Expand description
Safe, bounded workspace resources for prompt attachments.
This mirrors the retired client’s resource contract without coupling file discovery to the terminal renderer: callers get either UTF-8 text or bounded binary data, and every path is resolved beneath the workspace root.