@turns/dev 0.0.2 → 0.0.3

package/dist/agent-anchor.js

@@ -682,8 +682,13 @@ class AcpTransport extends LineTransport {
             await this.request('session/set_mode', { sessionId: this.sessionId, modeId: this.profile.mode }, 30_000);
         }
         const model = this.anchor.model && this.anchor.model !== 'auto' ? this.anchor.model : this.profile.model;
-        if (model)
-            await this.request('session/set_model', { sessionId: this.sessionId, modelId: model }, 30_000).catch(() => { });
+        if (model) {
+            const method = this.profile.modelOption ? 'session/set_config_option' : 'session/set_model';
+            const params = this.profile.modelOption
+                ? { sessionId: this.sessionId, configId: 'model', value: model }
+                : { sessionId: this.sessionId, modelId: model };
+            await this.request(method, params, 30_000).catch(() => { });
+        }
         this.ready = true;
     }
     prompt(text, timeoutMs) {

package/dist/file-browsing.js

@@ -1,3 +1,4 @@
+import crypto from 'node:crypto';
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
@@ -7,16 +8,14 @@ import { uploadFileBytes, uploadFileStream } from "./path-resolution.js";
  * Answering "what is in that directory?" from the machine that knows.
  *
  * A reader's browser cannot reach this machine, and this machine will not open
- * a port to let it try. So a browse is served the way an embedded image already
- * is: the daemon reads the path, puts what it found in the account's own
- * prefix, and the server hands the reader a signed URL for that object. Regular
- * files stream from disk to that object; nothing stays open once the one browse
- * upload finishes.
+ * a port to let it try. Directories are small structured answers, so the daemon
+ * sends their listing on the control socket immediately and stores the same
+ * bytes in the background for offline browsing. Regular files still stream to
+ * object storage; nothing stays open once the one browse upload finishes.
  *
- * A directory has no bytes, so what is uploaded for one is a listing of it,
- * stored at `_index.json` beneath the directory. Every path is canonicalised
- * before the allowlist is consulted, so a symlink pointing out of an allowed
- * tree is not a way to read the rest of the disk.
+ * A directory's fallback is stored at `_index.json` beneath it. Every path is
+ * canonicalised before the allowlist is consulted, so a symlink pointing out
+ * of an allowed tree is not a way to read the rest of the disk.
  */
 /** Kept in step with `MAX_DIRECTORY_ENTRIES` in the Worker's shared listing. */
 export const MAX_DIRECTORY_ENTRIES = 2_000;
@@ -26,62 +25,9 @@ export const DIRECTORY_INDEX_NAME = '_index.json';
 export const MAX_BROWSE_FILE_BYTES = 199 * 1024 * 1024;
 /** The derived label used in reader-facing errors. */
 export const BROWSE_FILE_LIMIT_LABEL = `${Math.round(MAX_BROWSE_FILE_BYTES / (1024 * 1024))} MB`;
-/** Extensions a reader can be shown as text, whatever produced them. */
-const TEXT_EXTENSIONS = new Set([
-    '.bash',
-    '.c',
-    '.cc',
-    '.cfg',
-    '.conf',
-    '.cpp',
-    '.cs',
-    '.css',
-    '.csv',
-    '.diff',
-    '.env',
-    '.go',
-    '.gradle',
-    '.h',
-    '.hpp',
-    '.htm',
-    '.html',
-    '.ini',
-    '.java',
-    '.jsonl',
-    '.jsx',
-    '.kt',
-    '.less',
-    '.lock',
-    '.log',
-    '.lua',
-    '.m',
-    '.md',
-    '.mjs',
-    '.cjs',
-    '.mts',
-    '.patch',
-    '.php',
-    '.pl',
-    '.properties',
-    '.py',
-    '.r',
-    '.rb',
-    '.rs',
-    '.scss',
-    '.sh',
-    '.sql',
-    '.swift',
-    '.tf',
-    '.toml',
-    '.ts',
-    '.tsx',
-    '.txt',
-    '.vue',
-    '.xml',
-    '.yaml',
-    '.yml',
-    '.zsh',
-]);
+/** Enough data to distinguish source and prose from arbitrary binary bytes
+ * without reading a large artifact into the daemon's memory. */
+export const FILE_TYPE_SAMPLE_BYTES = 64 * 1024;
 /** Extensions carrying their own type, where guessing text would be wrong. */
 const BINARY_CONTENT_TYPES = new Map([
     ['.apng', 'image/apng'],
@@ -104,23 +50,55 @@ const BINARY_CONTENT_TYPES = new Map([
     ['.zip', 'application/zip'],
 ]);
 /**
- * How one browsed file should be served back.
- *
- * A name with no extension at all — `README`, `Makefile`, `Dockerfile` — is
- * nearly always text, and is the one guess worth making. Everything unrecognised
- * is served as bytes: the Worker sends it with `nosniff` under a sandboxing
- * policy, so an unhelpful type is only ever unhelpful.
+ * Whether a bounded sample can safely be decoded in the browser's text editor.
+ * NUL and uncommon ASCII control bytes are strong binary signals; strict UTF-8
+ * keeps arbitrary binary from being rendered as replacement-character noise.
+ * An incomplete final code point is allowed only when the sample is a prefix.
  */
-export function browseContentType(file) {
+export function fileSampleIsText(sample, complete) {
+    let controls = 0;
+    for (const byte of sample) {
+        if (byte === 0)
+            return false;
+        if (byte < 0x20 && byte !== 0x09 && byte !== 0x0a && byte !== 0x0c && byte !== 0x0d && byte !== 0x1b) {
+            controls += 1;
+        }
+    }
+    if (controls / Math.max(1, sample.byteLength) > 0.01)
+        return false;
+    try {
+        new TextDecoder('utf-8', { fatal: true }).decode(sample, { stream: !complete });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** How one browsed file should be served back. Explicit media containers keep
+ * their MIME type; source, prose, and unknown extensions are decided by bytes.
+ * The extension only refines textual JSON after the sample has passed. */
+export function browseContentType(file, sample, complete) {
     const extension = path.extname(file).toLowerCase();
     const known = BINARY_CONTENT_TYPES.get(extension);
     if (known)
         return known;
-    if (extension === '.json')
-        return 'application/json';
-    if (!extension || TEXT_EXTENSIONS.has(extension))
-        return 'text/plain; charset=utf-8';
-    return 'application/octet-stream';
+    if (!fileSampleIsText(sample, complete))
+        return 'application/octet-stream';
+    return extension === '.json' ? 'application/json' : 'text/plain; charset=utf-8';
+}
+function readFileTypeSample(file, bytes) {
+    const length = Math.min(bytes, FILE_TYPE_SAMPLE_BYTES);
+    if (!length)
+        return new Uint8Array();
+    const sample = Buffer.allocUnsafe(length);
+    const handle = fs.openSync(file, 'r');
+    try {
+        const read = fs.readSync(handle, sample, 0, length, 0);
+        return sample.subarray(0, read);
+    }
+    finally {
+        fs.closeSync(handle);
+    }
 }
 function isoTime(value) {
     return Number.isFinite(value) ? new Date(value).toISOString() : '';
@@ -193,39 +171,42 @@ export function readDirectory(directory) {
 export function directoryIndexPath(directory) {
     return `${String(directory || '').replace(/\/+$/u, '')}/${DIRECTORY_INDEX_NAME}`;
 }
-/**
- * Store one path for a reader, and say what was stored.
- *
- * An empty file is a legitimate thing to open and has no bytes to upload, so it
- * is reported rather than sent — the reader is told the file is empty instead of
- * being handed a URL for an object that was never written. A file past the
- * upload ceiling is refused here, where the size is known, rather than by the
- * Worker after the bytes have crossed the network.
- */
 export async function browseMachinePath({ requested, machine, baseUrl, options, workingDirectory = '', fetchImpl = fetch, }) {
     const resolved = resolveBrowsePath(requested, {
         workingDirectory,
         allowedDirectories: options.allowedDirectories || [],
     });
     if (resolved.stat.isDirectory()) {
-        const body = new TextEncoder().encode(JSON.stringify(readDirectory(resolved.path)));
+        const listing = readDirectory(resolved.path);
+        const body = new TextEncoder().encode(JSON.stringify(listing));
         if (body.byteLength > MAX_BROWSE_FILE_BYTES)
             throw new Error(`Directory listing is too large: ${resolved.path}`);
-        await uploadFileBytes({
+        const etag = crypto.createHash('sha256').update(body).digest('hex');
+        const cache = uploadFileBytes({
             baseUrl,
             options,
             machine,
             absolutePath: directoryIndexPath(resolved.path),
             contentType: 'application/json',
+            contentEtag: etag,
             body,
             fetchImpl,
         });
-        return { path: resolved.path, kind: 'directory', bytes: body.byteLength, contentType: 'application/json' };
+        return {
+            path: resolved.path,
+            kind: 'directory',
+            bytes: body.byteLength,
+            contentType: 'application/json',
+            listing,
+            etag,
+            cache,
+        };
     }
-    const contentType = browseContentType(resolved.path);
     if (resolved.stat.size > MAX_BROWSE_FILE_BYTES) {
         throw new Error(`File is larger than the ${BROWSE_FILE_LIMIT_LABEL} browse limit.`);
     }
+    const sample = readFileTypeSample(resolved.path, resolved.stat.size);
+    const contentType = browseContentType(resolved.path, sample, sample.byteLength === resolved.stat.size);
     if (resolved.stat.size === 0)
         return { path: resolved.path, kind: 'file', bytes: 0, contentType };
     await uploadFileStream({

package/dist/harness-registry.js

@@ -144,6 +144,17 @@ export const ACP_PROFILES = {
         mcp: true,
     },
     vibe: { command: 'vibe-acp', args: [], mcp: true },
+    fx: {
+        command: 'fx',
+        args: ['acp'],
+        // Fx reads the process-wide policy when the ACP server starts. Setting a
+        // session mode afterwards would replace `yolo` with code mode's `auto`, so
+        // bypass deliberately has no session/set_mode call.
+        env: (permissionMode) => ({ FX_PERMISSION_MODE: permissionMode === 'bypassPermissions' ? 'yolo' : 'ask' }),
+        mode: (permissionMode) => (permissionMode === 'bypassPermissions' ? undefined : 'ask'),
+        modelOption: true,
+        mcp: true,
+    },
 };
 // These harnesses keep one bidirectional process attached to the anchor. They
 // are listed separately from process harnesses so queued turns cannot

package/dist/local-session-sources.js

@@ -87,6 +87,10 @@ const EXTRA_FILE_STORES = {
         root: path.join(HOME, '.local', 'state', 'poolside', 'trajectories'),
         include: (file) => /^trajectory-[^/]+\.ndjson$/i.test(path.basename(file)),
     },
+    fx: {
+        root: path.join(HOME, '.fx', 'sessions'),
+        include: (file) => path.basename(file) === 'events.jsonl',
+    },
 };
 function safeStat(file) {
     try {
@@ -248,6 +252,7 @@ function nativeSessionIdFromPath(harness, sourcePath) {
         qwen: /\/chats\/([^/]+)\.jsonl$/iu,
         cline: /\/([^/]+)\.messages\.json$/iu,
         poolside: /trajectory-(?:standalone_)?([0-9a-f-]{20,})\.ndjson$/iu,
+        fx: /\/sessions\/([^/]+)\/events\.jsonl$/iu,
     };
     return patterns[harness]?.exec(normalized)?.[1] || '';
 }
@@ -269,6 +274,28 @@ function fileDescriptor(harness, file) {
         createdAt: (stat.birthtimeMs > 0 ? stat.birthtime : stat.mtime).toISOString(),
     };
 }
+/** Fx's ledger path identifies the session; its adjacent projections provide
+ * the workspace and display title without requiring a conversation scan. */
+function fxDescriptor(file) {
+    const descriptor = fileDescriptor('fx', file);
+    if (!descriptor)
+        return null;
+    const directory = path.dirname(file);
+    const session = jsonFile(path.join(directory, 'session.json'));
+    const display = jsonFile(path.join(directory, 'display.json'));
+    const createdAtMs = Number(session?.created_at_ms);
+    const createdAt = Number.isFinite(createdAtMs) ? new Date(createdAtMs).toISOString() : descriptor.createdAt;
+    const title = typeof display?.title === 'string' ? display.title.trim() : '';
+    return {
+        ...descriptor,
+        createdAt,
+        nativeSessionId: String(session?.id || path.basename(directory)).trim(),
+        ...(absolutePathCandidate([session?.workspace_root, session?.origin_workspace_root])
+            ? { workingDirectory: absolutePathCandidate([session?.workspace_root, session?.origin_workspace_root]) }
+            : {}),
+        ...(title ? { nativeTitle: title } : {}),
+    };
+}
 /** Discover top-level and subagent DeepSeek trajectories with header metadata. */
 export function deepseekTrajectoryDescriptors(root = DEEPSEEK_SESSIONS_ROOT) {
     const descriptors = [];
@@ -1070,6 +1097,10 @@ export function nativeDescriptorWorkingDirectory(descriptor) {
         cursor: cursorMetadataWorkingDirectory,
         gemini: geminiMetadataWorkingDirectory,
         kimi: kimiMetadataWorkingDirectory,
+        fx: (candidate) => absolutePathCandidate([
+            sidecarJson(candidate, 'session.json')?.workspace_root,
+            sidecarJson(candidate, 'session.json')?.origin_workspace_root,
+        ]),
     };
     const metadataCandidate = metadataResolvers[descriptor.harness]?.(descriptor) || '';
     if (metadataCandidate)
@@ -1287,6 +1318,7 @@ const HARNESS_PROCESS_NAMES = {
     prime: ['prime', 'prime-agent'],
     qwen: ['qwen'],
     vibe: ['vibe', 'vibe-acp'],
+    fx: ['fx'],
 };
 const SCRIPT_RUNTIMES = new Set(['node', 'nodejs', 'bun', 'deno', 'python', 'python3']);
 function executableStem(value) {
@@ -1392,7 +1424,7 @@ function discoverLocalSessionInventory(only = '') {
         walk(store.root, (file) => {
             if (!store.include(file))
                 return;
-            const descriptor = fileDescriptor(harness, file);
+            const descriptor = harness === 'fx' ? fxDescriptor(file) : fileDescriptor(harness, file);
             if (descriptor)
                 descriptors.push(descriptor);
         });

package/dist/path-resolution.js

@@ -173,7 +173,7 @@ function uploadHeaders(options) {
  * addressed by machine and path alone — the session that happened to prompt the
  * upload is not part of what was stored, and nothing records it.
  */
-export async function uploadFileBytes({ baseUrl, options, machine, absolutePath, contentType, body, fetchImpl = fetch, }) {
+export async function uploadFileBytes({ baseUrl, options, machine, absolutePath, contentType, contentEtag, body, fetchImpl = fetch, }) {
     const url = new URL(`/api/file/${encodeURIComponent(machine)}/${encodeURIComponent(absolutePath)}`, String(baseUrl));
     const response = await fetchImpl(url, {
         method: 'PUT',
@@ -181,6 +181,7 @@ export async function uploadFileBytes({ baseUrl, options, machine, absolutePath,
             ...uploadHeaders(options),
             'content-type': contentType,
             'content-length': String(body.byteLength),
+            ...(contentEtag ? { 'x-turns-content-etag': contentEtag } : {}),
         },
         body,
     });

package/dist/queue-worker.js

@@ -952,22 +952,24 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
         return recorded || path.dirname(descriptor.file);
     };
     /**
-     * Store one path this machine holds, so a reader can open it.
+     * Read one path this machine holds, so a reader can open it.
      *
      * Unlike the rest of these handlers this touches no harness: browsing is a
      * property of the machine, so it answers for a stopped session as readily as
-     * for a running one.
+     * for a running one. Directory bytes answer directly; their offline copy is
+     * stored behind that reply.
      */
     const handleFileBrowse = async (message, replyRpc) => {
         const sessionId = String(message.sessionId || '');
         try {
-            const stored = await browseMachinePath({
+            const browsed = await browseMachinePath({
                 requested: String(message.path || ''),
                 machine,
                 baseUrl,
                 options,
                 workingDirectory: await browseWorkingDirectory(sessionId),
             });
+            const { cache, ...stored } = browsed.kind === 'directory' ? browsed : { ...browsed, cache: undefined };
             replyRpc.notify({
                 type: 'session.file.browse.result',
                 requestId: message.requestId,
@@ -975,6 +977,11 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
                 ok: true,
                 ...stored,
             });
+            // The direct listing is already useful. Its R2 copy is only the fallback
+            // for a later offline browse, so storage latency must not hold this reply.
+            void cache?.catch((error) => {
+                console.warn(`Directory browse fallback upload failed: ${redactor.redactText(error?.message || String(error))}`);
+            });
         }
         catch (error) {
             replyRpc.notify({

package/dist/upload-sessions.js

@@ -53,6 +53,7 @@ const TIME_FIELDS = [
     'time_created',
     'recorded_at',
     'occurred_at_ms',
+    'timestamp_ms',
 ];
 const TIME_CONTAINERS = ['data', 'payload', 'message', 'chat_message', 'node'];
 function epochToIso(value) {
@@ -845,9 +846,11 @@ async function uploadFile(rpc, machine, root, capture, redactor = DEFAULT_REDACT
     if (opened.type === 'session_tombstoned')
         return { rows: 0, sent: 0, skipped: true, tombstoned: true };
     let nextRow = Number(opened.nextRow) || 0;
+    let initialUpload = nextRow === 0;
     if (Number(opened.redactionVersion || 0) !== REDACTION_VERSION) {
         await rpc.request({ type: 'session.reset', sessionId, redactionVersion: REDACTION_VERSION });
         nextRow = 0;
+        initialUpload = true;
     }
     if (nextRow > rows.length)
         throw new Error(`${capture.relative}: remote has ${nextRow} rows, local file has ${rows.length}`);
@@ -857,7 +860,12 @@ async function uploadFile(rpc, machine, root, capture, redactor = DEFAULT_REDACT
     for (const batch of batches(rows, raw, nextRow, redactor)) {
         let acknowledgement;
         try {
-            acknowledgement = await rpc.request({ type: 'ingest', sessionId, ...batch });
+            acknowledgement = await rpc.request({
+                type: 'ingest',
+                sessionId,
+                ...batch,
+                ...(initialUpload ? { deferReduction: true } : {}),
+            });
         }
         catch (error) {
             const offset = /^ROW_OFFSET:(\d+)$/u.exec(String(error.code || ''));
@@ -946,12 +954,16 @@ export async function uploadNativeSession(rpc, machine, descriptor, cursor = {},
     }
     const uploadSessionId = String(opened.sessionId || sessionId);
     let nextRow = Number(opened.nextRow) || 0;
+    let initialUpload = nextRow === 0 || cursor.initialUpload === true;
     if (Number(opened.redactionVersion || 0) !== REDACTION_VERSION) {
         await rpc.request({ type: 'session.reset', sessionId: uploadSessionId, redactionVersion: REDACTION_VERSION });
         nextRow = 0;
         for (const key of Object.keys(cursor))
             delete cursor[key];
+        initialUpload = true;
     }
+    if (initialUpload)
+        cursor.initialUpload = true;
     const resumable = canResumeNativeCursor(descriptor, cursor, nextRow);
     const scanCursor = resumable
         ? { offset: Number(cursor.offset), rowCount: Number(cursor.rowCount), lineNumber: Number(cursor.lineNumber) || 0 }
@@ -981,6 +993,7 @@ export async function uploadNativeSession(rpc, machine, descriptor, cursor = {},
             sessionId: uploadSessionId,
             startRow: rows[0].index,
             rows,
+            ...(initialUpload ? { deferReduction: true } : {}),
         });
         nextRow = Number(acknowledgement.nextRow);
         sent += rows.length;
@@ -1072,8 +1085,10 @@ export async function uploadNativeSession(rpc, machine, descriptor, cursor = {},
         });
     }
     if (!sawRows && scanCursor.rowCount === 0) {
+        delete cursor.initialUpload;
         return { rows: 0, sent: 0, skipped: true, empty: true };
     }
+    delete cursor.initialUpload;
     return { rows: scanCursor.rowCount, sent, skipped: sent === 0 };
 }
 export function nativeFailureRetryDelay(attempts) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@turns/dev",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "Upload local AI agent sessions to turns.dev",
   "license": "MIT",
   "type": "module",