@khorsheed/dsh-file-preview 0.1.0

package/lib/typert.remote-client.js

@@ -0,0 +1,210 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import { z } from 'zod'
+
+const _khorsheed_dsh_file_preview_filePreview_list_parameter_0$schema = z.intersection(z.string(), z.unknown())
+const _khorsheed_dsh_file_preview_filePreview_list_result$schema = z.object({
+  'entries': z.array(z.object({
+  'path': z.string().readonly(),
+  'op': z.union([z.literal("read"), z.literal("write"), z.literal("edit")]).readonly(),
+  'seq': z.number().readonly(),
+  'turn': z.number().readonly(),
+  'step': z.number().readonly(),
+  'diffs': z.array(z.object({
+  'seq': z.number().readonly(),
+  'turn': z.number().readonly(),
+  'step': z.number().readonly(),
+  'oldText': z.union([z.literal(null), z.string()]).readonly(),
+  'newText': z.string().readonly(),
+})).readonly(),
+  'lastDiff': z.union([z.undefined(), z.object({
+  'oldText': z.union([z.literal(null), z.string()]).readonly(),
+  'newText': z.string().readonly(),
+})]).readonly().optional(),
+})).readonly(),
+  'asOfSeq': z.number().readonly(),
+  'truncated': z.boolean().readonly(),
+})
+const _khorsheed_dsh_file_preview_filePreview_read_parameter_0$schema = z.intersection(z.string(), z.unknown())
+const _khorsheed_dsh_file_preview_filePreview_read_parameter_1$schema = z.string()
+const _khorsheed_dsh_file_preview_filePreview_read_result$schema = z.object({
+  'path': z.string().readonly(),
+  'kind': z.union([z.literal("text"), z.literal("image"), z.literal("binary"), z.literal("missing"), z.literal("too-large"), z.literal("error")]).readonly(),
+  'content': z.string().readonly().optional(),
+  'url': z.string().readonly().optional(),
+  'truncated': z.boolean().readonly().optional(),
+  'htmlScripted': z.boolean().readonly().optional(),
+  'size': z.number().readonly().optional(),
+  'message': z.string().readonly().optional(),
+})
+const _khorsheed_dsh_file_preview_filePreview_reveal_parameter_0$schema = z.intersection(z.string(), z.unknown())
+const _khorsheed_dsh_file_preview_filePreview_reveal_parameter_1$schema = z.string()
+const _khorsheed_dsh_file_preview_filePreview_reveal_result$schema = z.union([z.object({
+  'revealed': z.literal(true).readonly(),
+}), z.object({
+  'revealed': z.literal(false).readonly(),
+  'reason': z.union([z.literal("missing"), z.literal("select-failed")]).readonly(),
+})])
+const _khorsheed_dsh_file_preview_filePreview_turnFiles_parameter_0$schema = z.intersection(z.string(), z.unknown())
+const _khorsheed_dsh_file_preview_filePreview_turnFiles_result$schema = z.object({
+  'turns': z.array(z.object({
+  'turn': z.number().readonly(),
+  'files': z.array(z.object({
+  'path': z.string().readonly(),
+  'seq': z.number().readonly(),
+  'step': z.number().readonly(),
+  'added': z.number().readonly().optional(),
+  'removed': z.number().readonly().optional(),
+})).readonly(),
+})).readonly(),
+  'asOfSeq': z.number().readonly(),
+})
+
+export const TYPERT_REMOTE = {
+  package: '@khorsheed/dsh-file-preview',
+  descriptors: [
+    {
+      id: '@khorsheed/dsh-file-preview#filePreview/list',
+      service: 'filePreview',
+      namespace: 'filePreview',
+      method: 'list',
+      invocation: { kind: 'direct' },
+      scope: {
+        context: 'agent',
+        wire: 'agentId',
+      },
+      parameters: [
+        {
+          name: 'agent',
+          wire: 'agentId',
+          source: 'lookup',
+          lookup: 'agent',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-session/types#SessionId',
+            schema: _khorsheed_dsh_file_preview_filePreview_list_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@khorsheed/dsh-file-preview/types#FilePreviewList',
+        schema: _khorsheed_dsh_file_preview_filePreview_list_result$schema,
+      },
+      sourceLocation: {"file":"packages/file-preview/src/index.ts","line":316,"column":3},
+    },
+    {
+      id: '@khorsheed/dsh-file-preview#filePreview/read',
+      service: 'filePreview',
+      namespace: 'filePreview',
+      method: 'read',
+      invocation: { kind: 'direct' },
+      scope: {
+        context: 'agent',
+        wire: 'agentId',
+      },
+      parameters: [
+        {
+          name: 'agent',
+          wire: 'agentId',
+          source: 'lookup',
+          lookup: 'agent',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-session/types#SessionId',
+            schema: _khorsheed_dsh_file_preview_filePreview_read_parameter_0$schema,
+          },
+        },
+        {
+          name: 'path',
+          wire: 'path',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@khorsheed/dsh-file-preview#filePreview/read:path',
+            schema: _khorsheed_dsh_file_preview_filePreview_read_parameter_1$schema,
+          },
+        },
+      ],
+      cancellation: { parameter: 'signal' },
+      result: {
+        mode: 'strict',
+        typeSymbol: '@khorsheed/dsh-file-preview/types#FilePreviewRead',
+        schema: _khorsheed_dsh_file_preview_filePreview_read_result$schema,
+      },
+      sourceLocation: {"file":"packages/file-preview/src/index.ts","line":392,"column":9},
+    },
+    {
+      id: '@khorsheed/dsh-file-preview#filePreview/reveal',
+      service: 'filePreview',
+      namespace: 'filePreview',
+      method: 'reveal',
+      invocation: { kind: 'direct' },
+      scope: {
+        context: 'agent',
+        wire: 'agentId',
+      },
+      parameters: [
+        {
+          name: 'agent',
+          wire: 'agentId',
+          source: 'lookup',
+          lookup: 'agent',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-session/types#SessionId',
+            schema: _khorsheed_dsh_file_preview_filePreview_reveal_parameter_0$schema,
+          },
+        },
+        {
+          name: 'path',
+          wire: 'path',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@khorsheed/dsh-file-preview#filePreview/reveal:path',
+            schema: _khorsheed_dsh_file_preview_filePreview_reveal_parameter_1$schema,
+          },
+        },
+      ],
+      cancellation: { parameter: 'signal' },
+      result: {
+        mode: 'strict',
+        typeSymbol: '@khorsheed/dsh-file-preview/types#FilePreviewReveal',
+        schema: _khorsheed_dsh_file_preview_filePreview_reveal_result$schema,
+      },
+      sourceLocation: {"file":"packages/file-preview/src/index.ts","line":469,"column":9},
+    },
+    {
+      id: '@khorsheed/dsh-file-preview#filePreview/turnFiles',
+      service: 'filePreview',
+      namespace: 'filePreview',
+      method: 'turnFiles',
+      invocation: { kind: 'direct' },
+      scope: {
+        context: 'agent',
+        wire: 'agentId',
+      },
+      parameters: [
+        {
+          name: 'agent',
+          wire: 'agentId',
+          source: 'lookup',
+          lookup: 'agent',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@deepseek-ai/dsh-session/types#SessionId',
+            schema: _khorsheed_dsh_file_preview_filePreview_turnFiles_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@khorsheed/dsh-file-preview/types#FilePreviewTurnMap',
+        schema: _khorsheed_dsh_file_preview_filePreview_turnFiles_result$schema,
+      },
+      sourceLocation: {"file":"packages/file-preview/src/index.ts","line":347,"column":3},
+    },
+  ],
+}
+
+export default TYPERT_REMOTE

package/lib/types/bash-writes.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Bash-write capture: the "B channel + A collection" seam (upstream-seam
+ * registry S2). The official bash tool writes files (heredocs, redirects,
+ * `tee`, `sed -i`) with no log structure a products view can fold — the
+ * file-preview fold only knows `read`/`write`/`edit` tool calls. This module
+ * watches each session's event stream, extracts high-precision write targets
+ * from bash command strings, verifies each with `fs.stat` after the call
+ * settles (prefer a miss over a false positive), and keeps a per-session
+ * registry the `filePreview.list` fold merges into its entries. It never
+ * touches the session log — the official `Session.append` cannot mark an
+ * event `ignorable: true`, and the persistence read path refuses unknown
+ * event types that lack the marker (a plugin-appended event would poison the
+ * log on reload), which is exactly why this seam is a side registry instead.
+ * The registry is rebuilt on `session/created` by replaying the session's own
+ * history, so a restarted host regains its captures.
+ * @module @khorsheed/dsh-file-preview
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { FileSystem } from '@deepseek-ai/dsh-fs';
+/** One verified captured write, merged into the fold as a `write` entry. */
+export interface CapturedWrite {
+    readonly turn: number;
+    readonly step: number;
+    /** Seq of the issuing `tool/call`, for latest-first ordering. */
+    readonly seq: number;
+}
+/**
+ * Extract write-target tokens from one bash command string. High-precision
+ * forms only (the "minimal set"): a single `>` redirect (`cat > path`, any
+ * `cmd > path`), `tee path` (append forms skipped), and `sed -i ... path`
+ * (the first non-option token after the inline script). `>>`, fd redirects
+ * (`2>`), `>&`, `<>`, and any write form inside a heredoc body are ignored;
+ * `cp`/`mv`/`python open()` are deliberately deferred. Quoted targets keep
+ * their quotes here — expansion strips them.
+ * @param command - the bash tool's command string.
+ * @returns raw target tokens, capped per command.
+ */
+export declare function extractWriteTargets(command: string): string[];
+/**
+ * Expand one raw target token into an absolute host path. Strips quotes,
+ * expands a leading `~` and `$VAR`/`${VAR}` from the given environment, and
+ * resolves a relative target against the session cwd. Rejects anything that
+ * cannot be a literal path: glob metacharacters, command substitution, an
+ * unset variable (rather than guessing a truncated path), or a relative
+ * target with no cwd to anchor it.
+ * @param token - a raw target from {@link extractWriteTargets}.
+ * @param env - the host environment (the collector runs in the host process,
+ *   so `$DSH_HOME`-style variables resolve here, not in the fold).
+ * @param home - the host home directory for `~`.
+ * @param cwd - the owning session's cwd for relative targets, or undefined.
+ * @returns the absolute path, or null when the token is not statable literally.
+ */
+export declare function expandShellPath(token: string, env: NodeJS.ProcessEnv, home: string, cwd: string | undefined): string | null;
+/** Options for {@link BashWriteCollector}. */
+export interface BashWriteCollectorOptions {
+    fs: FileSystem;
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+    /** Cap on captured writes per session (mirrors the fold's maxFiles). */
+    maxFiles?: number;
+}
+/**
+ * Per-session registry of bash-written files. Subscribes to the session event
+ * firehose: `tool/call` (bash) records the command's write candidates keyed by
+ * callId; the matching `tool/result` stat-verifies them (files must exist and
+ * be files — prefer a miss over a false positive) and stores the survivors.
+ * `session/created` replays the session's own history so a restarted host
+ * regains captures without any durable state of its own.
+ */
+export declare class BashWriteCollector {
+    #private;
+    constructor(options: BashWriteCollectorOptions);
+    /**
+     * Subscribe to the session feed; the returned disposer removes both
+     * listeners (fiber disposal also cleans them up — this is belt and braces).
+     * @param ctx - the owning composition context.
+     * @returns a disposer removing the listeners.
+     */
+    attach(ctx: Context): () => void;
+    /** Verified captures for one session (the fold-merge source), or undefined. */
+    captured(sessionId: string): ReadonlyMap<string, CapturedWrite> | undefined;
+}
+//# sourceMappingURL=bash-writes.d.ts.map

package/lib/types/bash-writes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-writes.d.ts","sourceRoot":"","sources":["../../src/bash-writes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAcrD,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAwDD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CA4G7D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,MAAM,GAAG,IAAI,CAoBf;AAYD,8CAA8C;AAC9C,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,UAAU,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,kBAAkB;;IAU7B,YAAY,OAAO,EAAE,yBAAyB,EAK7C;IAED;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,IAAI,CAc/B;IAED,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,SAAS,CAE1E;CA0DF"}

package/lib/types/bash-writes.js

@@ -0,0 +1,367 @@
+/**
+ * Bash-write capture: the "B channel + A collection" seam (upstream-seam
+ * registry S2). The official bash tool writes files (heredocs, redirects,
+ * `tee`, `sed -i`) with no log structure a products view can fold — the
+ * file-preview fold only knows `read`/`write`/`edit` tool calls. This module
+ * watches each session's event stream, extracts high-precision write targets
+ * from bash command strings, verifies each with `fs.stat` after the call
+ * settles (prefer a miss over a false positive), and keeps a per-session
+ * registry the `filePreview.list` fold merges into its entries. It never
+ * touches the session log — the official `Session.append` cannot mark an
+ * event `ignorable: true`, and the persistence read path refuses unknown
+ * event types that lack the marker (a plugin-appended event would poison the
+ * log on reload), which is exactly why this seam is a side registry instead.
+ * The registry is rebuilt on `session/created` by replaying the session's own
+ * history, so a restarted host regains its captures.
+ * @module @khorsheed/dsh-file-preview
+ */
+import { homedir } from 'node:os';
+import { resolve as resolvePath } from 'node:path';
+/** Cap on write candidates extracted from one command (bounds stat load). */
+const MAX_CANDIDATES_PER_COMMAND = 8;
+/** A write-target token stripped of its surrounding quotes. */
+function stripQuotes(token) {
+    let t = token;
+    while (t.length >= 2
+        && ((t.startsWith("'") && t.endsWith("'")) || (t.startsWith('"') && t.endsWith('"')))) {
+        t = t.slice(1, -1);
+    }
+    return t;
+}
+/** Whether a character ends a shell token (outside quotes). */
+function isTokenBoundary(ch) {
+    return ch === ' ' || ch === '\t' || ch === '\n' || ch === '\r'
+        || ch === ';' || ch === '|' || ch === '&' || ch === '<' || ch === '>';
+}
+/**
+ * Read the next shell token starting at `from` (after any whitespace), with
+ * quote awareness so `'a b'` stays one token. Stops at a boundary character
+ * outside quotes.
+ * @param command - the command text.
+ * @param from - scan start index.
+ * @returns the raw token and the index just past it, or null at end / boundary.
+ */
+function nextToken(command, from) {
+    const n = command.length;
+    let i = from;
+    while (i < n && (command[i] === ' ' || command[i] === '\t'))
+        i++;
+    if (i >= n || isTokenBoundary(command[i] ?? ''))
+        return null;
+    let token = '';
+    let quote;
+    while (i < n) {
+        const ch = command[i] ?? '';
+        if (quote !== undefined) {
+            if (ch === quote)
+                quote = undefined;
+            token += ch;
+            i++;
+            continue;
+        }
+        if (ch === "'" || ch === '"') {
+            quote = ch;
+            token += ch;
+            i++;
+            continue;
+        }
+        if (isTokenBoundary(ch))
+            break;
+        token += ch;
+        i++;
+    }
+    return token.length === 0 ? null : { token, end: i };
+}
+/**
+ * Extract write-target tokens from one bash command string. High-precision
+ * forms only (the "minimal set"): a single `>` redirect (`cat > path`, any
+ * `cmd > path`), `tee path` (append forms skipped), and `sed -i ... path`
+ * (the first non-option token after the inline script). `>>`, fd redirects
+ * (`2>`), `>&`, `<>`, and any write form inside a heredoc body are ignored;
+ * `cp`/`mv`/`python open()` are deliberately deferred. Quoted targets keep
+ * their quotes here — expansion strips them.
+ * @param command - the bash tool's command string.
+ * @returns raw target tokens, capped per command.
+ */
+export function extractWriteTargets(command) {
+    const targets = [];
+    const n = command.length;
+    let i = 0;
+    let quote;
+    let heredoc;
+    while (i < n) {
+        const ch = command[i] ?? '';
+        // Inside a heredoc body: skip whole lines until the delimiter line, so
+        // content like HTML `>` never reads as a redirect.
+        if (heredoc !== undefined) {
+            const nl = command.indexOf('\n', i);
+            const line = command.slice(i, nl === -1 ? n : nl);
+            if (line.trim() === heredoc)
+                heredoc = undefined;
+            i = nl === -1 ? n : nl + 1;
+            continue;
+        }
+        if (quote !== undefined) {
+            if (ch === quote)
+                quote = undefined;
+            i++;
+            continue;
+        }
+        if (ch === "'" || ch === '"') {
+            quote = ch;
+            i++;
+            continue;
+        }
+        // Heredoc start: `<<` / `<<-` followed by a delimiter word.
+        if (ch === '<' && command[i + 1] === '<') {
+            let j = i + 2;
+            if (command[j] === '-')
+                j++;
+            const q = command[j];
+            let delim = '';
+            if (q === "'" || q === '"') {
+                const end = command.indexOf(q, j + 1);
+                delim = end === -1 ? '' : command.slice(j + 1, end);
+                j = end === -1 ? n : end + 1;
+            }
+            else {
+                const start = j;
+                while (j < n && !/\s/.test(command[j] ?? ''))
+                    j++;
+                delim = command.slice(start, j);
+            }
+            if (delim.length > 0)
+                heredoc = delim;
+            i = j;
+            continue;
+        }
+        // `tee path` (append forms skipped entirely).
+        if (ch === 't' && command.startsWith('tee', i) && (i === 0 || isTokenBoundary(command[i - 1] ?? ''))) {
+            const after = command.slice(i + 3);
+            if (/^\s*(?:-a\b|--append\b)/.test(after)) {
+                i += 3;
+                continue;
+            }
+            const consumed = /^\s*(?:-i\b|--ignore-interrupts\s+)*/.exec(after)?.[0].length ?? 0;
+            const tok = nextToken(command, i + 3 + consumed);
+            if (tok !== null) {
+                targets.push(tok.token);
+                i = tok.end;
+                continue;
+            }
+            i += 3;
+            continue;
+        }
+        // `sed -i ... path` — the first non-option token after the inline script.
+        if (ch === 's' && command.startsWith('sed', i) && (i === 0 || isTokenBoundary(command[i - 1] ?? ''))) {
+            const im = /^\s*-i([A-Za-z0-9.]*)/.exec(command.slice(i + 3));
+            if (im === null) {
+                i++;
+                continue;
+            }
+            let j = i + 3 + im[0].length;
+            const opt = nextToken(command, j);
+            if (opt !== null && (opt.token === '-e' || opt.token === '--expression')) {
+                const script = nextToken(command, opt.end);
+                j = script === null ? opt.end : script.end;
+            }
+            else if (opt !== null) {
+                j = opt.end;
+            }
+            const file = nextToken(command, j);
+            if (file !== null && !file.token.startsWith('-')) {
+                targets.push(file.token);
+                i = file.end;
+                continue;
+            }
+            i = j;
+            continue;
+        }
+        // Single `>` redirect target (`>>`, `2>`, `>&`, `<>`, `&>` skipped).
+        if (ch === '>') {
+            const prev = command[i - 1] ?? '';
+            const next = command[i + 1] ?? '';
+            const skipped = next === '>' || next === '&' || prev === '>' || prev === '<' || prev === '&' || /[0-9]/.test(prev);
+            if (skipped) {
+                i++;
+                continue;
+            }
+            const tok = nextToken(command, i + 1);
+            if (tok !== null) {
+                targets.push(tok.token);
+                i = tok.end;
+                continue;
+            }
+            i++;
+            continue;
+        }
+        i++;
+    }
+    return targets.slice(0, MAX_CANDIDATES_PER_COMMAND);
+}
+/**
+ * Expand one raw target token into an absolute host path. Strips quotes,
+ * expands a leading `~` and `$VAR`/`${VAR}` from the given environment, and
+ * resolves a relative target against the session cwd. Rejects anything that
+ * cannot be a literal path: glob metacharacters, command substitution, an
+ * unset variable (rather than guessing a truncated path), or a relative
+ * target with no cwd to anchor it.
+ * @param token - a raw target from {@link extractWriteTargets}.
+ * @param env - the host environment (the collector runs in the host process,
+ *   so `$DSH_HOME`-style variables resolve here, not in the fold).
+ * @param home - the host home directory for `~`.
+ * @param cwd - the owning session's cwd for relative targets, or undefined.
+ * @returns the absolute path, or null when the token is not statable literally.
+ */
+export function expandShellPath(token, env, home, cwd) {
+    let t = stripQuotes(token);
+    if (t.length === 0)
+        return null;
+    // Reject glob metacharacters, but not `${VAR}` braces — check after the
+    // variable references are removed so `${DSH_HOME}/x` passes.
+    if (/[*?[\]{}]/.test(t.replace(/\$\{[A-Za-z_][A-Za-z0-9_]*\}/g, '')))
+        return null;
+    if (t.includes('$(') || t.includes('`'))
+        return null;
+    if (t.startsWith('~'))
+        t = home + t.slice(1);
+    // Reject any variable reference the environment cannot satisfy.
+    const varPattern = /\$\{([A-Za-z_][A-Za-z0-9_]*)\}|\$([A-Za-z_][A-Za-z0-9_]*)/g;
+    let match;
+    while ((match = varPattern.exec(t)) !== null) {
+        const name = match[1] ?? match[2];
+        if (name === undefined || env[name] === undefined)
+            return null;
+    }
+    t = t.replace(varPattern, (_, braced, bare) => env[braced ?? bare ?? ''] ?? '');
+    if (t.length === 0)
+        return null;
+    if (t.startsWith('/'))
+        return t;
+    if (cwd === undefined || cwd.length === 0)
+        return null;
+    return resolvePath(cwd, t);
+}
+/** Parse a tool-call arguments JSON payload into a plain object ({} on failure). */
+function parseArguments(argumentsJson) {
+    try {
+        const value = JSON.parse(argumentsJson);
+        return value !== null && typeof value === 'object' ? value : {};
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Per-session registry of bash-written files. Subscribes to the session event
+ * firehose: `tool/call` (bash) records the command's write candidates keyed by
+ * callId; the matching `tool/result` stat-verifies them (files must exist and
+ * be files — prefer a miss over a false positive) and stores the survivors.
+ * `session/created` replays the session's own history so a restarted host
+ * regains captures without any durable state of its own.
+ */
+export class BashWriteCollector {
+    #fs;
+    #env;
+    #home;
+    #maxFiles;
+    /** sessionId → callId → pending bash write candidates. */
+    #pending = new Map();
+    /** sessionId → path → verified capture. */
+    #captured = new Map();
+    constructor(options) {
+        this.#fs = options.fs;
+        this.#env = options.env ?? process.env;
+        this.#home = options.home ?? homedir();
+        this.#maxFiles = options.maxFiles ?? 500;
+    }
+    /**
+     * Subscribe to the session feed; the returned disposer removes both
+     * listeners (fiber disposal also cleans them up — this is belt and braces).
+     * @param ctx - the owning composition context.
+     * @returns a disposer removing the listeners.
+     */
+    attach(ctx) {
+        const offs = [
+            ctx.on('session/event', (session, event) => {
+                void this.#onEvent(session, event);
+            }),
+            ctx.on('session/created', (session) => {
+                this.#replay(session);
+            }),
+        ];
+        return () => {
+            for (const off of offs) {
+                if (typeof off === 'function')
+                    off();
+            }
+        };
+    }
+    /** Verified captures for one session (the fold-merge source), or undefined. */
+    captured(sessionId) {
+        return this.#captured.get(sessionId);
+    }
+    /** Rebuild one session's registry from its own history (host restart). */
+    #replay(session) {
+        this.#pending.set(session.id, new Map());
+        this.#captured.set(session.id, new Map());
+        for (const event of session.events)
+            this.#onEvent(session, event);
+    }
+    #onEvent(session, event) {
+        if (event.type === 'tool/call') {
+            if (event.data.name !== 'bash')
+                return;
+            const command = parseArguments(event.data.arguments).command;
+            if (typeof command !== 'string' || command.length === 0)
+                return;
+            const candidates = extractWriteTargets(command)
+                .map(token => expandShellPath(token, this.#env, this.#home, session.header.cwd))
+                .filter((path) => path !== null);
+            if (candidates.length === 0)
+                return;
+            const calls = this.#pending.get(session.id) ?? new Map();
+            calls.set(String(event.data.callId), {
+                turn: event.data.turn,
+                step: event.data.step,
+                seq: event.seq,
+                candidates,
+            });
+            this.#pending.set(session.id, calls);
+            return;
+        }
+        if (event.type === 'tool/result') {
+            const calls = this.#pending.get(session.id);
+            if (calls === undefined)
+                return;
+            const callId = String(event.data.message?.source?.callId ?? '');
+            const pending = calls.get(callId);
+            if (pending === undefined)
+                return;
+            calls.delete(callId);
+            return this.#verify(session, pending);
+        }
+    }
+    /** stat-verify the pending candidates and store the survivors. */
+    async #verify(session, pending) {
+        const captured = this.#captured.get(session.id) ?? new Map();
+        for (const candidate of pending.candidates) {
+            if (captured.size >= this.#maxFiles || captured.has(candidate))
+                continue;
+            let ok = false;
+            try {
+                const target = await this.#fs.resolve(candidate);
+                const info = await this.#fs.stat(target);
+                ok = info?.type === 'file';
+            }
+            catch {
+                ok = false;
+            }
+            if (ok) {
+                captured.set(candidate, { turn: pending.turn, step: pending.step, seq: pending.seq });
+            }
+        }
+        if (captured.size > 0)
+            this.#captured.set(session.id, captured);
+    }
+}