Attach any file, take shares from other apps, and survive a backwards highlight

Attachments were images only. Now any file can be attached: from the file
chooser behind the "+" menu, or from Android's share sheet, which the app
is now in. An image still goes to the model as a picture; anything else is
stored under its own name (`<hex>-<name>`, cleaned by `safe_file_name`)
and the Claude driver ends the message with `Attached file: /abs/path`,
since the CLI reads files by path and a model cannot be shown a trace. The
user-message field is renamed `images` -> `attachments` on both sides,
with a serde alias reading the rows written before. A share arrives before
anyone has said which session it is for, so it is held in AppRoot with a
banner on the list until a session takes it; an open session takes it at
once. Unreadable shares are reported beside the composer, not thrown.

The tool card crashed the app when opened on a command holding a quoted
glob such as `-path '*/.git/*'`: highlights 1.1.0's shell lexer answers
`x '*/a/*'` with a span whose end is before its start, and AnnotatedString
refuses the range. Such spans are dropped; the library is the place for
the fix. The echo driver gains `/bash <command>` so a card with a given
command can be produced on the emulator.

ui-sandbox.sh's token salvage read the tokens block's close only at a line
start, ran past the compact `),],` the server writes, and copied `setups`
into the new config twice, which the server then refused.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

app/androidApp/src/main/kotlin/com/example/aiapp/AppRoot.kt

@@ -62,9 +62,16 @@ private data class FailedOpen(val request: SessionOpenRequest, val message: Stri
  * re-reading the stored settings -- a plain `remember` would keep serving the pre-enrollment null.
  *
  * [openRequest] is the session a notification tap asked for, likewise from MainActivity.
+ *
+ * [shareRequest] is what another app shared in, likewise. It is held here until a session takes it,
+ * because the share arrives before anyone has said which session it is for.
  */
 @Composable
-fun AppRoot(settingsVersion: Int, openRequest: SessionOpenRequest?) {
+fun AppRoot(
+    settingsVersion: Int,
+    openRequest: SessionOpenRequest?,
+    shareRequest: ShareRequest? = null,
+) {
     val context = LocalContext.current
     val scope = rememberCoroutineScope()
     var settings by remember(settingsVersion) { mutableStateOf(loadServerSettings(context)) }
@@ -75,6 +82,17 @@ fun AppRoot(settingsVersion: Int, openRequest: SessionOpenRequest?) {
     // Bumped whenever another screen changes something the list shows, so
     // returning to it refetches instead of showing a stale list.
     var reloadToken by remember { mutableIntStateOf(0) }
+    // Cleared by the session screen that attached it, not when a newer request arrives: a share
+    // must be attached exactly once, and only the screen that did it knows that it has.
+    var share by remember { mutableStateOf<ShareRequest?>(null) }
+    LaunchedEffect(shareRequest) {
+        if (shareRequest != null) {
+            share = shareRequest
+            // A session already open takes it. Otherwise the list is where the choice is made,
+            // whatever screen was showing: Spawn and Settings have nowhere to put a file.
+            if (screen !is Screen.Session) screen = Screen.Main
+        }
+    }
 
     // A standing condition rather than a per-request failure, so it is
     // stated once here instead of appended to every error that might be
@@ -162,6 +180,7 @@ fun AppRoot(settingsVersion: Int, openRequest: SessionOpenRequest?) {
                 MainScreen(
                     settings = current,
                     reloadToken = reloadToken,
+                    share = share,
                     onOpen = { screen = Screen.Session(it) },
                     onSpawn = { screen = Screen.Spawn },
                     onImported = { imported ->
@@ -179,7 +198,13 @@ fun AppRoot(settingsVersion: Int, openRequest: SessionOpenRequest?) {
             // row key. Only reachable since a notification can move straight from one session to
             // another; every other way here passes through [Screen.Main], which disposes it anyway.
             key(here.summary.id) {
-                SessionScreen(settings = current, summary = here.summary, onBack = goToMain)
+                SessionScreen(
+                    settings = current,
+                    summary = here.summary,
+                    onBack = goToMain,
+                    share = share,
+                    onShareTaken = { share = null },
+                )
             }
         is Screen.Spawn ->
             Box(Modifier.imePadding()) {