@turns/dev 0.0.4 → 0.0.5

package/dist/agent-anchor.js

@@ -8,7 +8,7 @@ import readline from 'node:readline';
 import { DatabaseSync } from 'node:sqlite';
 import { fileURLToPath } from 'node:url';
 import { WebSocket } from 'ws';
-import { ACP_PROFILES, lettaSessionIdentity, PROCESS_HARNESSES, parseLettaSessionIdentity, processEventSessionId, processInvocation, RPC_PROFILES, resolveHarnessCommand, rpcFrameSessionIdentity, rpcUiRequestIsInformational, } from "./harness-registry.js";
+import { ACP_PROFILES, lettaHeadlessEnvironment, lettaSessionIdentity, PROCESS_HARNESSES, parseLettaSessionIdentity, processEventSessionId, processInvocation, RPC_PROFILES, resolveHarnessCommand, rpcFrameSessionIdentity, rpcUiRequestIsInformational, } from "./harness-registry.js";
 import { recordLettaSessionContext } from "./letta-session-context.js";
 const socketIndex = process.argv.indexOf('--socket');
 const socketPath = socketIndex >= 0 ? path.resolve(process.argv[socketIndex + 1] || '') : '';
@@ -363,7 +363,7 @@ class LettaTransport extends LineTransport {
             ...(anchor.model && anchor.model !== 'auto' ? ['--model', anchor.model] : []),
             ...(createSession ? ['--new'] : ['--conversation', existing.conversationId]),
         ];
-        super(anchor, 'letta', resolveHarnessCommand('letta', { command: 'letta' }), args, anchor.cwd);
+        super(anchor, 'letta', resolveHarnessCommand('letta', { command: 'letta' }), args, anchor.cwd, lettaHeadlessEnvironment());
         this.conversationId = createSession ? '' : existing.conversationId;
         this.agentId = createSession ? '' : existing.agentId;
         this.permissionMode = anchor.permissionMode;
@@ -1436,9 +1436,11 @@ class Anchor {
         // send_message crosses a local socket after the queue claim crosses a
         // WebSocket, so either acknowledgement can be lost after the agent has
         // already accepted the turn. A replacement claim for the same prompt must
-        // adopt a running/successful turn instead of executing it again. Failed or
-        // interrupted turns remain retryable when the server issues a new claim.
-        if (sameClaim || (sameMessage && ['running', 'completed'].includes(this.currentTurn?.status))) {
+        // adopt it regardless of outcome instead of repeating work or turning a
+        // persistent harness failure into an automatic retry loop. A deliberate
+        // user retry arrives with a new queue message ID.
+        if (sameClaim ||
+            (sameMessage && ['running', 'completed', 'interrupted', 'error'].includes(this.currentTurn?.status))) {
             if (claimToken && claimToken !== this.currentTurn.claimToken) {
                 this.currentTurn = { ...this.currentTurn, claimToken };
             }

package/dist/file-browsing.js

@@ -31,9 +31,11 @@ export const FILE_TYPE_SAMPLE_BYTES = 64 * 1024;
 /** Extensions carrying their own type, where guessing text would be wrong. */
 const BINARY_CONTENT_TYPES = new Map([
     ['.apng', 'image/apng'],
+    ['.aac', 'audio/aac'],
     ['.avif', 'image/avif'],
     ['.bmp', 'image/bmp'],
     ['.gif', 'image/gif'],
+    ['.flac', 'audio/flac'],
     ['.gz', 'application/gzip'],
     ['.heic', 'image/heic'],
     ['.ico', 'image/x-icon'],
@@ -41,12 +43,20 @@ const BINARY_CONTENT_TYPES = new Map([
     ['.jpg', 'image/jpeg'],
     ['.mp3', 'audio/mpeg'],
     ['.mp4', 'video/mp4'],
+    ['.m4a', 'audio/mp4'],
+    ['.m4v', 'video/mp4'],
+    ['.mov', 'video/quicktime'],
+    ['.oga', 'audio/ogg'],
+    ['.ogg', 'audio/ogg'],
+    ['.ogv', 'video/ogg'],
+    ['.opus', 'audio/ogg'],
     ['.pdf', 'application/pdf'],
     ['.png', 'image/png'],
     ['.svg', 'image/svg+xml'],
     ['.wasm', 'application/wasm'],
     ['.webm', 'video/webm'],
     ['.webp', 'image/webp'],
+    ['.wav', 'audio/wav'],
     ['.zip', 'application/zip'],
 ]);
 /**

package/dist/harness-registry.js

@@ -168,6 +168,27 @@ export function parseLettaSessionIdentity(value) {
     const match = /^letta:(agent-(?:local-)?[0-9a-f-]+):(.+)$/iu.exec(String(value || ''));
     return match ? { agentId: match[1], conversationId: match[2] } : { agentId: '', conversationId: String(value || '') };
 }
+/**
+ * Letta's TUI stores cloud credentials in ~/.letta/settings.json, while its
+ * headless transport requires LETTA_API_KEY in the spawned process. Return a
+ * narrow child-only environment overlay; explicit daemon environment wins.
+ */
+export function lettaHeadlessEnvironment(home = HOME) {
+    if (process.env.LETTA_API_KEY)
+        return {};
+    try {
+        const settings = JSON.parse(fs.readFileSync(path.join(home, '.letta', 'settings.json'), 'utf8'));
+        const apiKey = typeof settings?.env?.LETTA_API_KEY === 'string' ? settings.env.LETTA_API_KEY.trim() : '';
+        const baseUrl = typeof settings?.env?.LETTA_BASE_URL === 'string' ? settings.env.LETTA_BASE_URL.trim() : '';
+        return {
+            ...(apiKey ? { LETTA_API_KEY: apiKey } : {}),
+            ...(!process.env.LETTA_BASE_URL && baseUrl ? { LETTA_BASE_URL: baseUrl } : {}),
+        };
+    }
+    catch {
+        return {};
+    }
+}
 export const RPC_PROFILES = {
     // Prime selects an existing session only at process launch. The transcript
     // path is authoritative (its header id can differ from its filename id), so

package/dist/queue-worker.js

@@ -45,6 +45,70 @@ export async function reserveCreatingNativeSession(request, creating, sessionId,
         return;
     await request({ type: 'session.native.reserve', sessionId, agentSessionId });
 }
+function workingDirectoryFailure(message, directory, error) {
+    const detail = error instanceof Error ? error.message : String(error || 'Unknown filesystem error.');
+    return new Error(`${message}: ${directory}. ${detail}`, { cause: error });
+}
+/** Resolve the directory typed into a new-session draft on the machine that
+ * will run it. The browser cannot expand `~` because the daemon's home may be
+ * different from the viewer's, and a new project directory may not exist yet.
+ *
+ * Check the nearest existing ancestor against the daemon allowlist before
+ * creating anything. The final assertion repeats that check after mkdir so a
+ * symlinked ancestor cannot launch a session outside the allowlist.
+ */
+export function prepareNewSessionWorkingDirectory(requestedDirectory, allowedDirectories = [], homeDirectory = os.homedir()) {
+    const requested = String(requestedDirectory || '').trim();
+    if (!requested)
+        throw new Error('Choose a working directory.');
+    const expanded = requested === '~'
+        ? homeDirectory
+        : requested.startsWith('~/')
+            ? path.join(homeDirectory, requested.slice(2))
+            : requested;
+    if (!path.isAbsolute(expanded)) {
+        throw new Error(`Working directory must be an absolute path or start with ~/: ${requested}`);
+    }
+    const resolved = path.resolve(expanded);
+    let exists = true;
+    try {
+        fs.statSync(resolved);
+    }
+    catch (error) {
+        if (error?.code === 'ENOENT')
+            exists = false;
+        else
+            throw workingDirectoryFailure('Working directory is inaccessible', resolved, error);
+    }
+    if (!exists) {
+        let ancestor = path.dirname(resolved);
+        while (!fs.existsSync(ancestor)) {
+            const parent = path.dirname(ancestor);
+            if (parent === ancestor)
+                break;
+            ancestor = parent;
+        }
+        if (allowedDirectories.length && !workingDirectoryIsAllowed(ancestor, allowedDirectories)) {
+            throw new Error(`Working directory is outside the daemon allowlist: ${resolved}`);
+        }
+        try {
+            fs.mkdirSync(resolved, { recursive: true });
+        }
+        catch (error) {
+            throw workingDirectoryFailure('Working directory could not be created', resolved, error);
+        }
+    }
+    try {
+        const canonical = assertAllowedWorkingDirectory(resolved, allowedDirectories);
+        fs.accessSync(canonical, fs.constants.X_OK);
+        return canonical;
+    }
+    catch (error) {
+        if (/outside the daemon allowlist/iu.test(String(error?.message || error)))
+            throw error;
+        throw workingDirectoryFailure('Working directory is inaccessible', resolved, error);
+    }
+}
 /** The origin serving the same deployment as a `wss://…/api/socket` endpoint. */
 export function httpBaseUrl(websocketUrl) {
     const url = new URL(websocketUrl);
@@ -244,7 +308,13 @@ export function resultError(result) {
 }
 export function dispatchErrorIsRetryable(error) {
     const message = String(error?.message || error || '');
-    return !(/(?:not supported|does not support|no resumable native session|session key.*unavailable|no local transcript descriptor|working directory is unavailable|outside the daemon allowlist|agent executable not found)/iu.test(message) || /attachment .* (?:size mismatch|download failed \(4\d\d\))/iu.test(message));
+    // OpenCode emits this only after its provider stream has exhausted its own
+    // backoff. Re-queueing the turn starts that entire retry sequence again and
+    // also persists another copy of the user's prompt in the native session.
+    return !(/(?:not supported|does not support|no resumable native session|session key.*unavailable|no local transcript descriptor|working directory (?:is (?:unavailable|not a directory|inaccessible)|must be|could not be created)|outside the daemon allowlist|agent executable not found|provider finish_reason:\s*network_error)/iu.test(message) || /attachment .* (?:size mismatch|download failed \(4\d\d\))/iu.test(message));
+}
+export function queueFailureIsRetryable(error, promptStarted) {
+    return !promptStarted && dispatchErrorIsRetryable(error);
 }
 export async function actualHarnessStatus(entry) {
     if (!entry || entry.connection.closed)
@@ -505,7 +575,10 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
                     promptId: claim.prompt.id,
                     claimToken: claim.claimToken,
                     error: redactor.redactText(error.message),
-                    retryable: dispatchErrorIsRetryable(error),
+                    // The anchor accepted and finished this prompt. Replaying it can
+                    // duplicate side effects and turns persistent harness failures (for
+                    // example, expired authentication) into an unbounded retry loop.
+                    retryable: queueFailureIsRetryable(error, true),
                 });
             }
             else {
@@ -572,11 +645,11 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
             const workingDirectory = pendingNativeSession
                 ? String(claim.session?.workingDirectory || '')
                 : await nativeDescriptorWorkingDirectory(descriptor);
-            const fallbackDirectory = path.dirname(descriptor.file);
-            const selectedDirectory = workingDirectory && path.isAbsolute(workingDirectory) && fs.existsSync(workingDirectory)
-                ? workingDirectory
-                : fallbackDirectory;
-            cwd = assertAllowedWorkingDirectory(selectedDirectory, options.allowedDirectories);
+            cwd = pendingNativeSession
+                ? prepareNewSessionWorkingDirectory(workingDirectory, options.allowedDirectories)
+                : assertAllowedWorkingDirectory(workingDirectory && path.isAbsolute(workingDirectory) && fs.existsSync(workingDirectory)
+                    ? workingDirectory
+                    : path.dirname(descriptor.file), options.allowedDirectories);
             if (!fs.statSync(cwd).isDirectory())
                 throw new Error(`Working directory is unavailable: ${cwd}`);
             entry = await usableAnchor(sessionId, descriptor.harness, agentSessionId);
@@ -587,6 +660,10 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
             ...claim,
             entry,
             renewTimer: null,
+            // Recovery only observes turns that an anchor already accepted. Treat
+            // an uncertain recovery failure conservatively for the same reason as a
+            // failed live turn: the prompt may already have produced side effects.
+            promptStarted: Boolean(recovery),
         };
         claims.set(sessionId, queued);
         const renewClaim = () => request({
@@ -645,6 +722,10 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
             // boundary before starting this attempt so an earlier turn_error with
             // that ID cannot immediately settle the new turn.
             const eventCursor = entry.connection.eventCursor();
+            // A local request can lose its response after the anchor has accepted
+            // the prompt, so crossing this boundary permanently disables automatic
+            // replay even when the exact delivery outcome is unknown.
+            queued.promptStarted = true;
             await entry.connection.request('send_message', {
                 source: descriptor.harness,
                 sessionId,
@@ -712,7 +793,7 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
                     promptId: claim.prompt.id,
                     claimToken: claim.claimToken,
                     error: redactor.redactText(error?.message || String(error)),
-                    retryable: dispatchErrorIsRetryable(error),
+                    retryable: queueFailureIsRetryable(error, Boolean(held?.promptStarted)),
                 }).catch(() => { });
             }
             claims.delete(sessionId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@turns/dev",
-  "version": "0.0.4",
+  "version": "0.0.5",
   "description": "Upload local AI agent sessions to turns.dev",
   "license": "MIT",
   "type": "module",