_Kerman 9da174c304 fix(web): display local media paths referenced in session prose ...

Assistant prose that references a workspace-contained local media path
(e.g. `![](/Users/.../x.png)`) now renders through a same-origin
`GET|HEAD /api/file?path=` route instead of inert alt text.

- ui-primitives: MarkdownText gains a settled-only MarkdownPathImages
  vocabulary gate (same posture as file mentions); no vocabulary means
  byte-identical output.
- ui-chat: AssistantMarkdown supplies a page-stable rewrite vocabulary
  for absolute POSIX paths (local-path-media.ts).
- session-controller: SessionMediaReferences plugin contribution mounts
  the route on the authenticated connection.fetch channel; per-request
  policy = workspace-root containment after realpath, regular file,
  allowlisted media extension (images additionally signature-checked),
  range/HEAD streaming, private no-store + nosniff, fail-closed statuses.
- Agent Note added (feature/2026-09-07-session-prose-local-media-display).

Closes #3662.

2026-09-07 15:34:19 +08:00

..

agent.host.spec.ts

Merge branch 'master' into fix/test-tmp-teardown-self-clean

2026-09-04 11:15:31 +08:00

assistant-stream.client.spec.ts

Merge commit 'be5db297c7' into worktree/session-format-05-v1-v2-chunk-migration

2026-09-03 22:09:31 +08:00

assistant-stream.host.spec.ts

Merge commit 'be5db297c7' into worktree/session-format-05-v1-v2-chunk-migration

2026-09-03 22:09:31 +08:00

client-apply.client.spec.ts

test(client): cover background upload seams

2026-09-03 14:43:07 +08:00

client-contract.client.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-04 10:12:19 +08:00

commands-create-fork.host.spec.ts

refactor(api): converge the Remote failure vocabulary and client surface

2026-08-28 22:37:36 +08:00

commands-queue-attachment.host.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-04 10:12:19 +08:00

commands-upload-file.host.spec.ts

refactor(attachment): unify prompt content admission

2026-09-03 20:53:29 +08:00

control-jobs.host.spec.ts

Merge master into session format migration

2026-09-02 13:34:40 +08:00

control-queue.host.spec.ts

refactor(api): require the session projection registry

2026-08-28 12:50:51 +08:00

controller.host.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-04 10:12:19 +08:00

event-script.client.ts

feat(session)!: embed assistant streams in format v2

2026-09-02 04:00:01 +08:00

fake-api.client.ts

fix(session): keep independent version fields off the format generation

2026-09-03 22:36:51 +08:00

file-references.host.spec.ts

test(api): refresh Remote migration artifacts

2026-08-27 21:57:56 +08:00

history-records.client.spec.ts

feat(session)!: embed assistant streams in format v2

2026-09-02 04:00:01 +08:00

lineage.client.spec.ts

refactor(session): move Client ownership into Session Controller

2026-08-23 16:28:16 +08:00

manager.client.spec.ts

feat(agent): emit live assistant stream frames

2026-09-02 03:36:13 +08:00

media-references.host.spec.ts

fix(web): display local media paths referenced in session prose

2026-09-07 15:34:19 +08:00

notifier.client.spec.ts

refactor(session): move Client ownership into Session Controller

2026-08-23 16:28:16 +08:00

projection-store.client.spec.ts

refactor(session)!: distinguish event seqs from log offsets

2026-09-01 20:36:00 +08:00

queue-store.client.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-02 10:29:53 +08:00

scope.client.spec.ts

refactor(session): move Client ownership into Session Controller

2026-08-23 16:28:16 +08:00

session-cold.host.spec.ts

test(session-controller): restore Session type import

2026-09-04 10:14:15 +08:00

session-fork.host.spec.ts

fix(system-prompt): keep model persona prefix and place cwd in suffix

2026-09-06 20:35:42 +08:00

session-history-journal.host.spec.ts

Merge commit 'be5db297c7' into worktree/session-format-05-v1-v2-chunk-migration

2026-09-03 22:09:31 +08:00

session-list-blank.host.spec.ts

refactor(api-session): remove interaction transport

2026-08-23 16:16:03 +08:00

session-models.host.spec.ts

fix(system-prompt): keep model persona prefix and place cwd in suffix

2026-09-06 20:35:42 +08:00

session-open-workspace-path.host.spec.ts

refactor(api): converge the Remote failure vocabulary and client surface

2026-08-28 22:37:36 +08:00

session-pending-submissions.client.spec.ts

refactor(client): extract background file upload service

2026-09-03 13:53:25 +08:00

session-presets.host.spec.ts

test: remove dsh-* temp dirs created by unit tests at teardown

2026-09-03 16:19:18 +08:00

session-projections.host.spec.ts

fix(session): keep independent version fields off the format generation

2026-09-03 22:36:51 +08:00

session-rename.host.spec.ts

Merge remote-tracking branch 'origin/master' into dshw/pr-deepseek-harness-deepseek-harness-2907

2026-08-31 10:56:53 +08:00

session-search.host.spec.ts

fix(session): keep cold listing body-free

2026-09-02 21:29:43 +08:00

session-skills.host.spec.ts

feat(session)!: add released format migration

2026-09-01 22:12:21 +08:00

session.client.spec.ts

Merge remote-tracking branch 'origin/master' into worktree/2984-generic-file-upload

2026-09-04 10:12:19 +08:00

sessions-service.client.spec.ts

fix(session): keep independent version fields off the format generation

2026-09-03 22:36:51 +08:00

test-remote.ts

perf(session): transfer frozen persistence reads into restore

2026-09-06 02:10:23 +08:00

time-zone.client.spec.ts

refactor(session): move Client ownership into Session Controller

2026-08-23 16:28:16 +08:00

transport.client.spec.ts

fix(session): keep independent version fields off the format generation

2026-09-03 22:36:51 +08:00

transport.host.spec.ts

Merge master into session format migration

2026-09-02 13:34:40 +08:00