Attach any file, take shares from other apps, and survive a backwards highlight

Attachments were images only. Now any file can be attached: from the file
chooser behind the "+" menu, or from Android's share sheet, which the app
is now in. An image still goes to the model as a picture; anything else is
stored under its own name (`<hex>-<name>`, cleaned by `safe_file_name`)
and the Claude driver ends the message with `Attached file: /abs/path`,
since the CLI reads files by path and a model cannot be shown a trace. The
user-message field is renamed `images` -> `attachments` on both sides,
with a serde alias reading the rows written before. A share arrives before
anyone has said which session it is for, so it is held in AppRoot with a
banner on the list until a session takes it; an open session takes it at
once. Unreadable shares are reported beside the composer, not thrown.

The tool card crashed the app when opened on a command holding a quoted
glob such as `-path '*/.git/*'`: highlights 1.1.0's shell lexer answers
`x '*/a/*'` with a span whose end is before its start, and AnnotatedString
refuses the range. Such spans are dropped; the library is the place for
the fix. The echo driver gains `/bash <command>` so a card with a given
command can be produced on the emulator.

ui-sandbox.sh's token salvage read the tokens block's close only at a line
start, ran past the compact `),],` the server writes, and copied `setups`
into the new config twice, which the server then refused.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

server/src/session/driver.rs

@@ -15,6 +15,14 @@ use tokio::sync::mpsc;
 /// directions use the one id so the transcript renders them identically.
 pub type ImageRef = String;
 
+/// The name an upload from the phone is stored and served under: an image
+/// is `<hex>.<extension>` and is an [`ImageRef`] like any other; any other
+/// file keeps its own name after the hex, `<hex>-<name>`, because the name
+/// is what the reader attached and what the session is told. The two are
+/// told apart by `crate::media::media_type_for`, which knows every image
+/// extension this server writes.
+pub type AttachmentRef = String;
+
 /// One choice offered in answer to a [`Event::Question`].
 ///
 /// More than a label because the reader is deciding, not confirming: what
@@ -89,8 +97,11 @@ pub enum Event {
         /// sent it -- and left the phone to decide, from nothing but
         /// adjacency, which message an image belonged to. Belonging is not
         /// something to infer when the sender knew.
-        #[serde(default, skip_serializing_if = "Vec::is_empty")]
-        images: Vec<ImageRef>,
+        ///
+        /// `images` on disk until 2026-09-03, when files joined them;
+        /// the alias reads the rows written before that.
+        #[serde(default, alias = "images", skip_serializing_if = "Vec::is_empty")]
+        attachments: Vec<AttachmentRef>,
     },
     /// A message accepted from the phone that the session cannot read yet.
     ///
@@ -111,8 +122,8 @@ pub enum Event {
         /// Carried for the same reason [`Event::UserMessage`] carries it,
         /// and it matters more here: a waiting message is on screen for as
         /// long as the turn runs, so its attachment has nowhere else to be.
-        #[serde(default, skip_serializing_if = "Vec::is_empty")]
-        images: Vec<ImageRef>,
+        #[serde(default, alias = "images", skip_serializing_if = "Vec::is_empty")]
+        attachments: Vec<AttachmentRef>,
     },
     /// A message taken out of the queue before the session read it, by
     /// somebody tapping the bubble that was waiting for it.
@@ -146,8 +157,8 @@ pub enum Event {
         id: Option<String>,
         text: String,
         /// Carried through onto the `UserMessage` with everything else.
-        #[serde(default, skip_serializing_if = "Vec::is_empty")]
-        images: Vec<ImageRef>,
+        #[serde(default, alias = "images", skip_serializing_if = "Vec::is_empty")]
+        attachments: Vec<AttachmentRef>,
     },
     /// Streaming assistant text; the phone renders the concatenation as
     /// markdown.
@@ -515,7 +526,7 @@ pub trait Driver: Send + Sync {
     /// moment it actually starts reading it: that event is what puts the
     /// message in the transcript, so a driver that never sends it drops
     /// the message from the conversation entirely.
-    fn send_user_message(&self, text: String, images: Vec<ImageRef>);
+    fn send_user_message(&self, text: String, attachments: Vec<AttachmentRef>);
     /// Takes back a message that is still waiting, named by the id its
     /// [`Event::MessageQueued`] carried.
     ///