refactor(app): introduce attachment storage layer and draft lifecycle management

Replace inline data-URL image handling with a persistent attachment storage service, add draft lifecycle states (active/abandoned/sent) with generation tracking, and update fetchAgent to return project placement alongside agent snapshots.

packages/server/src/shared/messages.create-agent-client-message-id.test.ts

@@ -0,0 +1,23 @@
+import { describe, expect, it } from "vitest";
+import { SessionInboundMessageSchema } from "./messages";
+
+describe("create_agent_request clientMessageId", () => {
+  it("accepts clientMessageId for stable initial prompt transfer", () => {
+    const parsed = SessionInboundMessageSchema.parse({
+      type: "create_agent_request",
+      requestId: "req-1",
+      clientMessageId: "client-msg-1",
+      config: {
+        provider: "claude",
+        cwd: "/tmp/project",
+      },
+      initialPrompt: "hello",
+    });
+
+    expect(parsed.type).toBe("create_agent_request");
+    if (parsed.type !== "create_agent_request") {
+      throw new Error("Expected create_agent_request");
+    }
+    expect(parsed.clientMessageId).toBe("client-msg-1");
+  });
+});

packages/server/src/shared/messages.ts

@@ -491,7 +491,7 @@ export const FetchAgentsRequestMessageSchema = z.object({
     .optional(),
   page: z
     .object({
-      limit: z.number().int().positive().max(1000),
+      limit: z.number().int().positive().max(200),
       cursor: z.string().min(1).optional(),
     })
     .optional(),
@@ -578,6 +578,7 @@ export const CreateAgentRequestMessageSchema = z.object({
   config: AgentSessionConfigSchema,
   worktreeName: z.string().optional(),
   initialPrompt: z.string().optional(),
+  clientMessageId: z.string().optional(),
   outputSchema: z.record(z.unknown()).optional(),
   images: z
     .array(
@@ -1469,6 +1470,7 @@ export const FetchAgentResponseMessageSchema = z.object({
   payload: z.object({
     requestId: z.string(),
     agent: AgentSnapshotPayloadSchema.nullable(),
+    project: ProjectPlacementPayloadSchema.nullable().optional(),
     error: z.string().nullable(),
   }),
 })