A chat message may carry inline images: the messages route checks the budget (5 MiB decoded per image, eight a message) and the dispatch copies the bytes into the attachment store, so the replay streams ids and media types over SSE, never megabytes. The turn's input carries the inline image blocks the providers take, base64 verbatim — the session checkpoint holds what the model saw.