@turns/dev 0.0.29 → 0.0.31

package/dist/agent-anchor.js

@@ -15,6 +15,7 @@ import { recordLettaSessionContext } from "./letta-session-context.js";
 import { recoverAsyncQuestion } from "./codex-async-question-recovery.js";
 import { existingTranscriptPath } from "./compressed-transcripts.js";
 import { BackgroundTaskState } from "./background-task-state.js";
+import { harnessExitError, StderrTail } from "./harness-exit.js";
 const socketIndex = process.argv.indexOf('--socket');
 const socketPath = socketIndex >= 0 ? path.resolve(process.argv[socketIndex + 1] || '') : '';
 if (!socketPath)
@@ -73,7 +74,7 @@ function writeLine(socket, value) {
     if (!socket.destroyed && socket.writable)
         socket.write(`${JSON.stringify(value)}\n`);
 }
-function childResult(child, timeoutMs) {
+function childResult(child, timeoutMs, harness, stderrTail) {
     const result = deferred();
     let settled = false;
     const finish = (value) => {
@@ -84,7 +85,17 @@ function childResult(child, timeoutMs) {
         }
     };
     child.once('error', (error) => finish({ exitCode: null, signal: null, timedOut: false, error: { message: errorText(error) } }));
-    child.once('close', (code, signal) => finish({ exitCode: code, signal, timedOut: false, error: null }));
+    child.once('close', (code, signal) => {
+        if (!code)
+            return finish({ exitCode: code, signal, timedOut: false, error: null });
+        const error = harnessExitError(harness, code, signal, stderrTail.lines());
+        finish({
+            exitCode: code,
+            signal,
+            timedOut: false,
+            error: { message: error.message, harnessExit: error.harnessExit },
+        });
+    });
     const timer = setTimeout(() => {
         try {
             process.kill(-child.pid, 'SIGTERM');
@@ -108,6 +119,7 @@ class LineTransport {
     pending;
     lastEventAt;
     child;
+    stderrTail = new StderrTail();
     constructor(anchor, harness, command, args, cwd, env = {}) {
         this.anchor = anchor;
         this.harness = harness;
@@ -129,14 +141,17 @@ class LineTransport {
         });
         anchor.child = this.child;
         readline.createInterface({ input: this.child.stdout }).on('line', (line) => this.receive(line));
-        readline.createInterface({ input: this.child.stderr }).on('line', (line) => anchor.emitLive({
-            event: 'process.line',
-            source: `${harness}.stderr`,
-            raw: line,
-            phase: 'queued',
-        }));
+        readline.createInterface({ input: this.child.stderr }).on('line', (line) => {
+            this.stderrTail.observe(line);
+            anchor.emitLive({
+                event: 'process.line',
+                source: `${harness}.stderr`,
+                raw: line,
+                phase: 'queued',
+            });
+        });
         this.child.once('close', (code, signal) => {
-            const error = new Error(`${harness} transport exited with ${signal || code}`);
+            const error = harnessExitError(anchor.source, code, signal, this.stderrTail.lines());
             for (const waiter of this.pending.values())
                 waiter.reject(error);
             this.pending.clear();
@@ -1772,7 +1787,12 @@ class Anchor {
             result: null,
         };
         this.setStatus('running');
-        void this.run(Boolean(request.createSession), this.turnTimeoutMs).then((result) => this.finish(result), (error) => this.finish({ exitCode: 1, signal: null, timedOut: false, error: { message: errorText(error) } }));
+        void this.run(Boolean(request.createSession), this.turnTimeoutMs).then((result) => this.finish(result), (error) => this.finish({
+            exitCode: 1,
+            signal: null,
+            timedOut: false,
+            error: { message: errorText(error), ...(error?.harnessExit ? { harnessExit: error.harnessExit } : {}) },
+        }));
         return { accepted: true, messageId: this.currentTurn.messageId, pid: process.pid };
     }
     async run(createSession, timeoutMs) {
@@ -1871,6 +1891,7 @@ class Anchor {
             this.child = child;
             if (invocation.stdin)
                 child.stdin.end(`${invocation.stdin}\n`);
+            const stderrTail = new StderrTail();
             for (const [stream, source] of [
                 [child.stdout, `${this.source}.stdout`],
                 [child.stderr, `${this.source}.stderr`],
@@ -1884,9 +1905,11 @@ class Anchor {
                     const processSessionId = processEventSessionId(this.source, json);
                     if (processSessionId && processSessionId !== this.agentSessionId)
                         this.updateIdentity(processSessionId);
+                    if (stream === child.stderr)
+                        stderrTail.observe(line);
                     this.emitLive({ event: 'process.line', source, raw: line, json, phase: 'queued' });
                 });
-            return childResult(child, timeoutMs);
+            return childResult(child, timeoutMs, this.source, stderrTail);
         }
         if (ACP_PROFILES[this.source]) {
             if (!(this.transport instanceof AcpTransport) ||

package/dist/harness-exit.js

@@ -0,0 +1,44 @@
+/** Failure details for a harness process that exits underneath Turns. */
+const STDERR_TAIL_LINES = 12;
+const STDERR_TAIL_CHARS = 4_000;
+/** The last few stderr lines of a harness process. When the process exits on
+ * its own, they are usually the only explanation (for example, an outdated CLI
+ * rejecting an argument), and the turn's failure must carry them. */
+export class StderrTail {
+    recent = [];
+    observe(line) {
+        const text = String(line)
+            .replace(/\u001b\[[0-9;?]*[A-Za-z]/gu, '')
+            .trimEnd();
+        if (!text.trim())
+            return;
+        this.recent.push(text.slice(0, STDERR_TAIL_CHARS));
+        if (this.recent.length > STDERR_TAIL_LINES)
+            this.recent.shift();
+    }
+    lines() {
+        const kept = [];
+        let size = 0;
+        for (const line of [...this.recent].reverse()) {
+            size += line.length + 1;
+            if (size > STDERR_TAIL_CHARS)
+                break;
+            kept.unshift(line);
+        }
+        return kept;
+    }
+}
+/** A harness process that ended underneath Turns rather than reporting a
+ * failure through its own protocol. */
+export function harnessExitError(harness, code, signal, stderr) {
+    const label = harnessLabel(harness);
+    const how = signal ? `was stopped by ${signal}` : `exited with code ${code}`;
+    const message = [`${label} ${how} before the turn finished.`, ...(stderr.length ? ['', ...stderr] : [])].join('\n');
+    return Object.assign(new Error(message), {
+        harnessExit: { harness: String(harness), code: code ?? null, signal: signal ?? null, stderr },
+    });
+}
+export function harnessLabel(harness) {
+    const name = String(harness || 'agent');
+    return name.charAt(0).toUpperCase() + name.slice(1);
+}

package/dist/harness-update.js

@@ -0,0 +1,236 @@
+/** Machine-local harness CLI upgrades, callable by the Turns daemon. */
+import { spawn } from 'node:child_process';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { executablePath } from "./executable-path.js";
+import { harnessLabel } from "./harness-exit.js";
+import { ACP_PROFILES, codexCommandIsAppManaged, HARNESS_IDS, RPC_PROFILES, resolveHarnessCommand, } from "./harness-registry.js";
+const VERSION_TIMEOUT_MS = 15_000;
+const UPDATE_TIMEOUT_MS = 5 * 60_000;
+const OUTPUT_LIMIT = 64 * 1024;
+/**
+ * Native installers whose CLI updates itself without prompting. Each entry was
+ * checked against the CLI's own `--help`; a harness absent here is upgradable
+ * only when a package manager owns its executable. Some updaters ask before
+ * installing (Devin) or rewrite a source checkout (Hermes), so they are left
+ * out rather than run unattended.
+ */
+const SELF_UPDATE_ARGS = {
+    claude: ['update'],
+    codex: ['update'],
+    cursor: ['update'],
+    antigravity: ['update'],
+    omp: ['update'],
+    grok: ['update'],
+    goose: ['update'],
+    fx: ['upgrade'],
+    kimi: ['upgrade'],
+    opencode: ['upgrade'],
+    kilo: ['upgrade'],
+};
+/** Run the resolved executable directly—never through a shell—so update
+ * requests cannot become arbitrary command execution. */
+function runCommand(command, args, timeoutMs) {
+    return new Promise((resolve) => {
+        const child = spawn(command, args, {
+            cwd: os.homedir(),
+            // npm and npm-installed CLIs are `#!/usr/bin/env node` scripts; a
+            // service manager's PATH may not include the daemon's own Node.
+            env: { ...process.env, PATH: executablePath() },
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let output = '';
+        let settled = false;
+        const settle = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve(result);
+        };
+        const timer = setTimeout(() => {
+            try {
+                child.kill('SIGKILL');
+            }
+            catch { }
+            settle({ output, exitCode: null, timedOut: true });
+        }, timeoutMs);
+        timer.unref?.();
+        const collect = (chunk) => {
+            if (output.length < OUTPUT_LIMIT)
+                output += String(chunk).slice(0, OUTPUT_LIMIT - output.length);
+        };
+        child.stdout.on('data', collect);
+        child.stderr.on('data', collect);
+        child.on('error', () => settle({ output, exitCode: null, failed: true }));
+        child.on('close', (exitCode) => settle({ output, exitCode }));
+    });
+}
+/** The first dotted version in a CLI's `--version` output, whatever its
+ * prefix (`codex-cli 0.164.0`, `omp/18.0.4`, `GitHub Copilot CLI 1.0.80.`). */
+export function parseHarnessVersion(output) {
+    const text = String(output || '').replace(/\u001b\[[0-9;?]*[A-Za-z]/gu, '');
+    const version = text.match(/\d+(?:\.\d+)+(?:-[0-9A-Za-z.]+)?/u)?.[0] || '';
+    return version.replace(/\.$/u, '').slice(0, 120);
+}
+function commandFailure(result, label, fallback) {
+    if (result.timedOut)
+        return new Error(`The ${label} update timed out.`);
+    const lines = result.output
+        .replace(/\u001b\[[0-9;?]*[A-Za-z]/gu, '')
+        .split('\n')
+        .map((line) => line.trim())
+        // npm ends every failure by pointing at its debug log.
+        .filter((line) => line && !/A complete log of this run can be found/iu.test(line));
+    return new Error(lines.at(-1) || fallback);
+}
+function realpathOrSelf(file) {
+    try {
+        return fs.realpathSync(file);
+    }
+    catch {
+        return file;
+    }
+}
+function findExecutable(name, preferred) {
+    for (const directory of [...preferred, ...executablePath().split(path.delimiter)]) {
+        const candidate = path.join(directory, name);
+        try {
+            fs.accessSync(candidate, fs.constants.X_OK);
+            return candidate;
+        }
+        catch { }
+    }
+    return '';
+}
+export function harnessUpgradeCommand(harness, command, lookup = {}) {
+    const resolved = (lookup.realpath || realpathOrSelf)(command).replaceAll('\\', '/');
+    const find = lookup.findExecutable || findExecutable;
+    const platform = lookup.platform || process.platform;
+    // `npm i -g <pkg>` links <prefix>/bin/<cli> into <prefix>/lib/node_modules.
+    // Requiring the `lib/` layout keeps pnpm and Bun global stores, which also
+    // contain node_modules, away from an npm that would install a second copy.
+    // Windows npm is a .cmd shim, which cannot be spawned without a shell.
+    const npm = resolved.match(/^(.+?)\/lib\/node_modules\/((?:@[^/]+\/)?[^/@][^/]*)\//u);
+    if (npm && platform !== 'win32') {
+        const [, prefix, name] = npm;
+        const binary = find('npm', [path.join(prefix, 'bin')]);
+        if (binary) {
+            return {
+                manager: 'npm',
+                command: binary,
+                args: ['install', '-g', '--prefix', prefix, `${name}@latest`],
+                check: {
+                    args: ['view', name, 'version'],
+                    failure: `${name} is not published on the npm registry, so this installation must be updated on the machine.`,
+                },
+            };
+        }
+    }
+    const brew = resolved.match(/^(.+?)\/(Cellar|Caskroom)\/([^/]+)\//u);
+    if (brew) {
+        const binary = find('brew', [path.join(brew[1], 'bin')]);
+        if (binary)
+            return {
+                manager: 'brew',
+                command: binary,
+                args: ['upgrade', ...(brew[2] === 'Caskroom' ? ['--cask'] : []), brew[3]],
+            };
+    }
+    const uv = resolved.match(/\/uv\/tools\/([^/]+)\//u);
+    if (uv) {
+        const binary = find('uv', []);
+        if (binary)
+            return { manager: 'uv', command: binary, args: ['tool', 'upgrade', uv[1]] };
+    }
+    const pipx = resolved.match(/\/pipx\/venvs\/([^/]+)\//u);
+    if (pipx) {
+        const binary = find('pipx', []);
+        if (binary)
+            return { manager: 'pipx', command: binary, args: ['upgrade', pipx[1]] };
+    }
+    const self = SELF_UPDATE_ARGS[harness];
+    return self ? { manager: 'self', command, args: self } : null;
+}
+/** The executable the agent anchor launches for a harness. */
+function harnessExecutable(harness) {
+    return resolveHarnessCommand(harness, ACP_PROFILES[harness] || RPC_PROFILES[harness] || {});
+}
+export function createHarnessUpdateManager(dependencies = {}) {
+    const harnesses = dependencies.harnesses || HARNESS_IDS;
+    const resolveCommand = dependencies.resolveCommand || harnessExecutable;
+    const isAppManaged = dependencies.isAppManaged ||
+        ((harness, command) => harness === 'codex' && codexCommandIsAppManaged(command));
+    const upgradeCommand = dependencies.upgradeCommand || ((harness, command) => harnessUpgradeCommand(harness, command));
+    const run = dependencies.run || runCommand;
+    const active = new Map();
+    const plan = (harness) => {
+        const label = harnessLabel(harness);
+        if (!harnesses.includes(harness))
+            throw new Error(`Turns cannot update ${label}.`);
+        const command = resolveCommand(harness);
+        if (isAppManaged(harness, command)) {
+            throw new Error(`${label} is managed by the macOS app. Update the ${label} app to update its bundled CLI.`);
+        }
+        const upgrade = upgradeCommand(harness, command);
+        if (!upgrade)
+            throw new Error(`Turns does not know how to update this ${label} installation. Update it on the machine.`);
+        return { label, command, upgrade };
+    };
+    const readVersion = async (command, label, fallback) => {
+        const result = await run(command, ['--version'], VERSION_TIMEOUT_MS);
+        if (result.failed || result.timedOut || result.exitCode !== 0)
+            throw commandFailure(result, label, fallback);
+        return parseHarnessVersion(result.output);
+    };
+    const perform = async (harness) => {
+        const { label, command, upgrade } = plan(harness);
+        const previousVersion = await readVersion(command, label, `${label} is not installed or its version could not be read.`);
+        if (upgrade.check) {
+            const checked = await run(upgrade.command, upgrade.check.args, VERSION_TIMEOUT_MS);
+            if (checked.timedOut)
+                throw new Error(`The ${label} update timed out.`);
+            if (checked.failed || checked.exitCode !== 0)
+                throw new Error(upgrade.check.failure);
+        }
+        const updateRun = await run(upgrade.command, upgrade.args, UPDATE_TIMEOUT_MS);
+        if (updateRun.failed || updateRun.timedOut || updateRun.exitCode !== 0) {
+            const manual = [path.basename(upgrade.command), ...upgrade.args].join(' ');
+            throw commandFailure(updateRun, label, upgrade.manager === 'self'
+                ? `${label} could not update itself. Run \`${manual}\` in a terminal on the machine.`
+                : `${upgrade.manager} could not upgrade ${label}. Run \`${manual}\` in a terminal on the machine.`);
+        }
+        // Resolve again because the updater may replace a shim or install path.
+        const currentVersion = await readVersion(resolveCommand(harness), label, `${label} updated, but its new version could not be read.`);
+        return {
+            ...(previousVersion ? { previousVersion } : {}),
+            ...(currentVersion ? { currentVersion } : {}),
+            updated: Boolean(previousVersion && currentVersion && previousVersion !== currentVersion),
+        };
+    };
+    return {
+        /** Harnesses installed here in a way this daemon can upgrade. */
+        available() {
+            return harnesses.filter((harness) => {
+                try {
+                    plan(harness);
+                    return true;
+                }
+                catch {
+                    return false;
+                }
+            });
+        },
+        /** Concurrent clicks for one harness share one installer process instead
+         * of racing writes to the same installation. */
+        update(harness) {
+            let pending = active.get(harness);
+            if (!pending) {
+                pending = perform(harness).finally(() => active.delete(harness));
+                active.set(harness, pending);
+            }
+            return pending;
+        },
+    };
+}

package/dist/index.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import fs from 'node:fs';
+import os from 'node:os';
 import path from 'node:path';
 import process from 'node:process';
 import { fileURLToPath } from 'node:url';
@@ -225,6 +226,22 @@ async function runUpload(credentials, { paths, watch = false, all = false, inter
         provider?.close();
     }
 }
+/** First lines of `turns daemon run`, printed before authentication so a
+ * report pasted from a terminal or log always says which build and runtime
+ * produced it (`npx` can silently run an older cached release). */
+export function daemonStartupBanner({ version, nodeVersion = process.version, platform = process.platform, arch = process.arch, osName = `${os.type()} ${os.release()}`, hostname = os.hostname(), pid = process.pid, packageDirectory = CLI_DIRECTORY, paths, allowedDirectories = [], }) {
+    return [
+        `Turns daemon ${version}`,
+        `  Node ${nodeVersion} on ${platform}-${arch} (${osName}), host ${hostname}, pid ${pid}`,
+        `  Package ${packageDirectory}`,
+        `  Config ${paths.configDirectory}`,
+        `  State ${paths.stateDirectory}`,
+        allowedDirectories.length
+            ? `  Directories:\n${allowedDirectories.map((value) => `    ${value}`).join('\n')}`
+            : '  Directories: all',
+        '',
+    ].join('\n');
+}
 async function main(rawArguments = process.argv.slice(2)) {
     const parsed = parseGlobalArguments(rawArguments);
     const argv = parsed.argv;
@@ -274,6 +291,7 @@ async function main(rawArguments = process.argv.slice(2)) {
             throw new Error('--once cannot be combined with `turns daemon run`.');
         if (parsed.devUser && !parsed.origin)
             throw new Error('--dev-user requires an explicit --server URL.');
+        logInfo(daemonStartupBanner({ version: pkg.version, paths, allowedDirectories }));
         let credentials;
         if (parsed.devUser) {
             credentials = { origin: normalizeOrigin(parsed.origin) };
@@ -282,9 +300,6 @@ async function main(rawArguments = process.argv.slice(2)) {
             await migrateLegacyCredentials(paths, parsed.origin);
             credentials = await authenticate({ origin: parsed.origin, paths, interactive: false });
         }
-        if (allowedDirectories.length) {
-            logInfo(`Daemon directory allowlist:\n${allowedDirectories.map((value) => `  ${value}`).join('\n')}\n`);
-        }
         await runUpload(credentials, {
             paths,
             watch: true,

package/dist/path-resolution.js

@@ -87,7 +87,11 @@ export function pathCandidates(row) {
             continue;
         if (found.includes(candidate))
             continue;
-        found.push(candidate);
+        // A regex match is a slice of the row it came from, and a slice keeps the
+        // whole row alive for as long as it is remembered. The resolver remembers
+        // candidates per session for the life of the daemon, so each one has to
+        // be its own small string rather than a window onto kilobytes of transcript.
+        found.push(Buffer.from(candidate).toString());
         if (found.length >= MAX_PATH_CANDIDATES_PER_ROW)
             break;
     }

package/dist/queue-worker.js

@@ -7,7 +7,7 @@ import { pipeline } from 'node:stream/promises';
 import { logError } from "./logging.js";
 import { QueueDispatchLifecycle, QUEUE_RESTART_MESSAGE } from "./queue-lifecycle.js";
 import { anchorId, connectExistingAgentAnchors, launchAgentAnchor, waitForAgentTurn } from "./agent-anchor-client.js";
-import { createCodexUpdateManager } from "./codex-update.js";
+import { createHarnessUpdateManager } from "./harness-update.js";
 import { isAsyncQuestionId } from "./codex-async-question-recovery.js";
 import { assertAllowedWorkingDirectory, workingDirectoryIsAllowed } from "./directory-policy.js";
 import { browseMachinePath, streamMachineFileRange } from "./file-browsing.js";
@@ -301,6 +301,28 @@ export function runtimeEvent(anchorName, messageId, event, redactor = DEFAULT_RE
             value: redactor.redactJsonLine(JSON.stringify(event)),
         };
     }
+    // A harness that exits underneath its turn often reports the reason only on
+    // stderr, before any protocol frame the reducer could show. Record that
+    // ending explicitly so the transcript can explain the failed turn.
+    if (event?.event === 'turn.complete' && event.result?.error?.harnessExit && !event.result.interrupted) {
+        const exit = event.result.error.harnessExit;
+        return {
+            eventKey: key,
+            kind: 'session.harness_exit',
+            phase: 'queued',
+            ts,
+            source: 'agent-anchor',
+            value: redactor.redactJsonLine(JSON.stringify({
+                type: 'turns.session.harness_exit',
+                messageId: String(event.messageId || messageId || ''),
+                harness: String(exit.harness || event.agent || ''),
+                code: typeof exit.code === 'number' ? exit.code : null,
+                signal: exit.signal ? String(exit.signal) : null,
+                message: String(event.result.error.message || ''),
+                stderr: Array.isArray(exit.stderr) ? exit.stderr.map(String) : [],
+            })),
+        };
+    }
     if (event?.event === 'turn.steer') {
         return {
             eventKey: key,
@@ -319,6 +341,14 @@ export function runtimeEvent(anchorName, messageId, event, redactor = DEFAULT_RE
     }
     return null;
 }
+/** Registration capabilities for harness upgrades. `codexUpdate` remains for
+ * backends that only know how to route Codex upgrades. */
+export function updateCapabilities(harnesses) {
+    return {
+        ...(harnesses.length ? { harnessUpdates: harnesses } : {}),
+        ...(harnesses.includes('codex') ? { codexUpdate: true } : {}),
+    };
+}
 export function resultError(result) {
     if (!result)
         return new Error('The anchored agent returned no result.');
@@ -1317,18 +1347,22 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
             });
         }
     };
-    /** Upgrade the machine's Codex installation. Only this fixed, resolved
-     * command is exposed; the browser cannot supply a binary, arguments, or
-     * shell input. Errors are redacted before crossing the machine boundary. */
-    const codexUpdate = createCodexUpdateManager();
-    const handleCodexUpdate = async (message, replyRpc) => {
+    /** Upgrade one of the machine's harness CLIs. Only a fixed command chosen
+     * from the resolved executable's install location is run; the browser names
+     * a harness but cannot supply a binary, arguments, or shell input. Errors
+     * are redacted before crossing the machine boundary. The message keeps its
+     * Codex-era name; a request without a harness is from a Codex-only backend. */
+    const harnessUpdate = createHarnessUpdateManager();
+    const handleHarnessUpdate = async (message, replyRpc) => {
         const sessionId = String(message.sessionId || '');
+        const harness = String(message.harness || 'codex');
         try {
-            const answer = await codexUpdate.update();
+            const answer = await harnessUpdate.update(harness);
             replyRpc.notify({
                 type: 'session.codex.update.result',
                 requestId: message.requestId,
                 sessionId,
+                harness,
                 ok: true,
                 answer,
             });
@@ -1338,6 +1372,7 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
                 type: 'session.codex.update.result',
                 requestId: message.requestId,
                 sessionId,
+                harness,
                 ok: false,
                 error: redactor.redactText(error?.message || String(error)),
             });
@@ -1402,33 +1437,44 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
         }
     }, HARNESS_HEARTBEAT_MS);
     heartbeat.unref?.();
+    // A browser request is answered over the same socket it arrived on. When
+    // that socket drops mid-request, the handler's reply throws, and so does the
+    // error reply in its catch block. Nothing awaits these handlers, so that
+    // second throw used to surface as an unhandled rejection and take the whole
+    // daemon down with every running session's watcher. The browser has already
+    // been told its connection closed; there is nobody left to answer.
+    const answer = (handler, message) => {
+        void Promise.resolve()
+            .then(() => handler(message, rpc))
+            .catch((error) => logError(`Could not answer ${message.type}: ${error?.message || error}\n`));
+    };
     rpc.onEvent((message) => {
         if (lifecycle.stopping)
             return;
         if (message.type === 'queue.ready')
             void tryClaim(message.sessionId);
         if (message.type === 'session.steer')
-            void handleSteer(message, rpc);
+            answer(handleSteer, message);
         if (message.type === 'session.interrupt.request')
-            void handleInterrupt(message, rpc);
+            answer(handleInterrupt, message);
         if (message.type === 'session.anchor.action.request')
-            void handleAnchorAction(message, rpc);
+            answer(handleAnchorAction, message);
         if (message.type === 'session.interaction.answer.request')
-            void handleInteractionAnswer(message, rpc);
+            answer(handleInteractionAnswer, message);
         if (message.type === 'session.file.browse.request')
-            void handleFileBrowse(message, rpc);
+            answer(handleFileBrowse, message);
         if (message.type === 'session.file.range.request')
-            void handleFileRange(message, rpc);
+            answer(handleFileRange, message);
         if (message.type === 'session.file.search.request')
-            void handleFileSearch(message, rpc);
+            answer(handleFileSearch, message);
         if (message.type === 'session.git.read.request')
-            void handleGitRead(message, rpc);
+            answer(handleGitRead, message);
         if (message.type === 'session.harness.auth.request')
-            void handleHarnessAuth(message, rpc);
+            answer(handleHarnessAuth, message);
         if (message.type === 'session.codex.update.request')
-            void handleCodexUpdate(message, rpc);
+            answer(handleHarnessUpdate, message);
         if (message.type === 'session.file.edit.request')
-            void handleFileEdit(message, rpc);
+            answer(handleFileEdit, message);
     });
     const registered = new WeakSet();
     const registering = new WeakSet();
@@ -1447,7 +1493,7 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
                     git: true,
                     fileRanges: true,
                     harnessAuth: true,
-                    ...(codexUpdate.available() ? { codexUpdate: true } : {}),
+                    ...updateCapabilities(harnessUpdate.available()),
                 },
                 workerId,
                 workerInstanceId,
@@ -1468,7 +1514,15 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
     rpc.onConnect((control) => {
         void registerControl(control);
     });
-    await registerControl(await rpc.current());
+    // Starting offline must not end this function: the loop below is the only
+    // thing that sends heartbeats, probes for a half-open socket and re-polls
+    // for missed queue events, and it already tolerates a failed connection.
+    try {
+        await registerControl(await rpc.current());
+    }
+    catch (error) {
+        logError(`Queue worker could not connect yet: ${error?.message || error}\n`);
+    }
     while (!lifecycle.stopping) {
         await backgroundWait(MACHINE_HEARTBEAT_MS);
         if (lifecycle.stopping)

package/dist/upload-sessions.js

@@ -404,6 +404,37 @@ export function linkNativeSessionParents(machine, descriptors) {
         ];
     });
 }
+/**
+ * The row the server has reached, when a rejected ingest batch was in fact
+ * already stored in full; null when the rejection is a real one.
+ */
+export function ingestOffsetAcknowledges(error, startRow, rowCount) {
+    const offset = /^ROW_OFFSET:(\d+)$/u.exec(String(error?.code || ''));
+    if (!offset)
+        return null;
+    const reached = Number(offset[1]);
+    return reached >= startRow + rowCount ? reached : null;
+}
+/**
+ * Bring a descriptor up to the file as it is now.
+ *
+ * The inventory scan stats each transcript in a worker and the result is
+ * recorded here some time later. An agent that wrote in between leaves the
+ * descriptor describing a shorter file than the one on disk. Recording the
+ * fresh stat as "already seen" while uploading only to the descriptor's stale
+ * size strands those rows: nothing looks changed until the next append or the
+ * five-minute audit. A database projection's file is its whole store, not the
+ * session, so its size says nothing about the session and is left alone.
+ */
+export function adoptGrowthSinceInventory(descriptor, stat) {
+    if (String(descriptor.sourcePath || '').includes('.db#'))
+        return false;
+    if (Number(stat.size) === Number(descriptor.size))
+        return false;
+    descriptor.size = stat.size;
+    descriptor.mtimeMs = stat.mtimeMs;
+    return true;
+}
 export function nativeDescriptorFingerprint(descriptor) {
     return JSON.stringify([
         Number(descriptor.size) || 0,
@@ -638,6 +669,10 @@ export class RpcSocket {
             this.socket.on('message', (data) => this.onMessage(String(data), (ready) => settle(resolve, ready), (error) => settle(reject, error)));
             this.socket.on('close', (code, reason) => {
                 const error = socketError(`WebSocket closed (${code}): ${String(reason)}`);
+                // A server that accepts the upgrade and closes before saying "ready"
+                // (a deploy, a restarting object) has answered. Without this the
+                // connect waited out the whole ready deadline before it could retry.
+                settle(reject, error);
                 for (const request of this.pending.values()) {
                     clearTimeout(request.timer);
                     request.reject(error);
@@ -1087,13 +1122,27 @@ export async function uploadNativeSession(rpc, machine, descriptor, cursor = {},
         if (!held.length)
             return;
         const rows = held.map((entry) => entry.event);
-        const acknowledgement = await rpc.request({
-            type: 'ingest',
-            sessionId: uploadSessionId,
-            startRow: rows[0].index,
-            rows,
-            ...(initialUpload ? { deferReduction: true } : {}),
-        });
+        let acknowledgement;
+        try {
+            acknowledgement = await rpc.request({
+                type: 'ingest',
+                sessionId: uploadSessionId,
+                startRow: rows[0].index,
+                rows,
+                ...(initialUpload ? { deferReduction: true } : {}),
+            });
+        }
+        catch (error) {
+            // The connection resends a request whose socket died. When only the
+            // acknowledgement was lost, the server already holds these rows and
+            // answers the resend with the offset it has reached. That is an
+            // acknowledgement: treating it as a failure put the session into backoff
+            // and then re-read its whole transcript from the first byte.
+            const acknowledged = ingestOffsetAcknowledges(error, rows[0].index, rows.length);
+            if (acknowledged === null)
+                throw error;
+            acknowledgement = { nextRow: acknowledged };
+        }
         nextRow = Number(acknowledgement.nextRow);
         sent += rows.length;
         batchesSent += 1;
@@ -1624,6 +1673,7 @@ async function uploadNative(options, machine, redactor = DEFAULT_REDACTOR) {
             try {
                 const stat = fs.statSync(descriptor.file);
                 physicalStats.set(sessionId, { size: stat.size, mtimeMs: stat.mtimeMs });
+                adoptGrowthSinceInventory(descriptor, stat);
             }
             catch { }
             const saved = state.get(sessionId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@turns/dev",
-  "version": "0.0.29",
+  "version": "0.0.31",
   "description": "Upload local AI agent sessions to turns.dev",
   "license": "MIT",
   "type": "module",

package/dist/codex-update.js

@@ -1,110 +0,0 @@
-/** Machine-local Codex CLI self-update, callable by the Turns daemon. */
-import { spawn } from 'node:child_process';
-import os from 'node:os';
-import { codexCommandIsAppManaged, resolveHarnessCommand } from "./harness-registry.js";
-const VERSION_TIMEOUT_MS = 15_000;
-const UPDATE_TIMEOUT_MS = 5 * 60_000;
-const OUTPUT_LIMIT = 64 * 1024;
-/** Run the resolved executable directly—never through a shell—so update
- * requests cannot become arbitrary command execution. */
-function runCommand(command, args, timeoutMs) {
-    return new Promise((resolve) => {
-        const child = spawn(command, args, {
-            cwd: os.homedir(),
-            env: process.env,
-            stdio: ['ignore', 'pipe', 'pipe'],
-        });
-        let output = '';
-        let settled = false;
-        const settle = (result) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            resolve(result);
-        };
-        const timer = setTimeout(() => {
-            try {
-                child.kill('SIGKILL');
-            }
-            catch { }
-            settle({ output, exitCode: null, timedOut: true });
-        }, timeoutMs);
-        timer.unref?.();
-        const collect = (chunk) => {
-            if (output.length < OUTPUT_LIMIT)
-                output += String(chunk).slice(0, OUTPUT_LIMIT - output.length);
-        };
-        child.stdout.on('data', collect);
-        child.stderr.on('data', collect);
-        child.on('error', () => settle({ output, exitCode: null, failed: true }));
-        child.on('close', (exitCode) => settle({ output, exitCode }));
-    });
-}
-export function parseCodexVersion(output) {
-    const text = String(output || '').trim();
-    const prefixed = text.match(/codex(?:-cli)?\s+([^\s]+)/iu);
-    return (prefixed?.[1] || text.split(/\s+/u).at(-1) || '').slice(0, 120);
-}
-function commandFailure(result, fallback) {
-    if (result.timedOut)
-        return new Error('The Codex update timed out.');
-    const lines = result.output
-        .replace(/\u001b\[[0-9;?]*[A-Za-z]/gu, '')
-        .split('\n')
-        .map((line) => line.trim())
-        .filter(Boolean);
-    return new Error(lines.at(-1) || fallback);
-}
-export function createCodexUpdateManager(dependencies = {}) {
-    const resolveCommand = dependencies.resolveCommand || (() => resolveHarnessCommand('codex'));
-    const isAppManaged = dependencies.isAppManaged || codexCommandIsAppManaged;
-    const run = dependencies.run || runCommand;
-    let active = null;
-    const updateCommand = () => {
-        const command = resolveCommand();
-        if (isAppManaged(command)) {
-            throw new Error('Codex is managed by the macOS app. Update the Codex app to update its bundled CLI.');
-        }
-        return command;
-    };
-    const perform = async () => {
-        const beforeRun = await run(updateCommand(), ['--version'], VERSION_TIMEOUT_MS);
-        if (beforeRun.failed || beforeRun.timedOut || beforeRun.exitCode !== 0) {
-            throw commandFailure(beforeRun, 'Codex is not installed or its version could not be read.');
-        }
-        const previousVersion = parseCodexVersion(beforeRun.output);
-        const updateRun = await run(updateCommand(), ['update'], UPDATE_TIMEOUT_MS);
-        if (updateRun.failed || updateRun.timedOut || updateRun.exitCode !== 0) {
-            throw commandFailure(updateRun, 'Codex could not update itself. Run `codex update` in a terminal on the machine.');
-        }
-        // Resolve again because the updater may replace a shim or install path.
-        const afterRun = await run(updateCommand(), ['--version'], VERSION_TIMEOUT_MS);
-        if (afterRun.failed || afterRun.timedOut || afterRun.exitCode !== 0) {
-            throw commandFailure(afterRun, 'Codex updated, but its new version could not be read.');
-        }
-        const currentVersion = parseCodexVersion(afterRun.output);
-        return {
-            ...(previousVersion ? { previousVersion } : {}),
-            ...(currentVersion ? { currentVersion } : {}),
-            updated: Boolean(previousVersion && currentVersion && previousVersion !== currentVersion),
-        };
-    };
-    return {
-        /** App-bundled Codex is updated with the app, not by its CLI command. */
-        available() {
-            try {
-                return !isAppManaged(resolveCommand());
-            }
-            catch {
-                return false;
-            }
-        },
-        /** Concurrent clicks share one installer process instead of racing writes. */
-        update() {
-            if (!active)
-                active = perform().finally(() => (active = null));
-            return active;
-        },
-    };
-}