Agents often write reports to a temp directory and link them in chat. Those
chips had no way to show the file: the files panel only accepted
workspace-relative paths and the server rejected reads outside the root.

The server now reads absolute host paths (writes stay workspace-only) and
the media-file asset resource also serves HTML and PDF. Web and mobile open
such chips in the file viewer read-only; PDFs use the integrated browser
where it exists.

Co-Authored-By: Claude Code <noreply@anthropic.com>