farming-code 2.2.28 → 2.2.29

package/README.md

@@ -55,17 +55,17 @@ Start or resume Codex, Claude Code, OpenCode, Qoder, and other detected coding C
 
 Browse, search, and lightly edit Project Files without leaving the current task. Inspect Git Changes, History, Diff, and Blame, then open a commit or working-copy change in Review.
 
-![Farming Code project files and blame](./docs/products/code/assets/04-files-editor-blame.png)
-
 ### Browser Resources
 
-Each Project can own multiple named Browser Resources. Farming starts a compatible Chromium-based system browser with an isolated profile, streams that exact headless page into the workspace, and sends both human input and Agent actions to the same CDP session. Farming does not download Chromium or depend on Playwright. Agents can discover and operate these resources with `farming browser`; npm installations also expose the `farming-browser` alias.
+Each Project can own multiple named Browser Resources. In **Plugins → Browser**, users choose a discovered Chromium-based system browser or an external loopback CDP endpoint. Farming prepares a pinned `agent-browser` runtime during installation or update, verifies the cache again before startup, and sends both human input and Agent actions to the same session. Farming does not download Chromium or depend on Playwright. Agents discover the live capability with `farming capabilities`, then use the progressively disclosed `farming browser` CLI for navigation, interaction, inspection, debugging, page state, frames/dialogs, and Project-scoped file transfer; npm installations also expose the `farming-browser` alias. See [Farming Browser for Agents](docs/products/code/browser-agent-cli.md).
+
+Farming can also connect to an externally managed Chromium CDP endpoint, including one exposed by Docker; see [external CDP browser setup](./docs/products/code/external-cdp-browser.md).
 
 This first Browser Viewer targets web pages and simple Agent interaction. It is not a replacement for the browser's full window chrome, DevTools, downloads UI, extensions, or Computer Use.
 
 ## Supported Agents
 
-Farming discovers installed CLIs on the host. Codex, Claude Code, OpenCode, and Qoder support both structured Chat and a native Terminal; other detected coding agents use the Terminal path.
+Farming prepares the pinned Codex and Claude executables needed by its structured runtimes during installation or update and verifies them again before startup, while continuing to discover other installed CLIs on the host. Codex, Claude Code, OpenCode, and Qoder support both structured Chat and a native Terminal; other detected coding agents use the Terminal path.
 
 | Agent | Structured Chat | Terminal | History / resume |
 | --- | --- | --- | --- |
@@ -73,10 +73,6 @@ Farming discovers installed CLIs on the host. Codex, Claude Code, OpenCode, and
 | Claude Code | Yes | Yes | Yes |
 | OpenCode | Yes | Yes | Yes |
 | Qoder | Yes | Yes | Yes |
-| Qwen Code | — | Yes | CLI-dependent |
-| Aider | — | Yes | CLI-dependent |
-| GitHub Copilot CLI | — | Yes | CLI-dependent |
-| Amazon Q | — | Yes | CLI-dependent |
 | bash / zsh | — | Yes | No |
 
 Farming hosts CLIs that already work on the same machine. It does not replace provider installation, login, or account configuration.
@@ -94,20 +90,16 @@ Development machine
   ├── coding Agent processes
   ├── real terminals
   ├── repositories and project files
-  └── optional system-browser processes
+  └── optional agent-browser sessions
 ```
 
 The browser can disconnect and reconnect without stopping an Agent. A normal Farming server restart can also reconnect supported live terminal sessions. The desktop layout keeps projects, conversations, files, and review together; the mobile layout focuses one conversation, terminal, or file at a time.
 
-<p align="center">
-  <img src="./docs/products/code/assets/05-mobile-agent-chat.png" alt="Farming Code reconnecting to a running Agent from a phone" width="390">
-</p>
-
 ## Farming CRT
 
 Farming CRT is an optional keyboard-first, retro control-room interface for scanning many Agents, opening their Chat or Terminal sessions, searching history, and viewing usage telemetry.
 
-![Farming CRT multi-Agent control room](./docs/products/crt/assets/01-crt-dashboard.png)
+![Farming CRT multi-agent dashboard](./docs/products/crt/assets/01-crt-dashboard.png)
 
 Code and CRT use the same backend Agents and sessions. Switching interfaces does not create a second Agent. Farming Code remains the default interface and the supported phone interface. See the [Farming CRT guide](./docs/products/crt/README.md) for controls and workflows.
 
@@ -117,25 +109,11 @@ Farming Net is a separate, token-protected directory for Farming deployments. It
 
 ## Installation And Updates
 
-The installed `farming` CLI defaults to port `6694`, base path `/farming`, config directory `~/.farming`, and token authentication. Useful daemon commands are:
+Install with the Quick Start command above. For npm installations, **Settings → Updates** prepares a selected release while the current Server keeps running, then applies it after confirmation. The existing startup token is retained.
 
-```bash
-farming status
-farming url
-farming logs
-farming stop
-```
-
-The startup token is stored in `~/.farming/.session-token` and reused across restarts and upgrades. **Settings → Updates** uses a two-step flow for npm installations: **Prepare** installs the selected version into a separate staging directory while the current server keeps running, then **Restart to update** switches the package directory and restarts Farming only after the user clicks it. If the new server does not start, Farming restores the previous package directory. npm preparation first uses the machine's configured registry and retries the registry shown in Settings only when that registry lacks the selected version. Before preparing or applying an update, Farming verifies that npm targets the same package root that launched the server. GitHub Releases also provide standalone CLI and directory bundles; see [GitHub Releases](https://github.com/zhuwenzhuang/farming/releases) for current artifacts.
-
-To run from source with the same port and base path:
-
-```bash
-npm install
-PORT=6694 FARMING_BASE_PATH=/farming npm start
-```
+![Farming npm update settings](./docs/products/code/assets/14-code-settings.png)
 
-For trusted local development only, `npm run start:no-auth` disables token authentication.
+Standalone CLI and directory bundles remain available from [GitHub Releases](https://github.com/zhuwenzhuang/farming/releases).
 
 ## Security
 

package/README.zh_cn.md

@@ -55,17 +55,17 @@ Farming Code 是默认的桌面与手机界面。它按项目组织工作，把
 
 浏览、搜索并轻量编辑 Project Files，不需要离开当前任务。检查 Git Changes、History、Diff 和 Blame，再把 Commit 或 Working Copy 修改打开到 Review。
 
-![Farming Code 项目文件与 Blame](./docs/products/code/assets/04-files-editor-blame.png)
-
 ### Browser Resource
 
-每个 Project 可以拥有多个可命名的 Browser Resource。Farming 使用兼容的 Chromium 系系统浏览器和独立 Profile 启动浏览器，把这个 Headless 页面流式展示在工作区中，并把人的输入和 Agent 操作发送给同一个 CDP Session。Farming 不下载 Chromium，也不依赖 Playwright。Agent 可以通过 `farming browser` 发现并操作这些 Resource；npm 安装还会提供 `farming-browser` 别名。
+每个 Project 可以拥有多个可命名的 Browser Resource。用户在**插件 → 浏览器**中选择已发现的 Chromium 系统浏览器，或填写外部回环 CDP Endpoint。Farming 在安装或更新阶段准备锁定版本的 `agent-browser` Runtime，并在启动前再次校验 Cache，然后把人的输入和 Agent 操作发送给同一个 Session。Farming 不下载 Chromium，也不依赖 Playwright。Agent 先用 `farming capabilities` 发现实时能力，再通过渐进式披露的 `farming browser` CLI 使用导航、交互、检查、调试、页面状态、Frame/Dialog 与 Project 级文件传输；npm 安装还会提供 `farming-browser` 别名。详见 [Farming Browser Agent CLI](docs/products/code/browser-agent-cli.zh_cn.md)。
+
+Farming 也可以连接由管理员独立管理的 Chromium CDP Endpoint，包括 Docker 中暴露的 Chromium；配置方式见[外部 CDP 浏览器指南](./docs/products/code/external-cdp-browser.zh_cn.md)。
 
 第一版 Browser Viewer 面向网页展示与简单 Agent 操作，不替代浏览器完整窗口、DevTools、下载界面、浏览器扩展或 Computer Use。
 
 ## 支持的 Agent
 
-Farming 会发现开发机上已经安装的 CLI。Codex、Claude Code、OpenCode 和 Qoder 同时支持结构化 Chat 与原生 Terminal；其他检测到的 Coding Agent 使用 Terminal 路径。
+Farming 在安装或更新阶段准备结构化 Runtime 所需的锁定版本 Codex 与 Claude Executable，并在启动前再次校验，同时继续发现开发机上安装的其他 CLI。Codex、Claude Code、OpenCode 和 Qoder 同时支持结构化 Chat 与原生 Terminal；其他检测到的 Coding Agent 使用 Terminal 路径。
 
 | Agent | 结构化 Chat | Terminal | History / Resume |
 | --- | --- | --- | --- |
@@ -73,10 +73,6 @@ Farming 会发现开发机上已经安装的 CLI。Codex、Claude Code、OpenCod
 | Claude Code | 是 | 是 | 是 |
 | OpenCode | 是 | 是 | 是 |
 | Qoder | 是 | 是 | 是 |
-| Qwen Code | — | 是 | 取决于 CLI |
-| Aider | — | 是 | 取决于 CLI |
-| GitHub Copilot CLI | — | 是 | 取决于 CLI |
-| Amazon Q | — | 是 | 取决于 CLI |
 | bash / zsh | — | 是 | 否 |
 
 Farming 承载的是已经能在同一台机器正常工作的 CLI，不替代 Provider 的安装、登录和账户配置。
@@ -99,15 +95,11 @@ Farming 承载的是已经能在同一台机器正常工作的 CLI，不替代 P
 
 浏览器断开或重新连接不会停止 Agent。Farming Server 正常重启后也可以重新连接受支持的实时 Terminal Session。桌面布局把项目、对话、文件和 Review 放在一起；手机布局一次聚焦一段对话、一个 Terminal 或一个文件。
 
-<p align="center">
-  <img src="./docs/products/code/assets/05-mobile-agent-chat.png" alt="使用手机重新连接仍在运行的 Farming Code Agent" width="390">
-</p>
-
 ## Farming CRT
 
 Farming CRT 是可选的键盘优先复古控制室，用来扫视多个 Agent、打开它们的 Chat 或 Terminal、搜索 History，以及查看用量遥测。
 
-![Farming CRT 多 Agent 控制室](./docs/products/crt/assets/01-crt-dashboard.png)
+![Farming CRT 多 Agent 仪表盘](./docs/products/crt/assets/01-crt-dashboard.png)
 
 Code 与 CRT 使用相同的后端 Agent 和 Session，切换界面不会创建第二个 Agent。Farming Code 仍是默认界面，也是受支持的手机界面。控制方式和完整流程见 [Farming CRT 指南](./docs/products/crt/README.zh_cn.md)。
 
@@ -117,25 +109,11 @@ Farming Net 是独立、带 Token 鉴权的 Farming 部署目录。它提供一
 
 ## 安装与更新
 
-安装后的 `farming` CLI 默认端口是 `6694`，Base Path 是 `/farming`，配置目录是 `~/.farming`，Token 鉴权默认开启。常用 Daemon 命令：
+按上面的快速开始命令安装即可。对于 npm 安装，**Settings → Updates** 会在当前 Server 继续运行时准备所选版本，确认后再应用更新；原有启动 Token 保持不变。
 
-```bash
-farming status
-farming url
-farming logs
-farming stop
-```
-
-启动 Token 存放在 `~/.farming/.session-token`，重启和升级会继续复用。**Settings → Updates** 为 npm 安装提供两阶段更新：点击**准备**后，所选版本会安装到独立 staging 目录，当前服务继续运行；准备完成后，只有用户点击**重启并应用**，Farming 才会切换包目录并重启。如果新服务启动失败，Farming 会恢复旧包目录。npm 准备阶段会先使用机器配置的 registry；只有该 registry 缺少所选版本时，才会回退到 Settings 展示版本所用的 registry。准备和应用更新前，Farming 都会校验 npm 目标包根目录与启动当前服务的包根目录一致。GitHub Releases 也提供独立 CLI 和目录 Bundle；当前产物见 [GitHub Releases](https://github.com/zhuwenzhuang/farming/releases)。
-
-从源码运行，并使用相同的端口与 Base Path：
-
-```bash
-npm install
-PORT=6694 FARMING_BASE_PATH=/farming npm start
-```
+![Farming npm 更新设置](./docs/products/code/assets/14-code-settings.png)
 
-只有在可信本地开发环境中，才可以用 `npm run start:no-auth` 关闭 Token 鉴权。
+独立 CLI 和目录 Bundle 仍可从 [GitHub Releases](https://github.com/zhuwenzhuang/farming/releases) 下载。
 
 ## 安全
 

package/THIRD_PARTY_NOTICES.md

@@ -15,8 +15,6 @@ preserved in bundled `node_modules` when bundled dependencies are enabled.
 | Package | Version | License | Purpose |
 | --- | --- | --- | --- |
 | `@agentclientprotocol/sdk` | 1.2.1 | Apache-2.0 | ACP JSON-RPC client and protocol types |
-| `@agentclientprotocol/codex-acp` | 1.1.4 | Apache-2.0 | Codex ACP adapter |
-| `@agentclientprotocol/claude-agent-acp` | 0.59.0 | Apache-2.0 | Claude Code ACP adapter |
 | `@modelcontextprotocol/sdk` | 1.29.0 | MIT | Browser Extension MCP server and stdio transport |
 | `@xterm/addon-clipboard` | 0.2.0 | MIT | Browser terminal clipboard integration |
 | `@xterm/addon-fit` | 0.11.0 | MIT | Browser terminal sizing |
@@ -47,12 +45,32 @@ preserved in bundled `node_modules` when bundled dependencies are enabled.
 | `remark-gfm` | 4.0.1 | MIT | GitHub Flavored Markdown support |
 | `remark-math` | 6.0.0 | MIT | Markdown math syntax support |
 | `ripgrep` | 0.3.1 | MIT | Node wrapper for file search support |
+| `tar` | 7.5.19 | BlueOak-1.0.0 | Safe extraction of version-locked startup dependency archives |
 | `ws` | 8.21.0 | MIT | WebSocket server/client support |
 | `yaml` | 2.9.0 | ISC | YAML parsing |
 | `zod` | 3.25.76 | MIT | MCP tool input schema validation |
 
 ## Vendored Assets
 
+Farming builds version- and SHA-256-locked ACP runtime files from these exact
+development dependencies and ships their license texts beside the runtime
+files under `dist/acp/`:
+
+| Package | Version | License | Purpose |
+| --- | --- | --- | --- |
+| `@agentclientprotocol/codex-acp` | 1.1.4 | Apache-2.0 | Reviewed and patched Codex ACP adapter |
+| `@openai/codex` | 0.144.6 | Apache-2.0 | Codex executable discovery and launch bridge; platform CLI binaries are excluded |
+| `@agentclientprotocol/claude-agent-acp` | 0.59.0 | Apache-2.0 | Claude Code ACP adapter |
+| `@anthropic-ai/claude-agent-sdk` | 0.3.207 | Anthropic commercial terms | Claude Agent SDK bridge; platform CLI binaries are excluded |
+
+Before starting a fresh Server, Farming may prepare the exact Codex CLI
+0.144.6, Claude Agent SDK CLI package 0.3.207, and `agent-browser` 0.32.3
+platform artifacts in its private runtime cache. They are not part of the npm
+or application package and remain independent works under their own terms.
+Farming accepts only the version-locked sources and integrity values declared
+by its release manifest. The `agent-browser` license text is included at
+`backend/data/LICENSE.agent-browser`.
+
 Farming vendors `ghostty-web` distribution files under
 `frontend/vendor/ghostty-web` for the optional Ghostty debug renderer. The
 source package is `ghostty-web` 0.4.0, licensed under MIT. Its license is kept
@@ -114,10 +132,11 @@ their code.
 
 Farming can launch or observe coding-agent CLIs installed by the user, including
 OpenCode and the terminal forms of OpenAI Codex CLI and Anthropic Claude Code.
-The optional structured ACP runtime includes the pinned Codex and Claude ACP
-adapter dependency trees, including the provider SDK/runtime packages required
-by those adapters. Those packages remain separate projects governed by their
-own terms and licenses; package-level license files remain in `node_modules`.
+The structured ACP runtime includes reviewed Codex and Claude adapter code, but
+Farming does not bundle a platform Codex or Claude Code CLI inside its package.
+The adapters use the exact system or verified startup-cache executable prepared
+by the Farming launcher. Those tools remain separate projects governed by their
+own terms and licenses.
 
 Farming is not affiliated with, sponsored by, or endorsed by OpenAI, Anthropic,
 Microsoft, or the maintainers of the third-party projects listed above.

package/backend/acp/packaged-claude-acp.js

@@ -0,0 +1,13 @@
+const PACKAGED_CLAUDE_ACP_ARG = '--farming-claude-acp';
+
+async function runPackagedClaudeAcp() {
+  if (!process.pkg) {
+    throw new Error('The packaged Claude ACP entry is available only in a standalone Farming CLI');
+  }
+  throw new Error('The standalone Farming CLI omitted its embedded Claude ACP runtime');
+}
+
+module.exports = {
+  PACKAGED_CLAUDE_ACP_ARG,
+  runPackagedClaudeAcp,
+};

package/backend/acp/packaged-codex-acp.js

@@ -1,10 +1,10 @@
 const PACKAGED_CODEX_ACP_ARG = '--farming-codex-acp';
 
-function runPackagedCodexAcp() {
+async function runPackagedCodexAcp() {
   if (!process.pkg) {
     throw new Error('The packaged Codex ACP entry is available only in a standalone Farming CLI');
   }
-  require('../../dist/acp/codex-acp-1.1.4.js');
+  throw new Error('The standalone Farming CLI omitted its embedded Codex ACP runtime');
 }
 
 module.exports = {

package/backend/acp-runtime.js

@@ -12,6 +12,7 @@ const { AcpSessionState } = require('./acp-session-state');
 const { readCodexHistoryImageData } = require('./codex-transcript');
 const { AcpClientFileSystem, AcpClientTerminalManager } = require('./acp/client-services');
 const { PACKAGED_CODEX_ACP_ARG } = require('./acp/packaged-codex-acp');
+const { PACKAGED_CLAUDE_ACP_ARG } = require('./acp/packaged-claude-acp');
 const { permissionSecurityWarnings } = require('./acp/permission-security');
 const { patchBlock, rejectPatch } = require('./acp/patch-decisions');
 const { getProviderAdapter, listProviderAdapters } = require('./provider-adapters');
@@ -36,12 +37,22 @@ const CODEX_STEER_METHOD = '_codex/session/steer';
 const CODEX_ACP_PACKAGE = '@agentclientprotocol/codex-acp';
 const CODEX_ACP_VERSION = '1.1.4';
 const CODEX_ACP_SHA256 = 'e36876cc2250737c719644e6c69ab054a3f8b58071fad45c44407013082942ff';
+const CLAUDE_ACP_PACKAGE = '@agentclientprotocol/claude-agent-acp';
+const CLAUDE_ACP_VERSION = '0.59.0';
+const CLAUDE_ACP_SHA256 = 'a6aa515dd02382617bf46d9eac47b8a1022c6835bcf7a8d61e2c63939be2e49c';
 const CODEX_ACP_VENDOR_ENTRY = path.join(
   __dirname,
   '..',
   'dist',
   'acp',
-  `codex-acp-${CODEX_ACP_VERSION}.js`,
+  `codex-acp-${CODEX_ACP_VERSION}.mjs`,
+);
+const CLAUDE_ACP_VENDOR_ENTRY = path.join(
+  __dirname,
+  '..',
+  'dist',
+  'acp',
+  `claude-agent-acp-${CLAUDE_ACP_VERSION}.mjs`,
 );
 const execFileAsync = promisify(execFile);
 
@@ -70,6 +81,15 @@ function adapterEntry(packageName) {
   if (packageName === CODEX_ACP_PACKAGE && fs.existsSync(CODEX_ACP_VENDOR_ENTRY)) {
     return verifiedCodexAcpEntry(CODEX_ACP_VENDOR_ENTRY);
   }
+  if (packageName === CLAUDE_ACP_PACKAGE && fs.existsSync(CLAUDE_ACP_VENDOR_ENTRY)) {
+    const actualSha256 = fileSha256(CLAUDE_ACP_VENDOR_ENTRY);
+    if (actualSha256 !== CLAUDE_ACP_SHA256) {
+      throw new Error(
+        `Claude ACP runtime failed integrity verification: expected ${CLAUDE_ACP_SHA256}, found ${actualSha256}`,
+      );
+    }
+    return CLAUDE_ACP_VENDOR_ENTRY;
+  }
   let sdkDirectory;
   try {
     sdkDirectory = path.dirname(runtimeRequire.resolve('@agentclientprotocol/sdk'));
@@ -109,7 +129,11 @@ function resolveAcpLaunch(provider, options = {}) {
     const launch = nodeAdapterLaunch(
       adapterEntry(adapter.acp.packageName),
       options.runtimeEnv || process.env,
-      adapter.acp.packageName === CODEX_ACP_PACKAGE ? PACKAGED_CODEX_ACP_ARG : '',
+      adapter.acp.packageName === CODEX_ACP_PACKAGE
+        ? PACKAGED_CODEX_ACP_ARG
+        : adapter.acp.packageName === CLAUDE_ACP_PACKAGE
+          ? PACKAGED_CLAUDE_ACP_ARG
+          : '',
     );
     return { ...launch, version: adapter.acp.version };
   }
@@ -2508,6 +2532,17 @@ class AcpRuntime extends EventEmitter {
     return visible;
   }
 
+  getTranscriptEntry(agentId, entryId) {
+    const binding = this.requireBinding(agentId);
+    const entries = (binding.sessionState?.entries || []).filter(candidate => (
+      String(candidate?.id || '') === String(entryId || '')
+    ));
+    if (entries.length !== 1) return null;
+    const [entry] = entries;
+    if (!entry || binding.sessionState.isInternalEntry(entry)) return null;
+    return entry;
+  }
+
   getPatchDecision(agentId, toolCallId, requestedPath) {
     const binding = this.requireBinding(agentId);
     return binding.patchDecisions.get(`${String(toolCallId || '')}\n${String(requestedPath || '')}`) || '';

package/backend/acp-transcript.js

@@ -1,12 +1,31 @@
+const crypto = require('crypto');
 const { createTwoFilesPatch, diffLines } = require('diff');
 
 const MAX_RENDERED_DIFF_CHARS = 64 * 1024;
 const MAX_INLINE_TOOL_DETAIL_CHARS = 4 * 1024;
+const MAX_TRANSCRIPT_INLINE_TOOL_DETAIL_CHARS = 64 * 1024;
+const MAX_TRANSCRIPT_MEDIA_BYTES = 25 * 1024 * 1024;
+const MAX_TRANSCRIPT_MEDIA_BASE64_CHARS = Math.ceil(MAX_TRANSCRIPT_MEDIA_BYTES / 3) * 4;
 const MAX_EMBEDDED_RESOURCE_TEXT_CHARS = 4 * 1024;
 const MAX_COLLABORATION_AGENTS = 16;
 const MAX_COLLABORATION_ID_CHARS = 160;
 const MAX_COLLABORATION_PATH_CHARS = 512;
 const MAX_COLLABORATION_MESSAGE_CHARS = 160;
+const TRANSCRIPT_MEDIA_MIME_TYPES = new Set([
+  'audio/aac',
+  'audio/flac',
+  'audio/mp4',
+  'audio/mpeg',
+  'audio/ogg',
+  'audio/wav',
+  'audio/wave',
+  'audio/webm',
+  'audio/x-wav',
+  'image/gif',
+  'image/jpeg',
+  'image/png',
+  'image/webp',
+]);
 
 function diffBlocks(content) {
   return (Array.isArray(content) ? content : [])
@@ -184,7 +203,92 @@ function transcriptResource(resourceValue) {
   };
 }
 
-function transcriptMediaBlocks(entry) {
+function transcriptMediaValue(block) {
+  if (!block || typeof block !== 'object') return null;
+  if (['image', 'audio'].includes(block.type)) return block;
+  if (
+    block.type === 'content'
+    && block.content
+    && typeof block.content === 'object'
+    && ['image', 'audio'].includes(block.content.type)
+  ) {
+    return block.content;
+  }
+  return null;
+}
+
+function validatedTranscriptMedia(block) {
+  const type = String(block?.type || '');
+  const data = typeof block?.data === 'string' ? block.data : '';
+  const mimeType = String(block?.mimeType || '').trim().toLowerCase();
+  if (
+    !['image', 'audio'].includes(type)
+    || !data
+    || data.length > MAX_TRANSCRIPT_MEDIA_BASE64_CHARS
+    || data.length % 4 !== 0
+    || !TRANSCRIPT_MEDIA_MIME_TYPES.has(mimeType)
+    || !/^[a-z0-9+/]*={0,2}$/i.test(data)
+  ) return null;
+  const paddingChars = data.endsWith('==') ? 2 : (data.endsWith('=') ? 1 : 0);
+  const decodedBytes = (data.length / 4) * 3 - paddingChars;
+  if (decodedBytes <= 0 || decodedBytes > MAX_TRANSCRIPT_MEDIA_BYTES) return null;
+  return { data, decodedBytes, mimeType, type };
+}
+
+function transcriptMediaId(block) {
+  const media = validatedTranscriptMedia(block);
+  if (!media) return '';
+  return crypto.createHash('sha256')
+    .update(media.type)
+    .update('\0')
+    .update(media.mimeType)
+    .update('\0')
+    .update(media.data)
+    .digest('hex');
+}
+
+function decodeAcpTranscriptMedia(block) {
+  const media = validatedTranscriptMedia(block);
+  if (!media) return null;
+  const content = Buffer.from(media.data, 'base64');
+  if (content.length !== media.decodedBytes) return null;
+  return {
+    content,
+    mimeType: media.mimeType,
+  };
+}
+
+function compactTranscriptMedia(block, entry, options = {}) {
+  const mediaPathPrefix = String(options.mediaPathPrefix || '').replace(/\/+$/, '');
+  if (!mediaPathPrefix) return JSON.parse(JSON.stringify(block));
+  const hasInlineData = typeof block?.data === 'string' && block.data.length > 0;
+  if (!hasInlineData) return JSON.parse(JSON.stringify(block));
+  const mediaId = transcriptMediaId(block);
+  const projected = { ...block };
+  delete projected.data;
+  if (!mediaId) return projected;
+  projected.url = `${mediaPathPrefix}/${encodeURIComponent(String(entry?.id || ''))}/${mediaId}`;
+  return projected;
+}
+
+function acpTranscriptMedia(entry, requestedMediaId) {
+  const mediaId = String(requestedMediaId || '').trim().toLowerCase();
+  if (!/^[a-f0-9]{64}$/.test(mediaId)) return null;
+  const direct = Array.isArray(entry?.content) ? entry.content : [];
+  const output = entry?.rawOutput && typeof entry.rawOutput === 'object' ? entry.rawOutput : {};
+  const result = output?.result && typeof output.result === 'object' ? output.result : {};
+  const raw = Array.isArray(result.content)
+    ? result.content
+    : (Array.isArray(output.content) ? output.content : []);
+  for (const block of [...direct, ...raw]) {
+    const media = transcriptMediaValue(block);
+    if (!media) continue;
+    if (transcriptMediaId(media) === mediaId) return media;
+  }
+  return null;
+}
+
+function transcriptMediaBlocks(entry, options = {}) {
   const direct = Array.isArray(entry?.content) ? entry.content : [];
   const output = entry?.rawOutput && typeof entry.rawOutput === 'object' ? entry.rawOutput : {};
   const result = output?.result && typeof output.result === 'object' ? output.result : {};
@@ -194,7 +298,10 @@ function transcriptMediaBlocks(entry) {
   const blocks = [...direct, ...raw].flatMap(block => {
     if (!block || typeof block !== 'object') return [];
     if (block.type === 'terminal') return [{ type: 'terminal', terminalId: String(block.terminalId || '') }];
-    if (['image', 'audio', 'resource_link'].includes(block.type)) return [JSON.parse(JSON.stringify(block))];
+    if (['image', 'audio'].includes(block.type)) {
+      return [compactTranscriptMedia(block, entry, options)];
+    }
+    if (block.type === 'resource_link') return [JSON.parse(JSON.stringify(block))];
     if (block.type === 'resource') {
       return [{
         type: 'resource',
@@ -203,7 +310,11 @@ function transcriptMediaBlocks(entry) {
     }
     if (block.type !== 'content' || !block.content || typeof block.content !== 'object') return [];
     const content = block.content;
-    if (['image', 'audio', 'resource_link'].includes(content.type)) {
+    if (['image', 'audio'].includes(content.type)) {
+      const projected = compactTranscriptMedia(content, entry, options);
+      return [{ type: 'content', content: projected }];
+    }
+    if (content.type === 'resource_link') {
       return [{ type: 'content', content: JSON.parse(JSON.stringify(content)) }];
     }
     if (content.type === 'resource') {
@@ -226,6 +337,20 @@ function transcriptMediaBlocks(entry) {
   });
 }
 
+function transcriptEntryWithCompactMedia(entry, options = {}) {
+  const mediaPathPrefix = String(options.mediaPathPrefix || '').trim();
+  if (!mediaPathPrefix || !Array.isArray(entry?.content)) return entry;
+  const content = entry.content.map(block => {
+    const media = transcriptMediaValue(block);
+    if (!media) return block;
+    const projected = compactTranscriptMedia(media, entry, options);
+    return block?.type === 'content'
+      ? { ...block, content: projected }
+      : projected;
+  });
+  return { ...entry, content };
+}
+
 function generatedMediaTool(entry) {
   const title = String(entry?.title || '').trim().toLowerCase();
   const id = String(entry?.id || '').trim().toLowerCase();
@@ -296,9 +421,13 @@ function transcriptCodexToolMeta(entry) {
   return Object.keys(compact).length > 0 ? compact : null;
 }
 
-function acpTranscriptToolEntry(entry) {
+function acpTranscriptToolEntry(entry, options = {}) {
   if (!entry || entry.type !== 'tool') return entry;
   const detail = detailForTool(entry);
+  const requestedInlineDetailChars = Number(options.maxInlineDetailChars);
+  const inlineDetailChars = Number.isFinite(requestedInlineDetailChars)
+    ? Math.max(0, Math.min(MAX_INLINE_TOOL_DETAIL_CHARS, Math.floor(requestedInlineDetailChars)))
+    : MAX_INLINE_TOOL_DETAIL_CHARS;
   const changes = patchChanges(entry.content).map(change => ({
     path: change.path,
     kind: change.kind,
@@ -313,7 +442,11 @@ function acpTranscriptToolEntry(entry) {
     .join('\n');
   const meta = {};
   if (entry?._meta?.subagent_session_info) {
-    meta.subagent_session_info = JSON.parse(JSON.stringify(entry._meta.subagent_session_info));
+    const sessionId = boundedCollaborationString(
+      entry._meta.subagent_session_info.session_id,
+      MAX_COLLABORATION_ID_CHARS
+    );
+    if (sessionId) meta.subagent_session_info = { session_id: sessionId };
   }
   if (entry?._meta?.farming_patch_decisions) {
     meta.farming_patch_decisions = JSON.parse(JSON.stringify(entry._meta.farming_patch_decisions));
@@ -326,12 +459,12 @@ function acpTranscriptToolEntry(entry) {
     title: String(entry.title || ''),
     kind: String(entry.kind || 'other'),
     status: String(entry.status || ''),
-    content: transcriptMediaBlocks(entry),
+    content: transcriptMediaBlocks(entry, options),
     ...(Object.keys(meta).length > 0 ? { _meta: meta } : {}),
-    transcriptDetail: detail.length <= MAX_INLINE_TOOL_DETAIL_CHARS
+    transcriptDetail: detail.length <= inlineDetailChars
       ? detail
-      : `${detail.slice(0, MAX_INLINE_TOOL_DETAIL_CHARS)}\n\n[Open to load full detail]`,
-    transcriptDetailTruncated: detail.length > MAX_INLINE_TOOL_DETAIL_CHARS,
+      : `${detail.slice(0, inlineDetailChars)}${inlineDetailChars > 0 ? '\n\n' : ''}[Open to load full detail]`,
+    transcriptDetailTruncated: detail.length > inlineDetailChars,
     transcriptPatchSummary: patchSummary,
     transcriptChanges: changes,
     generatedMedia: generatedMediaTool(entry),
@@ -339,9 +472,41 @@ function acpTranscriptToolEntry(entry) {
   };
 }
 
+function acpTranscriptEntries(entries, options = {}) {
+  const requestedBudget = Number(options.maxInlineToolDetailChars);
+  let remainingInlineDetailChars = Number.isFinite(requestedBudget)
+    ? Math.max(0, Math.floor(requestedBudget))
+    : MAX_TRANSCRIPT_INLINE_TOOL_DETAIL_CHARS;
+  const source = Array.isArray(entries) ? entries : [];
+  const projected = new Array(source.length);
+
+  // The transcript page owns only a bounded summary. Exact tool and subagent
+  // detail remains backend-owned and is loaded on explicit expansion.
+  for (let index = source.length - 1; index >= 0; index -= 1) {
+    const entry = source[index];
+    if (entry?.type !== 'tool') {
+      projected[index] = transcriptEntryWithCompactMedia(entry, options);
+      continue;
+    }
+    const projectedEntry = acpTranscriptToolEntry(entry, {
+      maxInlineDetailChars: remainingInlineDetailChars,
+      mediaPathPrefix: options.mediaPathPrefix,
+    });
+    remainingInlineDetailChars = Math.max(
+      0,
+      remainingInlineDetailChars - String(projectedEntry.transcriptDetail || '').length
+    );
+    projected[index] = projectedEntry;
+  }
+  return projected;
+}
+
 module.exports = {
+  acpTranscriptEntries,
+  acpTranscriptMedia,
   acpToolChanges: entry => patchChanges(entry?.content, { includeDiff: true }),
   acpToolDetail: detailForTool,
   acpToolReviewChanges: entry => patchReviewChanges(entry?.content),
   acpTranscriptToolEntry,
+  decodeAcpTranscriptMedia,
 };

package/backend/agent-manager.js

@@ -50,7 +50,13 @@ const {
   stopPersistedAcpProcessGroup,
 } = require('./acp-runtime');
 const { chatRuntimeForProvider, isChatMode } = require('./chat-runtime');
-const { acpToolChanges, acpToolDetail, acpToolReviewChanges, acpTranscriptToolEntry } = require('./acp-transcript');
+const {
+  acpTranscriptEntries,
+  acpTranscriptMedia,
+  acpToolChanges,
+  acpToolDetail,
+  acpToolReviewChanges,
+} = require('./acp-transcript');
 const {
   applyCodexTerminalProfile,
   codexTerminalProfileFromOutput,
@@ -5085,10 +5091,21 @@ class AgentManager extends EventEmitter {
     const transcript = this.acpRuntime.getTranscriptSession(agentId, options);
     return {
       ...transcript,
-      entries: transcript.entries.map(entry => entry?.type === 'tool' ? acpTranscriptToolEntry(entry) : entry),
+      entries: acpTranscriptEntries(transcript.entries, {
+        mediaPathPrefix: options.mediaPathPrefix,
+      }),
     };
   }
 
+  getAcpTranscriptMedia(agentId, entryId, mediaId) {
+    this.requireLiveAcpAgent(agentId);
+    const entry = this.acpRuntime.getTranscriptEntry(agentId, entryId);
+    if (!entry) throw new Error('ACP transcript entry not found');
+    const media = acpTranscriptMedia(entry, mediaId);
+    if (!media) throw new Error('ACP transcript media not found');
+    return media;
+  }
+
   getAcpToolDetail(agentId, toolCallId) {
     this.requireLiveAcpAgent(agentId);
     const entry = this.acpRuntime.getToolEntry(agentId, toolCallId);
@@ -5661,6 +5678,14 @@ class AgentManager extends EventEmitter {
     if (admission) {
       transitionLifecycleOperation(staged, admission.operation.id, 'succeeded');
     }
+    if (!admission && !structuralUpdateChanged && !readUpdateChanged) {
+      return {
+        agentId,
+        ...updates,
+        changed: false,
+        requiresState: false,
+      };
+    }
     try {
       this.ensurePersistentAgentSession(staged);
     } catch (error) {