessionPromptDisposition = Object.freeze({
-  Queue: "queue",
-  Reject: "reject",
-  Steer: "steer"
-});
-var SessionHistoryPolicy = Object.freeze({
-  Eager: "eager",
-  ExecutionOnly: "execution-only"
-});
-var MAX_PROMPT_LENGTH = 1e5;
-var MAX_PROMPT_ATTACHMENT_BYTES = 32 * 1024 * 1024;
-function decodeSessionCancelBeforeStartCommand(encoded) {
-  const value = parseJson(encoded);
-  assertKind(value, SESSION_CANCEL_BEFORE_START_KIND);
-  return {
-    commandId: readIdentifier(value, "commandId"),
-    kind: SESSION_CANCEL_BEFORE_START_KIND,
-    sessionId: readIdentifier(value, "sessionId")
-  };
-}
-var encodeSessionCancelBeforeStartCommand = (message) => JSON.stringify(decodeSessionCancelBeforeStartCommand(JSON.stringify(message)));
-var promptAttachmentSchema = external_exports.object({
-  byteLength: external_exports.number().int().positive().max(MAX_PROMPT_ATTACHMENT_BYTES),
-  contentKey: external_exports.string().regex(/^[a-f0-9]{64}$/u),
-  kind: external_exports.enum(["image", "resource"]),
-  mimeType: external_exports.string().min(1).max(255),
-  name: external_exports.string().min(1).max(500),
-  uri: external_exports.string().min(1).max(4096)
-}).readonly();
-var decodePromptAttachmentsValue = (value) => decodeZodValue(value, external_exports.array(promptAttachmentSchema).max(16).readonly());
-function readPromptDisposition(value) {
-  const field = value["disposition"];
-  if (field === void 0 || field === SessionPromptDisposition.Reject) {
-    return SessionPromptDisposition.Reject;
-  }
-  if (field === SessionPromptDisposition.Queue) {
-    return SessionPromptDisposition.Queue;
-  }
-  if (field === SessionPromptDisposition.Steer) {
-    return SessionPromptDisposition.Steer;
-  }
-  throw new ProtocolMessageError("Invalid value field: disposition");
-}
-function decodeSessionPromptCommand(encoded) {
-  const value = parseJson(encoded);
-  const hasSessionConfigurations = Object.hasOwn(value, "sessionConfigurations");
-  assertKind(value, SESSION_PROMPT_KIND);
-  const prompt = readText(value, "prompt", MAX_PROMPT_LENGTH);
-  const attachments = !Object.hasOwn(value, "attachments") && Array.isArray(value["images"]) && Array.isArray(value["resources"]) ? [] : decodePromptAttachmentsValue(value["attachments"]);
-  const attachmentBytes = attachments.reduce((total, attachment) => total + attachment.byteLength, 0);
-  if (attachmentBytes > MAX_PROMPT_ATTACHMENT_BYTES) {
-    throw new ProtocolMessageError("Prompt attachments are too large");
-  }
-  if (prompt.trim().length === 0 && attachments.length === 0) {
-    throw new ProtocolMessageError("Prompt must contain content");
-  }
-  const disposition = readPromptDisposition(value);
-  const rawTargetCommandId = value["targetCommandId"];
-  const targetCommandId = rawTargetCommandId === void 0 ? "" : readText(value, "targetCommandId", 128);
-  if (disposition === SessionPromptDisposition.Reject && targetCommandId.length > 0 || disposition !== SessionPromptDisposition.Reject && !isIdentifier(targetCommandId)) {
-    throw new ProtocolMessageError("Prompt disposition has an invalid target command");
-  }
-  const sessionConfigurations = hasSessionConfigurations ? decodeSessionConfigurationSelections(value["sessionConfigurations"]) : [];
-  if (new Set(sessionConfigurations.map((selection) => selection.configId)).size !== sessionConfigurations.length) {
-    throw new ProtocolMessageError("Session configuration identifiers must be unique");
-  }
-  return {
-    additionalDirectoryIds: readDirectoryIdentifiers(value, "additionalDirectoryIds", 16),
-    agentId: readIdentifier(value, "agentId"),
-    bindingId: readIdentifier(value, "bindingId"),
-    commandId: readIdentifier(value, "commandId"),
-    directoryId: readDirectoryIdentifier(value, "directoryId"),
-    disposition,
-    attachments,
-    ...value["historyPolicy"] === void 0 ? {} : {
-      historyPolicy: readHistoryPolicy(value)
-    },
-    kind: SESSION_PROMPT_KIND,
-    prompt,
-    ...hasSessionConfigurations ? { sessionConfigurations } : {},
-    sessionId: readIdentifier(value, "sessionId"),
-    targetCommandId
-  };
-}
-function readHistoryPolicy(value) {
-  const field = value["historyPolicy"];
-  if (field === SessionHistoryPolicy.Eager || field === SessionHistoryPolicy.ExecutionOnly) {
-    return field;
-  }
-  throw new ProtocolMessageError("Invalid value field: historyPolicy");
-}
-function decodeSessionCancelCommand(encoded) {
-  const value = parseJson(encoded);
-  assertKind(value, SESSION_CANCEL_KIND);
-  return {
-    commandId: readIdentifier(value, "commandId"),
-    kind: SESSION_CANCEL_KIND,
-    sessionId: readIdentifier(value, "sessionId")
-  };
-}
-function decodeSessionPromptDispositionCommand(encoded) {
-  const value = parseJson(encoded);
-  assertKind(value, SESSION_PROMPT_DISPOSITION_KIND);
-  if (readPromptDisposition(value) !== SessionPromptDisposition.Steer) {
-    throw new ProtocolMessageError("Only queued prompts can be steered");
-  }
-  return {
-    commandId: readIdentifier(value, "commandId"),
-    disposition: SessionPromptDisposition.Steer,
-    kind: SESSION_PROMPT_DISPOSITION_KIND,
-    sessionId: readIdentifier(value, "sessionId")
-  };
-}
-function encodeSessionPromptCommand(message) {
-  const command = decodeSessionPromptCommand(JSON.stringify(message));
-  return JSON.stringify({
-    ...command,
-    // Keep text prompts compatible with the previous Runtime release while
-    // attachments move to the content-key protocol. Older Runtimes ignore
-    // `attachments` and require both legacy arrays to be present.
-    images: [],
-    resources: []
-  });
-}
-function encodeSessionCancelCommand(message) {
-  return JSON.stringify(decodeSessionCancelCommand(JSON.stringify(message)));
-}
-function encodeSessionPromptDispositionCommand(message) {
-  return JSON.stringify(decodeSessionPromptDispositionCommand(JSON.stringify(message)));
-}
-
-// ../mobius-sdk/src/protocol/session/native/index.ts
-var NATIVE_SESSION_REQUEST_KIND = "native.session.request";
-var NATIVE_SESSION_RESULT_KIND = "native.session.result";
-var NATIVE_SESSION_CANCEL_KIND = "native.session.cancel";
-var envelope = {
-  requestId: identifierStringSchema,
-  sessionId: identifierStringSchema
-};
-var activeTurnSnapshotSchema = external_exports.object({
-  commandId: identifierStringSchema,
-  epoch: identifierStringSchema,
-  interaction: external_exports.discriminatedUnion("kind", [sessionPermissionRequestedEventSchema, sessionElicitationRequestedEventSchema]).nullable(),
-  sequence: external_exports.number().int().nonnegative(),
-  state: external_exports.literal("running")
-}).readonly();
-var identity = {
-  ...envelope,
-  kind: external_exports.literal(NATIVE_SESSION_REQUEST_KIND),
-  additionalDirectoryIds: external_exports.array(DIRECTORY_IDENTIFIER).max(16).readonly(),
-  agentId: identifierStringSchema,
-  bindingId: identifierStringSchema,
-  directoryId: DIRECTORY_IDENTIFIER
-};
-var nativeSessionRequestSchema = external_exports.discriminatedUnion("action", [
-  external_exports.object({ ...identity, action: external_exports.literal("active-turn"), targetSessionId: identifierStringSchema }).readonly(),
-  external_exports.object({ ...identity, action: external_exports.literal("find"), nativeSessionId: identifierStringSchema }).readonly(),
-  external_exports.object({
-    ...identity,
-    action: external_exports.literal("list"),
-    cursor: identifierStringSchema.nullable()
-  }).readonly(),
-  external_exports.object({
-    ...identity,
-    action: external_exports.enum(["import", "fork"]),
-    entryId: identifierStringSchema,
-    targetSessionId: identifierStringSchema
-  }).readonly()
-]);
-var nativeSessionCommandSchema = external_exports.discriminatedUnion("action", [
-  external_exports.object({ ...identity, action: external_exports.literal("active-turn"), targetSessionId: identifierStringSchema }).readonly(),
-  external_exports.object({ ...identity, action: external_exports.literal("find"), nativeSessionId: identifierStringSchema }).readonly(),
-  external_exports.object({
-    ...identity,
-    action: external_exports.literal("list"),
-    cursor: identifierStringSchema.nullable()
-  }).readonly(),
-  external_exports.object({
-    ...identity,
-    action: external_exports.enum(["import", "fork"]),
-    entryId: identifierStringSchema,
-    targetSessionId: identifierStringSchema
-  }).readonly()
-]);
-var nativeSessionEntrySchema = external_exports.object({
-  entryId: identifierStringSchema,
-  mobiusSessionIds: external_exports.array(identifierStringSchema).max(500).readonly(),
-  nativeSessionId: identifierStringSchema,
-  title: external_exports.string().max(500),
-  directoryId: DIRECTORY_IDENTIFIER,
-  directoryLabel: external_exports.string().min(1).max(MAX_WORKSPACE_PATH_LENGTH),
-  updatedAt: external_exports.iso.datetime({ offset: true }).nullable(),
-  additionalDirectories: external_exports.array(external_exports.object({ directoryId: DIRECTORY_IDENTIFIER, name: external_exports.string().min(1).max(255) }).readonly()).max(16).readonly()
-}).readonly();
-var resultEnvelope = {
-  ...envelope,
-  kind: external_exports.literal(NATIVE_SESSION_RESULT_KIND)
-};
-var nativeSessionResultSchema = external_exports.discriminatedUnion("action", [
-  external_exports.object({
-    ...resultEnvelope,
-    action: external_exports.literal("active-turn"),
-    targetSessionId: identifierStringSchema,
-    queued: external_exports.array(
-      external_exports.object({
-        commandId: identifierStringSchema,
-        prompt: external_exports.string().max(1e5),
-        attachments: external_exports.array(promptAttachmentSchema).max(16).readonly()
-      }).readonly()
-    ).readonly(),
-    turn: activeTurnSnapshotSchema.nullable()
-  }).readonly(),
-  external_exports.object({
-    ...resultEnvelope,
-    action: external_exports.literal("find"),
-    entry: nativeSessionEntrySchema
-  }).readonly(),
-  external_exports.object({
-    ...resultEnvelope,
-    action: external_exports.literal("list"),
-    capabilities: sessionCapabilitiesSchema,
-    entries: external_exports.array(nativeSessionEntrySchema).max(500).readonly(),
-    nextCursor: identifierStringSchema.nullable()
-  }).readonly(),
-  external_exports.object({
-    ...resultEnvelope,
-    action: external_exports.enum(["import", "fork"]),
-    targetSessionId: identifierStringSchema,
-    ready: sessionReadyEventSchema,
-    title: external_exports.string().max(500)
-  }).readonly()
-]);
-var nativeSessionCancelSchema = external_exports.object({ ...envelope, kind: external_exports.literal(NATIVE_SESSION_CANCEL_KIND) }).readonly();
-function decode3(schema, encoded) {
-  try {
-    const value = JSON.parse(encoded);
-    return schema.parse(value);
-  } catch (cause) {
-    throw new ProtocolMessageError("Invalid native session message", { cause });
-  }
-}
-var decodeNativeSessionCommand = (encoded) => decode3(nativeSessionCommandSchema, encoded);
-var encodeNativeSessionCommand = (value) => JSON.stringify(nativeSessionCommandSchema.parse(value));
-var decodeNativeSessionResult = (encoded) => decode3(nativeSessionResultSchema, encoded);
-var encodeNativeSessionResult = (value) => JSON.stringify(nativeSessionResultSchema.parse(value));
-var decodeNativeSessionCancel = (encoded) => decode3(nativeSessionCancelSchema, encoded);
-var encodeNativeSessionCancel = (value) => JSON.stringify(nativeSessionCancelSchema.parse(value));
-
-// ../mobius-sdk/src/protocol/session/observability/event-log.ts
+// ../mobius-sdk/src/protocol/session/events/index.ts
 var MAX_EVENT_COUNT = 1e4;
 var MAX_COLLECTION_SIZE2 = 1e3;
 var MAX_CONTENT_LENGTH2 = 1e6;
@@ -22595,137 +21839,702 @@ function isKnownSessionEventVariant(value) {
   if (!isRecord3(value)) {
     return true;
   }
-  const type = value["type"];
-  if (typeof type !== "string") {
-    return true;
+  const type = value["type"];
+  if (typeof type !== "string") {
+    return true;
+  }
+  if (type === "acp") {
+    const payload = value["payload"];
+    return !isRecord3(payload) || !containsUnknownAcpVariant(payload);
+  }
+  if (type === "lifecycle-metadata") {
+    const payload = value["payload"];
+    if (!isRecord3(payload)) {
+      return true;
+    }
+    const kind = payload["kind"];
+    if (typeof kind === "string" && !knownLifecycleKinds.has(kind)) {
+      return false;
+    }
+    return kind !== "prompt.requested" || !arrayContainsUnknown(payload["content"], containsUnknownContentBlock);
+  }
+  return false;
+}
+function filterKnownSessionEventVariants(events) {
+  return Array.isArray(events) ? events.filter(isKnownSessionEventVariant) : events;
+}
+var sessionEventBatchSchema = external_exports.array(sessionEventSchema).min(1).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
+var sessionLiveEventBatchSchema = external_exports.array(sessionLiveEventSchema).min(1).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
+var sessionExportSchema = external_exports.object({
+  binding: external_exports.object({
+    bindingId: identifierStringSchema,
+    runtimeId: identifierStringSchema
+  }).readonly(),
+  events: external_exports.array(sessionEventSchema).max(MAX_EVENT_COUNT).readonly(),
+  sessionId: identifierStringSchema,
+  truncated: external_exports.boolean()
+}).readonly().superRefine((session, context) => {
+  const eventIds = /* @__PURE__ */ new Set();
+  for (const [index2, event] of session.events.entries()) {
+    if (event.sessionId !== session.sessionId) {
+      context.addIssue({
+        code: "custom",
+        message: "Exported event belongs to a different Session",
+        path: ["events", index2, "sessionId"]
+      });
+    }
+    if (eventIds.has(event.eventId)) {
+      context.addIssue({
+        code: "custom",
+        message: "Exported event identities are not unique",
+        path: ["events", index2, "eventId"]
+      });
+    }
+    eventIds.add(event.eventId);
+  }
+});
+var mobiusSessionExportSchema = external_exports.object({
+  formatVersion: external_exports.literal("2"),
+  session: sessionExportSchema
+}).readonly();
+var sessionEventEnvelopeSchema = external_exports.object({ events: sessionLiveEventBatchSchema, kind: external_exports.literal(SESSION_EVENT_KIND) }).readonly();
+var sessionEventLogPageSchema = external_exports.object({
+  events: external_exports.array(sessionEventSchema).max(MAX_EVENT_COUNT).readonly(),
+  nextCursor: external_exports.string().min(1).max(512).nullable(),
+  sessionGenerationId: identifierStringSchema,
+  tailCursor: external_exports.string().max(512),
+  // The generation-scoped live position covered by this snapshot, including
+  // coalesced and omitted events. Absent only on older Runtime versions.
+  throughPosition: positionSchema.optional(),
+  truncated: external_exports.boolean(),
+  version: external_exports.literal(2)
+}).readonly();
+var sessionEventOmissionSchema = external_exports.literal("agent-reasoning");
+var nativeEventPageRequestSchema = external_exports.object({
+  cursor: external_exports.string().min(1).max(512).nullable(),
+  eventLimit: external_exports.number().int().min(1).max(1e4),
+  // Legacy callers may still send this option; readers must ignore it.
+  omit: external_exports.array(sessionEventOmissionSchema).max(1).readonly().optional()
+}).readonly();
+var queuedPromptRequestEventLogSchema = external_exports.object({
+  commandId: identifierStringSchema,
+  content: external_exports.array(contentBlockSchema).min(1).max(100).readonly(),
+  disposition: shortString.optional(),
+  targetCommandId: identifierStringSchema.optional()
+}).readonly();
+var nativeSessionEventsSchema = external_exports.object({
+  events: sessionEventLogPageSchema,
+  queuedPromptRequests: external_exports.array(queuedPromptRequestEventLogSchema).max(MAX_COLLECTION_SIZE2).readonly()
+}).readonly();
+function inputValue(value) {
+  if (typeof value !== "string") {
+    return value;
+  }
+  try {
+    return JSON.parse(value);
+  } catch (cause) {
+    throw new ProtocolMessageError("Session Event Log V2 message is not valid JSON", { cause });
+  }
+}
+function decode3(value, schema) {
+  const result = schema.safeParse(inputValue(value));
+  if (!result.success) {
+    throw new ProtocolMessageError("Session Event Log V2 message does not match its schema", {
+      cause: result.error
+    });
+  }
+  return result.data;
+}
+function encode3(value, schema) {
+  return JSON.stringify(decode3(value, schema));
+}
+function sanitizeKnownNativeSessionEvents(value) {
+  const input2 = inputValue(value);
+  if (!isRecord3(input2)) {
+    return input2;
+  }
+  const page = input2["events"];
+  const queuedPromptRequests = input2["queuedPromptRequests"];
+  return {
+    ...input2,
+    events: isRecord3(page) ? { ...page, events: filterKnownSessionEventVariants(page["events"]) } : page,
+    queuedPromptRequests: Array.isArray(queuedPromptRequests) ? queuedPromptRequests.filter(
+      (prompt) => !isRecord3(prompt) || !arrayContainsUnknown(prompt["content"], containsUnknownContentBlock)
+    ) : queuedPromptRequests
+  };
+}
+var knownSessionLiveEventBatchSchema = external_exports.array(sessionLiveEventSchema).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
+var decodeSessionEvent = (value) => decode3(value, sessionEventSchema);
+var decodeKnownSessionEventPayload = (value) => isKnownSessionEventVariant(value) ? decode3(value, sessionEventPayloadSchema) : null;
+var decodeSessionEventEnvelope = (value) => decode3(value, sessionEventEnvelopeSchema);
+var encodeSessionEventEnvelope = (value) => encode3(value, sessionEventEnvelopeSchema);
+var decodeAcpSessionUpdate = (value) => decode3(value, acpSessionUpdateSchema);
+var decodeKnownNativeSessionEvents = (value) => decode3(sanitizeKnownNativeSessionEvents(value), nativeSessionEventsSchema);
+
+// ../mobius-sdk/src/protocol/session/files/index.ts
+var FILE_READ_KIND = "file.read";
+var FILE_BEGIN_KIND = "file.begin";
+var FILE_END_KIND = "file.end";
+var FILE_FAILED_KIND = "file.failed";
+var CONTENT_WRITE_KIND = "content.write";
+var CONTENT_COMMIT_KIND = "content.commit";
+var CONTENT_READY_KIND = "content.ready";
+var CONTENT_AVAILABLE_KIND = "content.available";
+var CONTENT_CHUNK_MAX_BYTES = 192 * 1024;
+var CONTENT_WRITE_MAX_BYTES = 32 * 1024 * 1024;
+var PROMPT_IMAGE_MAX_BYTES = 5e6;
+var CONTENT_CHUNK_MAGIC = new Uint8Array([77, 66, 67, 49]);
+var CONTENT_CHUNK_HEADER_BYTES = CONTENT_CHUNK_MAGIC.byteLength + 1 + 4;
+var fileReadCommandSchema = external_exports.object({
+  kind: external_exports.literal(FILE_READ_KIND),
+  maxBytes: external_exports.number().int().positive().max(128 * 1024 * 1024),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema,
+  path: external_exports.string().min(1).max(4096)
+}).readonly();
+var fileBeginEventSchema = external_exports.object({
+  byteLength: external_exports.number().int().positive().max(128 * 1024 * 1024),
+  kind: external_exports.literal(FILE_BEGIN_KIND),
+  mediaType: external_exports.string().min(1).max(255),
+  modifiedAt: external_exports.iso.datetime({ offset: true }),
+  name: external_exports.string().min(1).max(500),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var contentWriteCommandSchema = external_exports.object({
+  byteLength: external_exports.number().int().positive().max(CONTENT_WRITE_MAX_BYTES),
+  contentKey: external_exports.string().regex(/^[a-f0-9]{64}$/u),
+  contentKind: external_exports.enum(["image", "resource"]),
+  kind: external_exports.literal(CONTENT_WRITE_KIND),
+  mediaType: external_exports.string().min(1).max(255),
+  name: external_exports.string().min(1).max(500),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var contentCommitCommandSchema = external_exports.object({
+  kind: external_exports.literal(CONTENT_COMMIT_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var contentReadyEventSchema = external_exports.object({
+  kind: external_exports.literal(CONTENT_READY_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var contentAvailableEventSchema = external_exports.object({
+  byteLength: external_exports.number().int().positive().max(CONTENT_WRITE_MAX_BYTES),
+  contentKey: external_exports.string().regex(/^[a-f0-9]{64}$/u),
+  kind: external_exports.literal(CONTENT_AVAILABLE_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+function binaryBytes(value) {
+  if (value instanceof ArrayBuffer) {
+    return new Uint8Array(value);
+  }
+  if (ArrayBuffer.isView(value)) {
+    return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
+  }
+  throw new Error("Content chunk must be a binary WebSocket frame");
+}
+function encodeContentChunkFrame(frame) {
+  if (!isIdentifier(frame.requestId)) {
+    throw new Error("Content chunk request identifier is invalid");
+  }
+  if (!Number.isSafeInteger(frame.sequence) || frame.sequence < 0 || frame.sequence > 4294967295) {
+    throw new Error("Content chunk sequence is invalid");
+  }
+  if (frame.bytes.byteLength < 1 || frame.bytes.byteLength > CONTENT_CHUNK_MAX_BYTES) {
+    throw new Error("Content chunk size is invalid");
+  }
+  const requestId = new TextEncoder().encode(frame.requestId);
+  if (requestId.byteLength > 255) {
+    throw new Error("Content chunk request identifier is too long");
+  }
+  const encoded = new Uint8Array(CONTENT_CHUNK_HEADER_BYTES + requestId.byteLength + frame.bytes.byteLength);
+  encoded.set(CONTENT_CHUNK_MAGIC, 0);
+  encoded[CONTENT_CHUNK_MAGIC.byteLength] = requestId.byteLength;
+  new DataView(encoded.buffer).setUint32(CONTENT_CHUNK_MAGIC.byteLength + 1, frame.sequence);
+  encoded.set(requestId, CONTENT_CHUNK_HEADER_BYTES);
+  encoded.set(frame.bytes, CONTENT_CHUNK_HEADER_BYTES + requestId.byteLength);
+  return encoded;
+}
+function decodeContentChunkFrame(value) {
+  const encoded = binaryBytes(value);
+  if (encoded.byteLength <= CONTENT_CHUNK_HEADER_BYTES || !CONTENT_CHUNK_MAGIC.every((byte, index2) => encoded[index2] === byte)) {
+    throw new Error("Content chunk frame header is invalid");
+  }
+  const requestIdLength = encoded[CONTENT_CHUNK_MAGIC.byteLength] ?? 0;
+  const payloadOffset = CONTENT_CHUNK_HEADER_BYTES + requestIdLength;
+  if (requestIdLength < 1 || payloadOffset >= encoded.byteLength) {
+    throw new Error("Content chunk frame length is invalid");
+  }
+  const requestId = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(
+    encoded.subarray(CONTENT_CHUNK_HEADER_BYTES, payloadOffset)
+  );
+  const bytes = encoded.slice(payloadOffset);
+  const sequence = new DataView(encoded.buffer, encoded.byteOffset, encoded.byteLength).getUint32(
+    CONTENT_CHUNK_MAGIC.byteLength + 1
+  );
+  if (!isIdentifier(requestId) || bytes.byteLength > CONTENT_CHUNK_MAX_BYTES) {
+    throw new Error("Content chunk frame is invalid");
+  }
+  return { bytes, requestId, sequence };
+}
+var fileEndEventSchema = external_exports.object({
+  kind: external_exports.literal(FILE_END_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var fileFailedEventSchema = external_exports.object({
+  code: identifierStringSchema,
+  kind: external_exports.literal(FILE_FAILED_KIND),
+  message: external_exports.string().min(1).max(500),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var decodeFileReadCommand = (encoded) => decodeZodMessage(encoded, fileReadCommandSchema);
+var encodeFileReadCommand = (message) => encodeZodMessage(message, fileReadCommandSchema);
+var decodeFileBeginEvent = (encoded) => decodeZodMessage(encoded, fileBeginEventSchema);
+var encodeFileBeginEvent = (message) => encodeZodMessage(message, fileBeginEventSchema);
+var decodeFileEndEvent = (encoded) => decodeZodMessage(encoded, fileEndEventSchema);
+var encodeFileEndEvent = (message) => encodeZodMessage(message, fileEndEventSchema);
+var decodeFileFailedEvent = (encoded) => decodeZodMessage(encoded, fileFailedEventSchema);
+var encodeFileFailedEvent = (message) => encodeZodMessage(message, fileFailedEventSchema);
+var decodeContentWriteCommand = (encoded) => decodeZodMessage(encoded, contentWriteCommandSchema);
+var encodeContentWriteCommand = (message) => encodeZodMessage(message, contentWriteCommandSchema);
+var decodeContentCommitCommand = (encoded) => decodeZodMessage(encoded, contentCommitCommandSchema);
+var encodeContentCommitCommand = (message) => encodeZodMessage(message, contentCommitCommandSchema);
+var decodeContentReadyEvent = (encoded) => decodeZodMessage(encoded, contentReadyEventSchema);
+var encodeContentReadyEvent = (message) => encodeZodMessage(message, contentReadyEventSchema);
+var decodeContentAvailableEvent = (encoded) => decodeZodMessage(encoded, contentAvailableEventSchema);
+var encodeContentAvailableEvent = (message) => encodeZodMessage(message, contentAvailableEventSchema);
+
+// ../mobius-sdk/src/protocol/session/lifecycle/index.ts
+var SESSION_PREPARE_KIND = "session.prepare";
+var SESSION_READY_KIND = "session.ready";
+var SESSION_LIST_KIND = "session.list";
+var SESSION_LISTED_KIND = "session.listed";
+var SESSION_QUERY_KIND = "session.query";
+var SESSION_QUERIED_KIND = "session.queried";
+var SESSION_RESTORE_KIND = "session.restore";
+var SESSION_RESTORED_KIND = "session.restored";
+var SESSION_CLOSE_KIND = "session.close";
+var SESSION_CLOSED_KIND = "session.closed";
+var SESSION_CLOSE_NOTICE_KIND = "session.close.notice";
+var SESSION_CLOSED_ERROR_CODE = "session_closed";
+var SESSION_STATUS_CHANGED_KIND = "session.status.changed";
+var SESSION_COMMANDS_UPDATED_KIND = "session.commands.updated";
+var SESSION_INFO_UPDATED_KIND = "session.info.updated";
+var SESSION_OPERATION_FAILED_KIND = "session.operation.failed";
+var sessionStatusChangedEventSchema = external_exports.object({
+  kind: external_exports.literal(SESSION_STATUS_CHANGED_KIND),
+  sessionId: identifierStringSchema,
+  status: sessionStatusSchema
+}).readonly();
+var sessionMetadataSchema = external_exports.object({
+  additionalDirectories: external_exports.array(workspaceEntrySchema).max(16).readonly(),
+  agentId: identifierStringSchema,
+  directoryId: DIRECTORY_IDENTIFIER,
+  directoryLabel: external_exports.string().min(1).max(MAX_WORKSPACE_PATH_LENGTH),
+  prompted: external_exports.boolean(),
+  sessionId: identifierStringSchema,
+  status: sessionStatusSchema.default({ kind: "idle" }),
+  title: external_exports.string().max(500),
+  updatedAt: external_exports.iso.datetime({ offset: true })
+}).readonly();
+var sessionListCommandSchema = external_exports.object({
+  kind: external_exports.literal(SESSION_LIST_KIND),
+  limit: external_exports.number().int().positive().max(500),
+  requestId: identifierStringSchema
+}).readonly();
+var sessionsListedEventSchema = external_exports.object({
+  entries: external_exports.array(sessionMetadataSchema).max(500).readonly(),
+  kind: external_exports.literal(SESSION_LISTED_KIND),
+  requestId: identifierStringSchema
+}).readonly();
+var sessionQueryCommandSchema = external_exports.object({
+  kind: external_exports.literal(SESSION_QUERY_KIND),
+  requestId: identifierStringSchema,
+  sessionIds: external_exports.array(identifierStringSchema).min(1).max(500).readonly()
+}).readonly();
+var sessionsQueriedEventSchema = external_exports.object({
+  entries: external_exports.array(sessionMetadataSchema).max(500).readonly(),
+  kind: external_exports.literal(SESSION_QUERIED_KIND),
+  requestId: identifierStringSchema
+}).readonly();
+var sessionRestoreCommandSchema = external_exports.object({
+  kind: external_exports.literal(SESSION_RESTORE_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var sessionCloseCommandSchema = external_exports.object({
+  kind: external_exports.literal(SESSION_CLOSE_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var sessionPrepareCommandSchema = external_exports.object({
+  ...sessionIdentityFields,
+  configuration: external_exports.object({
+    booleanValue: external_exports.boolean(),
+    configId: external_exports.string().min(1).max(128),
+    value: external_exports.string().max(500),
+    valueType: external_exports.enum(["boolean", "select"])
+  }).readonly().optional(),
+  kind: external_exports.literal(SESSION_PREPARE_KIND),
+  requestId: identifierStringSchema,
+  sessionState: external_exports.literal("provisioned").optional(),
+  /** Marks an inspection-only Session preparation. */
+  transient: external_exports.boolean().optional()
+}).superRefine((command, context) => {
+  if (command.transient === true && command.sessionState === "provisioned") {
+    context.addIssue({
+      code: "custom",
+      message: "A transient Session cannot already be provisioned",
+      path: ["sessionState"]
+    });
+  }
+}).readonly();
+var runtimeTimingsSchema = external_exports.array(
+  external_exports.object({
+    durationMilliseconds: external_exports.number().finite().nonnegative().max(12e4),
+    name: external_exports.string().regex(/^[a-z][a-z0-9-]{0,63}$/)
+  }).readonly()
+).max(16).readonly();
+var sessionReadyEventSchema = external_exports.object({
+  additionalDirectories: external_exports.array(workspaceEntrySchema).max(16).readonly(),
+  agentId: identifierStringSchema,
+  agentName: external_exports.string().max(255),
+  agentVersion: external_exports.string().max(128),
+  capabilities: sessionCapabilitiesSchema,
+  commands: external_exports.array(sessionCommandSchema).max(500).readonly(),
+  configOptions: sessionConfigOptionsSchema,
+  configurationRevision: identifierStringSchema.optional(),
+  directoryId: DIRECTORY_IDENTIFIER,
+  directoryLabel: external_exports.string().min(1).max(MAX_WORKSPACE_PATH_LENGTH),
+  kind: external_exports.literal(SESSION_READY_KIND),
+  requestId: identifierStringSchema,
+  restored: external_exports.boolean(),
+  runtimeTimings: runtimeTimingsSchema.optional(),
+  sessionId: identifierStringSchema
+}).readonly();
+var sessionRestoredEventSchema = external_exports.object({
+  entry: sessionMetadataSchema,
+  kind: external_exports.literal(SESSION_RESTORED_KIND),
+  ready: sessionReadyEventSchema,
+  requestId: identifierStringSchema
+}).readonly();
+var sessionClosedEventSchema = external_exports.object({
+  kind: external_exports.literal(SESSION_CLOSED_KIND),
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+}).readonly();
+var sessionCloseNoticeEventSchema = external_exports.object({
+  kind: external_exports.literal(SESSION_CLOSE_NOTICE_KIND),
+  reason: external_exports.string().min(1).max(500),
+  sessionId: identifierStringSchema
+}).readonly();
+var sessionCommandsUpdatedEventSchema = external_exports.object({
+  commands: external_exports.array(sessionCommandSchema).max(500).readonly(),
+  kind: external_exports.literal(SESSION_COMMANDS_UPDATED_KIND),
+  sessionId: identifierStringSchema
+}).readonly();
+var sessionInfoUpdatedEventSchema = external_exports.object({
+  kind: external_exports.literal(SESSION_INFO_UPDATED_KIND),
+  projectId: identifierStringSchema.optional(),
+  sessionId: identifierStringSchema,
+  title: external_exports.string().max(500).nullable(),
+  updatedAt: external_exports.string().max(128)
+}).readonly();
+var sessionOperationFailedEventSchema = external_exports.object({
+  code: identifierStringSchema,
+  kind: external_exports.literal(SESSION_OPERATION_FAILED_KIND),
+  message: external_exports.string().min(1).max(500),
+  requestId: identifierStringSchema,
+  runtimeTimings: runtimeTimingsSchema.optional(),
+  sessionId: external_exports.string().max(128)
+}).readonly();
+var decodeSessionListCommand = (encoded) => decodeZodMessage(encoded, sessionListCommandSchema);
+var encodeSessionListCommand = (message) => encodeZodMessage(message, sessionListCommandSchema);
+var decodeSessionsListedEvent = (encoded) => decodeZodMessage(encoded, sessionsListedEventSchema);
+var encodeSessionsListedEvent = (message) => encodeZodMessage(message, sessionsListedEventSchema);
+var decodeSessionQueryCommand = (encoded) => decodeZodMessage(encoded, sessionQueryCommandSchema);
+var encodeSessionQueryCommand = (message) => encodeZodMessage(message, sessionQueryCommandSchema);
+var decodeSessionsQueriedEvent = (encoded) => decodeZodMessage(encoded, sessionsQueriedEventSchema);
+var encodeSessionsQueriedEvent = (message) => encodeZodMessage(message, sessionsQueriedEventSchema);
+var decodeSessionRestoreCommand = (encoded) => decodeZodMessage(encoded, sessionRestoreCommandSchema);
+var encodeSessionRestoreCommand = (message) => encodeZodMessage(message, sessionRestoreCommandSchema);
+var decodeSessionRestoredEvent = (encoded) => decodeZodMessage(encoded, sessionRestoredEventSchema);
+var encodeSessionRestoredEvent = (message) => encodeZodMessage(message, sessionRestoredEventSchema);
+var decodeSessionCloseCommand = (encoded) => decodeZodMessage(encoded, sessionCloseCommandSchema);
+var encodeSessionCloseCommand = (message) => encodeZodMessage(message, sessionCloseCommandSchema);
+var decodeSessionClosedEvent = (encoded) => decodeZodMessage(encoded, sessionClosedEventSchema);
+var encodeSessionClosedEvent = (message) => encodeZodMessage(message, sessionClosedEventSchema);
+var decodeSessionCloseNoticeEvent = (encoded) => decodeZodMessage(encoded, sessionCloseNoticeEventSchema);
+var encodeSessionCloseNoticeEvent = (message) => encodeZodMessage(message, sessionCloseNoticeEventSchema);
+var decodeSessionStatusChangedEvent = (encoded) => decodeZodMessage(encoded, sessionStatusChangedEventSchema);
+var encodeSessionStatusChangedEvent = (message) => encodeZodMessage(message, sessionStatusChangedEventSchema);
+var decodeSessionPrepareCommand = (encoded) => decodeZodMessage(encoded, sessionPrepareCommandSchema);
+var encodeSessionPrepareCommand = (message) => encodeZodMessage(message, sessionPrepareCommandSchema);
+var decodeSessionReadyEvent = (encoded) => decodeZodMessage(encoded, sessionReadyEventSchema);
+var encodeSessionReadyEvent = (message) => encodeZodMessage(message, sessionReadyEventSchema);
+var decodeSessionInfoUpdatedEvent = (encoded) => decodeZodMessage(encoded, sessionInfoUpdatedEventSchema);
+var encodeSessionInfoUpdatedEvent = (message) => encodeZodMessage(message, sessionInfoUpdatedEventSchema);
+var decodeSessionOperationFailedEvent = (encoded) => decodeZodMessage(encoded, sessionOperationFailedEventSchema);
+var encodeSessionOperationFailedEvent = (message) => encodeZodMessage(message, sessionOperationFailedEventSchema);
+
+// ../mobius-sdk/src/protocol/session/prompt/commands.ts
+var SESSION_PROMPT_KIND = "session.prompt";
+var SESSION_PROMPT_DISPOSITION_KIND = "session.prompt.disposition";
+var SESSION_CANCEL_KIND = "session.cancel";
+var SESSION_CANCEL_BEFORE_START_KIND = "session.cancel-before-start";
+var SessionPromptDisposition = Object.freeze({
+  Queue: "queue",
+  Reject: "reject",
+  Steer: "steer"
+});
+var SessionHistoryPolicy = Object.freeze({
+  Eager: "eager",
+  ExecutionOnly: "execution-only"
+});
+var MAX_PROMPT_LENGTH = 1e5;
+var MAX_PROMPT_ATTACHMENT_BYTES = 32 * 1024 * 1024;
+function decodeSessionCancelBeforeStartCommand(encoded) {
+  const value = parseJson(encoded);
+  assertKind(value, SESSION_CANCEL_BEFORE_START_KIND);
+  return {
+    commandId: readIdentifier(value, "commandId"),
+    kind: SESSION_CANCEL_BEFORE_START_KIND,
+    sessionId: readIdentifier(value, "sessionId")
+  };
+}
+var encodeSessionCancelBeforeStartCommand = (message) => JSON.stringify(decodeSessionCancelBeforeStartCommand(JSON.stringify(message)));
+var promptAttachmentSchema = external_exports.object({
+  byteLength: external_exports.number().int().positive().max(MAX_PROMPT_ATTACHMENT_BYTES),
+  contentKey: external_exports.string().regex(/^[a-f0-9]{64}$/u),
+  kind: external_exports.enum(["image", "resource"]),
+  mimeType: external_exports.string().min(1).max(255),
+  name: external_exports.string().min(1).max(500),
+  uri: external_exports.string().min(1).max(4096)
+}).readonly();
+var decodePromptAttachmentsValue = (value) => decodeZodValue(value, external_exports.array(promptAttachmentSchema).max(16).readonly());
+function readPromptDisposition(value) {
+  const field = value["disposition"];
+  if (field === void 0 || field === SessionPromptDisposition.Reject) {
+    return SessionPromptDisposition.Reject;
+  }
+  if (field === SessionPromptDisposition.Queue) {
+    return SessionPromptDisposition.Queue;
+  }
+  if (field === SessionPromptDisposition.Steer) {
+    return SessionPromptDisposition.Steer;
+  }
+  throw new ProtocolMessageError("Invalid value field: disposition");
+}
+function decodeSessionPromptCommand(encoded) {
+  const value = parseJson(encoded);
+  const hasSessionConfigurations = Object.hasOwn(value, "sessionConfigurations");
+  assertKind(value, SESSION_PROMPT_KIND);
+  const prompt = readText(value, "prompt", MAX_PROMPT_LENGTH);
+  const attachments = !Object.hasOwn(value, "attachments") && Array.isArray(value["images"]) && Array.isArray(value["resources"]) ? [] : decodePromptAttachmentsValue(value["attachments"]);
+  const attachmentBytes = attachments.reduce((total, attachment) => total + attachment.byteLength, 0);
+  if (attachmentBytes > MAX_PROMPT_ATTACHMENT_BYTES) {
+    throw new ProtocolMessageError("Prompt attachments are too large");
+  }
+  if (prompt.trim().length === 0 && attachments.length === 0) {
+    throw new ProtocolMessageError("Prompt must contain content");
   }
-  if (type === "acp") {
-    const payload = value["payload"];
-    return !isRecord3(payload) || !containsUnknownAcpVariant(payload);
+  const disposition = readPromptDisposition(value);
+  const rawTargetCommandId = value["targetCommandId"];
+  const targetCommandId = rawTargetCommandId === void 0 ? "" : readText(value, "targetCommandId", 128);
+  if (disposition === SessionPromptDisposition.Reject && targetCommandId.length > 0 || disposition !== SessionPromptDisposition.Reject && !isIdentifier(targetCommandId)) {
+    throw new ProtocolMessageError("Prompt disposition has an invalid target command");
   }
-  if (type === "lifecycle-metadata") {
-    const payload = value["payload"];
-    if (!isRecord3(payload)) {
-      return true;
-    }
-    const kind = payload["kind"];
-    if (typeof kind === "string" && !knownLifecycleKinds.has(kind)) {
-      return false;
-    }
-    return kind !== "prompt.requested" || !arrayContainsUnknown(payload["content"], containsUnknownContentBlock);
+  const sessionConfigurations = hasSessionConfigurations ? decodeSessionConfigurationSelections(value["sessionConfigurations"]) : [];
+  if (new Set(sessionConfigurations.map((selection) => selection.configId)).size !== sessionConfigurations.length) {
+    throw new ProtocolMessageError("Session configuration identifiers must be unique");
   }
-  return false;
+  return {
+    additionalDirectoryIds: readDirectoryIdentifiers(value, "additionalDirectoryIds", 16),
+    agentId: readIdentifier(value, "agentId"),
+    bindingId: readIdentifier(value, "bindingId"),
+    commandId: readIdentifier(value, "commandId"),
+    directoryId: readDirectoryIdentifier(value, "directoryId"),
+    disposition,
+    attachments,
+    ...value["historyPolicy"] === void 0 ? {} : {
+      historyPolicy: readHistoryPolicy(value)
+    },
+    kind: SESSION_PROMPT_KIND,
+    prompt,
+    ...hasSessionConfigurations ? { sessionConfigurations } : {},
+    sessionId: readIdentifier(value, "sessionId"),
+    targetCommandId
+  };
 }
-function filterKnownSessionEventVariants(events) {
-  return Array.isArray(events) ? events.filter(isKnownSessionEventVariant) : events;
+function readHistoryPolicy(value) {
+  const field = value["historyPolicy"];
+  if (field === SessionHistoryPolicy.Eager || field === SessionHistoryPolicy.ExecutionOnly) {
+    return field;
+  }
+  throw new ProtocolMessageError("Invalid value field: historyPolicy");
 }
-var sessionEventBatchSchema = external_exports.array(sessionEventSchema).min(1).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
-var sessionLiveEventBatchSchema = external_exports.array(sessionLiveEventSchema).min(1).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
-var sessionExportSchema = external_exports.object({
-  binding: external_exports.object({
-    bindingId: identifierStringSchema,
-    runtimeId: identifierStringSchema
-  }).readonly(),
-  events: external_exports.array(sessionEventSchema).max(MAX_EVENT_COUNT).readonly(),
-  sessionId: identifierStringSchema,
-  truncated: external_exports.boolean()
-}).readonly().superRefine((session, context) => {
-  const eventIds = /* @__PURE__ */ new Set();
-  for (const [index2, event] of session.events.entries()) {
-    if (event.sessionId !== session.sessionId) {
-      context.addIssue({
-        code: "custom",
-        message: "Exported event belongs to a different Session",
-        path: ["events", index2, "sessionId"]
-      });
-    }
-    if (eventIds.has(event.eventId)) {
-      context.addIssue({
-        code: "custom",
-        message: "Exported event identities are not unique",
-        path: ["events", index2, "eventId"]
-      });
-    }
-    eventIds.add(event.eventId);
+function decodeSessionCancelCommand(encoded) {
+  const value = parseJson(encoded);
+  assertKind(value, SESSION_CANCEL_KIND);
+  return {
+    commandId: readIdentifier(value, "commandId"),
+    kind: SESSION_CANCEL_KIND,
+    sessionId: readIdentifier(value, "sessionId")
+  };
+}
+function decodeSessionPromptDispositionCommand(encoded) {
+  const value = parseJson(encoded);
+  assertKind(value, SESSION_PROMPT_DISPOSITION_KIND);
+  if (readPromptDisposition(value) !== SessionPromptDisposition.Steer) {
+    throw new ProtocolMessageError("Only queued prompts can be steered");
   }
-});
-var mobiusSessionExportSchema = external_exports.object({
-  formatVersion: external_exports.literal("2"),
-  session: sessionExportSchema
-}).readonly();
-var sessionEventEnvelopeSchema = external_exports.object({ events: sessionLiveEventBatchSchema, kind: external_exports.literal(SESSION_EVENT_KIND) }).readonly();
-var sessionEventLogPageSchema = external_exports.object({
-  events: external_exports.array(sessionEventSchema).max(MAX_EVENT_COUNT).readonly(),
-  nextCursor: external_exports.string().min(1).max(512).nullable(),
-  sessionGenerationId: identifierStringSchema,
-  tailCursor: external_exports.string().max(512),
-  // The generation-scoped live position covered by this snapshot, including
-  // coalesced and omitted events. Absent only on older Runtime versions.
-  throughPosition: positionSchema.optional(),
-  truncated: external_exports.boolean(),
-  version: external_exports.literal(2)
-}).readonly();
-var sessionEventOmissionSchema = external_exports.literal("agent-reasoning");
-var nativeEventPageRequestSchema = external_exports.object({
-  cursor: external_exports.string().min(1).max(512).nullable(),
-  eventLimit: external_exports.number().int().min(1).max(1e4),
-  // Legacy callers may still send this option; readers must ignore it.
-  omit: external_exports.array(sessionEventOmissionSchema).max(1).readonly().optional()
-}).readonly();
-var queuedPromptRequestEventLogSchema = external_exports.object({
+  return {
+    commandId: readIdentifier(value, "commandId"),
+    disposition: SessionPromptDisposition.Steer,
+    kind: SESSION_PROMPT_DISPOSITION_KIND,
+    sessionId: readIdentifier(value, "sessionId")
+  };
+}
+function encodeSessionPromptCommand(message) {
+  const command = decodeSessionPromptCommand(JSON.stringify(message));
+  return JSON.stringify({
+    ...command,
+    // Keep text prompts compatible with the previous Runtime release while
+    // attachments move to the content-key protocol. Older Runtimes ignore
+    // `attachments` and require both legacy arrays to be present.
+    images: [],
+    resources: []
+  });
+}
+function encodeSessionCancelCommand(message) {
+  return JSON.stringify(decodeSessionCancelCommand(JSON.stringify(message)));
+}
+function encodeSessionPromptDispositionCommand(message) {
+  return JSON.stringify(decodeSessionPromptDispositionCommand(JSON.stringify(message)));
+}
+
+// ../mobius-sdk/src/protocol/session/native/index.ts
+var NATIVE_SESSION_REQUEST_KIND = "native.session.request";
+var NATIVE_SESSION_RESULT_KIND = "native.session.result";
+var NATIVE_SESSION_CANCEL_KIND = "native.session.cancel";
+var envelope = {
+  requestId: identifierStringSchema,
+  sessionId: identifierStringSchema
+};
+var activeTurnSnapshotSchema = external_exports.object({
   commandId: identifierStringSchema,
-  content: external_exports.array(contentBlockSchema).min(1).max(100).readonly(),
-  disposition: shortString.optional(),
-  targetCommandId: identifierStringSchema.optional()
+  epoch: identifierStringSchema,
+  interaction: external_exports.discriminatedUnion("kind", [sessionPermissionRequestedEventSchema, sessionElicitationRequestedEventSchema]).nullable(),
+  sequence: external_exports.number().int().nonnegative(),
+  state: external_exports.literal("running")
 }).readonly();
-var nativeSessionEventsSchema = external_exports.object({
-  events: sessionEventLogPageSchema,
-  queuedPromptRequests: external_exports.array(queuedPromptRequestEventLogSchema).max(MAX_COLLECTION_SIZE2).readonly()
+var identity = {
+  ...envelope,
+  kind: external_exports.literal(NATIVE_SESSION_REQUEST_KIND),
+  additionalDirectoryIds: external_exports.array(DIRECTORY_IDENTIFIER).max(16).readonly(),
+  agentId: identifierStringSchema,
+  bindingId: identifierStringSchema,
+  directoryId: DIRECTORY_IDENTIFIER
+};
+var nativeSessionRequestSchema = external_exports.discriminatedUnion("action", [
+  external_exports.object({ ...identity, action: external_exports.literal("active-turn"), targetSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("find"), nativeSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({
+    ...identity,
+    action: external_exports.literal("list"),
+    cursor: identifierStringSchema.nullable()
+  }).readonly(),
+  external_exports.object({
+    ...identity,
+    action: external_exports.enum(["import", "fork"]),
+    entryId: identifierStringSchema,
+    targetSessionId: identifierStringSchema
+  }).readonly()
+]);
+var nativeSessionCommandSchema = external_exports.discriminatedUnion("action", [
+  external_exports.object({ ...identity, action: external_exports.literal("active-turn"), targetSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({ ...identity, action: external_exports.literal("find"), nativeSessionId: identifierStringSchema }).readonly(),
+  external_exports.object({
+    ...identity,
+    action: external_exports.literal("list"),
+    cursor: identifierStringSchema.nullable()
+  }).readonly(),
+  external_exports.object({
+    ...identity,
+    action: external_exports.enum(["import", "fork"]),
+    entryId: identifierStringSchema,
+    targetSessionId: identifierStringSchema
+  }).readonly()
+]);
+var nativeSessionEntrySchema = external_exports.object({
+  entryId: identifierStringSchema,
+  mobiusSessionIds: external_exports.array(identifierStringSchema).max(500).readonly(),
+  nativeSessionId: identifierStringSchema,
+  title: external_exports.string().max(500),
+  directoryId: DIRECTORY_IDENTIFIER,
+  directoryLabel: external_exports.string().min(1).max(MAX_WORKSPACE_PATH_LENGTH),
+  updatedAt: external_exports.iso.datetime({ offset: true }).nullable(),
+  additionalDirectories: external_exports.array(external_exports.object({ directoryId: DIRECTORY_IDENTIFIER, name: external_exports.string().min(1).max(255) }).readonly()).max(16).readonly()
 }).readonly();
-function inputValue(value) {
-  if (typeof value !== "string") {
-    return value;
-  }
+var resultEnvelope = {
+  ...envelope,
+  kind: external_exports.literal(NATIVE_SESSION_RESULT_KIND)
+};
+var nativeSessionResultSchema = external_exports.discriminatedUnion("action", [
+  external_exports.object({
+    ...resultEnvelope,
+    action: external_exports.literal("active-turn"),
+    targetSessionId: identifierStringSchema,
+    queued: external_exports.array(
+      external_exports.object({
+        commandId: identifierStringSchema,
+        prompt: external_exports.string().max(1e5),
+        attachments: external_exports.array(promptAttachmentSchema).max(16).readonly()
+      }).readonly()
+    ).readonly(),
+    turn: activeTurnSnapshotSchema.nullable()
+  }).readonly(),
+  external_exports.object({
+    ...resultEnvelope,
+    action: external_exports.literal("find"),
+    entry: nativeSessionEntrySchema
+  }).readonly(),
+  external_exports.object({
+    ...resultEnvelope,
+    action: external_exports.literal("list"),
+    capabilities: sessionCapabilitiesSchema,
+    entries: external_exports.array(nativeSessionEntrySchema).max(500).readonly(),
+    nextCursor: identifierStringSchema.nullable()
+  }).readonly(),
+  external_exports.object({
+    ...resultEnvelope,
+    action: external_exports.enum(["import", "fork"]),
+    targetSessionId: identifierStringSchema,
+    ready: sessionReadyEventSchema,
+    title: external_exports.string().max(500)
+  }).readonly()
+]);
+var nativeSessionCancelSchema = external_exports.object({ ...envelope, kind: external_exports.literal(NATIVE_SESSION_CANCEL_KIND) }).readonly();
+function decode4(schema, encoded) {
   try {
-    return JSON.parse(value);
+    const value = JSON.parse(encoded);
+    return schema.parse(value);
   } catch (cause) {
-    throw new ProtocolMessageError("Session Event Log V2 message is not valid JSON", { cause });
-  }
-}
-function decode4(value, schema) {
-  const result = schema.safeParse(inputValue(value));
-  if (!result.success) {
-    throw new ProtocolMessageError("Session Event Log V2 message does not match its schema", {
-      cause: result.error
-    });
-  }
-  return result.data;
-}
-function encode3(value, schema) {
-  return JSON.stringify(decode4(value, schema));
-}
-function sanitizeKnownNativeSessionEvents(value) {
-  const input2 = inputValue(value);
-  if (!isRecord3(input2)) {
-    return input2;
+    throw new ProtocolMessageError("Invalid native session message", { cause });
   }
-  const page = input2["events"];
-  const queuedPromptRequests = input2["queuedPromptRequests"];
-  return {
-    ...input2,
-    events: isRecord3(page) ? { ...page, events: filterKnownSessionEventVariants(page["events"]) } : page,
-    queuedPromptRequests: Array.isArray(queuedPromptRequests) ? queuedPromptRequests.filter(
-      (prompt) => !isRecord3(prompt) || !arrayContainsUnknown(prompt["content"], containsUnknownContentBlock)
-    ) : queuedPromptRequests
-  };
 }
-var knownSessionLiveEventBatchSchema = external_exports.array(sessionLiveEventSchema).max(SESSION_EVENT_BATCH_MAX_SIZE).readonly();
-var decodeSessionEvent = (value) => decode4(value, sessionEventSchema);
-var decodeKnownSessionEventPayload = (value) => isKnownSessionEventVariant(value) ? decode4(value, sessionEventPayloadSchema) : null;
-var decodeSessionEventEnvelope = (value) => decode4(value, sessionEventEnvelopeSchema);
-var encodeSessionEventEnvelope = (value) => encode3(value, sessionEventEnvelopeSchema);
-var decodeAcpSessionUpdate = (value) => decode4(value, acpSessionUpdateSchema);
-var decodeKnownNativeSessionEvents = (value) => decode4(sanitizeKnownNativeSessionEvents(value), nativeSessionEventsSchema);
+var decodeNativeSessionCommand = (encoded) => decode4(nativeSessionCommandSchema, encoded);
+var encodeNativeSessionCommand = (value) => JSON.stringify(nativeSessionCommandSchema.parse(value));
+var decodeNativeSessionResult = (encoded) => decode4(nativeSessionResultSchema, encoded);
+var encodeNativeSessionResult = (value) => JSON.stringify(nativeSessionResultSchema.parse(value));
+var decodeNativeSessionCancel = (encoded) => decode4(nativeSessionCancelSchema, encoded);
+var encodeNativeSessionCancel = (value) => JSON.stringify(nativeSessionCancelSchema.parse(value));
 
 // ../mobius-sdk/src/protocol/session/observability/history.ts
 var SESSION_HISTORY_PAGE_LOAD_KIND = "session.live-history.v2.page.load";
@@ -23773,7 +23582,7 @@ var AcpSessionConnector = class {
 };
 
 // src/acp/adapter/live-sessions.ts
-var absolutePathSchema = external_exports.string().min(1).refine(isAbsolute4);
+var absolutePathSchema = external_exports.string().min(1).refine(isAbsolute);
 var targetSchema = external_exports.object({
   nativeSessionId: nativeSessionIdSchema,
   cwd: absolutePathSchema,
@@ -25103,7 +24912,7 @@ import { createHash as createHash3 } from "node:crypto";
 import { spawn as spawn2 } from "node:child_process";
 
 // src/acp/harness/codex/app-server-protocol.ts
-import { isAbsolute as isAbsolute5 } from "node:path";
+import { isAbsolute as isAbsolute2 } from "node:path";
 var boundedText = (maximum) => external_exports.string().max(maximum);
 var jsonValue = external_exports.lazy(() => external_exports.unknown());
 var requestIdSchema = external_exports.union([external_exports.number(), external_exports.string()]).refine((value) => typeof value === "number" || value.length <= 256);
@@ -25175,7 +24984,7 @@ var imageGenerationItemSchema = external_exports.object({
 });
 var threadItemSchema = external_exports.discriminatedUnion("type", [
   imageGenerationItemSchema,
-  external_exports.object({ type: external_exports.literal("imageView"), id: boundedText(256), path: boundedText(32768).refine(isAbsolute5) }),
+  external_exports.object({ type: external_exports.literal("imageView"), id: boundedText(256), path: boundedText(32768).refine(isAbsolute2) }),
   external_exports.object({
     id: boundedText(256),
     text: boundedText(1e6),
@@ -25653,7 +25462,7 @@ var CodexAppServerClient = class {
 import { createHash } from "node:crypto";
 
 // src/acp/content/raster.ts
-import { basename, isAbsolute as isAbsolute6, normalize } from "node:path";
+import { basename, isAbsolute as isAbsolute3, normalize } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // src/storage/files/local-files.ts
@@ -25760,13 +25569,13 @@ function sniffRasterMime(bytes) {
 }
 async function resolveCanonicalPath(requested, signal) {
   signal.throwIfAborted();
-  if (!isAbsolute6(requested) || requested.includes("\0") || normalize(requested) !== requested) {
+  if (!isAbsolute3(requested) || requested.includes("\0") || normalize(requested) !== requested) {
     return null;
   }
   try {
     const target = await canonicalPath(requested);
     signal.throwIfAborted();
-    if (!isAbsolute6(target) || normalize(target) !== target) {
+    if (!isAbsolute3(target) || normalize(target) !== target) {
       return null;
     }
     return target;
@@ -25797,7 +25606,7 @@ function parseLocalImageUri(uri) {
       return null;
     }
   }
-  if (!isAbsolute6(trimmed) && /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
+  if (!isAbsolute3(trimmed) && /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
     return null;
   }
   return trimmed;
@@ -27063,12 +26872,12 @@ async function replayCodexHistory(client2, threadId, emit, signal) {
 
 // src/storage/session/temporary-session-event-cache.ts
 import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir as tmpdir2 } from "node:os";
-import { join as join8 } from "node:path";
+import { tmpdir } from "node:os";
+import { join as join5 } from "node:path";
 
 // src/storage/sqlite/local-databases.ts
 import { createHash as createHash2 } from "node:crypto";
-import { join as join7 } from "node:path";
+import { join as join4 } from "node:path";
 
 // src/generated/acp-session-store-migrations.ts
 var acpSessionStoreMigrations = [
@@ -27611,7 +27420,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   _sql.raw = raw;
-  function join32(chunks, separator) {
+  function join34(chunks, separator) {
     const result = [];
     for (const [i, chunk] of chunks.entries()) {
       if (i > 0 && separator !== void 0) result.push(separator);
@@ -27619,7 +27428,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  _sql.join = join32;
+  _sql.join = join34;
   function identifier2(value) {
     return new Name(value);
   }
@@ -29340,7 +29149,7 @@ var SQLiteSelectBase = class extends TypedQueryBuilder {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
       for (const item of extractUsedTable(table)) this.usedTables.add(item);
-      if (typeof tableName === "string" && this.config.joins?.some((join32) => join32.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+      if (typeof tableName === "string" && this.config.joins?.some((join34) => join34.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
       if (!this.isPartialSelect) {
         if (Object.keys(this.joinsNotNullableMap).length === 1 && typeof baseTableName === "string") this.config.fields = { [baseTableName]: this.config.fields };
         if (typeof tableName === "string" && !is(table, SQL)) {
@@ -30886,7 +30695,7 @@ var SQLiteDialect = class {
       if (!joins2) return;
       const withEntries = Object.entries(joins2).filter(([_, v]) => v);
       if (!withEntries.length) return;
-      return sql.join(withEntries.map(([k2, join32]) => {
+      return sql.join(withEntries.map(([k2, join34]) => {
         const relation = tableConfig.relations[k2];
         const isSingle2 = is(relation, One);
         const targetTable = aliasedTable(relation.targetTable, `d${currentDepth + 1}`);
@@ -30897,7 +30706,7 @@ var SQLiteDialect = class {
           table: targetTable,
           mode: isSingle2 ? "first" : "many",
           schema,
-          queryConfig: join32,
+          queryConfig: join34,
           tableConfig: schema[relation.targetTableName],
           relationWhere: filter,
           isNested: true,
@@ -30911,7 +30720,7 @@ var SQLiteDialect = class {
           key: k2,
           selection: innerQuery.selection,
           isArray: !isSingle2,
-          isOptional: (relation.optional ?? false) || join32 !== true && !!join32.where
+          isOptional: (relation.optional ?? false) || join34 !== true && !!join34.where
         });
         const jsonColumns = sql.join(innerQuery.selection.map((s) => {
           return sql`${sql.raw(this.escapeString(s.key))}, ${s.selection ? sql`${jsonb}(${sql.identifier(s.key)})` : sql.identifier(s.key)}`;
@@ -31265,7 +31074,7 @@ var SQLiteUpdateBase = class {
   createJoin(joinType) {
     return ((table, on2) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join32) => join32.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
+      if (typeof tableName === "string" && this.config.joins.some((join34) => join34.alias === tableName)) throw new Error(`Alias "${tableName}" is already used in this query`);
       if (typeof on2 === "function") {
         const from = this.config.from ? is(table, SQLiteTable) ? table[Table.Symbol.Columns] : is(table, Subquery) ? table._.selectedFields : is(table, SQLiteViewBase) ? table[ViewBaseConfig].selectedFields : void 0 : void 0;
         on2 = on2(new Proxy(this.config.table[Table.Symbol.Columns], new SelectionProxyHandler({
@@ -32049,8 +31858,8 @@ var LocalSqliteDatabase = class {
 function channelSessionDatabasePaths(stateDirectory, channelId) {
   const channelHash = createHash2("sha256").update(channelId).digest("hex");
   return {
-    events: join7(stateDirectory, "sessions", `${channelHash}.events.sqlite`),
-    sessions: join7(stateDirectory, "sessions", `${channelHash}.sqlite`)
+    events: join4(stateDirectory, "sessions", `${channelHash}.events.sqlite`),
+    sessions: join4(stateDirectory, "sessions", `${channelHash}.sqlite`)
   };
 }
 var openAcpSessionDatabase = (path7) => new LocalSqliteDatabase(path7, "ACP Session database", acpSessionStoreMigrations);
@@ -32228,11 +32037,11 @@ var SessionEventCacheTable = class {
 
 // src/storage/session/temporary-session-event-cache.ts
 function openTemporarySessionEventCache() {
-  const directory = mkdtempSync(join8(tmpdir2(), "mobius-preview-events-"));
+  const directory = mkdtempSync(join5(tmpdir(), "mobius-preview-events-"));
   const removeFiles = () => rmSync(directory, { recursive: true, force: true });
   try {
     return {
-      table: new SessionEventCacheTable(openSessionEventCacheDatabase(join8(directory, "events.sqlite"))),
+      table: new SessionEventCacheTable(openSessionEventCacheDatabase(join5(directory, "events.sqlite"))),
       removeFiles
     };
   } catch (error62) {
@@ -32742,13 +32551,13 @@ var RuntimeAgentDependencies = class {
 
 // src/daemon/pairing/pair-local-machine.ts
 import { hostname as hostname3 } from "node:os";
-import { basename as basename6, join as join24, resolve as resolve16 } from "node:path";
+import { basename as basename6, join as join26, resolve as resolve16 } from "node:path";
 import { fetch as fetch3 } from "undici";
 
 // package.json
 var package_default = {
   name: "@moxt-ai/mobius",
-  version: "0.0.336",
+  version: "0.0.338",
   description: "Mobius CLI for pairing and running local AI agent services.",
   type: "module",
   bin: {
@@ -32930,7 +32739,7 @@ import { existsSync as existsSync3 } from "node:fs";
 import * as fs3 from "node:fs/promises";
 import * as os3 from "node:os";
 import * as path6 from "node:path";
-import { promisify as promisify2 } from "node:util";
+import { promisify } from "node:util";
 import { agent as acpAgent, CreateElicitationResponse as CreateElicitationResponse2, methods as methods7, ndJsonStream, RequestError as RequestError6 } from "@agentclientprotocol/sdk";
 
 // ../../node_modules/.pnpm/@anthropic-ai+claude-agent-sdk@0.3.257_@anthropic-ai+sdk@0.122.0_zod@4.6.5__@modelconte_b0b90ed00d211c5955785f7de7f8dbf4/node_modules/@anthropic-ai/claude-agent-sdk/sdk.mjs
@@ -72296,7 +72105,7 @@ var SessionModeManager = class {
 
 // src/acp/harness/claude/upstream/dist/acp-agent.js
 var CLAUDE_CONFIG_DIR = process.env.CLAUDE_CONFIG_DIR ?? path6.join(os3.homedir(), ".claude");
-var execFileAsync = promisify2(execFile3);
+var execFileAsync = promisify(execFile3);
 var ZERO_USAGE = Object.freeze({
   input_tokens: 0,
   output_tokens: 0,
@@ -73925,16 +73734,20 @@ var ClaudeAcpAgent = class {
                     }, message.tool_use_id !== void 0)
                   });
                 }
-                backgroundTasks.delete(message.task_id);
                 if (message.skip_transcript) {
+                  backgroundTasks.delete(message.task_id);
                   awaitingBackgroundResults.delete(message.task_id);
-                } else {
+                } else if (backgroundTasks.delete(message.task_id)) {
                   awaitingBackgroundResults.add(message.task_id);
                 }
                 reportBackgroundActivity();
                 session.liveBackgroundTasks.delete(message.task_id);
                 break;
               case "task_updated":
+                if (!hasBackgroundLevel && message.patch.is_backgrounded === true) {
+                  backgroundTasks.add(message.task_id);
+                  reportBackgroundActivity();
+                }
                 if (message.patch.status === "completed" || message.patch.status === "failed" || message.patch.status === "killed") {
                   session.liveBackgroundTasks.delete(message.task_id);
                   if (backgroundTasks.delete(message.task_id)) {
@@ -77063,6 +76876,237 @@ var ClaudeAgentConnection = class extends EndpointAgentConnection {
   }
 };
 
+// src/util/platform/linux.ts
+import { isAbsolute as isAbsolute8, join as join13 } from "node:path";
+
+// src/util/platform/posix.ts
+import { chmod, lstat as lstat2, unlink as unlink2 } from "node:fs/promises";
+import { tmpdir as tmpdir2 } from "node:os";
+import { join as join12 } from "node:path";
+
+// src/util/filesystem/path-error.ts
+var LocalPathError = class extends Error {
+  code = "unsafe_local_path";
+  constructor(message, options = {}) {
+    super(message, options);
+    this.name = "LocalPathError";
+  }
+};
+
+// src/util/platform/posix.ts
+async function removeControlSocket(path7) {
+  try {
+    await unlink2(path7);
+  } catch (cause) {
+    if (!(cause instanceof Error) || !("code" in cause) || cause.code !== "ENOENT") {
+      throw cause;
+    }
+  }
+}
+var posixOperations2 = {
+  controlSocketPath: (installationHash) => join12(tmpdir2(), `mobius-${installationHash}.sock`),
+  prepareControlSocket: removeControlSocket,
+  secureControlSocket: async (path7) => {
+    await chmod(path7, 384);
+  },
+  removeControlSocket,
+  validatePathPermissions: async (path7, directory, privateAccess, signal) => {
+    signal.throwIfAborted();
+    const metadata = await lstat2(path7);
+    if (process.getuid === void 0 || metadata.uid !== process.getuid()) {
+      throw new LocalPathError("Path is not user-owned");
+    }
+    if (privateAccess) {
+      await chmod(path7, directory ? 448 : 384);
+    }
+    signal.throwIfAborted();
+  }
+};
+
+// src/util/platform/linux.ts
+var linuxPlatform = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: (environment) => {
+    const homeDirectory = environment["HOME"];
+    return homeDirectory !== void 0 && isAbsolute8(homeDirectory) ? [join13(homeDirectory, ".local", "bin", "claude")] : [];
+  }
+};
+
+// src/util/platform/macos.ts
+import { isAbsolute as isAbsolute9, join as join15 } from "node:path";
+
+// src/util/platform/claude-desktop.ts
+import { readdirSync as readdirSync3 } from "node:fs";
+import { join as join14 } from "node:path";
+function installedDirectories(directory) {
+  try {
+    return readdirSync3(directory, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+  } catch (cause) {
+    if (cause instanceof Error && "code" in cause && (cause.code === "ENOENT" || cause.code === "ENOTDIR" || cause.code === "EACCES")) {
+      return [];
+    }
+    throw cause;
+  }
+}
+function claudeDesktopExecutablePaths(roots, executablePaths) {
+  const paths = [];
+  for (const root of roots) {
+    const versions = installedDirectories(root).filter((version2) => /^\d+\.\d+\.\d+$/.test(version2)).toSorted((left, right) => right.localeCompare(left, "en", { numeric: true }));
+    for (const version2 of versions) {
+      const directory = join14(root, version2);
+      const installations = [
+        directory,
+        ...installedDirectories(directory).map((build) => join14(directory, build))
+      ];
+      for (const installation of installations) {
+        for (const executablePath of executablePaths) {
+          paths.push(join14(installation, ...executablePath));
+        }
+      }
+    }
+  }
+  return paths;
+}
+
+// src/util/platform/macos.ts
+var macosPlatform = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: (environment) => {
+    const paths = ["/opt/homebrew/bin/claude", "/usr/local/bin/claude"];
+    const homeDirectory = environment["HOME"];
+    if (homeDirectory !== void 0 && isAbsolute9(homeDirectory)) {
+      paths.unshift(join15(homeDirectory, ".local", "bin", "claude"));
+      paths.push(
+        ...claudeDesktopExecutablePaths(
+          [join15(homeDirectory, "Library", "Application Support", "Claude", "claude-code")],
+          [["claude.app", "Contents", "MacOS", "claude"], ["claude"]]
+        )
+      );
+    }
+    return paths;
+  }
+};
+
+// src/util/platform/windows.ts
+import { execFile as execFile4 } from "node:child_process";
+import { isAbsolute as isAbsolute10, join as join16 } from "node:path";
+import { promisify as promisify2 } from "node:util";
+var execute = promisify2(execFile4);
+function environmentValue2(environment, name2) {
+  return Object.entries(environment).find(([key]) => key.toUpperCase() === name2.toUpperCase())?.[1];
+}
+function desktopClaudeExecutablePaths(environment) {
+  const roots = [];
+  const localAppData = environmentValue2(environment, "LOCALAPPDATA");
+  if (localAppData !== void 0 && isAbsolute10(localAppData)) {
+    const dataDirectory = join16(localAppData, "Claude-Data");
+    for (const installation of installedDirectories(dataDirectory)) {
+      if (installation.startsWith("claude_")) {
+        roots.push(join16(dataDirectory, installation, "claude-code"));
+      }
+    }
+  }
+  const appData = environmentValue2(environment, "APPDATA");
+  if (appData !== void 0 && isAbsolute10(appData)) {
+    roots.push(join16(appData, "Claude", "claude-code"));
+  }
+  return claudeDesktopExecutablePaths(roots, [["claude.exe"]]);
+}
+var windowsPermissions = `
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+$item = Get-Item -LiteralPath $env:MOBIUS_PERMISSION_PATH -Force
+if (($item.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'Unsafe path' }
+$sid = [Security.Principal.WindowsIdentity]::GetCurrent().User
+$acl = $item.GetAccessControl()
+$owner = $acl.GetOwner([Security.Principal.SecurityIdentifier])
+if ($owner -ne $sid -and -not ($owner.Value -eq 'S-1-5-32-544' -and ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator))) { throw 'Path is not user-owned' }
+if ($env:MOBIUS_PERMISSION_PRIVATE -eq '1') {
+    if ($item.PSIsContainer) {
+        $private = New-Object Security.AccessControl.DirectorySecurity
+        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow')
+    } else {
+        $private = New-Object Security.AccessControl.FileSecurity
+        $rule = New-Object Security.AccessControl.FileSystemAccessRule($sid, 'FullControl', 'Allow')
+    }
+    $private.SetOwner($sid)
+    $private.SetAccessRuleProtection($true, $false)
+    $private.AddAccessRule($rule)
+    $item.SetAccessControl($private)
+}
+`;
+var windowsPermissionsTimeoutMs = 3e4;
+async function validatePathPermissions(path7, _directory, privateAccess, signal) {
+  signal.throwIfAborted();
+  const systemRoot = environmentValue2(process.env, "SystemRoot");
+  if (systemRoot === void 0) {
+    throw new LocalPathError("Windows system directory is unavailable");
+  }
+  try {
+    await execute(
+      join16(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe"),
+      [
+        "-NoLogo",
+        "-NoProfile",
+        "-NonInteractive",
+        "-EncodedCommand",
+        Buffer.from(windowsPermissions, "utf16le").toString("base64")
+      ],
+      {
+        env: {
+          ...process.env,
+          MOBIUS_PERMISSION_PATH: path7,
+          MOBIUS_PERMISSION_PRIVATE: privateAccess ? "1" : "0"
+        },
+        windowsHide: true,
+        signal: AbortSignal.any([signal, AbortSignal.timeout(windowsPermissionsTimeoutMs)]),
+        timeout: windowsPermissionsTimeoutMs,
+        maxBuffer: 16384
+      }
+    );
+  } catch (cause) {
+    signal.throwIfAborted();
+    throw new LocalPathError("The local path permissions could not be secured", { cause });
+  }
+}
+var windowsPlatform = {
+  controlSocketPath: (installationHash) => `\\\\.\\pipe\\mobius-${installationHash}`,
+  prepareControlSocket: async () => {
+  },
+  secureControlSocket: async () => {
+  },
+  removeControlSocket: async () => {
+  },
+  validatePathPermissions,
+  claudeCodeExecutablePaths: (environment) => {
+    const paths = [];
+    const userProfile = environmentValue2(environment, "USERPROFILE");
+    if (userProfile !== void 0 && isAbsolute10(userProfile)) {
+      paths.push(join16(userProfile, ".local", "bin", "claude.exe"));
+    }
+    const localAppData = environmentValue2(environment, "LOCALAPPDATA");
+    if (localAppData !== void 0 && isAbsolute10(localAppData)) {
+      paths.push(join16(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"));
+    }
+    paths.push(...desktopClaudeExecutablePaths(environment));
+    return paths;
+  }
+};
+
+// src/util/platform/index.ts
+var fallbackPlatform2 = {
+  ...posixOperations2,
+  claudeCodeExecutablePaths: () => []
+};
+var platforms2 = /* @__PURE__ */ new Map([
+  ["linux", linuxPlatform],
+  ["darwin", macosPlatform],
+  ["win32", windowsPlatform]
+]);
+function platformSupportFor(platform2) {
+  return platforms2.get(platform2) ?? fallbackPlatform2;
+}
+
 // src/agent/discovery/version-output.ts
 function normalizeVersionOutput(output2) {
   return output2.trim().split(/\r?\n/, 1)[0]?.trim().slice(0, 128) ?? "";
@@ -78160,7 +78204,7 @@ var CodexAgentSpecification = class extends InProcessAcpAgentSpecification {
 
 // src/agent/specification/vendors/pi-agent.ts
 import { createHash as createHash4 } from "node:crypto";
-import { join as join20 } from "node:path";
+import { join as join22 } from "node:path";
 import {
   methods as methods11
 } from "@agentclientprotocol/sdk";
@@ -78175,7 +78219,7 @@ import {
 import { spawnSync } from "node:child_process";
 import { randomUUID as randomUUID10 } from "node:crypto";
 import { existsSync as existsSync7, readdirSync as readdirSync6, readFileSync as readFileSync8, realpathSync as realpathSync4, statSync as statSync4, unlinkSync as unlinkSync2 } from "node:fs";
-import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute13, join as join19 } from "node:path";
+import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute13, join as join21 } from "node:path";
 import { RequestError as RequestError10 } from "@agentclientprotocol/sdk";
 
 // src/acp/harness/pi/upstream/dist/pi-rpc/process.js
@@ -78633,7 +78677,7 @@ function maybeAuthRequiredError(err) {
 }
 
 // src/acp/harness/pi/upstream/dist/acp/paths.js
-import { join as join15 } from "node:path";
+import { join as join17 } from "node:path";
 
 // src/acp/harness/pi/upstream/dist/acp/environment.js
 import { homedir as homedir2 } from "node:os";
@@ -78643,10 +78687,10 @@ function environmentHome(environment) {
 
 // src/acp/harness/pi/upstream/dist/acp/paths.js
 function getPiAcpDir(environment = process.env) {
-  return join15(environmentHome(environment), ".pi", "pi-acp");
+  return join17(environmentHome(environment), ".pi", "pi-acp");
 }
 function getPiAcpSessionMapPath(environment = process.env) {
-  return join15(getPiAcpDir(environment), "session-map.json");
+  return join17(getPiAcpDir(environment), "session-map.json");
 }
 
 // src/acp/harness/pi/upstream/dist/acp/pi-commands.js
@@ -78691,15 +78735,15 @@ function toAvailableCommandsFromPiGetCommands(data, opts) {
 
 // src/acp/harness/pi/upstream/dist/acp/pi-sessions.js
 import { closeSync as closeSync2, existsSync as existsSync4, openSync as openSync2, readdirSync as readdirSync4, readFileSync as readFileSync3, readSync as readSync2, statSync as statSync3 } from "node:fs";
-import { isAbsolute as isAbsolute11, join as join16, resolve as resolve10 } from "node:path";
+import { isAbsolute as isAbsolute11, join as join18, resolve as resolve10 } from "node:path";
 var DEFAULT_TAIL_BYTES = 256 * 1024;
 var DEFAULT_HEAD_BYTES = 64 * 1024;
 function getPiAgentDir(environment) {
   const configured = environment["PI_CODING_AGENT_DIR"];
-  return configured ? resolve10(configured) : join16(environmentHome(environment), ".pi", "agent");
+  return configured ? resolve10(configured) : join18(environmentHome(environment), ".pi", "agent");
 }
 function readSessionDirFromSettings(agentDir) {
-  const settingsPath = join16(agentDir, "settings.json");
+  const settingsPath = join18(agentDir, "settings.json");
   try {
     if (!existsSync4(settingsPath)) {
       return null;
@@ -78720,7 +78764,7 @@ function readSessionDirFromSettings(agentDir) {
 }
 function getPiSessionsDir(environment = process.env) {
   const agentDir = getPiAgentDir(environment);
-  return readSessionDirFromSettings(agentDir) ?? join16(agentDir, "sessions");
+  return readSessionDirFromSettings(agentDir) ?? join18(agentDir, "sessions");
 }
 function getPiSessionDiscoveryDirs(environment) {
   const discoveryDirectories = [getPiSessionsDir(environment)];
@@ -78731,7 +78775,7 @@ function getPiSessionDiscoveryDirs(environment) {
       if (!entry.isDirectory()) {
         continue;
       }
-      const directory = join16(mobiusSessionsRoot, entry.name);
+      const directory = join18(mobiusSessionsRoot, entry.name);
       if (!discoveryDirectories.includes(directory)) {
         discoveryDirectories.push(directory);
       }
@@ -78748,7 +78792,7 @@ function walkJsonlFiles(dir, out2) {
   }
   for (const e of entries) {
     const name2 = typeof e.name === "string" ? e.name : String(e.name);
-    const p = join16(dir, name2);
+    const p = join18(dir, name2);
     if (e.isDirectory()) {
       walkJsonlFiles(p, out2);
     } else if (e.isFile() && name2.endsWith(".jsonl")) {
@@ -79017,7 +79061,7 @@ function findPiSession(sessionId, environment = process.env) {
 
 // src/acp/harness/pi/upstream/dist/acp/pi-settings.js
 import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
-import { join as join17, resolve as resolve11 } from "node:path";
+import { join as join19, resolve as resolve11 } from "node:path";
 function isObject2(x) {
   return Boolean(x) && typeof x === "object" && !Array.isArray(x);
 }
@@ -79046,7 +79090,7 @@ function readJsonFile(path7) {
   }
 }
 function getMergedSettings(cwd, environment) {
-  const globalSettingsPath = join17(getAgentDir(environment), "settings.json");
+  const globalSettingsPath = join19(getAgentDir(environment), "settings.json");
   const projectSettingsPath = resolve11(cwd, ".pi", "settings.json");
   const global2 = readJsonFile(globalSettingsPath);
   const project = readJsonFile(projectSettingsPath);
@@ -79054,7 +79098,7 @@ function getMergedSettings(cwd, environment) {
 }
 function getAgentDir(environment = process.env) {
   const configured = environment["PI_CODING_AGENT_DIR"];
-  return configured ? resolve11(configured) : join17(environmentHome(environment), ".pi", "agent");
+  return configured ? resolve11(configured) : join19(environmentHome(environment), ".pi", "agent");
 }
 function getEnableSkillCommands(cwd, environment = process.env) {
   const merged = getMergedSettings(cwd, environment);
@@ -79310,7 +79354,7 @@ var SessionStore = class {
 
 // src/acp/harness/pi/upstream/dist/acp/slash-commands.js
 import { existsSync as existsSync6, readdirSync as readdirSync5, readFileSync as readFileSync6 } from "node:fs";
-import { join as join18, resolve as resolve12 } from "node:path";
+import { join as join20, resolve as resolve12 } from "node:path";
 function parseFrontmatter(content) {
   const frontmatter = {};
   if (!content.startsWith("---")) {
@@ -79338,7 +79382,7 @@ function loadCommandsFromDir(dir, source, subdir = "") {
   try {
     const entries = readdirSync5(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = join18(dir, entry.name);
+      const fullPath = join20(dir, entry.name);
       if (entry.isDirectory()) {
         const newSubdir = subdir ? `${subdir}:${entry.name}` : entry.name;
         commands.push(...loadCommandsFromDir(fullPath, source, newSubdir));
@@ -79378,7 +79422,7 @@ function loadCommandsFromDir(dir, source, subdir = "") {
 }
 function loadSlashCommands(cwd, environment = process.env) {
   const commands = [];
-  const userDir = join18(environmentHome(environment), ".pi", "agent", "prompts");
+  const userDir = join20(environmentHome(environment), ".pi", "agent", "prompts");
   const projectDir = resolve12(cwd, ".pi", "prompts");
   commands.push(...loadCommandsFromDir(userDir, "user"));
   commands.push(...loadCommandsFromDir(projectDir, "project"));
@@ -81025,7 +81069,7 @@ ${JSON.stringify(stats, null, 2)}`;
             if (piPath) {
               const resolved = realpathSync4(piPath);
               const pkgRoot = dirname8(dirname8(resolved));
-              const p = join19(pkgRoot, "CHANGELOG.md");
+              const p = join21(pkgRoot, "CHANGELOG.md");
               if (existsSync7(p)) {
                 return p;
               }
@@ -81036,7 +81080,7 @@ ${JSON.stringify(stats, null, 2)}`;
             const npmRoot = spawnSync("npm", ["root", "-g"], { encoding: "utf-8" });
             const root = String(npmRoot.stdout ?? "").trim();
             if (root) {
-              const p = join19(root, "@earendil-works", "pi-coding-agent", "CHANGELOG.md");
+              const p = join21(root, "@earendil-works", "pi-coding-agent", "CHANGELOG.md");
               if (existsSync7(p)) {
                 return p;
               }
@@ -81130,7 +81174,7 @@ ${JSON.stringify(stats, null, 2)}`;
           return { stopReason: "end_turn" };
         }
         const safeSessionId = session.sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
-        const outputPath = join19(session.cwd, `pi-session-${safeSessionId}.html`);
+        const outputPath = join21(session.cwd, `pi-session-${safeSessionId}.html`);
         let resultPath = "";
         try {
           const result2 = await session.proc.exportHtml(outputPath);
@@ -81844,7 +81888,7 @@ function buildStartupInfo(opts) {
     md.push("");
   };
   const contextItems = [];
-  const contextPath = join19(opts.cwd, "AGENTS.md");
+  const contextPath = join21(opts.cwd, "AGENTS.md");
   if (existsSync7(contextPath)) {
     contextItems.push(contextPath);
   }
@@ -81853,7 +81897,7 @@ function buildStartupInfo(opts) {
   const pushSkillFromRoot = (root) => {
     try {
       for (const e of readdirSync6(root)) {
-        const p = join19(root, e);
+        const p = join21(root, e);
         try {
           const st2 = statSync4(p);
           if (st2.isFile() && e.toLowerCase().endsWith(".md")) {
@@ -81878,7 +81922,7 @@ function buildStartupInfo(opts) {
           if (name2 === "node_modules" || name2 === ".git") {
             continue;
           }
-          const p = join19(dir, name2);
+          const p = join21(dir, name2);
           let st2;
           try {
             st2 = statSync4(p);
@@ -81895,16 +81939,16 @@ function buildStartupInfo(opts) {
     } catch {
     }
   };
-  const globalSkillsDir = join19(getAgentDir(opts.environment), "skills");
+  const globalSkillsDir = join21(getAgentDir(opts.environment), "skills");
   pushSkillFromRoot(globalSkillsDir);
   const home = opts.environment["HOME"] ?? opts.environment["USERPROFILE"] ?? "";
-  const legacyAgentsSkillsDir = join19(home, ".agents", "skills");
+  const legacyAgentsSkillsDir = join21(home, ".agents", "skills");
   pushSkillFromRoot(legacyAgentsSkillsDir);
-  const projectSkillsDir = join19(opts.cwd, ".pi", "skills");
+  const projectSkillsDir = join21(opts.cwd, ".pi", "skills");
   pushSkillFromRoot(projectSkillsDir);
   addSection("Skills", skillsItems);
   const promptsItems = [];
-  const promptsDir = join19(home, ".pi", "agent", "prompts");
+  const promptsDir = join21(home, ".pi", "agent", "prompts");
   try {
     const prompts = readdirSync6(promptsDir).filter((f) => f.endsWith(".md"));
     for (const f of prompts) {
@@ -81914,17 +81958,17 @@ function buildStartupInfo(opts) {
   }
   addSection("Prompts", promptsItems);
   const extItems = [];
-  const extDir = join19(home, ".pi", "agent", "extensions");
+  const extDir = join21(home, ".pi", "agent", "extensions");
   try {
     const exts = readdirSync6(extDir).filter((f) => f.endsWith(".ts") || f.endsWith(".js"));
     for (const f of exts) {
-      extItems.push(join19(extDir, f));
+      extItems.push(join21(extDir, f));
     }
   } catch {
   }
   const settingsPaths = [
-    join19(getAgentDir(opts.environment), "settings.json"),
-    join19(opts.cwd, ".pi", "settings.json")
+    join21(getAgentDir(opts.environment), "settings.json"),
+    join21(opts.cwd, ".pi", "settings.json")
   ];
   for (const settingsPath of settingsPaths) {
     try {
@@ -82122,7 +82166,7 @@ var PiAgentSpecification = class extends InProcessAcpAgentSpecification {
   // keeps the adapter's opt-in capability flag enabled for every launch it owns.
   createLaunchEnvironment = async (_agent, context) => {
     const workspaceHash = createHash4("sha256").update(context.defaultWorkspace).digest("hex").slice(0, 24);
-    const sessionDirectory = join20(context.dataDirectory, "agents", "pi", "sessions", workspaceHash);
+    const sessionDirectory = join22(context.dataDirectory, "agents", "pi", "sessions", workspaceHash);
     return Object.freeze({
       PI_ACP_ENABLE_EMBEDDED_CONTEXT: "true",
       MOBIUS_PI_SESSION_DIR: sessionDirectory
@@ -82855,7 +82899,7 @@ async function publishAgentCatalog(config2, signal) {
 }
 
 // src/runtime/config.ts
-import { join as join22, resolve as resolve14 } from "node:path";
+import { join as join24, resolve as resolve14 } from "node:path";
 
 // src/util/serial-task-queue.ts
 var SerialTaskQueue = class {
@@ -82928,19 +82972,19 @@ var LocalAgentCatalog = class {
 
 // src/storage/state-directory.ts
 import { homedir as homedir3 } from "node:os";
-import { join as join21, resolve as resolve13 } from "node:path";
+import { join as join23, resolve as resolve13 } from "node:path";
 var stateRootSchema = external_exports.string().brand();
 function readStateDirectory(environment = process.env) {
   const configured = environment["MOBIUS_STATE_DIRECTORY"]?.trim();
   return stateRootSchema.parse(
-    configured !== void 0 && configured.length > 0 ? resolve13(configured) : join21(homedir3(), ".mobius")
+    configured !== void 0 && configured.length > 0 ? resolve13(configured) : join23(homedir3(), ".mobius")
   );
 }
 
 // src/runtime/config.ts
 function loadDefaultWorkspace(dataDirectory, environment = process.env) {
   const { MOBIUS_DEFAULT_WORKSPACE: configuredWorkspace } = environment;
-  return configuredWorkspace ?? join22(dataDirectory, "workspace");
+  return configuredWorkspace ?? join24(dataDirectory, "workspace");
 }
 var RuntimeLocalContext = class {
   environment;
@@ -83049,7 +83093,7 @@ import { resolve as resolve15 } from "node:path";
 // src/storage/installation/installation-files.ts
 import { createHash as createHash5, randomUUID as randomUUID12 } from "node:crypto";
 import { mkdir as mkdir4, open as open5, readdir as readdir5, rename as rename3, unlink as unlink3, writeFile } from "node:fs/promises";
-import { dirname as dirname9, join as join23 } from "node:path";
+import { dirname as dirname9, join as join25 } from "node:path";
 
 // src/util/node-error.ts
 function isNodeError(error62, code) {
@@ -83072,23 +83116,23 @@ var STATE_ROOT_ENTRY_NAMES = new Set(Object.values(STATE_ROOT_LAYOUT));
 // src/storage/installation/installation-files.ts
 var MAXIMUM_FILE_BYTES = 16 * 1024;
 function applicationDirectory(root, applicationId) {
-  return join23(root, STATE_ROOT_LAYOUT.installations, applicationId);
+  return join25(root, STATE_ROOT_LAYOUT.installations, applicationId);
 }
 function installationPointerPath(applicationDirectory2) {
-  return join23(applicationDirectory2, "current.json");
+  return join25(applicationDirectory2, "current.json");
 }
 var installationDirectorySchema = external_exports.string().brand();
 function installationDirectory(applicationDirectory2, installationId2) {
-  return installationDirectorySchema.parse(join23(applicationDirectory2, installationId2));
+  return installationDirectorySchema.parse(join25(applicationDirectory2, installationId2));
 }
 function connectionDirectory(installationDirectory2) {
-  return join23(installationDirectory2, "connections");
+  return join25(installationDirectory2, "connections");
 }
 function connectionFilePath(connectionDirectory2, connectionId2) {
-  return join23(connectionDirectory2, `${connectionId2}.json`);
+  return join25(connectionDirectory2, `${connectionId2}.json`);
 }
 function channelIndexFilePath(installationDirectory2, channelId) {
-  return join23(installationDirectory2, "channels", `mci_${createHash5("sha256").update(channelId).digest("hex")}.json`);
+  return join25(installationDirectory2, "channels", `mci_${createHash5("sha256").update(channelId).digest("hex")}.json`);
 }
 async function readInstallationFile(path7) {
   let handle;
@@ -83110,7 +83154,7 @@ async function readInstallationFile(path7) {
 async function writeInstallationFile(path7, text2, signal) {
   signal.throwIfAborted();
   const directory = dirname9(path7);
-  const temporaryPath = join23(directory, `.${randomUUID12()}.tmp`);
+  const temporaryPath = join25(directory, `.${randomUUID12()}.tmp`);
   try {
     await mkdir4(directory, { mode: 448, recursive: true });
     signal.throwIfAborted();
@@ -87420,56 +87464,82 @@ var ExecutionReceipts = class {
 var RuntimeTurnActivity = class {
   #turns = /* @__PURE__ */ new Set();
   #backgroundSources = /* @__PURE__ */ new Set();
-  #admission = { kind: "open" };
-  acceptsPrompts = () => this.#admission.kind !== "reserved";
+  #idleWaiters = /* @__PURE__ */ new Set();
+  // When work last started or stopped; the quiet period is measured from here.
+  #changedAt = Date.now();
+  #reserved = false;
+  acceptsPrompts = () => !this.#reserved;
   count = () => this.#turns.size + this.#backgroundSources.size;
+  describe = () => ({
+    turns: this.#turns.size,
+    backgroundSources: this.#backgroundSources.size
+  });
   setBackgroundActivity = (source, active) => {
+    if (active === this.#backgroundSources.has(source)) {
+      return;
+    }
     if (active) {
       this.#backgroundSources.add(source);
     } else {
       this.#backgroundSources.delete(source);
     }
-    this.#reserveIfIdle();
+    this.#changed();
   };
-  #reserveIfIdle() {
-    if (this.count() === 0 && this.#admission.kind === "waiting") {
-      this.#admission.reserve();
-    }
-  }
   start = (turn) => {
     this.#turns.add(turn);
+    this.#changed();
   };
   finish = (turn) => {
     this.#turns.delete(turn);
-    this.#reserveIfIdle();
+    this.#changed();
   };
-  reserveWhenIdle = (signal) => {
+  #changed() {
+    this.#changedAt = Date.now();
+    if (this.count() === 0) {
+      for (const resolve19 of this.#idleWaiters) {
+        resolve19();
+      }
+      this.#idleWaiters.clear();
+    }
+  }
+  whenIdle = (signal) => {
     signal.throwIfAborted();
-    if (this.#admission.kind !== "open") {
-      throw new Error("A daemon upgrade already owns admission");
+    if (this.count() === 0) {
+      return Promise.resolve();
     }
     return new Promise((resolve19, reject2) => {
       const abort = () => {
-        this.#admission = { kind: "open" };
-        signal.removeEventListener("abort", abort);
+        this.#idleWaiters.delete(idle);
         reject2(signal.reason);
       };
-      const reserve = () => {
-        this.#admission = { kind: "reserved" };
+      const idle = () => {
         signal.removeEventListener("abort", abort);
-        resolve19({
-          [Symbol.dispose]: () => {
-            this.#admission = { kind: "open" };
-          }
-        });
+        resolve19();
       };
-      this.#admission = { kind: "waiting", reserve };
+      this.#idleWaiters.add(idle);
       signal.addEventListener("abort", abort, { once: true });
-      if (this.count() === 0) {
-        reserve();
-      }
     });
   };
+  /**
+   * Close admission only after the Runtime has had no work for `quietMilliseconds`.
+   * The moment a reply finishes is when a user is most likely to continue, so idle
+   * alone is not an upgrade window. Checking and reserving happen synchronously, so
+   * no prompt can be admitted between them.
+   */
+  reserveIfQuiet = (quietMilliseconds) => {
+    if (this.#reserved) {
+      throw new Error("A daemon upgrade already owns admission");
+    }
+    if (this.count() > 0 || Date.now() - this.#changedAt < quietMilliseconds) {
+      return null;
+    }
+    this.#reserved = true;
+    return {
+      [Symbol.dispose]: () => {
+        this.#reserved = false;
+      }
+    };
+  };
 };
 
 // src/session/turn/active-turn.ts
@@ -87766,7 +87836,7 @@ var SessionTurns = class {
 
 // src/session/workspace/workspace-directory.ts
 import { homedir as homedir4 } from "node:os";
-import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute15, join as join25, normalize as normalize2, relative as relative2 } from "node:path";
+import { basename as basename7, dirname as dirname10, isAbsolute as isAbsolute15, join as join27, normalize as normalize2, relative as relative2 } from "node:path";
 var WorkspaceDirectoryListing = class {
   directoryId;
   directoryLabel;
@@ -87888,7 +87958,7 @@ var WorkspaceDirectoryService = class {
           continue;
         }
         try {
-          const path7 = await this.resolvePath(join25(target, child.name), signal);
+          const path7 = await this.resolvePath(join27(target, child.name), signal);
           entries.push({ directoryId: encodePath(path7), name: child.name });
         } catch (cause) {
           signal.throwIfAborted();
@@ -88036,12 +88106,12 @@ function buildSessionLayer(options) {
 
 // src/session/content/external-content-store.ts
 import { createHash as createHash7 } from "node:crypto";
-import { join as join27 } from "node:path";
+import { join as join29 } from "node:path";
 
 // src/storage/files/scratch-directory.ts
 import { randomUUID as randomUUID17 } from "node:crypto";
 import { lstat as lstat4, mkdir as mkdir5, readdir as readdir6, readFile as readFile6, realpath as realpath7, rename as rename4, rm as rm3, stat as stat6, utimes, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname11, join as join26 } from "node:path";
+import { dirname as dirname11, join as join28 } from "node:path";
 async function atomicWrite(path7, bytes, signal) {
   const temporary = `${path7}.${randomUUID17()}.tmp`;
   try {
@@ -88055,7 +88125,7 @@ async function atomicWrite(path7, bytes, signal) {
 var ScratchDirectory = class {
   #root;
   constructor(parent) {
-    this.#root = join26(parent, randomUUID17());
+    this.#root = join28(parent, randomUUID17());
   }
   /** Refreshes this directory's lease and removes sibling directories whose lease is older than `leaseMilliseconds`. */
   refreshLease = async (leaseMilliseconds) => {
@@ -88066,7 +88136,7 @@ var ScratchDirectory = class {
       if (!directory.isDirectory() || !/^[a-f0-9-]{36}$/u.test(directory.name)) {
         continue;
       }
-      const path7 = join26(dirname11(this.#root), directory.name);
+      const path7 = join28(dirname11(this.#root), directory.name);
       if (path7 === this.#root) {
         continue;
       }
@@ -88081,10 +88151,10 @@ var ScratchDirectory = class {
   };
   /** Writes `bytes` atomically to `<group>/<name>` with owner-only permissions and returns the path. */
   write = async (group, name2, bytes, signal) => {
-    const directory = join26(this.#root, group);
+    const directory = join28(this.#root, group);
     await mkdir5(directory, { mode: 448, recursive: true });
     signal.throwIfAborted();
-    const path7 = join26(directory, name2);
+    const path7 = join28(directory, name2);
     await atomicWrite(path7, bytes, signal);
     return path7;
   };
@@ -88131,7 +88201,7 @@ var LocalExternalContentStore = class {
   #expirationTimer;
   #cleanup = Promise.resolve();
   constructor(stateDirectory) {
-    this.#scratch = new ScratchDirectory(join27(stateDirectory, "tmp", "session-content"));
+    this.#scratch = new ScratchDirectory(join29(stateDirectory, "tmp", "session-content"));
     this.#expirationTimer = setInterval(() => {
       void this.#expire().catch(() => void 0);
     }, 6e4);
@@ -88514,11 +88584,11 @@ var AgentProcessPool = class {
 };
 
 // src/runtime/observability/diagnostic-log.ts
-import { join as join30 } from "node:path";
+import { join as join32 } from "node:path";
 
 // src/storage/logs/bounded-log.ts
 import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync9, renameSync as renameSync2, statSync as statSync5, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join28 } from "node:path";
+import { join as join30 } from "node:path";
 var BoundedLineLog = class {
   #path;
   #maximumBytes;
@@ -88527,7 +88597,7 @@ var BoundedLineLog = class {
   #onWriteFailure;
   constructor(directory, filename, maximumBytes, onWriteFailure = () => void 0) {
     this.#directory = directory;
-    this.#path = join28(directory, filename);
+    this.#path = join30(directory, filename);
     this.#maximumBytes = maximumBytes;
     this.#onWriteFailure = onWriteFailure;
   }
@@ -88578,21 +88648,21 @@ var BoundedLineLog = class {
 
 // src/storage/logs/log-files.ts
 import { readFileSync as readFileSync10 } from "node:fs";
-import { join as join29, relative as relative3 } from "node:path";
+import { join as join31, relative as relative3 } from "node:path";
 var DAEMON_LOG_FILENAME = "daemon.log";
 var WORKER_LIFECYCLE_LOG_FILENAME = "worker-lifecycle.log";
 function unhandledRejectionLogFilename(role) {
   return `unhandled-rejections-${role}.log`;
 }
 function logDirectory(stateDirectory) {
-  return join29(stateDirectory, "logs");
+  return join31(stateDirectory, "logs");
 }
 function processLogPaths(stateDirectory) {
   return [
     WORKER_LIFECYCLE_LOG_FILENAME,
     unhandledRejectionLogFilename("manager"),
     unhandledRejectionLogFilename("worker")
-  ].map((filename) => join29(logDirectory(stateDirectory), filename));
+  ].map((filename) => join31(logDirectory(stateDirectory), filename));
 }
 function readLogText(path7) {
   try {
@@ -88648,7 +88718,7 @@ var RuntimeDiagnosticLog = class {
     this.#maximumBytes = maximumBytes;
     const processLogsDirectory = options.processLogsDirectory;
     this.#sources = [
-      { maximumBytes, path: join30(directory, DAEMON_LOG_FILENAME) },
+      { maximumBytes, path: join32(directory, DAEMON_LOG_FILENAME) },
       // The process logs a Runtime does not own, but must read to explain its own deaths.
       ...processLogsDirectory === void 0 ? [] : processLogPaths(processLogsDirectory).map((path7) => ({ maximumBytes: null, path: path7 }))
     ];
@@ -89631,7 +89701,7 @@ function createContentWriteCommands(context) {
 import { WebSocket as WebSocket5 } from "undici";
 
 // src/session/content/session-files.ts
-import { basename as basename8, extname as extname2, isAbsolute as isAbsolute16, join as join31, normalize as normalize3, resolve as resolve17 } from "node:path";
+import { basename as basename8, extname as extname2, isAbsolute as isAbsolute16, join as join33, normalize as normalize3, resolve as resolve17 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function requestedPath(value) {
   if (value.includes("\0")) {
@@ -89655,7 +89725,7 @@ async function resolveFile(value, workingDirectory, signal) {
   if (isAbsolute16(requested.path) && normalize3(requested.path) !== requested.path) {
     return null;
   }
-  const candidates = requested.explicitUrl || workingDirectory === null ? [requested.path] : isAbsolute16(requested.path) ? [join31(workingDirectory, requested.path), requested.path] : [resolve17(workingDirectory, requested.path)];
+  const candidates = requested.explicitUrl || workingDirectory === null ? [requested.path] : isAbsolute16(requested.path) ? [join33(workingDirectory, requested.path), requested.path] : [resolve17(workingDirectory, requested.path)];
   for (const candidate of candidates) {
     if (!isAbsolute16(candidate) || normalize3(candidate) !== candidate) {
       continue;