@moxt-ai/mobius 0.0.6 → 0.0.8

package/dist/index.js

@@ -494,7 +494,7 @@ function createDaemonConfig(connection, agents = [], installableAgents = []) {
 function loadDaemonConfig() {
   const relayUrl = new URL(
     // biome-ignore lint/complexity/useLiteralKeys: Environment variables use an index signature.
-    process.env["MOBIUS_RELAY_URL"] ?? "ws://127.0.0.1:8787/v1/channels/local/daemon"
+    process.env["MOBIUS_RELAY_URL"] ?? "ws://127.0.0.1:8787/api/channels/local/daemon"
   );
   relayUrl.searchParams.set(
     "token",
@@ -527,7 +527,7 @@ import { spawn as spawn2 } from "node:child_process";
 import {
   methods as methods2,
   ndJsonStream,
-  PROTOCOL_VERSION as PROTOCOL_VERSION2
+  PROTOCOL_VERSION
 } from "@agentclientprotocol/sdk";
 
 // ../../node_modules/.pnpm/zod@4.5.4/node_modules/zod/v4/classic/external.js
@@ -19446,9 +19446,6 @@ function decodeAgentPromptResponse(value) {
   return result.data;
 }
 
-// ../protocol/src/version.ts
-var MOBIUS_PROTOCOL_VERSION = 1;
-
 // ../protocol/src/control-messages.ts
 var WORKSPACE_LIST_KIND = "workspace.list";
 var WORKSPACE_ENTRIES_KIND = "workspace.entries";
@@ -19481,7 +19478,6 @@ var IDENTIFIER = external_exports.string().min(1).max(128).regex(IDENTIFIER_PATT
 var DIRECTORY_IDENTIFIER = external_exports.string().min(1).max(2048).regex(DIRECTORY_IDENTIFIER_PATTERN);
 var SHORT_TEXT = external_exports.string().max(500);
 var LONG_TEXT = external_exports.string().max(1e5);
-var PROTOCOL_VERSION = external_exports.literal(MOBIUS_PROTOCOL_VERSION);
 var workspaceEntrySchema = external_exports.strictObject({
   directoryId: DIRECTORY_IDENTIFIER,
   name: external_exports.string().min(1).max(255)
@@ -19579,6 +19575,25 @@ var displayContentSchema = external_exports.strictObject({
   ]),
   uri: external_exports.string().max(4096)
 }).readonly();
+var recordedDisplayContentSchema = external_exports.strictObject({
+  data: external_exports.string().max(4e6),
+  mimeType: external_exports.string().max(255),
+  name: external_exports.string().max(500),
+  newText: external_exports.string().max(4e6),
+  oldText: external_exports.string().max(4e6),
+  path: external_exports.string().max(2048),
+  terminalId: external_exports.string().max(255),
+  text: external_exports.string().max(4e6),
+  type: external_exports.enum([
+    "diff",
+    "image",
+    "resource",
+    "resource_link",
+    "terminal",
+    "text"
+  ]),
+  uri: external_exports.string().max(4096)
+}).readonly();
 var promptImageSchema = external_exports.strictObject({
   data: external_exports.string().min(1).max(4e6),
   mimeType: external_exports.string().min(1).max(255),
@@ -19595,7 +19610,6 @@ var workspaceListCommandSchema = external_exports.strictObject({
   bindingId: IDENTIFIER,
   directoryId: DIRECTORY_IDENTIFIER,
   kind: external_exports.literal(WORKSPACE_LIST_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER
 }).readonly();
 var workspaceEntriesEventSchema = external_exports.strictObject({
@@ -19605,7 +19619,6 @@ var workspaceEntriesEventSchema = external_exports.strictObject({
   entries: external_exports.array(workspaceEntrySchema).max(500).readonly(),
   kind: external_exports.literal(WORKSPACE_ENTRIES_KIND),
   parentDirectoryId: external_exports.string().max(2048),
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER
 }).readonly();
 var sessionIdentityFields = {
@@ -19618,7 +19631,6 @@ var sessionIdentityFields = {
 var sessionPrepareCommandSchema = external_exports.strictObject({
   ...sessionIdentityFields,
   kind: external_exports.literal(SESSION_PREPARE_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER
 }).readonly();
 var sessionReadyEventSchema = external_exports.strictObject({
@@ -19632,7 +19644,6 @@ var sessionReadyEventSchema = external_exports.strictObject({
   directoryId: DIRECTORY_IDENTIFIER,
   directoryLabel: external_exports.string().min(1).max(2048),
   kind: external_exports.literal(SESSION_READY_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER,
   restored: external_exports.boolean(),
   sessionId: IDENTIFIER
@@ -19642,7 +19653,6 @@ var sessionConfigureCommandSchema = external_exports.strictObject({
   booleanValue: external_exports.boolean(),
   configId: external_exports.string().min(1).max(128),
   kind: external_exports.literal(SESSION_CONFIGURE_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER,
   value: external_exports.string().max(500),
   valueType: external_exports.enum(["boolean", "select"])
@@ -19650,7 +19660,6 @@ var sessionConfigureCommandSchema = external_exports.strictObject({
 var sessionConfigUpdatedEventSchema = external_exports.strictObject({
   configOptions: external_exports.array(configOptionSchema).max(100).readonly(),
   kind: external_exports.literal(SESSION_CONFIG_UPDATED_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER,
   sessionId: IDENTIFIER
 }).readonly();
@@ -19659,7 +19668,6 @@ var sessionContextUsageUpdatedEventSchema = external_exports.strictObject({
   costCurrency: external_exports.string().max(16),
   hasCost: external_exports.boolean(),
   kind: external_exports.literal(SESSION_USAGE_UPDATED_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER,
   size: external_exports.number().int().nonnegative(),
   source: external_exports.literal("context").default("context"),
@@ -19669,7 +19677,6 @@ var sessionPromptUsageUpdatedEventSchema = external_exports.strictObject({
   _meta: promptMetadataSchema.nullable(),
   commandId: IDENTIFIER,
   kind: external_exports.literal(SESSION_USAGE_UPDATED_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER,
   source: external_exports.literal("prompt"),
   usage: promptUsageSchema.nullable()
@@ -19681,12 +19688,10 @@ var sessionUsageUpdatedEventSchema = external_exports.union([
 var sessionCommandsUpdatedEventSchema = external_exports.strictObject({
   commands: external_exports.array(sessionCommandSchema).max(500).readonly(),
   kind: external_exports.literal(SESSION_COMMANDS_UPDATED_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER
 }).readonly();
 var sessionInfoUpdatedEventSchema = external_exports.strictObject({
   kind: external_exports.literal(SESSION_INFO_UPDATED_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER,
   title: external_exports.string().max(500).nullable(),
   updatedAt: external_exports.string().max(128)
@@ -19696,7 +19701,6 @@ var sessionPermissionRequestedEventSchema = external_exports.strictObject({
   interactionId: IDENTIFIER,
   kind: external_exports.literal(SESSION_PERMISSION_REQUESTED_KIND),
   options: external_exports.array(permissionOptionSchema).min(1).max(20).readonly(),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER,
   title: external_exports.string().min(1).max(500),
   toolCallId: external_exports.string().min(1).max(255),
@@ -19707,7 +19711,6 @@ var sessionPermissionRespondCommandSchema = external_exports.strictObject({
   kind: external_exports.literal(SESSION_PERMISSION_RESPOND_KIND),
   optionId: external_exports.string().max(255),
   outcome: external_exports.enum(["cancelled", "selected"]),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER
 }).readonly();
 var sessionPermissionResolvedEventSchema = external_exports.strictObject({
@@ -19715,7 +19718,6 @@ var sessionPermissionResolvedEventSchema = external_exports.strictObject({
   kind: external_exports.literal(SESSION_PERMISSION_RESOLVED_KIND),
   optionId: external_exports.string().max(255),
   outcome: external_exports.enum(["cancelled", "selected"]),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER
 }).readonly();
 var sessionElicitationRequestedEventSchema = external_exports.strictObject({
@@ -19727,7 +19729,6 @@ var sessionElicitationRequestedEventSchema = external_exports.strictObject({
   kind: external_exports.literal(SESSION_ELICITATION_REQUESTED_KIND),
   message: external_exports.string().min(1).max(2e3),
   mode: external_exports.enum(["form", "url"]),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER,
   url: external_exports.string().max(4096)
 }).readonly();
@@ -19736,21 +19737,18 @@ var sessionElicitationRespondCommandSchema = external_exports.strictObject({
   content: external_exports.string().max(1e5),
   interactionId: IDENTIFIER,
   kind: external_exports.literal(SESSION_ELICITATION_RESPOND_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER
 }).readonly();
 var sessionElicitationResolvedEventSchema = external_exports.strictObject({
   action: external_exports.enum(["accept", "cancel", "decline", "complete"]),
   interactionId: IDENTIFIER,
   kind: external_exports.literal(SESSION_ELICITATION_RESOLVED_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER
 }).readonly();
 var sessionOperationFailedEventSchema = external_exports.strictObject({
   code: IDENTIFIER,
   kind: external_exports.literal(SESSION_OPERATION_FAILED_KIND),
   message: external_exports.string().min(1).max(500),
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER,
   sessionId: external_exports.string().max(128)
 }).readonly();
@@ -19760,12 +19758,10 @@ var agentContentEventSchema = external_exports.strictObject({
   contentId: IDENTIFIER,
   kind: external_exports.literal(AGENT_CONTENT_KIND),
   messageId: external_exports.string().max(255),
-  protocolVersion: PROTOCOL_VERSION,
   sessionId: IDENTIFIER
 }).readonly();
 var agentInstallIdentityFields = {
   agentId: IDENTIFIER,
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER
 };
 var agentInstallRequestCommandSchema = external_exports.strictObject({
@@ -19774,7 +19770,6 @@ var agentInstallRequestCommandSchema = external_exports.strictObject({
 }).readonly();
 var agentInstallCancelCommandSchema = external_exports.strictObject({
   kind: external_exports.literal(AGENT_INSTALL_CANCEL_KIND),
-  protocolVersion: PROTOCOL_VERSION,
   requestId: IDENTIFIER
 }).readonly();
 var agentInstallAwaitingApprovalEventSchema = external_exports.strictObject({
@@ -19840,6 +19835,7 @@ function decodeValue(value, schema) {
   return result.data;
 }
 var decodeAgentDisplayContentValue = (value) => decodeValue(value, displayContentSchema);
+var decodeRecordedAgentContentValue = (value) => decodeValue(value, recordedDisplayContentSchema);
 var decodePromptImagesValue = (value) => decodeValue(value, external_exports.array(promptImageSchema).max(8).readonly());
 var decodePromptResourcesValue = (value) => decodeValue(value, external_exports.array(promptResourceSchema).max(16).readonly());
 var encode3 = (message, schema) => JSON.stringify(decodeValue(message, schema));
@@ -19879,6 +19875,8 @@ var SESSION_STARTED_KIND = "session.started";
 var AGENT_MESSAGE_DELTA_KIND = "agent.message.delta";
 var AGENT_ACTIVITY_KIND = "agent.activity";
 var AGENT_ACTIVITY_DETAIL_LIMIT = 24e3;
+var AGENT_ACTIVITY_RECORDED_FIELD_LIMIT = 4e6;
+var AGENT_ACTIVITY_RECORDED_DETAIL_LIMIT = 6e6;
 var AGENT_ACTIVITY_LOCATION_LIMIT = 12;
 var AGENT_ACTIVITY_LOCATION_LENGTH_LIMIT = 1024;
 var SESSION_COMPLETED_KIND = "session.completed";
@@ -20011,6 +20009,53 @@ function readActivityContent(value) {
   }
   return field.map((entry) => decodeAgentDisplayContentValue(entry));
 }
+function readActivityDetail(value) {
+  const field = value["detail"];
+  if (!isRecord(field)) {
+    throw new ProtocolMessageError("Invalid activity detail field");
+  }
+  const kind = readString(field, "kind", 32);
+  if (kind === "available") {
+    assertExactKeys(field, ["artifactId", "kind"]);
+    return {
+      artifactId: readIdentifier(field, "artifactId"),
+      kind
+    };
+  }
+  if (kind === "unrecorded") {
+    assertExactKeys(field, ["kind"]);
+    return { kind };
+  }
+  if (kind === "truncated") {
+    assertExactKeys(field, ["capturedBytes", "kind", "originalBytes"]);
+    const capturedBytes = readSequence(field, "capturedBytes");
+    const originalBytes = readSequence(field, "originalBytes");
+    if (capturedBytes > originalBytes) {
+      throw new ProtocolMessageError("Invalid truncated activity detail size");
+    }
+    return { capturedBytes, kind, originalBytes };
+  }
+  if (kind === "recorded") {
+    assertExactKeys(field, ["content", "input", "kind", "output"]);
+    const contentValue = field["content"];
+    if (!Array.isArray(contentValue) || contentValue.length > 100) {
+      throw new ProtocolMessageError("Invalid recorded activity content");
+    }
+    const detail = {
+      content: contentValue.map(
+        (entry) => decodeRecordedAgentContentValue(entry)
+      ),
+      input: readText(field, "input", AGENT_ACTIVITY_RECORDED_FIELD_LIMIT),
+      kind,
+      output: readText(field, "output", AGENT_ACTIVITY_RECORDED_FIELD_LIMIT)
+    };
+    if (JSON.stringify(detail).length > AGENT_ACTIVITY_RECORDED_DETAIL_LIMIT) {
+      throw new ProtocolMessageError("Recorded activity detail is too large");
+    }
+    return detail;
+  }
+  throw new ProtocolMessageError("Invalid activity detail availability");
+}
 function readIdentifier(value, key) {
   const field = readString(value, key, 128);
   if (!IDENTIFIER_PATTERN2.test(field)) {
@@ -20027,11 +20072,6 @@ function readDirectoryIdentifier(value, key) {
   }
   return field;
 }
-function assertProtocolVersion(value) {
-  if (value["protocolVersion"] !== MOBIUS_PROTOCOL_VERSION) {
-    throw new ProtocolMessageError("Unsupported protocol version");
-  }
-}
 function assertKind(value, expectedKind) {
   if (value["kind"] !== expectedKind) {
     throw new ProtocolMessageError(`Expected message kind: ${expectedKind}`);
@@ -20051,11 +20091,9 @@ function decodeSessionPromptCommand(encoded) {
     "images",
     "kind",
     "prompt",
-    "protocolVersion",
     "resources",
     "sessionId"
   ]);
-  assertProtocolVersion(value);
   assertKind(value, SESSION_PROMPT_KIND);
   const prompt = readText(value, "prompt", MAX_PROMPT_LENGTH);
   const images = decodePromptImagesValue(value["images"]);
@@ -20080,89 +20118,62 @@ function decodeSessionPromptCommand(encoded) {
     images,
     kind: SESSION_PROMPT_KIND,
     prompt,
-    protocolVersion: MOBIUS_PROTOCOL_VERSION,
     resources,
     sessionId: readIdentifier(value, "sessionId")
   };
 }
 function decodeSessionCancelCommand(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["commandId", "kind", "protocolVersion", "sessionId"]);
-  assertProtocolVersion(value);
+  assertExactKeys(value, ["commandId", "kind", "sessionId"]);
   assertKind(value, SESSION_CANCEL_KIND);
   return {
     commandId: readIdentifier(value, "commandId"),
     kind: SESSION_CANCEL_KIND,
-    protocolVersion: MOBIUS_PROTOCOL_VERSION,
     sessionId: readIdentifier(value, "sessionId")
   };
 }
 function decodeRuntimeLivenessReadyEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["kind", "protocolVersion"]);
-  assertProtocolVersion(value);
+  assertExactKeys(value, ["kind"]);
   assertKind(value, RUNTIME_LIVENESS_READY_KIND);
-  return {
-    kind: RUNTIME_LIVENESS_READY_KIND,
-    protocolVersion: MOBIUS_PROTOCOL_VERSION
-  };
+  return { kind: RUNTIME_LIVENESS_READY_KIND };
 }
 function decodeRuntimeHeartbeatEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["heartbeatId", "kind", "protocolVersion"]);
-  assertProtocolVersion(value);
+  assertExactKeys(value, ["heartbeatId", "kind"]);
   assertKind(value, RUNTIME_HEARTBEAT_KIND);
   return {
     heartbeatId: readIdentifier(value, "heartbeatId"),
-    kind: RUNTIME_HEARTBEAT_KIND,
-    protocolVersion: MOBIUS_PROTOCOL_VERSION
+    kind: RUNTIME_HEARTBEAT_KIND
   };
 }
 function decodeRuntimeHeartbeatAckEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, ["heartbeatId", "kind", "protocolVersion"]);
-  assertProtocolVersion(value);
+  assertExactKeys(value, ["heartbeatId", "kind"]);
   assertKind(value, RUNTIME_HEARTBEAT_ACK_KIND);
   return {
     heartbeatId: readIdentifier(value, "heartbeatId"),
-    kind: RUNTIME_HEARTBEAT_ACK_KIND,
-    protocolVersion: MOBIUS_PROTOCOL_VERSION
+    kind: RUNTIME_HEARTBEAT_ACK_KIND
   };
 }
 function decodeSessionStartedEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, [
-    "commandId",
-    "kind",
-    "processAttemptId",
-    "protocolVersion",
-    "sessionId"
-  ]);
-  assertProtocolVersion(value);
+  assertExactKeys(value, ["commandId", "kind", "attemptId", "sessionId"]);
   assertKind(value, SESSION_STARTED_KIND);
   return {
     commandId: readIdentifier(value, "commandId"),
     kind: SESSION_STARTED_KIND,
-    processAttemptId: readIdentifier(value, "processAttemptId"),
-    protocolVersion: MOBIUS_PROTOCOL_VERSION,
+    attemptId: readIdentifier(value, "attemptId"),
     sessionId: readIdentifier(value, "sessionId")
   };
 }
 function decodeAgentMessageDeltaEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, [
-    "commandId",
-    "kind",
-    "protocolVersion",
-    "sessionId",
-    "text"
-  ]);
-  assertProtocolVersion(value);
+  assertExactKeys(value, ["commandId", "kind", "sessionId", "text"]);
   assertKind(value, AGENT_MESSAGE_DELTA_KIND);
   return {
     commandId: readIdentifier(value, "commandId"),
     kind: AGENT_MESSAGE_DELTA_KIND,
-    protocolVersion: MOBIUS_PROTOCOL_VERSION,
     sessionId: readIdentifier(value, "sessionId"),
     text: readString(value, "text", MAX_EVENT_TEXT_LENGTH)
   };
@@ -20174,31 +20185,30 @@ function decodeAgentActivityEvent(encoded) {
     "activityType",
     "commandId",
     "content",
+    "detail",
     "input",
     "kind",
     "locations",
     "name",
     "output",
-    "protocolVersion",
     "sequence",
     "sessionId",
     "status",
     "title",
     "toolKind"
   ]);
-  assertProtocolVersion(value);
   assertKind(value, AGENT_ACTIVITY_KIND);
   return {
     activityId: readIdentifier(value, "activityId"),
     activityType: readAllowedString(value, "activityType", ACTIVITY_TYPES),
     commandId: readIdentifier(value, "commandId"),
     content: readActivityContent(value),
+    detail: readActivityDetail(value),
     input: readText(value, "input", AGENT_ACTIVITY_DETAIL_LIMIT),
     kind: AGENT_ACTIVITY_KIND,
     locations: readLocations(value),
     name: readText(value, "name", 128),
     output: readText(value, "output", AGENT_ACTIVITY_DETAIL_LIMIT),
-    protocolVersion: MOBIUS_PROTOCOL_VERSION,
     sequence: readSequence(value, "sequence"),
     sessionId: readIdentifier(value, "sessionId"),
     status: readAllowedString(value, "status", ACTIVITY_STATUSES),
@@ -20208,41 +20218,24 @@ function decodeAgentActivityEvent(encoded) {
 }
 function decodeSessionCompletedEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, [
-    "commandId",
-    "kind",
-    "protocolVersion",
-    "sessionId",
-    "stopReason"
-  ]);
-  assertProtocolVersion(value);
+  assertExactKeys(value, ["commandId", "kind", "sessionId", "stopReason"]);
   assertKind(value, SESSION_COMPLETED_KIND);
   return {
     commandId: readIdentifier(value, "commandId"),
     kind: SESSION_COMPLETED_KIND,
-    protocolVersion: MOBIUS_PROTOCOL_VERSION,
     sessionId: readIdentifier(value, "sessionId"),
     stopReason: readString(value, "stopReason", 64)
   };
 }
 function decodeSessionFailedEvent(encoded) {
   const value = parseJson2(encoded);
-  assertExactKeys(value, [
-    "code",
-    "commandId",
-    "kind",
-    "message",
-    "protocolVersion",
-    "sessionId"
-  ]);
-  assertProtocolVersion(value);
+  assertExactKeys(value, ["code", "commandId", "kind", "message", "sessionId"]);
   assertKind(value, SESSION_FAILED_KIND);
   return {
     code: readIdentifier(value, "code"),
     commandId: readIdentifier(value, "commandId"),
     kind: SESSION_FAILED_KIND,
     message: readString(value, "message", 500),
-    protocolVersion: MOBIUS_PROTOCOL_VERSION,
     sessionId: readIdentifier(value, "sessionId")
   };
 }
@@ -20332,7 +20325,6 @@ var NATIVE_SESSION_CANCEL_KIND = "native.session.cancel";
 var identifier = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/);
 var directoryId = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,2047}$/);
 var envelope = {
-  protocolVersion: external_exports.literal(MOBIUS_PROTOCOL_VERSION),
   requestId: identifier,
   sessionId: identifier
 };
@@ -20387,6 +20379,7 @@ var nativeSessionResultSchema = external_exports.discriminatedUnion("action", [
   external_exports.strictObject({
     ...resultEnvelope,
     action: external_exports.enum(["import", "fork"]),
+    targetSessionId: identifier,
     ready: sessionReadyEventSchema,
     history: sessionHistorySchema,
     title: external_exports.string().max(500)
@@ -20395,6 +20388,7 @@ var nativeSessionResultSchema = external_exports.discriminatedUnion("action", [
     ...resultEnvelope,
     action: external_exports.literal("preview"),
     entryId: identifier,
+    targetSessionId: identifier,
     reason: external_exports.literal("continuation_unavailable"),
     history: sessionHistorySchema,
     title: external_exports.string().max(500)
@@ -20419,6 +20413,563 @@ var decodeNativeSessionCommand = (encoded) => decode4(nativeSessionCommandSchema
 var encodeNativeSessionResult = (value) => JSON.stringify(nativeSessionResultSchema.parse(value));
 var decodeNativeSessionCancel = (encoded) => decode4(nativeSessionCancelSchema, encoded);
 
+// ../protocol/src/resource-model.ts
+var IDENTIFIER_PATTERN3 = /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/;
+var DECIMAL_SEQUENCE_PATTERN = /^(?:0|[1-9][0-9]*)$/;
+var SHA256_PATTERN = /^[a-f0-9]{64}$/;
+var identifierSchema = external_exports.string().min(1).max(128).regex(IDENTIFIER_PATTERN3);
+var timestampSchema = external_exports.string().datetime({ offset: true });
+var decimalSequenceSchema = external_exports.string().min(1).max(40).regex(DECIMAL_SEQUENCE_PATTERN);
+var digestSchema = external_exports.string().length(64).regex(SHA256_PATTERN);
+var recordingPolicySchema = external_exports.strictObject({
+  contentLimitBytes: external_exports.number().int().positive().safe(),
+  hotEventLimit: external_exports.number().int().positive().safe(),
+  idempotencyRetentionMilliseconds: external_exports.number().int().positive().safe(),
+  level: external_exports.enum(["full", "summary"]),
+  retentionMilliseconds: external_exports.number().int().positive().safe()
+}).readonly();
+var tenantLifecycleSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("active") }).readonly(),
+  external_exports.strictObject({
+    kind: external_exports.literal("suspended"),
+    suspendedAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({ deletedAt: timestampSchema, kind: external_exports.literal("deleted") }).readonly()
+]);
+var tenantSchema = external_exports.strictObject({
+  lifecycle: tenantLifecycleSchema,
+  quotaPolicyRevision: external_exports.number().int().nonnegative().safe(),
+  recordingPolicy: recordingPolicySchema,
+  tenantId: identifierSchema
+}).readonly();
+var projectLifecycleSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("active") }).readonly(),
+  external_exports.strictObject({ archivedAt: timestampSchema, kind: external_exports.literal("archived") }).readonly(),
+  external_exports.strictObject({ deletedAt: timestampSchema, kind: external_exports.literal("deleted") }).readonly()
+]);
+var projectSchema = external_exports.strictObject({
+  displayName: external_exports.string().min(1).max(120),
+  lifecycle: projectLifecycleSchema,
+  projectId: identifierSchema,
+  tenantId: identifierSchema
+}).readonly();
+var runtimeLifecycleSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("registered") }).readonly(),
+  external_exports.strictObject({ disabledAt: timestampSchema, kind: external_exports.literal("disabled") }).readonly(),
+  external_exports.strictObject({ deletedAt: timestampSchema, kind: external_exports.literal("deleted") }).readonly()
+]);
+var runtimeCapabilitySchema = external_exports.strictObject({
+  name: identifierSchema,
+  revision: external_exports.number().int().nonnegative().safe()
+}).readonly();
+var runtimeSchema = external_exports.strictObject({
+  capabilities: external_exports.array(runtimeCapabilitySchema).max(100).readonly(),
+  displayName: external_exports.string().min(1).max(120),
+  lifecycle: runtimeLifecycleSchema,
+  runtimeId: identifierSchema,
+  tenantId: identifierSchema
+}).readonly();
+var channelStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    connectionEpoch: external_exports.number().int().nonnegative().safe(),
+    connectedAt: timestampSchema,
+    connectionId: identifierSchema,
+    kind: external_exports.literal("online")
+  }).readonly(),
+  external_exports.strictObject({
+    connectionEpoch: external_exports.number().int().nonnegative().safe(),
+    disconnectedAt: timestampSchema,
+    kind: external_exports.literal("offline")
+  }).readonly()
+]);
+var channelSchema = external_exports.strictObject({
+  channelId: identifierSchema,
+  runtimeId: identifierSchema,
+  state: channelStateSchema
+}).readonly();
+var sessionLifecycleSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("ready") }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("deleting"), requestedAt: timestampSchema }).readonly(),
+  external_exports.strictObject({ completedAt: timestampSchema, kind: external_exports.literal("deleted") }).readonly()
+]);
+var sessionSchema = external_exports.strictObject({
+  createdAt: timestampSchema,
+  createdBy: identifierSchema,
+  defaultBindingId: identifierSchema,
+  lastCommittedSeq: decimalSequenceSchema,
+  lifecycle: sessionLifecycleSchema,
+  projectId: identifierSchema,
+  sessionId: identifierSchema,
+  tenantId: identifierSchema
+}).readonly();
+var sessionBindingSchema = external_exports.strictObject({
+  agentRef: identifierSchema,
+  bindingId: identifierSchema,
+  configRevision: external_exports.number().int().nonnegative().safe(),
+  createdAt: timestampSchema,
+  runtimeId: identifierSchema,
+  sessionId: identifierSchema,
+  workspaceRef: identifierSchema
+}).readonly();
+var domainErrorSchema = external_exports.strictObject({
+  code: identifierSchema,
+  message: external_exports.string().min(1).max(2e3),
+  retryable: external_exports.boolean()
+}).readonly();
+var executionResultSchema = external_exports.strictObject({
+  kind: external_exports.literal("agent_result"),
+  stopReason: external_exports.string().min(1).max(128)
+}).readonly();
+var reconciliationSchema = external_exports.strictObject({
+  detectedAt: timestampSchema,
+  reason: external_exports.enum([
+    "connection_lost",
+    "dispatch_indeterminate",
+    "runtime_restarted"
+  ])
+}).readonly();
+var turnStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("queued") }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("running"), startedAt: timestampSchema }).readonly(),
+  external_exports.strictObject({
+    completedAt: timestampSchema,
+    kind: external_exports.literal("succeeded"),
+    result: executionResultSchema
+  }).readonly(),
+  external_exports.strictObject({
+    error: domainErrorSchema,
+    failedAt: timestampSchema,
+    kind: external_exports.literal("failed")
+  }).readonly(),
+  external_exports.strictObject({
+    cancelledAt: timestampSchema,
+    kind: external_exports.literal("cancelled")
+  }).readonly(),
+  external_exports.strictObject({
+    kind: external_exports.literal("indeterminate"),
+    reconciliation: reconciliationSchema
+  }).readonly()
+]);
+var turnRequestSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    content: external_exports.string().max(1e5),
+    kind: external_exports.literal("prompt")
+  }).readonly()
+]);
+var turnSchema = external_exports.strictObject({
+  acceptedAt: timestampSchema,
+  bindingId: identifierSchema,
+  idempotencyKey: identifierSchema,
+  request: turnRequestSchema,
+  sessionId: identifierSchema,
+  state: turnStateSchema,
+  turnId: identifierSchema
+}).readonly();
+var attemptStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    dispatchedAt: timestampSchema,
+    kind: external_exports.literal("dispatching")
+  }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("running"), startedAt: timestampSchema }).readonly(),
+  external_exports.strictObject({
+    interactionIds: external_exports.array(identifierSchema).min(1).max(100).readonly(),
+    kind: external_exports.literal("waiting_input"),
+    startedAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({
+    completedAt: timestampSchema,
+    kind: external_exports.literal("succeeded"),
+    result: executionResultSchema,
+    startedAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({
+    error: domainErrorSchema,
+    failedAt: timestampSchema,
+    kind: external_exports.literal("failed"),
+    startedAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({
+    cancelledAt: timestampSchema,
+    kind: external_exports.literal("cancelled"),
+    startedAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({
+    kind: external_exports.literal("indeterminate"),
+    reconciliation: reconciliationSchema,
+    startedAt: timestampSchema
+  }).readonly()
+]);
+var attemptSchema = external_exports.strictObject({
+  attemptId: identifierSchema,
+  bindingId: identifierSchema,
+  sessionId: identifierSchema,
+  state: attemptStateSchema,
+  turnId: identifierSchema
+}).readonly();
+var permissionRequestSchema = external_exports.strictObject({
+  kind: external_exports.literal("permission"),
+  options: external_exports.array(permissionOptionSchema).min(1).max(20).readonly(),
+  title: external_exports.string().min(1).max(500),
+  toolCallId: external_exports.string().min(1).max(255),
+  toolKind: external_exports.string().max(64)
+}).readonly();
+var elicitationRequestSchema = external_exports.strictObject({
+  elicitationId: external_exports.string().max(255),
+  fields: external_exports.array(elicitationFieldSchema).max(100).readonly(),
+  kind: external_exports.literal("elicitation"),
+  message: external_exports.string().min(1).max(2e3),
+  mode: external_exports.enum(["form", "url"]),
+  url: external_exports.string().max(4096)
+}).readonly();
+var interactionRequestSchema = external_exports.discriminatedUnion("kind", [
+  permissionRequestSchema,
+  elicitationRequestSchema
+]);
+var interactionResponseSchema = external_exports.strictObject({
+  content: external_exports.string().max(1e5),
+  kind: external_exports.enum(["permission", "elicitation"])
+}).readonly();
+var interactionStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("pending") }).readonly(),
+  external_exports.strictObject({
+    kind: external_exports.literal("responded"),
+    respondedAt: timestampSchema,
+    responderId: identifierSchema,
+    response: interactionResponseSchema
+  }).readonly(),
+  external_exports.strictObject({
+    kind: external_exports.literal("resolved"),
+    resolution: external_exports.discriminatedUnion("kind", [
+      external_exports.strictObject({ kind: external_exports.literal("without_response") }).readonly(),
+      external_exports.strictObject({
+        kind: external_exports.literal("response_applied"),
+        respondedAt: timestampSchema,
+        responderId: identifierSchema,
+        response: interactionResponseSchema
+      }).readonly()
+    ]),
+    resolvedAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({ expiredAt: timestampSchema, kind: external_exports.literal("expired") }).readonly(),
+  external_exports.strictObject({
+    cancelledAt: timestampSchema,
+    kind: external_exports.literal("cancelled")
+  }).readonly()
+]);
+var interactionSchema = external_exports.strictObject({
+  attemptId: identifierSchema,
+  interactionId: identifierSchema,
+  request: interactionRequestSchema,
+  sessionId: identifierSchema,
+  state: interactionStateSchema,
+  turnId: identifierSchema
+}).readonly();
+var recordingCompletenessSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("complete") }).readonly(),
+  external_exports.strictObject({
+    capturedBytes: external_exports.number().int().nonnegative().safe(),
+    kind: external_exports.literal("truncated"),
+    originalBytes: external_exports.number().int().positive().safe()
+  }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("redacted"), reason: identifierSchema }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("uncaptured") }).readonly()
+]);
+var messageViewStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("building") }).readonly(),
+  external_exports.strictObject({
+    completeness: recordingCompletenessSchema,
+    kind: external_exports.literal("available")
+  }).readonly(),
+  external_exports.strictObject({ deletedAt: timestampSchema, kind: external_exports.literal("deleted") }).readonly()
+]);
+var messageViewCommon = {
+  contentArtifactIds: external_exports.array(identifierSchema).max(100).readonly(),
+  lastAppliedSeq: decimalSequenceSchema,
+  messageId: identifierSchema,
+  preview: external_exports.string().max(4e3),
+  sessionId: identifierSchema,
+  state: messageViewStateSchema
+};
+var messageViewSchema = external_exports.discriminatedUnion("role", [
+  external_exports.strictObject({
+    ...messageViewCommon,
+    role: external_exports.literal("user"),
+    source: external_exports.strictObject({ kind: external_exports.literal("turn"), turnId: identifierSchema }).readonly()
+  }).readonly(),
+  external_exports.strictObject({
+    ...messageViewCommon,
+    role: external_exports.literal("agent"),
+    source: external_exports.strictObject({
+      attemptId: identifierSchema,
+      kind: external_exports.literal("attempt"),
+      turnId: identifierSchema
+    }).readonly()
+  }).readonly(),
+  external_exports.strictObject({
+    ...messageViewCommon,
+    role: external_exports.literal("tool"),
+    source: external_exports.strictObject({
+      attemptId: identifierSchema,
+      kind: external_exports.literal("tool_call"),
+      toolCallId: identifierSchema,
+      turnId: identifierSchema
+    }).readonly()
+  }).readonly(),
+  external_exports.strictObject({
+    ...messageViewCommon,
+    role: external_exports.literal("system"),
+    source: external_exports.strictObject({ kind: external_exports.literal("system") }).readonly()
+  }).readonly()
+]);
+var toolCallDetailSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    artifactId: identifierSchema,
+    kind: external_exports.literal("available")
+  }).readonly(),
+  external_exports.strictObject({
+    capturedBytes: external_exports.number().int().nonnegative().safe(),
+    kind: external_exports.literal("truncated"),
+    originalBytes: external_exports.number().int().positive().safe()
+  }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("uncaptured") }).readonly(),
+  external_exports.strictObject({ deletedAt: timestampSchema, kind: external_exports.literal("deleted") }).readonly()
+]);
+var toolCallViewStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("pending") }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("running"), startedAt: timestampSchema }).readonly(),
+  external_exports.strictObject({
+    completedAt: timestampSchema,
+    kind: external_exports.literal("succeeded")
+  }).readonly(),
+  external_exports.strictObject({
+    error: domainErrorSchema,
+    failedAt: timestampSchema,
+    kind: external_exports.literal("failed")
+  }).readonly(),
+  external_exports.strictObject({
+    cancelledAt: timestampSchema,
+    kind: external_exports.literal("cancelled")
+  }).readonly()
+]);
+var toolCallViewSchema = external_exports.strictObject({
+  attemptId: identifierSchema,
+  detail: toolCallDetailSchema,
+  inputPreview: external_exports.string().max(4e3),
+  lastAppliedSeq: decimalSequenceSchema,
+  name: external_exports.string().max(128),
+  outputPreview: external_exports.string().max(4e3),
+  state: toolCallViewStateSchema,
+  title: external_exports.string().min(1).max(500),
+  toolCallId: identifierSchema,
+  toolKind: identifierSchema
+}).readonly();
+var sessionListEntrySchema = external_exports.strictObject({
+  lastAppliedSeq: decimalSequenceSchema,
+  preview: external_exports.string().max(4e3),
+  projectId: identifierSchema,
+  projectedAttemptState: external_exports.enum([
+    "idle",
+    "dispatching",
+    "running",
+    "waiting_input",
+    "indeterminate"
+  ]),
+  sessionId: identifierSchema,
+  tenantId: identifierSchema,
+  title: external_exports.string().max(500),
+  updatedAt: timestampSchema
+}).readonly();
+var artifactStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    expectedBytes: external_exports.number().int().nonnegative().safe(),
+    expiresAt: timestampSchema,
+    kind: external_exports.literal("uploading"),
+    uploadId: identifierSchema
+  }).readonly(),
+  external_exports.strictObject({
+    availableAt: timestampSchema,
+    byteLength: external_exports.number().int().nonnegative().safe(),
+    kind: external_exports.literal("available"),
+    sha256: digestSchema
+  }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("deleting"), requestedAt: timestampSchema }).readonly(),
+  external_exports.strictObject({ completedAt: timestampSchema, kind: external_exports.literal("deleted") }).readonly(),
+  external_exports.strictObject({
+    error: domainErrorSchema,
+    failedAt: timestampSchema,
+    kind: external_exports.literal("failed")
+  }).readonly(),
+  external_exports.strictObject({ expiredAt: timestampSchema, kind: external_exports.literal("expired") }).readonly()
+]);
+var artifactSchema = external_exports.strictObject({
+  artifactId: identifierSchema,
+  completeness: recordingCompletenessSchema,
+  contentKind: identifierSchema,
+  mediaType: external_exports.string().min(1).max(128),
+  projectId: identifierSchema,
+  provenance: external_exports.discriminatedUnion("kind", [
+    external_exports.strictObject({ kind: external_exports.literal("user_upload") }).readonly(),
+    external_exports.strictObject({
+      attemptId: identifierSchema,
+      kind: external_exports.literal("tool_call"),
+      toolCallId: identifierSchema,
+      turnId: identifierSchema
+    }).readonly(),
+    external_exports.strictObject({
+      attemptId: identifierSchema,
+      kind: external_exports.literal("agent_generated"),
+      turnId: identifierSchema
+    }).readonly()
+  ]),
+  sessionId: identifierSchema,
+  state: artifactStateSchema,
+  tenantId: identifierSchema
+}).readonly();
+var archiveSegmentStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("pending"), queuedAt: timestampSchema }).readonly(),
+  external_exports.strictObject({
+    byteLength: external_exports.number().int().nonnegative().safe(),
+    kind: external_exports.literal("uploaded"),
+    sha256: digestSchema,
+    uploadedAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({
+    byteLength: external_exports.number().int().nonnegative().safe(),
+    kind: external_exports.literal("published"),
+    publishedAt: timestampSchema,
+    sha256: digestSchema
+  }).readonly(),
+  external_exports.strictObject({ kind: external_exports.literal("deleting"), requestedAt: timestampSchema }).readonly(),
+  external_exports.strictObject({ completedAt: timestampSchema, kind: external_exports.literal("deleted") }).readonly()
+]);
+var archiveSegmentSchema = external_exports.strictObject({
+  compression: external_exports.literal("gzip"),
+  eventCount: external_exports.number().int().positive().safe(),
+  firstSeq: decimalSequenceSchema,
+  lastSeq: decimalSequenceSchema,
+  segmentId: identifierSchema,
+  sessionId: identifierSchema,
+  state: archiveSegmentStateSchema
+}).readonly();
+var pendingWorkStateSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({ kind: external_exports.literal("pending"), queuedAt: timestampSchema }).readonly(),
+  external_exports.strictObject({
+    attempt: external_exports.number().int().positive().safe(),
+    kind: external_exports.literal("running"),
+    startedAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({
+    completedAt: timestampSchema,
+    kind: external_exports.literal("completed")
+  }).readonly(),
+  external_exports.strictObject({
+    error: domainErrorSchema,
+    kind: external_exports.literal("retryable"),
+    nextAttemptAt: timestampSchema
+  }).readonly(),
+  external_exports.strictObject({
+    error: domainErrorSchema,
+    failedAt: timestampSchema,
+    kind: external_exports.literal("failed")
+  }).readonly()
+]);
+var pendingWorkSchema = external_exports.strictObject({
+  kind: external_exports.enum([
+    "archive",
+    "delete",
+    "dispatch",
+    "interaction_response",
+    "projection"
+  ]),
+  projectId: identifierSchema,
+  sessionId: identifierSchema,
+  state: pendingWorkStateSchema,
+  tenantId: identifierSchema,
+  workId: identifierSchema
+}).readonly();
+var commandReceiptSchema = external_exports.strictObject({
+  acceptedAt: timestampSchema,
+  commandKind: identifierSchema,
+  expiresAt: timestampSchema,
+  idempotencyKey: identifierSchema,
+  projectId: identifierSchema,
+  requestHash: digestSchema,
+  resultId: identifierSchema,
+  sessionId: identifierSchema,
+  tenantId: identifierSchema
+}).readonly();
+
+// ../protocol/src/session-events.ts
+var SESSION_EVENT_KIND = "session.event";
+var SESSION_EVENT_ACK_KIND = "session.event.ack";
+var SESSION_EVENT_COMMITTED_KIND = "session.event.committed";
+var IDENTIFIER_PATTERN4 = /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/;
+var CURSOR_PATTERN = /^[A-Za-z0-9_-]{1,512}$/;
+var MAX_RECORDED_EVENT_LENGTH = 8 * 1024 * 1024;
+var DECIMAL_SEQUENCE_PATTERN2 = /^(?:0|[1-9][0-9]*)$/;
+var eventSourceSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    attemptId: external_exports.string().min(1).max(128).regex(IDENTIFIER_PATTERN4),
+    kind: external_exports.literal("attempt"),
+    sourceSeq: external_exports.string().min(1).max(40).regex(DECIMAL_SEQUENCE_PATTERN2)
+  }).readonly(),
+  external_exports.strictObject({
+    kind: external_exports.literal("runtime"),
+    sourceSeq: external_exports.string().min(1).max(40).regex(DECIMAL_SEQUENCE_PATTERN2)
+  }).readonly()
+]);
+var eventEnvelopeSchema = external_exports.strictObject({
+  eventId: external_exports.string().min(1).max(128).regex(IDENTIFIER_PATTERN4),
+  kind: external_exports.literal(SESSION_EVENT_KIND),
+  payload: external_exports.string().min(2).max(MAX_RECORDED_EVENT_LENGTH),
+  sessionId: external_exports.string().min(1).max(128).regex(IDENTIFIER_PATTERN4),
+  source: eventSourceSchema
+}).readonly();
+var committedEventSchema = external_exports.strictObject({
+  cursor: external_exports.string().min(1).max(512).regex(CURSOR_PATTERN),
+  eventId: external_exports.string().min(1).max(128).regex(IDENTIFIER_PATTERN4),
+  kind: external_exports.literal(SESSION_EVENT_COMMITTED_KIND),
+  payload: external_exports.string().min(2).max(MAX_RECORDED_EVENT_LENGTH),
+  recordedAt: external_exports.string().datetime({ offset: true }),
+  sequence: external_exports.string().min(1).max(40).regex(DECIMAL_SEQUENCE_PATTERN2),
+  sessionId: external_exports.string().min(1).max(128).regex(IDENTIFIER_PATTERN4),
+  source: eventSourceSchema
+}).readonly();
+var eventAcknowledgementSchema = external_exports.strictObject({
+  cursor: external_exports.string().min(1).max(512).regex(CURSOR_PATTERN),
+  duplicate: external_exports.boolean(),
+  eventId: external_exports.string().min(1).max(128).regex(IDENTIFIER_PATTERN4),
+  kind: external_exports.literal(SESSION_EVENT_ACK_KIND),
+  sequence: external_exports.string().min(1).max(40).regex(DECIMAL_SEQUENCE_PATTERN2),
+  sessionId: external_exports.string().min(1).max(128).regex(IDENTIFIER_PATTERN4)
+}).readonly();
+function decode5(encoded, schema) {
+  let value;
+  try {
+    value = JSON.parse(encoded);
+  } catch (cause) {
+    throw new ProtocolMessageError("Message is not valid JSON", { cause });
+  }
+  const decoded = schema.safeParse(value);
+  if (!decoded.success) {
+    throw new ProtocolMessageError("Message does not match its schema", {
+      cause: decoded.error
+    });
+  }
+  return decoded.data;
+}
+var encode4 = (message, schema) => {
+  const decoded = schema.safeParse(message);
+  if (!decoded.success) {
+    throw new ProtocolMessageError("Message does not match its schema", {
+      cause: decoded.error
+    });
+  }
+  return JSON.stringify(decoded.data);
+};
+var encodeSessionEventEnvelope = (message) => encode4(message, eventEnvelopeSchema);
+var decodeSessionEventAcknowledgement = (encoded) => decode5(encoded, eventAcknowledgementSchema);
+
 // src/acp/activity.ts
 var TRUNCATION_MARKER = "\n\u2026 output truncated by Mobius";
 function isRecord2(value) {
@@ -20436,7 +20987,12 @@ var AcpActivity = class _AcpActivity {
   title;
   toolKind;
   content;
-  constructor(activityId, activityType, input2, locations, name, output2, sequence, status, title, toolKind, content = []) {
+  detail;
+  constructor(activityId, activityType, input2, locations, name, output2, sequence, status, title2, toolKind, content = [], detail = captureActivityDetail(
+    content,
+    input2,
+    output2
+  )) {
     this.activityId = activityId;
     this.activityType = activityType;
     this.input = input2;
@@ -20445,9 +21001,10 @@ var AcpActivity = class _AcpActivity {
     this.output = output2;
     this.sequence = sequence;
     this.status = status;
-    this.title = title;
+    this.title = title2;
     this.toolKind = toolKind;
     this.content = content;
+    this.detail = detail;
   }
   complete = () => (this.activityType === "progress" || this.activityType === "reasoning") && (this.status === "pending" || this.status === "running") ? new _AcpActivity(
     this.activityId,
@@ -20460,7 +21017,8 @@ var AcpActivity = class _AcpActivity {
     "completed",
     this.title,
     this.toolKind,
-    this.content
+    this.content,
+    this.detail
   ) : this;
 };
 var ActivityIdentity = class {
@@ -20488,12 +21046,67 @@ function formatUnknown(value) {
     return truncate(String(value), AGENT_ACTIVITY_DETAIL_LIMIT);
   }
 }
+function formatUnknownDetail(value) {
+  if (typeof value === "string") {
+    return value;
+  }
+  try {
+    return JSON.stringify(value, null, 2) ?? "";
+  } catch {
+    return String(value);
+  }
+}
 function readContentOutput(content) {
   if (!Array.isArray(content) || content.length === 0) {
     return "";
   }
   return formatUnknown(content);
 }
+function readContentOutputDetail(content) {
+  if (!Array.isArray(content) || content.length === 0) {
+    return "";
+  }
+  return formatUnknownDetail(content);
+}
+function summarizeDisplayContent(content) {
+  return {
+    ...content,
+    data: truncate(content.data, AGENT_ACTIVITY_DETAIL_LIMIT),
+    mimeType: truncate(content.mimeType, 255),
+    name: truncate(content.name, 500),
+    newText: truncate(content.newText, AGENT_ACTIVITY_DETAIL_LIMIT),
+    oldText: truncate(content.oldText, AGENT_ACTIVITY_DETAIL_LIMIT),
+    path: truncate(content.path, 2048),
+    terminalId: truncate(content.terminalId, 255),
+    text: truncate(content.text, AGENT_ACTIVITY_DETAIL_LIMIT),
+    uri: truncate(content.uri, 4096)
+  };
+}
+function contentFitsRecordingEnvelope(content) {
+  return content.data.length <= AGENT_ACTIVITY_RECORDED_FIELD_LIMIT && content.mimeType.length <= 255 && content.name.length <= 500 && content.newText.length <= AGENT_ACTIVITY_RECORDED_FIELD_LIMIT && content.oldText.length <= AGENT_ACTIVITY_RECORDED_FIELD_LIMIT && content.path.length <= 2048 && content.terminalId.length <= 255 && content.text.length <= AGENT_ACTIVITY_RECORDED_FIELD_LIMIT && content.uri.length <= 4096;
+}
+function encodedByteLength(value) {
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+}
+function captureActivityDetail(content, input2, output2) {
+  const recorded = { content, input: input2, kind: "recorded", output: output2 };
+  const originalBytes = encodedByteLength(recorded);
+  if (content.length <= 100 && content.every(contentFitsRecordingEnvelope) && input2.length <= AGENT_ACTIVITY_RECORDED_FIELD_LIMIT && output2.length <= AGENT_ACTIVITY_RECORDED_FIELD_LIMIT && JSON.stringify(recorded).length <= AGENT_ACTIVITY_RECORDED_DETAIL_LIMIT) {
+    return recorded;
+  }
+  return {
+    capturedBytes: encodedByteLength({
+      content: content.slice(0, 100).map(summarizeDisplayContent),
+      input: truncate(input2, AGENT_ACTIVITY_DETAIL_LIMIT),
+      output: truncate(output2, AGENT_ACTIVITY_DETAIL_LIMIT)
+    }),
+    kind: "truncated",
+    originalBytes
+  };
+}
+function recordedDetail(activity) {
+  return activity?.detail.kind === "recorded" ? activity.detail : null;
+}
 function emptyDisplayContent(type) {
   return {
     data: "",
@@ -20604,8 +21217,8 @@ function normalizeToolStatus(status, fallback) {
   }
   return fallback;
 }
-function normalizeTitle(title, fallback) {
-  const normalized = title.trim();
+function normalizeTitle(title2, fallback) {
+  const normalized = title2.trim();
   return truncate(normalized.length === 0 ? fallback : normalized, 500);
 }
 function formatPlanEntries(entries) {
@@ -20658,17 +21271,20 @@ var AcpActivityTracker = class {
     }
     const previous = this.#activities.get(key);
     const identity2 = this.#identity(key);
+    const fullOutput = `${recordedDetail(previous)?.output ?? previous?.output ?? ""}${text}`;
     const activity = new AcpActivity(
       identity2.id,
       activityType,
       "",
       [],
       "",
-      truncate(`${previous?.output ?? ""}${text}`, AGENT_ACTIVITY_DETAIL_LIMIT),
+      truncate(fullOutput, AGENT_ACTIVITY_DETAIL_LIMIT),
       identity2.sequence,
       "running",
       activityType === "reasoning" ? "Reasoning" : "Progress update",
-      activityType === "reasoning" ? "think" : ""
+      activityType === "reasoning" ? "think" : "",
+      [],
+      captureActivityDetail([], "", fullOutput)
     );
     await this.#record(key, activity);
     this.#activeNarrativeKey = key;
@@ -20721,7 +21337,8 @@ var AcpActivityTracker = class {
           "completed",
           previous.title,
           previous.toolKind,
-          previous.content
+          previous.content,
+          previous.detail
         )
       );
     }
@@ -20731,6 +21348,9 @@ var AcpActivityTracker = class {
     const key = `tool:${update.toolCallId}`;
     const identity2 = this.#identity(key);
     const output2 = update.rawOutput === void 0 ? readContentOutput(update.content) : formatUnknown(update.rawOutput);
+    const detailInput = update.rawInput === void 0 ? "" : formatUnknownDetail(update.rawInput);
+    const detailOutput = update.rawOutput === void 0 ? readContentOutputDetail(update.content) : formatUnknownDetail(update.rawOutput);
+    const detailContent = normalizeToolContent(update.content ?? []);
     await this.#record(
       key,
       new AcpActivity(
@@ -20744,7 +21364,8 @@ var AcpActivityTracker = class {
         normalizeToolStatus(update.status ?? "pending", "pending"),
         normalizeTitle(update.title, "Tool call"),
         update.kind ?? "other",
-        normalizeToolContent(update.content ?? [])
+        detailContent.slice(0, 100).map(summarizeDisplayContent),
+        captureActivityDetail(detailContent, detailInput, detailOutput)
       )
     );
   };
@@ -20753,8 +21374,12 @@ var AcpActivityTracker = class {
     const key = `tool:${update.toolCallId}`;
     const previous = this.#activities.get(key);
     const identity2 = this.#identity(key);
+    const previousDetail = recordedDetail(previous);
     const output2 = update.rawOutput !== void 0 ? formatUnknown(update.rawOutput) : update.content !== void 0 && update.content !== null ? readContentOutput(update.content) : previous?.output ?? "";
     const content = update.content === void 0 || update.content === null ? previous?.content ?? [] : normalizeToolContent(update.content);
+    const detailInput = update.rawInput === void 0 ? previousDetail?.input ?? previous?.input ?? "" : formatUnknownDetail(update.rawInput);
+    const detailOutput = update.rawOutput !== void 0 ? formatUnknownDetail(update.rawOutput) : update.content !== void 0 && update.content !== null ? readContentOutputDetail(update.content) : previousDetail?.output ?? previous?.output ?? "";
+    const detailContent = update.content === void 0 || update.content === null ? previousDetail?.content ?? previous?.content ?? [] : normalizeToolContent(update.content);
     await this.#record(
       key,
       new AcpActivity(
@@ -20768,7 +21393,8 @@ var AcpActivityTracker = class {
         update.status === void 0 || update.status === null ? previous?.status ?? "pending" : normalizeToolStatus(update.status, previous?.status ?? "pending"),
         update.title === void 0 || update.title === null ? previous?.title ?? "Tool call" : normalizeTitle(update.title, "Tool call"),
         update.kind === void 0 || update.kind === null ? previous?.toolKind ?? "other" : update.kind,
-        content
+        content.slice(0, 100).map(summarizeDisplayContent),
+        captureActivityDetail(detailContent, detailInput, detailOutput)
       )
     );
   };
@@ -20838,12 +21464,13 @@ var AcpActivityTracker = class {
 
 // src/acp/native-session.ts
 var path = external_exports.string().min(1).max(2048).refine((value) => !value.includes("\0"));
+var title = external_exports.string().transform((value) => value.slice(0, 500));
 var nativeSessionIdSchema = external_exports.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,255}$/);
 var nativeSessionInfoSchema = external_exports.object({
   sessionId: nativeSessionIdSchema,
   cwd: path,
   additionalDirectories: external_exports.array(path).max(16).default([]).readonly(),
-  title: external_exports.string().max(500).nullish(),
+  title: title.nullish(),
   updatedAt: external_exports.iso.datetime({ offset: true }).nullish()
 }).readonly();
 var nativeSessionPageSchema = external_exports.object({
@@ -21166,6 +21793,12 @@ var AcpExecutionError = class extends Error {
     this.name = "AcpExecutionError";
   }
 };
+var RetryableAcpInitializationError = class extends AcpExecutionError {
+  constructor(cause) {
+    super("ACP agent initialization failed", { cause });
+    this.name = "RetryableAcpInitializationError";
+  }
+};
 function readableWebStream(input2) {
   let streamOpen = true;
   return new ReadableStream({
@@ -21795,42 +22428,63 @@ var AcpProcessSession = class _AcpProcessSession {
     );
     this.#connection = createAcpClient(this).connect(stream);
   }
-  static start = async (options, getObserver, store) => {
-    options.signal.throwIfAborted();
-    const [adapterUnchanged, agentUnchanged] = await Promise.all([
-      revalidateExecutable(options.agent.adapterIdentity),
-      revalidateExecutable(options.agent.agentIdentity)
-    ]);
-    options.signal.throwIfAborted();
-    if (!adapterUnchanged || !agentUnchanged) {
-      throw new AcpExecutionError(
-        "The local Agent runtime changed; restart Mobius before starting a new conversation",
-        {},
-        "agent_runtime_changed"
-      );
-    }
-    const runtime = new _AcpProcessSession(
-      options.agent,
-      options.cwd,
-      options.additionalDirectories,
-      options.sessionId,
-      getObserver,
-      store
-    );
-    try {
-      await runtime.initialize(options.signal, options.origin);
-      return runtime;
-    } catch (error61) {
-      await runtime.closeProcess();
+  static async #start(options, getObserver, store, initialize) {
+    for (let attempt = 1; attempt <= 2; attempt += 1) {
       options.signal.throwIfAborted();
-      if (error61 instanceof AcpExecutionError) {
-        throw error61;
+      const [adapterUnchanged, agentUnchanged] = await Promise.all([
+        revalidateExecutable(options.agent.adapterIdentity),
+        revalidateExecutable(options.agent.agentIdentity)
+      ]);
+      options.signal.throwIfAborted();
+      if (!adapterUnchanged || !agentUnchanged) {
+        throw new AcpExecutionError(
+          "The local Agent runtime changed; restart Mobius before starting a new conversation",
+          {},
+          "agent_runtime_changed"
+        );
+      }
+      const runtime = new _AcpProcessSession(
+        options.agent,
+        options.cwd,
+        options.additionalDirectories,
+        options.sessionId,
+        getObserver,
+        store
+      );
+      try {
+        await initialize(runtime);
+        return runtime;
+      } catch (error61) {
+        await runtime.closeProcess();
+        options.signal.throwIfAborted();
+        if (error61 instanceof RetryableAcpInitializationError && attempt === 1) {
+          console.warn(
+            `[${options.agent.id}-acp] ACP agent initialization failed; retrying once`
+          );
+          continue;
+        }
+        if (error61 instanceof AcpExecutionError) {
+          throw error61;
+        }
+        throw new AcpExecutionError("ACP agent initialization failed", {
+          cause: error61
+        });
       }
-      throw new AcpExecutionError("ACP agent initialization failed", {
-        cause: error61
-      });
     }
-  };
+    throw new AcpExecutionError("ACP agent initialization failed");
+  }
+  static start = async (options, getObserver, store) => await _AcpProcessSession.#start(
+    options,
+    getObserver,
+    store,
+    async (runtime) => await runtime.initialize(options.signal, options.origin)
+  );
+  static startNativeSessionBrowser = async (options, getObserver, store) => await _AcpProcessSession.#start(
+    options,
+    getObserver,
+    store,
+    async (runtime) => await runtime.#initializeAgent(options.signal)
+  );
   belongsTo = (agentId, cwd, additionalDirectories) => this.#agentId === agentId && this.#cwd === cwd && arraysEqual(this.#additionalDirectories, additionalDirectories);
   canRebind = () => !this.#prompted && !this.#turn.running;
   prepared = () => new AcpPreparedSession(
@@ -21867,7 +22521,7 @@ var AcpProcessSession = class _AcpProcessSession {
       this.#replay = { kind: "idle" };
     }
   };
-  initialize = async (signal, origin) => {
+  async #initializeAgent(signal) {
     const initialized = await this.race(
       this.#connection.agent.request(
         methods2.agent.initialize,
@@ -21878,14 +22532,17 @@ var AcpProcessSession = class _AcpProcessSession {
             session: { configOptions: { boolean: {} } }
           },
           clientInfo: { name: "mobius", version: "0.0.3" },
-          protocolVersion: PROTOCOL_VERSION2
+          protocolVersion: PROTOCOL_VERSION
         },
         { cancellationSignal: signal }
       ),
       "ACP agent exited during initialization",
       signal
-    );
-    if (initialized.protocolVersion !== PROTOCOL_VERSION2) {
+    ).catch((cause) => {
+      signal.throwIfAborted();
+      throw new RetryableAcpInitializationError(cause);
+    });
+    if (initialized.protocolVersion !== PROTOCOL_VERSION) {
       throw new AcpExecutionError(
         "ACP agent selected an unsupported protocol version",
         {},
@@ -21899,6 +22556,9 @@ var AcpProcessSession = class _AcpProcessSession {
       255
     );
     this.#agentVersion = truncate2(initialized.agentInfo?.version ?? "", 128);
+  }
+  initialize = async (signal, origin) => {
+    await this.#initializeAgent(signal);
     const stored = origin?.kind === "import" ? new FoundAcpStoredSession(
       new AcpStoredSession(
         this.#mobiusSessionId,
@@ -22273,7 +22933,6 @@ var AcpProcessSession = class _AcpProcessSession {
           _meta: result._meta ?? null,
           commandId: options.commandId,
           kind: SESSION_USAGE_UPDATED_KIND,
-          protocolVersion: MOBIUS_PROTOCOL_VERSION,
           sessionId: this.#mobiusSessionId,
           source: "prompt",
           usage: result.usage ?? null
@@ -22331,7 +22990,6 @@ var AcpProcessSession = class _AcpProcessSession {
       kind: SESSION_PERMISSION_RESOLVED_KIND,
       optionId: options.outcome === "selected" ? options.optionId : "",
       outcome: options.outcome,
-      protocolVersion: MOBIUS_PROTOCOL_VERSION,
       sessionId: this.#mobiusSessionId
     });
   };
@@ -22376,7 +23034,6 @@ var AcpProcessSession = class _AcpProcessSession {
       action: options.action,
       interactionId: options.interactionId,
       kind: SESSION_ELICITATION_RESOLVED_KIND,
-      protocolVersion: MOBIUS_PROTOCOL_VERSION,
       sessionId: this.#mobiusSessionId
     });
   };
@@ -22410,7 +23067,6 @@ var AcpProcessSession = class _AcpProcessSession {
         interactionId,
         kind: SESSION_PERMISSION_REQUESTED_KIND,
         options,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         sessionId: this.#mobiusSessionId,
         title: truncate2(request.toolCall.title ?? "Permission required", 500),
         toolCallId: truncate2(request.toolCall.toolCallId, 255),
@@ -22464,7 +23120,6 @@ var AcpProcessSession = class _AcpProcessSession {
         kind: SESSION_ELICITATION_REQUESTED_KIND,
         message: truncate2(request.message, 2e3),
         mode: request.mode,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         sessionId: this.#mobiusSessionId,
         url: request.mode === "url" && typeof Reflect.get(request, "url") === "string" ? truncate2(readString3(Reflect.get(request, "url")), 4096) : ""
       });
@@ -22486,7 +23141,6 @@ var AcpProcessSession = class _AcpProcessSession {
       action: "complete",
       interactionId,
       kind: SESSION_ELICITATION_RESOLVED_KIND,
-      protocolVersion: MOBIUS_PROTOCOL_VERSION,
       sessionId: this.#mobiusSessionId
     });
   };
@@ -22523,7 +23177,6 @@ var AcpProcessSession = class _AcpProcessSession {
           contentId: `content-${crypto.randomUUID()}`,
           kind: AGENT_CONTENT_KIND,
           messageId: truncate2(update.messageId ?? "", 255),
-          protocolVersion: MOBIUS_PROTOCOL_VERSION,
           sessionId: this.#mobiusSessionId
         });
       }
@@ -22569,7 +23222,6 @@ var AcpProcessSession = class _AcpProcessSession {
       await this.#getObserver().onCommands({
         commands,
         kind: SESSION_COMMANDS_UPDATED_KIND,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         sessionId: this.#mobiusSessionId
       });
       return;
@@ -22598,7 +23250,6 @@ var AcpProcessSession = class _AcpProcessSession {
       }
       await this.#getObserver().onInfo({
         kind: SESSION_INFO_UPDATED_KIND,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         sessionId: this.#mobiusSessionId,
         title: this.#sessionTitle,
         updatedAt: this.#sessionUpdatedAt
@@ -22611,7 +23262,6 @@ var AcpProcessSession = class _AcpProcessSession {
         costCurrency: truncate2(update.cost?.currency ?? "", 16),
         hasCost: update.cost !== void 0 && update.cost !== null,
         kind: SESSION_USAGE_UPDATED_KIND,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         sessionId: this.#mobiusSessionId,
         size: Math.max(0, Math.trunc(update.size)),
         source: "context",
@@ -22679,7 +23329,6 @@ var AcpProcessSession = class _AcpProcessSession {
     await this.#getObserver().onConfig({
       configOptions: this.#configOptions,
       kind: SESSION_CONFIG_UPDATED_KIND,
-      protocolVersion: MOBIUS_PROTOCOL_VERSION,
       requestId: `agent-update-${crypto.randomUUID()}`,
       sessionId: this.#mobiusSessionId
     });
@@ -22695,7 +23344,6 @@ var AcpProcessSession = class _AcpProcessSession {
       kind: SESSION_PERMISSION_RESOLVED_KIND,
       optionId: "",
       outcome: "cancelled",
-      protocolVersion: MOBIUS_PROTOCOL_VERSION,
       sessionId: this.#mobiusSessionId
     });
   };
@@ -22709,7 +23357,6 @@ var AcpProcessSession = class _AcpProcessSession {
       action: "cancel",
       interactionId,
       kind: SESSION_ELICITATION_RESOLVED_KIND,
-      protocolVersion: MOBIUS_PROTOCOL_VERSION,
       sessionId: this.#mobiusSessionId
     });
   };
@@ -22729,7 +23376,6 @@ var AcpProcessSession = class _AcpProcessSession {
         action: "cancel",
         interactionId,
         kind: SESSION_ELICITATION_RESOLVED_KIND,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         sessionId: this.#mobiusSessionId
       });
     }
@@ -22737,6 +23383,10 @@ var AcpProcessSession = class _AcpProcessSession {
 };
 var AcpSessionManager = class {
   #nativeOperations = /* @__PURE__ */ new Set();
+  #nativeBrowserObserver = new NullAcpSessionObserver();
+  #nativeBrowserPreparing = /* @__PURE__ */ new Map();
+  #nativeBrowserSessions = /* @__PURE__ */ new Map();
+  #nativeBrowserStore = new MemoryAcpSessionStore();
   #activeSessionIds = /* @__PURE__ */ new Set();
   #cancellationRequests = /* @__PURE__ */ new Set();
   #preparing = /* @__PURE__ */ new Map();
@@ -22750,6 +23400,43 @@ var AcpSessionManager = class {
   setObserver = (observer) => {
     this.#observer = observer;
   };
+  async #startNativeBrowserPreparation(options) {
+    const operation = (async () => {
+      try {
+        const runtime = await AcpProcessSession.startNativeSessionBrowser(
+          options,
+          () => this.#nativeBrowserObserver,
+          this.#nativeBrowserStore
+        );
+        this.#nativeBrowserSessions.set(options.sessionId, runtime);
+        return runtime;
+      } finally {
+        this.#nativeBrowserPreparing.delete(options.sessionId);
+      }
+    })();
+    this.#nativeBrowserPreparing.set(options.sessionId, operation);
+    return await operation;
+  }
+  async #replaceNativeBrowserPreparation(existing, options) {
+    const operation = (async () => {
+      try {
+        this.#nativeBrowserSessions.delete(options.sessionId);
+        await existing.close();
+        this.#nativeBrowserStore.remove(options.sessionId);
+        const runtime = await AcpProcessSession.startNativeSessionBrowser(
+          options,
+          () => this.#nativeBrowserObserver,
+          this.#nativeBrowserStore
+        );
+        this.#nativeBrowserSessions.set(options.sessionId, runtime);
+        return runtime;
+      } finally {
+        this.#nativeBrowserPreparing.delete(options.sessionId);
+      }
+    })();
+    this.#nativeBrowserPreparing.set(options.sessionId, operation);
+    return await operation;
+  }
   async #startPreparation(options) {
     const operation = (async () => {
       try {
@@ -22837,6 +23524,44 @@ var AcpSessionManager = class {
     const runtime = await this.#startPreparation(options);
     return runtime.prepared();
   };
+  prepareNativeSessionBrowser = async (options) => {
+    const pending = this.#nativeBrowserPreparing.get(options.sessionId);
+    if (pending !== void 0) {
+      const runtime2 = await pending;
+      if (runtime2.belongsTo(
+        options.agent.id,
+        options.cwd,
+        options.additionalDirectories
+      )) {
+        return runtime2.prepared();
+      }
+      return await this.prepareNativeSessionBrowser(options);
+    }
+    const existing = this.#nativeBrowserSessions.get(options.sessionId);
+    if (existing !== void 0) {
+      if (existing.belongsTo(
+        options.agent.id,
+        options.cwd,
+        options.additionalDirectories
+      )) {
+        return existing.prepared();
+      }
+      if (!existing.canRebind()) {
+        throw new AcpExecutionError(
+          "The agent or workspace cannot change after a conversation has started",
+          {},
+          "session_identity_mismatch"
+        );
+      }
+      const runtime2 = await this.#replaceNativeBrowserPreparation(
+        existing,
+        options
+      );
+      return runtime2.prepared();
+    }
+    const runtime = await this.#startNativeBrowserPreparation(options);
+    return runtime.prepared();
+  };
   configureSession = async (options) => {
     const runtime = await this.ensureSession(options);
     return await runtime.configure(options);
@@ -22925,8 +23650,14 @@ var AcpSessionManager = class {
   };
   close = async () => {
     const sessions = [...this.#sessions.values()];
+    const nativeBrowserSessions = [...this.#nativeBrowserSessions.values()];
     this.#sessions.clear();
-    await Promise.all(sessions.map(async (session) => await session.close()));
+    this.#nativeBrowserSessions.clear();
+    await Promise.all(
+      [...sessions, ...nativeBrowserSessions].map(
+        async (session) => await session.close()
+      )
+    );
   };
   ensureSession = async (options) => {
     const existing = this.#sessions.get(options.sessionId);
@@ -22951,7 +23682,30 @@ var AcpSessionManager = class {
     }
     return started;
   };
-  listNativeSessions = async (options, cursor) => await (await this.ensureSession(options)).listNativeSessions(
+  async #ensureNativeSessionBrowser(options) {
+    const existing = this.#nativeBrowserSessions.get(options.sessionId);
+    if (existing !== void 0) {
+      if (!existing.belongsTo(
+        options.agent.id,
+        options.cwd,
+        options.additionalDirectories
+      )) {
+        throw new AcpExecutionError(
+          "The agent or workspace cannot change after a conversation has started",
+          {},
+          "session_identity_mismatch"
+        );
+      }
+      return existing;
+    }
+    await this.prepareNativeSessionBrowser(options);
+    const started = this.#nativeBrowserSessions.get(options.sessionId);
+    if (started === void 0) {
+      throw new AcpExecutionError("ACP native session browser did not start");
+    }
+    return started;
+  }
+  listNativeSessions = async (options, cursor) => await (await this.#ensureNativeSessionBrowser(options)).listNativeSessions(
     cursor,
     options.signal
   );
@@ -23034,7 +23788,7 @@ var AcpSessionManager = class {
     }
   };
   deleteNativeSession = async (options, nativeSessionId) => {
-    const runtime = await this.ensureSession(options);
+    const runtime = await this.#ensureNativeSessionBrowser(options);
     const key = `${options.agent.id}:${nativeSessionId}`;
     const linked = this.#store.findNative(options.agent.id, nativeSessionId);
     if (this.#nativeOperations.has(key) || linked.some(
@@ -23061,7 +23815,8 @@ var AcpSessionManager = class {
         nativeSessionId
       );
       if (runtime.nativeSessionId() === nativeSessionId) {
-        this.#sessions.delete(options.sessionId);
+        this.#nativeBrowserSessions.delete(options.sessionId);
+        this.#nativeBrowserStore.remove(options.sessionId);
         await runtime.close();
       }
       return deleted;
@@ -23177,7 +23932,7 @@ import { isAbsolute, join as join6 } from "node:path";
 import {
   methods as methods3,
   ndJsonStream as ndJsonStream2,
-  PROTOCOL_VERSION as PROTOCOL_VERSION3
+  PROTOCOL_VERSION as PROTOCOL_VERSION2
 } from "@agentclientprotocol/sdk";
 
 // src/agent-installation/installation-grants.ts
@@ -23206,7 +23961,7 @@ async function readGrantedAgents(stateDirectory) {
     }
     const encoded = await handle.readFile({ encoding: "utf8" });
     const value = JSON.parse(encoded);
-    if (!isRecord4(value) || Object.keys(value).length !== 2 || value["version"] !== 1 || !Array.isArray(value["agents"])) {
+    if (!isRecord4(value) || Object.keys(value).length !== 1 || !Array.isArray(value["agents"])) {
       throw new Error("The local installation grant file is invalid");
     }
     const agents = /* @__PURE__ */ new Set();
@@ -23815,13 +24570,13 @@ async function probeAcp(agent, environment, defaultWorkspace, signal) {
         {
           clientCapabilities: {},
           clientInfo: { name: "mobius", version: "0.0.3" },
-          protocolVersion: PROTOCOL_VERSION3
+          protocolVersion: PROTOCOL_VERSION2
         },
         { cancellationSignal: controller.signal }
       ),
       processExit
     ]);
-    if (initialized.protocolVersion !== PROTOCOL_VERSION3) {
+    if (initialized.protocolVersion !== PROTOCOL_VERSION2) {
       throw new AgentProbeError(
         "acp_incompatible",
         "ACP adapter selected an unsupported protocol version"
@@ -23979,10 +24734,14 @@ var environmentProxyDispatcher = new EnvHttpProxyAgent();
 // src/pairing/pair-local-machine.ts
 var PAIRING_TIMEOUT_MILLISECONDS = 2e4;
 var PAIRING_CODE_PATTERN = /^[A-HJ-NP-Z2-9]{4}(?:-[A-HJ-NP-Z2-9]{4}){4}$/;
-var IDENTIFIER_PATTERN3 = /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/;
+var IDENTIFIER_PATTERN5 = /^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,127}$/;
 var TOKEN_PATTERN = /^[a-zA-Z0-9_-]{32,256}$/;
 var MAX_CONNECTION_FILE_LENGTH = 16 * 1024;
-var CLAIM_RESPONSE_KEYS = ["channelId", "daemonToken"];
+var CLAIM_RESPONSE_KEYS = [
+  "channelId",
+  "daemonToken",
+  "runtimeId"
+];
 var SAVED_CONNECTION_KEYS = [
   "defaultWorkspace",
   "channelId",
@@ -24099,7 +24858,7 @@ function parseChannelArgument(arguments_) {
     );
   }
   const channelId = arguments_[1] ?? "";
-  if (!IDENTIFIER_PATTERN3.test(channelId)) {
+  if (!IDENTIFIER_PATTERN5.test(channelId)) {
     throw new PairingClientError(
       "invalid_channel_id",
       "The saved channel ID is invalid"
@@ -24174,20 +24933,21 @@ function decodeClaimResponse(value) {
   }
   const channelId = value["channelId"];
   const daemonToken = value["daemonToken"];
-  if (typeof channelId !== "string" || !IDENTIFIER_PATTERN3.test(channelId) || typeof daemonToken !== "string" || !TOKEN_PATTERN.test(daemonToken)) {
+  const runtimeId = value["runtimeId"];
+  if (typeof channelId !== "string" || !IDENTIFIER_PATTERN5.test(channelId) || typeof daemonToken !== "string" || !TOKEN_PATTERN.test(daemonToken) || typeof runtimeId !== "string" || !IDENTIFIER_PATTERN5.test(runtimeId)) {
     throw new PairingClientError(
       "invalid_relay_response",
       "The relay returned an invalid pairing response"
     );
   }
-  return { channelId, daemonToken };
+  return { channelId, daemonToken, runtimeId };
 }
 async function claimPairing(options, defaultWorkspace, localAgents, installableAgents, signal) {
   const agents = localAgents.map((agent) => ({
     id: agent.id,
     label: agent.label
   }));
-  const endpoint = new URL("/v1/pairings/claim", options.relayOrigin);
+  const endpoint = new URL("/api/pairings/claim", options.relayOrigin);
   let response;
   try {
     response = await fetch(endpoint, {
@@ -24260,7 +25020,7 @@ function decodeSavedConnection(value, expectedChannelId) {
   const channelId = value["channelId"];
   const daemonToken = value["daemonToken"];
   const relayOrigin = value["relayOrigin"];
-  if (typeof defaultWorkspace !== "string" || typeof channelId !== "string" || channelId !== expectedChannelId || !IDENTIFIER_PATTERN3.test(channelId) || typeof daemonToken !== "string" || !TOKEN_PATTERN.test(daemonToken) || typeof relayOrigin !== "string") {
+  if (typeof defaultWorkspace !== "string" || typeof channelId !== "string" || channelId !== expectedChannelId || !IDENTIFIER_PATTERN5.test(channelId) || typeof daemonToken !== "string" || !TOKEN_PATTERN.test(daemonToken) || typeof relayOrigin !== "string") {
     throw new PairingClientError(
       "invalid_connection",
       "The saved connection is invalid"
@@ -24324,7 +25084,7 @@ function assertInventoryUsable(inventory) {
 function buildPairedDaemon(connection, connectionPath, inventory) {
   assertInventoryUsable(inventory);
   const relayUrl = new URL(
-    `/v1/channels/${encodeURIComponent(connection.channelId)}/daemon`,
+    `/api/channels/${encodeURIComponent(connection.channelId)}/daemon`,
     connection.relayOrigin
   );
   relayUrl.protocol = relayUrl.protocol === "https:" ? "wss:" : "ws:";
@@ -24403,7 +25163,6 @@ async function resumeLocalMachine(arguments_, signal = new AbortController().sig
 }
 
 // src/run-daemon.ts
-import { randomUUID as randomUUID5 } from "node:crypto";
 import { basename as basename3 } from "node:path";
 import { WebSocket as WebSocket2 } from "undici";
 
@@ -26060,12 +26819,12 @@ var NativeSessionService = class {
   execute = async (command, signal) => {
     signal.throwIfAborted();
     const cwd = await this.#directories.resolve(
-      command.bindingId,
+      this.#config.bindingId,
       command.directoryId,
       signal
     );
     const additionalDirectories = await this.#directories.resolveMany(
-      command.bindingId,
+      this.#config.bindingId,
       command.additionalDirectoryIds,
       signal
     );
@@ -26077,22 +26836,21 @@ var NativeSessionService = class {
       sessionId: command.sessionId,
       signal
     };
-    const prepared = await this.#sessions.prepareSession(options);
+    const prepared = await this.#sessions.prepareNativeSessionBrowser(options);
     if (!prepared.capabilities.listSessions)
       throw new AcpExecutionError(
         "This Agent does not support native session listing",
         {},
         "native_session_unsupported"
       );
-    const scope = JSON.stringify([
+    const entryScope = JSON.stringify([
       command.agentId,
       command.bindingId,
-      command.sessionId,
-      cwd
+      command.sessionId
     ]);
+    const cursorScope = JSON.stringify([entryScope, cwd]);
     const envelope2 = {
       kind: "native.session.result",
-      protocolVersion: 1,
       requestId: command.requestId,
       sessionId: command.sessionId
     };
@@ -26100,7 +26858,7 @@ var NativeSessionService = class {
       let cursor = null;
       if (command.cursor !== null) {
         const known = this.#cursors.get(command.cursor);
-        if (known?.scope !== scope)
+        if (known?.scope !== cursorScope)
           throw new AcpExecutionError(
             "Refresh the native session list before continuing",
             {},
@@ -26116,7 +26874,7 @@ var NativeSessionService = class {
         const entryId = randomUUID3();
         if (this.#entries.size >= 5e3) this.#entries.clear();
         this.#entries.set(entryId, {
-          scope,
+          scope: entryScope,
           nativeSessionId: info.sessionId,
           cwd: authorized.cwd,
           additionalDirectories: authorized.additionalDirectories
@@ -26140,7 +26898,10 @@ var NativeSessionService = class {
           );
         nextCursor = randomUUID3();
         if (this.#cursors.size >= 500) this.#cursors.clear();
-        this.#cursors.set(nextCursor, { scope, cursor: page.nextCursor });
+        this.#cursors.set(nextCursor, {
+          scope: cursorScope,
+          cursor: page.nextCursor
+        });
       }
       this.record(command, "native_sessions_listed");
       return {
@@ -26152,12 +26913,18 @@ var NativeSessionService = class {
       };
     }
     const selected = this.#entries.get(command.entryId);
-    if (selected?.scope !== scope)
+    if (selected?.scope !== entryScope)
       throw new AcpExecutionError(
         "Select a session from a fresh native session list",
         {},
         "native_session_not_found"
       );
+    if (selected.cwd !== cwd)
+      throw new AcpExecutionError(
+        "The selected session belongs to a different workspace. Refresh the list before continuing.",
+        {},
+        "native_session_target_changed"
+      );
     const target = await this.resolveTarget(command, options, selected);
     if (command.action === "delete") {
       if (!prepared.capabilities.deleteSession)
@@ -26238,6 +27005,7 @@ var NativeSessionService = class {
         action: "preview",
         entryId: command.entryId,
         reason: "continuation_unavailable",
+        targetSessionId: command.targetSessionId,
         title: target.info.title ?? "Untitled session",
         history: opened.history
       };
@@ -26253,7 +27021,6 @@ var NativeSessionService = class {
       directoryId: target.directoryId,
       directoryLabel: target.directoryLabel,
       kind: "session.ready",
-      protocolVersion: 1,
       requestId: command.requestId,
       restored: true,
       sessionId: opened.sessionId
@@ -26266,6 +27033,7 @@ var NativeSessionService = class {
       ...envelope2,
       action: command.action,
       ready,
+      targetSessionId: command.targetSessionId,
       title: target.info.title ?? "Untitled session",
       history: opened.history
     };
@@ -26550,13 +27318,171 @@ var RelayConnectionLiveness = class {
     this.#transport.send(
       encodeRuntimeHeartbeatEvent({
         heartbeatId,
-        kind: RUNTIME_HEARTBEAT_KIND,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION
+        kind: RUNTIME_HEARTBEAT_KIND
       })
     );
   };
 };
 
+// src/relay-connection/session-event-outbox.ts
+import { mkdirSync as mkdirSync3 } from "node:fs";
+import { dirname as dirname5 } from "node:path";
+import { DatabaseSync as DatabaseSync3 } from "node:sqlite";
+function readPendingEnvelope(row) {
+  if (typeof row !== "object" || row === null || Array.isArray(row)) {
+    throw new Error("SQLite returned an invalid session event outbox row");
+  }
+  const envelope2 = Reflect.get(row, "envelope_json");
+  if (typeof envelope2 !== "string") {
+    throw new Error("SQLite returned an invalid session event envelope");
+  }
+  return envelope2;
+}
+var SessionEventOutbox = class {
+  #database;
+  constructor(path2) {
+    mkdirSync3(dirname5(path2), { recursive: true });
+    this.#database = new DatabaseSync3(path2);
+    this.#database.exec(`
+      CREATE TABLE IF NOT EXISTS relay_session_event_outbox (
+        ordinal INTEGER PRIMARY KEY AUTOINCREMENT,
+        event_id TEXT NOT NULL UNIQUE,
+        session_id TEXT NOT NULL,
+        envelope_json TEXT NOT NULL
+      ) STRICT;
+      CREATE INDEX IF NOT EXISTS relay_session_event_outbox_order
+        ON relay_session_event_outbox(ordinal);
+      CREATE TABLE IF NOT EXISTS relay_session_event_sources (
+        source_key TEXT PRIMARY KEY,
+        next_source_seq INTEGER NOT NULL
+      ) STRICT;
+      CREATE TABLE IF NOT EXISTS relay_turn_receipts (
+        command_id TEXT PRIMARY KEY,
+        session_id TEXT NOT NULL,
+        command_json TEXT NOT NULL,
+        attempt_id TEXT NOT NULL,
+        state TEXT NOT NULL CHECK (
+          state IN ('dispatching', 'running', 'succeeded', 'failed', 'cancelled')
+        )
+      ) STRICT;
+    `);
+  }
+  claimExecution = (commandId, sessionId, commandJson) => {
+    this.#database.exec("BEGIN IMMEDIATE");
+    try {
+      const existing = this.#database.prepare(
+        `SELECT session_id, command_json, attempt_id, state
+           FROM relay_turn_receipts WHERE command_id = ?`
+      ).get(commandId);
+      if (typeof existing === "object" && existing !== null) {
+        const storedSessionId = Reflect.get(existing, "session_id");
+        const storedCommand = Reflect.get(existing, "command_json");
+        const attemptId2 = Reflect.get(existing, "attempt_id");
+        const state = Reflect.get(existing, "state");
+        if (storedSessionId !== sessionId || storedCommand !== commandJson || typeof attemptId2 !== "string" || !isDaemonExecutionState(state)) {
+          throw new Error(
+            "The daemon command identity conflicts with its durable receipt"
+          );
+        }
+        this.#database.exec("COMMIT");
+        return { attemptId: attemptId2, commandId, kind: "duplicate", state };
+      }
+      const attemptId = crypto.randomUUID();
+      this.#database.prepare(
+        `INSERT INTO relay_turn_receipts (
+             command_id, session_id, command_json, attempt_id, state
+           ) VALUES (?, ?, ?, ?, 'dispatching')`
+      ).run(commandId, sessionId, commandJson, attemptId);
+      this.#database.exec("COMMIT");
+      return {
+        attemptId,
+        commandId,
+        kind: "accepted",
+        state: "dispatching"
+      };
+    } catch (error61) {
+      this.#database.exec("ROLLBACK");
+      throw error61;
+    }
+  };
+  transitionExecution = (commandId, state) => {
+    const row = this.#database.prepare(`SELECT state FROM relay_turn_receipts WHERE command_id = ?`).get(commandId);
+    const current = typeof row === "object" && row !== null ? Reflect.get(row, "state") : void 0;
+    if (!isDaemonExecutionState(current)) {
+      throw new Error("The daemon execution receipt does not exist");
+    }
+    if (current === state) {
+      return;
+    }
+    const allowed = current === "dispatching" && (state === "running" || state === "failed" || state === "cancelled") || current === "running" && (state === "succeeded" || state === "failed" || state === "cancelled");
+    if (!allowed) {
+      throw new Error("The daemon execution transition is invalid");
+    }
+    this.#database.prepare(`UPDATE relay_turn_receipts SET state = ? WHERE command_id = ?`).run(state, commandId);
+  };
+  acknowledge = (acknowledgement) => {
+    this.#database.prepare(
+      `DELETE FROM relay_session_event_outbox
+         WHERE event_id = ? AND session_id = ?`
+    ).run(acknowledgement.eventId, acknowledgement.sessionId);
+  };
+  close = () => {
+    this.#database.close();
+  };
+  enqueue = (sessionId, payload, attemptId = null) => {
+    const sourceKey = attemptId === null ? `runtime:${sessionId}` : `attempt:${sessionId}:${attemptId}`;
+    this.#database.exec("BEGIN IMMEDIATE");
+    try {
+      const row = this.#database.prepare(
+        `SELECT next_source_seq FROM relay_session_event_sources
+           WHERE source_key = ?`
+      ).get(sourceKey);
+      const storedSourceSeq = typeof row === "object" && row !== null ? Reflect.get(row, "next_source_seq") : void 0;
+      const nextSourceSeq = typeof storedSourceSeq === "number" ? storedSourceSeq : 1;
+      if (!Number.isSafeInteger(nextSourceSeq) || nextSourceSeq < 1) {
+        throw new Error("SQLite returned an invalid event source sequence");
+      }
+      const envelope2 = {
+        eventId: crypto.randomUUID(),
+        kind: SESSION_EVENT_KIND,
+        payload,
+        sessionId,
+        source: attemptId === null ? { kind: "runtime", sourceSeq: nextSourceSeq.toString() } : {
+          attemptId,
+          kind: "attempt",
+          sourceSeq: nextSourceSeq.toString()
+        }
+      };
+      const encoded = encodeSessionEventEnvelope(envelope2);
+      this.#database.prepare(
+        `INSERT INTO relay_session_event_sources (
+             source_key, next_source_seq
+           ) VALUES (?, ?)
+           ON CONFLICT(source_key) DO UPDATE SET
+             next_source_seq = excluded.next_source_seq`
+      ).run(sourceKey, nextSourceSeq + 1);
+      this.#database.prepare(
+        `INSERT INTO relay_session_event_outbox (
+             event_id, session_id, envelope_json
+           ) VALUES (?, ?, ?)`
+      ).run(envelope2.eventId, envelope2.sessionId, encoded);
+      this.#database.exec("COMMIT");
+      return encoded;
+    } catch (error61) {
+      this.#database.exec("ROLLBACK");
+      throw error61;
+    }
+  };
+  pending = () => this.#database.prepare(
+    `SELECT envelope_json
+         FROM relay_session_event_outbox
+         ORDER BY ordinal`
+  ).all().map(readPendingEnvelope);
+};
+function isDaemonExecutionState(value) {
+  return value === "cancelled" || value === "dispatching" || value === "failed" || value === "running" || value === "succeeded";
+}
+
 // src/relay-connection/timer.ts
 var SystemDaemonTimer = class {
   schedule = (callback, milliseconds) => {
@@ -26621,44 +27547,47 @@ var RelayConnectionRefresh = class {
   };
 };
 var DaemonAcpObserver = class {
-  #socket;
-  constructor(socket) {
-    this.#socket = socket;
+  #record;
+  constructor(record2) {
+    this.#record = record2;
   }
   onCommands = (event) => {
-    send(this.#socket, encodeSessionCommandsUpdatedEvent(event));
+    this.#record(event.sessionId, encodeSessionCommandsUpdatedEvent(event));
     return Promise.resolve();
   };
   onConfig = (event) => {
-    send(this.#socket, encodeSessionConfigUpdatedEvent(event));
+    this.#record(event.sessionId, encodeSessionConfigUpdatedEvent(event));
     return Promise.resolve();
   };
   onContent = (event) => {
-    send(this.#socket, encodeAgentContentEvent(event));
+    this.#record(event.sessionId, encodeAgentContentEvent(event));
     return Promise.resolve();
   };
   onElicitation = (event) => {
-    send(this.#socket, encodeSessionElicitationRequestedEvent(event));
+    this.#record(
+      event.sessionId,
+      encodeSessionElicitationRequestedEvent(event)
+    );
     return Promise.resolve();
   };
   onElicitationResolved = (event) => {
-    send(this.#socket, encodeSessionElicitationResolvedEvent(event));
+    this.#record(event.sessionId, encodeSessionElicitationResolvedEvent(event));
     return Promise.resolve();
   };
   onInfo = (event) => {
-    send(this.#socket, encodeSessionInfoUpdatedEvent(event));
+    this.#record(event.sessionId, encodeSessionInfoUpdatedEvent(event));
     return Promise.resolve();
   };
   onPermission = (event) => {
-    send(this.#socket, encodeSessionPermissionRequestedEvent(event));
+    this.#record(event.sessionId, encodeSessionPermissionRequestedEvent(event));
     return Promise.resolve();
   };
   onPermissionResolved = (event) => {
-    send(this.#socket, encodeSessionPermissionResolvedEvent(event));
+    this.#record(event.sessionId, encodeSessionPermissionResolvedEvent(event));
     return Promise.resolve();
   };
   onUsage = (event) => {
-    send(this.#socket, encodeSessionUsageUpdatedEvent(event));
+    this.#record(event.sessionId, encodeSessionUsageUpdatedEvent(event));
     return Promise.resolve();
   };
 };
@@ -26710,7 +27639,6 @@ var DaemonInstallationObserver = class {
         encodeAgentInstallAwaitingApprovalEvent({
           agentId: state.agentId,
           kind: AGENT_INSTALL_AWAITING_APPROVAL_KIND,
-          protocolVersion: MOBIUS_PROTOCOL_VERSION,
           requestId: state.requestId
         })
       );
@@ -26724,7 +27652,6 @@ var DaemonInstallationObserver = class {
           encodeAgentInstallStartedEvent({
             agentId: state.agentId,
             kind: AGENT_INSTALL_STARTED_KIND,
-            protocolVersion: MOBIUS_PROTOCOL_VERSION,
             requestId: state.requestId
           })
         );
@@ -26734,7 +27661,6 @@ var DaemonInstallationObserver = class {
         encodeAgentInstallProgressEvent({
           agentId: state.agentId,
           kind: AGENT_INSTALL_PROGRESS_KIND,
-          protocolVersion: MOBIUS_PROTOCOL_VERSION,
           requestId: state.requestId,
           stage: state.stage
         })
@@ -26748,7 +27674,6 @@ var DaemonInstallationObserver = class {
           agentId: state.agentId,
           authenticationMayBeRequired: state.authenticationMayBeRequired,
           kind: AGENT_INSTALL_COMPLETED_KIND,
-          protocolVersion: MOBIUS_PROTOCOL_VERSION,
           requestId: state.requestId
         })
       );
@@ -26762,7 +27687,6 @@ var DaemonInstallationObserver = class {
           code: state.code,
           kind: AGENT_INSTALL_FAILED_KIND,
           message: state.message,
-          protocolVersion: MOBIUS_PROTOCOL_VERSION,
           requestId: state.requestId
         })
       );
@@ -26774,7 +27698,6 @@ var DaemonInstallationObserver = class {
         encodeAgentInstallCancelledEvent({
           agentId: state.agentId,
           kind: AGENT_INSTALL_CANCELLED_KIND,
-          protocolVersion: MOBIUS_PROTOCOL_VERSION,
           requestId: state.requestId
         })
       );
@@ -26822,20 +27745,25 @@ function send(socket, message) {
   }
   socket.send(message);
 }
-function reportFailure(socket, command, code, message) {
-  if (socket.readyState !== WebSocket2.OPEN) {
-    return;
+function recordSessionEvent(outbox, socket, sessionId, payload, attemptId = null) {
+  const envelope2 = outbox.enqueue(sessionId, payload, attemptId);
+  if (socket.readyState === WebSocket2.OPEN) {
+    socket.send(envelope2);
   }
-  send(
+}
+function reportFailure(outbox, socket, command, code, message, attemptId = null) {
+  recordSessionEvent(
+    outbox,
     socket,
+    command.sessionId,
     encodeSessionFailedEvent({
       code,
       commandId: command.commandId,
       kind: SESSION_FAILED_KIND,
       message,
-      protocolVersion: MOBIUS_PROTOCOL_VERSION,
       sessionId: command.sessionId
-    })
+    }),
+    attemptId
   );
 }
 function operationErrorCode(error61) {
@@ -26860,7 +27788,6 @@ function reportOperationFailure(socket, requestId, sessionId, error61) {
       code: operationErrorCode(error61),
       kind: "session.operation.failed",
       message: operationErrorMessage(error61),
-      protocolVersion: MOBIUS_PROTOCOL_VERSION,
       requestId,
       sessionId
     })
@@ -26916,7 +27843,6 @@ async function executeWorkspaceList(socket, command, directories, audit, signal)
         entries: listing.entries,
         kind: "workspace.entries",
         parentDirectoryId: listing.parentDirectoryId,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         requestId: command.requestId
       })
     );
@@ -26924,11 +27850,11 @@ async function executeWorkspaceList(socket, command, directories, audit, signal)
     reportOperationFailure(socket, command.requestId, "", error61);
   }
 }
-async function executeSessionPrepare(socket, command, config2, directories, audit, sessions, signal) {
+async function executeSessionPrepare(outbox, socket, command, config2, directories, audit, sessions, signal) {
   try {
     const resolved = await resolveSessionDirectories(
       directories,
-      command.bindingId,
+      config2.bindingId,
       command.directoryId,
       command.additionalDirectoryIds,
       signal
@@ -26942,7 +27868,7 @@ async function executeSessionPrepare(socket, command, config2, directories, audi
       signal
     });
     const listing = await directories.list(
-      command.bindingId,
+      config2.bindingId,
       command.directoryId,
       signal
     );
@@ -26951,8 +27877,10 @@ async function executeSessionPrepare(socket, command, config2, directories, audi
       event: "session_prepared",
       sessionId: command.sessionId
     });
-    send(
+    recordSessionEvent(
+      outbox,
       socket,
+      command.sessionId,
       encodeSessionReadyEvent({
         additionalDirectories: resolved.additionalDirectoryEntries,
         agentId: command.agentId,
@@ -26964,21 +27892,29 @@ async function executeSessionPrepare(socket, command, config2, directories, audi
         directoryId: command.directoryId,
         directoryLabel: listing.directoryLabel,
         kind: "session.ready",
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         requestId: command.requestId,
         restored: prepared.restored,
         sessionId: command.sessionId
       })
     );
   } catch (error61) {
+    audit.record({
+      commandId: command.requestId,
+      details: {
+        agentId: command.agentId,
+        code: operationErrorCode(error61)
+      },
+      event: "session_prepare_failed",
+      sessionId: command.sessionId
+    });
     reportOperationFailure(socket, command.requestId, command.sessionId, error61);
   }
 }
-async function executeSessionConfigure(socket, command, config2, directories, audit, sessions, signal) {
+async function executeSessionConfigure(outbox, socket, command, config2, directories, audit, sessions, signal) {
   try {
     const resolved = await resolveSessionDirectories(
       directories,
-      command.bindingId,
+      config2.bindingId,
       command.directoryId,
       command.additionalDirectoryIds,
       signal
@@ -27000,12 +27936,13 @@ async function executeSessionConfigure(socket, command, config2, directories, au
       event: "session_configured",
       sessionId: command.sessionId
     });
-    send(
+    recordSessionEvent(
+      outbox,
       socket,
+      command.sessionId,
       encodeSessionConfigUpdatedEvent({
         configOptions,
         kind: "session.config.updated",
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         requestId: command.requestId,
         sessionId: command.sessionId
       })
@@ -27014,31 +27951,33 @@ async function executeSessionConfigure(socket, command, config2, directories, au
     reportOperationFailure(socket, command.requestId, command.sessionId, error61);
   }
 }
-async function executePrompt(socket, command, config2, directories, audit, sessions, signal) {
+async function executePrompt(outbox, socket, command, config2, directories, audit, sessions, attemptId, signal) {
   try {
     const resolved = await resolveSessionDirectories(
       directories,
-      command.bindingId,
+      config2.bindingId,
       command.directoryId,
       command.additionalDirectoryIds,
       signal
     );
     const agent = config2.catalog.find(command.agentId);
-    const processAttemptId = randomUUID5();
     audit.record({
       commandId: command.commandId,
       event: "session_authorized",
       sessionId: command.sessionId
     });
-    send(
+    outbox.transitionExecution(command.commandId, "running");
+    recordSessionEvent(
+      outbox,
       socket,
+      command.sessionId,
       encodeSessionStartedEvent({
         commandId: command.commandId,
         kind: SESSION_STARTED_KIND,
-        processAttemptId,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
+        attemptId,
         sessionId: command.sessionId
-      })
+      }),
+      attemptId
     );
     const result = await sessions.runPrompt({
       additionalDirectories: resolved.additionalDirectories,
@@ -27047,38 +27986,43 @@ async function executePrompt(socket, command, config2, directories, audit, sessi
       cwd: resolved.cwd,
       images: command.images,
       onActivity: (activity) => {
-        send(
+        recordSessionEvent(
+          outbox,
           socket,
+          command.sessionId,
           encodeAgentActivityEvent({
             activityId: activity.activityId,
             activityType: activity.activityType,
             commandId: command.commandId,
             content: activity.content,
+            detail: activity.detail,
             input: activity.input,
             kind: AGENT_ACTIVITY_KIND,
             locations: activity.locations,
             name: activity.name,
             output: activity.output,
-            protocolVersion: MOBIUS_PROTOCOL_VERSION,
             sequence: activity.sequence,
             sessionId: command.sessionId,
             status: activity.status,
             title: activity.title,
             toolKind: activity.toolKind
-          })
+          }),
+          attemptId
         );
         return Promise.resolve();
       },
       onText: (text) => {
-        send(
+        recordSessionEvent(
+          outbox,
           socket,
+          command.sessionId,
           encodeAgentMessageDeltaEvent({
             commandId: command.commandId,
             kind: AGENT_MESSAGE_DELTA_KIND,
-            protocolVersion: MOBIUS_PROTOCOL_VERSION,
             sessionId: command.sessionId,
             text
-          })
+          }),
+          attemptId
         );
         return Promise.resolve();
       },
@@ -27087,15 +28031,21 @@ async function executePrompt(socket, command, config2, directories, audit, sessi
       sessionId: command.sessionId,
       signal
     });
-    send(
+    recordSessionEvent(
+      outbox,
       socket,
+      command.sessionId,
       encodeSessionCompletedEvent({
         commandId: command.commandId,
         kind: SESSION_COMPLETED_KIND,
-        protocolVersion: MOBIUS_PROTOCOL_VERSION,
         sessionId: command.sessionId,
         stopReason: result.stopReason
-      })
+      }),
+      attemptId
+    );
+    outbox.transitionExecution(
+      command.commandId,
+      result.stopReason === "cancelled" ? "cancelled" : "succeeded"
     );
     audit.record({
       commandId: command.commandId,
@@ -27110,11 +28060,14 @@ async function executePrompt(socket, command, config2, directories, audit, sessi
     });
     const code = operationErrorCode(error61);
     reportFailure(
+      outbox,
       socket,
       command,
       code === "session_operation_failed" ? "agent_execution_failed" : code,
-      code === "session_operation_failed" ? "The local agent could not complete the request" : operationErrorMessage(error61)
+      code === "session_operation_failed" ? "The local agent could not complete the request" : operationErrorMessage(error61),
+      attemptId
     );
+    outbox.transitionExecution(command.commandId, "failed");
     console.error("Mobius daemon command failed", error61);
   }
 }
@@ -27132,15 +28085,28 @@ function waitForRelayRetry(signal, timer) {
     signal.addEventListener("abort", finish, { once: true });
   });
 }
-async function runRelayConnection(config2, directories, audit, sessions, installations, installationObserver, nativeSessions, signal, timer) {
+async function runRelayConnection(config2, directories, audit, sessions, installations, installationObserver, nativeSessions, outbox, signal, timer) {
   const relayUrl = new URL(config2.relayUrl);
   relayUrl.searchParams.set("liveness", "1");
   const socket = await connectRelay(relayUrl, signal);
   const activeTurns = /* @__PURE__ */ new Map();
+  const activeAttemptIds = /* @__PURE__ */ new Map();
   const connectionController = new AbortController();
   const nativeRequests = /* @__PURE__ */ new Map();
-  sessions.setObserver(new DaemonAcpObserver(socket));
+  const record2 = (sessionId, payload) => {
+    recordSessionEvent(
+      outbox,
+      socket,
+      sessionId,
+      payload,
+      activeAttemptIds.get(sessionId) ?? null
+    );
+  };
+  sessions.setObserver(new DaemonAcpObserver(record2));
   installationObserver.connect(socket);
+  for (const pending of outbox.pending()) {
+    send(socket, pending);
+  }
   try {
     await new Promise((resolve5, reject) => {
       let finished = false;
@@ -27214,6 +28180,10 @@ async function runRelayConnection(config2, directories, audit, sessions, install
         }
         try {
           const kind = decodeMessageKind(encoded);
+          if (kind === SESSION_EVENT_ACK_KIND) {
+            outbox.acknowledge(decodeSessionEventAcknowledgement(encoded));
+            return;
+          }
           if (kind === NATIVE_SESSION_CANCEL_KIND) {
             const command2 = decodeNativeSessionCancel(encoded);
             const pending = nativeRequests.get(command2.requestId);
@@ -27371,6 +28341,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
           if (kind === SESSION_PREPARE_KIND) {
             const command2 = decodeSessionPrepareCommand(encoded);
             void executeSessionPrepare(
+              outbox,
               socket,
               command2,
               config2,
@@ -27384,6 +28355,7 @@ async function runRelayConnection(config2, directories, audit, sessions, install
           if (kind === SESSION_CONFIGURE_KIND) {
             const command2 = decodeSessionConfigureCommand(encoded);
             void executeSessionConfigure(
+              outbox,
               socket,
               command2,
               config2,
@@ -27449,28 +28421,36 @@ async function runRelayConnection(config2, directories, audit, sessions, install
           }
           const command = decodeSessionPromptCommand(encoded);
           if (activeTurns.has(command.commandId)) {
-            reportFailure(
-              socket,
-              command,
-              "duplicate_command",
-              "The command is already running"
-            );
+            return;
+          }
+          const receipt = outbox.claimExecution(
+            command.commandId,
+            command.sessionId,
+            encoded
+          );
+          if (receipt.kind === "duplicate") {
             return;
           }
           const turn = new ActiveDaemonTurn(command, new AbortController());
           activeTurns.set(command.commandId, turn);
+          activeAttemptIds.set(command.sessionId, receipt.attemptId);
           void executePrompt(
+            outbox,
             socket,
             command,
             config2,
             directories,
             audit,
             sessions,
+            receipt.attemptId,
             turn.signal
           ).catch((error61) => {
             console.error("Mobius daemon turn failed", error61);
           }).finally(() => {
             activeTurns.delete(command.commandId);
+            if (activeAttemptIds.get(command.sessionId) === receipt.attemptId) {
+              activeAttemptIds.delete(command.sessionId);
+            }
             connectionRefresh.afterTurnFinished();
           });
         } catch (error61) {
@@ -27519,6 +28499,7 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer) {
     specifications
   ).prepare(signal);
   const sessionStore = new SqliteAcpSessionStore(config2.auditDatabasePath);
+  const outbox = new SessionEventOutbox(config2.auditDatabasePath);
   const sessions = new AcpSessionManager(
     new NullAcpSessionObserver(),
     sessionStore
@@ -27554,6 +28535,7 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer) {
           installations,
           installationObserver,
           nativeSessions,
+          outbox,
           signal,
           timer
         );
@@ -27576,7 +28558,11 @@ async function runDaemon(config2, audit, signal, timer = systemDaemonTimer) {
       try {
         await sessions.close();
       } finally {
-        sessionStore.close();
+        try {
+          sessionStore.close();
+        } finally {
+          outbox.close();
+        }
       }
     }
   }