wave-code 1.5.1 → 1.6.1

package/src/remote/remoteControlCliHost.ts

@@ -10,7 +10,7 @@
  * white list and the page need no special case.
  *
  * Two consequences of "one session, and it is the one on screen", both
- * deliberate (docs/specs/ui/remote-control.md, 前台 CLI 故事):
+ * deliberate (docs/specs/remote/remote-web.md, 前台 CLI 故事):
  *
  * - Both ways of asking for the session list (`listDaemonSessions`, which the
  *   page reads, and `listSessions`) answer with exactly this session. The
@@ -42,6 +42,8 @@ import {
   hostSlashCommandsFor,
   toSlashCommandInfo,
 } from "../stdio/hostSlashCommands.js";
+import { readImagePreview } from "./imagePreview.js";
+import { readTextPreview } from "./textPreview.js";
 import { messagesForUi } from "../stdio/uiPayload.js";
 import {
   InvalidMessageWindowError,
@@ -163,6 +165,17 @@ export class RemoteControlCliHost implements RemoteControlHost {
       // 会落到「这台电脑上的会话不支持这个操作」——白名单放行 ≠ 宿主实现。
       case "getRecentWorkdirs":
         return { dirs: readRecentWorkdirs() };
+      // 远控页按需取图（spec「点消息里的图片路径看原图」）。与 daemon 那条
+      // 共用 `imagePreview.ts`：判型按解码后的真实容器、压到单帧预算内。
+      // 不实现的话页面会落到 hostUnsupported，而「白名单放行 ≠ 宿主实现」
+      // 这份规格已经踩过一次（见场景 7）。
+      case "getImagePreview":
+        return readImagePreview(typeof p.path === "string" ? p.path : "");
+      case "getTextPreview":
+        // 与取图同一条按需读取通道（spec remote/remote-web.md「点消息里的文件
+        // 路径看内容」）；前台 CLI 会话同样要能回，见图片故事场景 7 那条
+        // 「白名单放行 ≠ 宿主实现」。
+        return readTextPreview(typeof p.path === "string" ? p.path : "");
       case "rememberRecentWorkdir":
         rememberRecentWorkdir(typeof p.workdir === "string" ? p.workdir : "");
         return null;
@@ -203,11 +216,20 @@ export class RemoteControlCliHost implements RemoteControlHost {
           // business travelling over a relay (and would be dropped silently,
           // leaving the frame's shape to chance). The host-local half comes
           // from the one table, filtered for this entry (spec
-          // ui/slash-commands.md「弹窗里的宿主命令只有一份表」) — the same bytes
-          // the daemon returns, so the phone sees one list either way.
+          // commands/slash-commands.md「弹窗里的宿主命令只有一份表」) — the same
+          // bytes the daemon returns, with one exception: `/resume` is dropped
+          // here, because this host holds exactly one session slot. Restoring a
+          // transcript from disk would mean replacing the session the user is
+          // watching in the terminal (and `initialize` is not implemented here
+          // either), so the row would be one that does nothing when picked —
+          // the exact defect the one-table rule forbids. The table declares the
+          // entry's ceiling; the host narrows it to what it can actually run
+          // (spec commands/slash-commands.md 场景 4).
           commands: [
             ...this.session.slashCommands().map(toSlashCommandInfo),
-            ...hostSlashCommandsFor("remote-page"),
+            ...hostSlashCommandsFor("remote-page").filter(
+              (command) => command.id !== "resume",
+            ),
           ],
         };
       default:
@@ -227,10 +249,19 @@ export class RemoteControlCliHost implements RemoteControlHost {
       decision?: unknown;
     };
     if (typeof p.requestId !== "string" || !p.decision) return;
-    this.session.respondPermission(
-      p.requestId,
-      p.decision as PermissionDecision,
-    );
+    const decision = p.decision as PermissionDecision;
+    this.session.respondPermission(p.requestId, decision);
+    // 不带反馈的拒绝 = 用户在页面上关掉了确认卡（关闭键 / Esc），本轮就此结束：
+    // 与桌面端 / VS Code / JetBrains 的 `denied → abortMessage()`、以及 Claude
+    // Code 的 `cancelAndAbort`（无 feedback 直接 abort 整轮）同一条语义。少了这
+    // 一步，手机上关掉提问弹窗后模型会拿着「用户拒绝了操作」继续往下做，而同一
+    // 张卡在桌面端关掉就停（spec ui/confirm-ui.md 场景 2 / 5、remote-web.md
+    // 场景 24）。**带 message 的拒绝不中断**——那是用户给出理由后拒绝这一次工具
+    // 调用，模型要照反馈继续或改问。
+    const rejectionFeedback = decision.message?.trim();
+    if (decision.behavior === "deny" && !rejectionFeedback) {
+      this.session.abort();
+    }
   }
 
   /**
@@ -366,10 +397,17 @@ export class RemoteControlCliHost implements RemoteControlHost {
     messages: Message[];
     contextUsagePercent: number;
     reset?: boolean;
+    anchorLost?: boolean;
+    hasMore?: boolean;
   }> {
     const contextUsagePercent = this.session.contextUsagePercent();
     const window: MessageWindow = {};
     if (typeof p.since === "string") window.since = p.since;
+    // 上翻取更早的锚点（spec ui/message-rendering-system.md「首屏一页，上翻按需
+    // 取更早」，远控页自 2026-11-06 起也翻）。少这一行，`{before, limit}` 会被当成
+    // 「只要一页尾巴」——回的是同一段尾部、`hasMore` 仍是 true，页面每次滚到顶都
+    // 白要一次，永远翻不动。
+    if (typeof p.before === "string") window.before = p.before;
     if (p.limit !== undefined) window.limit = Number(p.limit);
 
     let normalized: MessageWindow | undefined;

package/src/remote/remoteControlService.ts

@@ -49,6 +49,7 @@ import {
   type RelaySocketFactory,
 } from "./relayClient.js";
 import type { RemoteControlEndpoint } from "./remoteControlConfig.js";
+import { resultForRemote } from "../stdio/uiPayload.js";
 
 /**
  * Methods the remote channel accepts.
@@ -131,7 +132,7 @@ export const REMOTE_ALLOWED_METHODS: ReadonlySet<string> = new Set([
   "renameSession",
   "compact",
   "getSlashCommands",
-  // 发起新会话（spec ui/remote-control.md「Web 端也能发起新会话」）：白名单
+  // 发起新会话（spec remote/remote-web.md「Web 端也能发起新会话」）：白名单
   // 从「只碰已存在的会话」显式扩到「可在选定目录建会话」。initialize 在下方
   // 收敛入参——放行的是「建一条会话」这个能力，不是它的整张参数表。
   "initialize",
@@ -151,14 +152,17 @@ export const REMOTE_ALLOWED_METHODS: ReadonlySet<string> = new Set([
   // 排队消息三动作里的两条（「立即发送」= sendMessage{force} + 删这条）。
   "updateQueuedMessage",
   "deleteQueuedMessageById",
-  // 后台任务与工作流：读输出 / 停止（不毁文件，回执即可）。
-  // 注意这里没有 `backgroundCurrentTask`（把当前这轮转为后台）：页面上唯一的入口
-  // 是 Ctrl/Cmd+B，手机键盘没有这个键 —— 放行一个页面根本调不到的方法，只是把
-  // 暴露面放大，与本清单「跟页面能力一致」的判据相反。
+  // 后台任务与工作流：读输出 / 停止 / 把本轮转到后台（不毁文件，回执即可）。
+  // `backgroundCurrentTask` 曾经因为「页面上唯一的入口是 Ctrl/Cmd+B，手机键盘
+  // 没有这个键」而不在此列：放行一个页面根本调不到的方法，只是把暴露面放大，
+  // 与本清单「跟页面能力一致」的判据相反。2026-10-30 助手消息上出现了后台按钮
+  // （spec: task-background-execution.md「前台工具后台化」场景 3–6），页面上有了
+  // 调用方，这条判据随之满足。
   "getBackgroundTaskOutput",
   "stopBackgroundTask",
   "getWorkflowRuns",
   "stopWorkflowRun",
+  "backgroundCurrentTask",
   // `@` 文件建议与历史提示词：都只读，锚在信封 sessionId 的 workdir 上。
   "searchFiles",
   "getPromptHistory",
@@ -184,6 +188,33 @@ export const REMOTE_ALLOWED_METHODS: ReadonlySet<string> = new Set([
   // 的任何东西（那个能力本来就在 `initialize` 里）。
   "getRecentWorkdirs",
   "rememberRecentWorkdir",
+  // ── 第六批：点消息里的图片路径看原图（spec「点消息里的图片路径看原图」）──
+  // 读：`getImagePreview` 把**一个路径**变成一张压缩到单帧预算内的图。
+  // 这是第一个收调用方 path 的读方法，所以边界是显式的三道而不是目录前缀：
+  // ① 页面只对图片扩展名给点击入口，路径来自对话内容（没有手输入口）；
+  // ② 宿主解码后按**真实容器**判型（`imagePreview.ts` 的 ALLOWED_SOURCE_FORMATS），
+  //    扩展名只是路由提示，指向文本文件的软链在这一道被挡下；
+  // ③ 只读、不写不删，回包体积被压缩档位限住。
+  // **不按目录限制**是刻意的：真机截图落在 `/tmp`，限目录等于打掉主场景
+  // （见规格边界情况那条「边界画在内容类型上，不画在目录上」）。
+  "getImagePreview",
+  // 读：`getTextPreview` 是同一个形态的第二条（spec「点消息里的文件路径看内容」）
+  // ——把**一个路径**变成它开头那段文本。它**不设扩展名白名单**：判据是「读出来
+  // 是不是文本」（含 NUL 或大部分解不出即拒），不是「名字像不像文本」。
+  // 为什么这条通道不必也不该加路径限制：`sendMessage` + `permissionResponse` 已在
+  // 白名单里，持页面者让模型 Read 同一个路径拿到的就是同一份内容——任何这里加的
+  // 目录/扩展名限制都是假防护，只挡住更好用的入口（见规格边界情况那条）。
+  "getTextPreview",
+  // ── 第七批：`/resume`，接着磁盘上的历史会话聊（spec remote/remote-web.md
+  // 「手机端也能接着磁盘上的历史会话聊」）──
+  // 读：`listAllSessions` 枚举这台机器**所有项目目录**下的主会话（跨工作目录），
+  // 页面按最近活跃时间取前 200 条（帧预算是硬约束，见规格场景 2）。
+  // **`restoreSession` 仍然不放行**：它是「原地载入」——把承接进程里某条正在跑的
+  // 会话换成另一条（在桌面端就等于换掉用户正看着的那个 pane），与「手机只当控制
+  // 面」相冲。页面打开一条磁盘会话走的是**新建**路径
+  // （`initialize { workdir, restoreSessionId }`）：恢复出来的是一条新会话，没有
+  // 任何已有会话被替换，见 `pickInitializeParams` 的注释。
+  "listAllSessions",
 ]);
 
 /**
@@ -206,10 +237,22 @@ export const REMOTE_HOST_UNSUPPORTED = -32011;
 
 /**
  * The only `initialize` shape the remote channel may request: create a session
- * in a chosen directory, with an optional permission mode. Everything else in
- * its parameter surface (model / apiKey / tools / plugins / mcpServers /
- * restoreSessionId …) is dropped, not validated — a whitelisted method must
- * not smuggle in knobs the whitelist never approved.
+ * in a chosen directory, with an optional permission mode, and — since
+ * `/resume` (spec remote/remote-web.md「手机端也能接着磁盘上的历史会话聊」) — an
+ * optional `restoreSessionId` that seeds that **new** session from a transcript
+ * already on disk. Everything else in its parameter surface (model / apiKey /
+ * tools / plugins / mcpServers …) is dropped, not validated — a whitelisted
+ * method must not smuggle in knobs the whitelist never approved.
+ *
+ * Why `restoreSessionId` belongs here and not on the old "no re-attach" rule:
+ * that rule was about **switching** between live sessions (the page does that
+ * with `getMessages` on its own `sessionId`, never by re-binding the host's
+ * agent). `/resume` is a different act — the target is a transcript nobody is
+ * running, which the process cannot serve until a session exists for it. The
+ * write is therefore "start a new session seeded from this history", exactly
+ * the same capability as `initialize { workdir }` (which the page has had since
+ * 「Web 端也能发起新会话」), and the session it creates is a fresh one: no live
+ * session is replaced.
  *
  * `entrypoint` is stamped here rather than picked: it describes the CHANNEL, not
  * the caller's request, and must not be spoofable (the page cannot claim to be
@@ -224,6 +267,9 @@ function pickInitializeParams(params: unknown): Record<string, unknown> {
   if (typeof p.permissionMode === "string" && p.permissionMode) {
     picked.permissionMode = p.permissionMode;
   }
+  if (typeof p.restoreSessionId === "string" && p.restoreSessionId) {
+    picked.restoreSessionId = p.restoreSessionId;
+  }
   return picked;
 }
 
@@ -579,13 +625,15 @@ export class RemoteControlService implements RemoteControlController {
     }
 
     // `initialize` is whitelisted for exactly one shape: create a session in a
-    // chosen directory (and optionally set its permission mode). Its full
+    // chosen directory, optionally set its permission mode, and optionally seed
+    // it from a transcript on disk (`restoreSessionId`, `/resume`). Its full
     // parameter surface — apiKey / baseURL / model / tools / plugins /
     // mcpServers … — would let the page reshape the machine-side agent, so
-    // everything outside the two allowed keys is dropped here rather than
-    // trusted to the caller (spec 「Web 端也能发起新会话」场景 5). Re-attach
-    // (`restoreSessionId`) is NOT part of the whitelisted shape: the page
-    // switches sessions via `getMessages`, not by re-binding the host agent.
+    // everything outside those three keys is dropped here rather than trusted to
+    // the caller (spec 「Web 端也能发起新会话」场景 5、「手机端也能接着磁盘上
+    // 的历史会话聊」场景 4). Switching between *live* sessions still goes
+    // through `getMessages` on the page's own `sessionId`, never by re-binding
+    // an existing host agent.
     const requestParams =
       frame.method === "initialize"
         ? pickInitializeParams(frame.params)
@@ -624,10 +672,13 @@ export class RemoteControlService implements RemoteControlController {
     method: string,
     result: unknown,
   ): void {
+    // The page's copy: user image bytes never go over the relay
+    // (spec remote/remote-channel.md「远端通道只开一个白名单」场景 10).
+    const forRemote = resultForRemote(result);
     const envelope: RelayEnvelope = {
       id: replyId,
       method: "result",
-      params: { result },
+      params: { result: forRemote },
     };
     const bytes = frameBytes(envelope);
     if (bytes <= REMOTE_MAX_FRAME_BYTES) {
@@ -635,7 +686,7 @@ export class RemoteControlService implements RemoteControlController {
       return;
     }
 
-    const page = asMessagePage(result);
+    const page = asMessagePage(forRemote);
     if (page) {
       const kept = trailingCountThatFits(
         page.messages.length,
@@ -645,7 +696,7 @@ export class RemoteControlService implements RemoteControlController {
       // Not even one message fits: there is nothing to send that the phone
       // could render, and an empty list would only make it re-ask forever.
       if (kept > 0) {
-        this.send(pageFrame(replyId, page, kept));
+        this.send(pageFrame(replyId, page, kept, kept < page.messages.length));
         return;
       }
     }
@@ -808,13 +859,19 @@ function pageFrame(
   replyId: number | string,
   page: MessagePage,
   count: number,
+  droppedEarlier = false,
 ): RelayEnvelope {
+  // 裁掉的是**最早**那几条，所以只要真裁过，「更早的还在」就必然成立——哪怕
+  // 宿主那一页说的 `hasMore: false`（上翻取到这条会话最早那一页时正是如此）。
+  // 不在这里改这个字段，页面会照着 false 把上翻开关关掉，被裁掉的几条就再也
+  // 翻不回来了；页大小因此只能是「大概几条」，**条数永远不是终止判据**。
+  const rest = droppedEarlier ? { ...page.rest, hasMore: true } : page.rest;
   return {
     id: replyId,
     method: "result",
     params: {
       result: {
-        ...page.rest,
+        ...rest,
         messages: page.messages.slice(-count),
       },
     },

package/src/remote/remoteNotifications.ts

@@ -23,10 +23,12 @@ import type {
   AgentCallbacks,
   BackgroundTask,
   BackgroundTaskSummary,
+  NoticeLevel,
   PermissionMode,
   ToolBlockUpdateCallbackParams,
   ToolPermissionContext,
 } from "wave-agent-sdk";
+import { getAutoCompactThreshold } from "wave-agent-sdk";
 import { toolBlockUpdateForUi } from "../stdio/uiPayload.js";
 
 /**
@@ -44,9 +46,25 @@ type StreamDelta = Parameters<
  * push and its `getSessionInfo` read). 0 when the cap is unknown, so a caller
  * that has one reads a number rather than a special case.
  */
-export function percentOf(tokens: number, maxInputTokens: number): number {
-  if (!maxInputTokens || maxInputTokens <= 0) return 0;
-  return Math.min(100, Math.round((tokens / maxInputTokens) * 100));
+export function percentOf(
+  tokens: number,
+  contextWindow: number,
+  maxOutputTokens = 32_000,
+): number {
+  if (!Number.isFinite(contextWindow) || contextWindow <= 0) return 0;
+  const calculatedThreshold = getAutoCompactThreshold(
+    contextWindow,
+    Number.isFinite(maxOutputTokens) && maxOutputTokens > 0
+      ? maxOutputTokens
+      : 32_000,
+  );
+  // Some host tests auto-mock the SDK barrel wholesale. Keep the wire helper
+  // usable in that environment without changing production's shared formula.
+  const threshold =
+    Number.isFinite(calculatedThreshold) && calculatedThreshold > 0
+      ? calculatedThreshold
+      : contextWindow;
+  return Math.min(100, Math.round((tokens / threshold) * 100));
 }
 
 /** The shapes both hosts put on the wire, keyed by the method they ride under. */
@@ -87,15 +105,19 @@ export const remoteWire = {
     return rest;
   },
 
-  errorBlockAdded: (error: string) => ({ error }),
+  noticeAdded: (notice: { level: NoticeLevel; content: string }) => notice,
 
   loadingChange: (loading: boolean, latestTotalTokens?: number) => ({
     loading,
     ...(latestTotalTokens === undefined ? {} : { latestTotalTokens }),
   }),
 
-  contextUsage: (latestTotalTokens: number, maxInputTokens: number) => ({
-    percent: percentOf(latestTotalTokens, maxInputTokens),
+  contextUsage: (
+    latestTotalTokens: number,
+    contextWindow: number,
+    maxOutputTokens = 32_000,
+  ) => ({
+    percent: percentOf(latestTotalTokens, contextWindow, maxOutputTokens),
   }),
 
   permissionModeChange: (mode: PermissionMode) => ({ mode }),
@@ -174,7 +196,7 @@ export function remoteNotifications(
     | "onAssistantContentUpdated"
     | "onAssistantReasoningUpdated"
     | "onToolBlockUpdated"
-    | "onErrorBlockAdded"
+    | "onNoticeAdded"
   >
 > {
   return {
@@ -193,8 +215,8 @@ export function remoteNotifications(
     onToolBlockUpdated: (params) => {
       notify("toolBlockUpdated", remoteWire.toolBlockUpdated(params));
     },
-    onErrorBlockAdded: (error: string) => {
-      notify("errorBlockAdded", remoteWire.errorBlockAdded(error));
+    onNoticeAdded: (notice) => {
+      notify("noticeAdded", remoteWire.noticeAdded(notice));
     },
   };
 }

package/src/remote/textPreview.ts

@@ -0,0 +1,155 @@
+/**
+ * On-demand text preview for the remote-control page.
+ *
+ * ## Why this exists
+ *
+ * Same missing channel as {@link readImagePreview}: the phone has no file
+ * system, so "the agent wrote it to `/tmp/build.log`" is a path the user can
+ * read nowhere. The image channel solved that for pictures; this one solves it
+ * for everything else (spec `remote/remote-web.md`「点消息里的文件路径看内容」).
+ *
+ * ## The one gate
+ *
+ * The image channel is authorised by decoding: only a real raster container is
+ * served, so a `/tmp/x.png` that is really a text file dies before any bytes
+ * leave. Text has no equivalent — "it is text" is close to "anything can be
+ * read" — so by decision (2026-11-01) this channel does **not** filter by
+ * extension. What is left is: judge by *content* (a NUL byte or a mostly
+ * undecodable payload means binary), never write, never delete, and cap what
+ * one reply can carry. The consequences are spelled out in the spec's
+ * 「文本预览不设扩展名白名单」 boundary note — read that before widening this.
+ *
+ * ## Why the cap is not the frame budget
+ *
+ * {@link TEXT_PREVIEW_MAX_BYTES} is 256 KiB: a single frame could carry roughly
+ * twice that, but one screen of phone text is a few KiB, so anything past this
+ * only makes the overlay slower to render. The cap is applied as "read this
+ * much, then say you truncated", never as "refuse the file".
+ */
+import { open, stat } from "node:fs/promises";
+
+/** Never read more than this for one preview; the rest is reported as cut. */
+export const TEXT_PREVIEW_MAX_BYTES = 256 * 1024;
+
+/** The bytes are not text (NUL byte, or mostly undecodable as UTF-8). */
+export const TEXT_PREVIEW_NOT_TEXT = -32016;
+/** The path could not be read (missing, permission, a directory). */
+export const TEXT_PREVIEW_READ_FAILED = -32017;
+
+/**
+ * Share of U+FFFD above which the payload is treated as binary rather than as
+ * text with a bad encoding. A GBK log that is otherwise readable stays under
+ * this; a JPEG/ELF renamed to `.log` lands far above it.
+ */
+const MAX_REPLACEMENT_RATIO = 0.1;
+
+export interface TextPreviewResult {
+  /** The path that was asked for, echoed for the page's header. */
+  path: string;
+  content: string;
+  /** Size of the file on disk, for the "只显示前 X" line. */
+  bytes: number;
+  /** Bytes actually decoded (≤ {@link TEXT_PREVIEW_MAX_BYTES}). */
+  returnedBytes: number;
+  /** True when the file is larger than what was returned. */
+  truncated: boolean;
+  /** True when the decoded text contains replacement characters. */
+  encodingIssue: boolean;
+}
+
+function fail(code: number, message: string): Error {
+  const error = new Error(message) as Error & { code?: number };
+  error.code = code;
+  return error;
+}
+
+/**
+ * Read the head of one file from **this machine** and decode it as UTF-8.
+ *
+ * Throws an `Error` carrying one of the `TEXT_PREVIEW_*` codes; the remote
+ * error reply turns it into one visible line on the page.
+ */
+export async function readTextPreview(
+  filePath: string,
+): Promise<TextPreviewResult> {
+  if (typeof filePath !== "string" || filePath.trim() === "") {
+    throw fail(TEXT_PREVIEW_READ_FAILED, "getTextPreview requires a path");
+  }
+
+  let size: number;
+  try {
+    const info = await stat(filePath);
+    if (!info.isFile()) {
+      throw fail(TEXT_PREVIEW_READ_FAILED, `Not a file: ${filePath}`);
+    }
+    size = info.size;
+  } catch (error) {
+    if (
+      error instanceof Error &&
+      "code" in error &&
+      typeof error.code === "number"
+    ) {
+      throw error;
+    }
+    throw fail(TEXT_PREVIEW_READ_FAILED, `Could not read ${filePath}`);
+  }
+
+  const readBytes = Math.min(size, TEXT_PREVIEW_MAX_BYTES);
+  let source: Buffer;
+  try {
+    const handle = await open(filePath, "r");
+    try {
+      const buffer = Buffer.allocUnsafe(readBytes);
+      let filled = 0;
+      // `read` may return short; loop until the head we asked for is in hand.
+      while (filled < readBytes) {
+        const { bytesRead } = await handle.read(
+          buffer,
+          filled,
+          readBytes - filled,
+          filled,
+        );
+        if (bytesRead === 0) break;
+        filled += bytesRead;
+      }
+      source = buffer.subarray(0, filled);
+    } finally {
+      await handle.close();
+    }
+  } catch {
+    throw fail(TEXT_PREVIEW_READ_FAILED, `Could not read ${filePath}`);
+  }
+
+  // The gate: content, not the name. UTF-16 files carry NUL bytes and are
+  // rejected here too — this channel promises UTF-8, and saying so is better
+  // than showing a screen of interleaved NULs.
+  if (source.includes(0)) {
+    throw fail(TEXT_PREVIEW_NOT_TEXT, `${filePath} is not a text file`);
+  }
+
+  const truncated = size > source.length;
+  // With `stream: true` the decoder holds back an incomplete trailing sequence
+  // instead of turning it into U+FFFD, so a cut never produces a broken last
+  // character (场景 5：按字节截断、退回最近的字符边界).
+  const content = new TextDecoder("utf-8").decode(source, {
+    stream: truncated,
+  });
+
+  let replacements = 0;
+  for (const char of content) {
+    if (char === "\uFFFD") replacements++;
+  }
+  const length = content.length;
+  if (length > 0 && replacements / length > MAX_REPLACEMENT_RATIO) {
+    throw fail(TEXT_PREVIEW_NOT_TEXT, `${filePath} is not a text file`);
+  }
+
+  return {
+    path: filePath,
+    content,
+    bytes: size,
+    returnedBytes: source.length,
+    truncated,
+    encodingIssue: replacements > 0,
+  };
+}