fix(workspace-changes): review round on the served summaries

A repository whose baseline snapshot failed records nothing instead of
degrading to a file-tool summary; the write tool persists whether it
created or updated, so an unchanged overwrite outside snapshot coverage
no longer counts its content as added; hunks inside nested repositories
are dropped before check-ignore, which refused them with exit 128 and
lost the whole turn; a temporary root inside the work tree keeps the
recorder's own directory out of the snapshots; numstat keeps tabs in
file names; the summary carries line totals over the uncapped list and
the snapshot tree ids; the client's summary store abandons reads that
began before a connection reset. Docs and fixtures follow.

.agents/notes/implemented/feature/2026-09-11-turn-changed-files-card.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write .agents/notes/implemented/feature/2026-09-11-turn-changed-files-card.md
-2026-09-11-turn-changed-files-card.md: b8c6ad42cb7baab26cdc9d8bcda2b4ec672afe12
-2026-09-11-turn-changed-files-card.zh.md: 4687b74a18c00b2e5b30cef42ceefb54c912c2a0
+2026-09-11-turn-changed-files-card.md: 37efc24b5eaa0a20af677a0e15977e3653e2fb66
+2026-09-11-turn-changed-files-card.zh.md: ae45644f90ab536d254ae83f68f4450edcd6b01e

.agents/notes/implemented/feature/2026-09-11-turn-changed-files-card.md

@@ -48,6 +48,6 @@ The log deliberately carries nothing but the turn number. Summaries, snapshot tr
 
 Every turn with tool results costs two snapshots and one diff on the Host, and writes blob and tree objects for the changed files into the Session's temporary directory, which disposal removes. Edits the user makes during a turn are attributed to it. Hunk-based counts for uncovered files are sums over edits rather than a first-to-last diff.
 
-The Web bundle alone mounts the recorder, so headless, SDK, and ACP logs are unchanged; recorded Web scenarios gain the event and the card only when their workspace is a git repository, which one dedicated scenario seeds. The card replaces the Chinese and English "Files changed" row; prose file mentions still resolve against mutation-call paths and deliveries.
+The Web bundle alone mounts the recorder, so headless, SDK, and ACP logs are unchanged; recorded Web scenarios gain the event and the card whenever a turn changes a file; one dedicated scenario seeds a git repository so the card also carries a shell edit, while the others list their file-tool writes alone. The card replaces the Chinese and English "Files changed" row; prose file mentions still resolve against mutation-call paths and deliveries.
 
 Focused tests cover repositories with real git, directories outside any repository, coverage classification with the metadata the tools really persist, an interrupted turn overlapped by the next, ordering, caps, disposal, the macOS stub, the changed-file and folder routes, the card's fold and gesture states, and a Loader composition. The keyless Web scenario replays the recorder end to end, including a created file the repository ignores.

.agents/notes/implemented/feature/2026-09-11-turn-changed-files-card.zh.md

@@ -48,6 +48,6 @@ git 使用 `PATH` 上的默认可执行文件，不询问任何环境插件。
 
 每个有工具结果的轮次在 Host 上花费两次快照和一次比较，并把改动文件的 blob 与 tree 对象写入 Session 的临时目录，释放时一并删除。用户在轮次进行中的编辑会被算到该轮。未覆盖文件的 hunk 计数是编辑的累加，不是首尾对比。
 
-只有 Web bundle 挂载记录器，因此 headless、SDK 与 ACP 日志不变；录制的 Web 场景只有在工作区是 git 仓库时才新增该事件与卡片，一个专门的场景负责种入这样的仓库。卡片取代了中英文的“本轮文件改动”行；正文文件提及仍按修改调用路径与交付解析。
+只有 Web bundle 挂载记录器，因此 headless、SDK 与 ACP 日志不变；录制的 Web 场景只要某一轮改动了文件就会新增该事件与卡片；一个专门的场景种入 git 仓库，让卡片也带上 shell 的改动，其余场景只列它们的文件工具写入。卡片取代了中英文的“本轮文件改动”行；正文文件提及仍按修改调用路径与交付解析。
 
 聚焦测试用真实 git 覆盖仓库、不在任何仓库内的目录、按工具真实持久化的元数据做覆盖范围分类、被下一轮压上的中断轮次、排序、上限、释放、macOS 桩程序、改动文件与文件夹路由、卡片的折叠与手势状态，以及一次 Loader 组合。无密钥的 Web 场景端到端回放记录器，其中包括一个被仓库忽略的新建文件。

apps/web/tests/clickable-links-gallery.e2e.ts

@@ -40,7 +40,7 @@ const SNAPSHOT_DIR = fileURLToPath(new URL('./expected/clickable-links-gallery',
 const UI_EXPECTED = fileURLToPath(new URL('./expected/clickable-links-gallery/ui.expected.md', import.meta.url))
 // The golden holds the show-in-folder affordance; pin the native-opener
 // capability so headless Linux CI and desktop developer hosts expose the same
-// UI branch (same pin as produced-files.e2e.ts, whose overlay this shares).
+// UI branch.
 const OVERLAY = fileURLToPath(new URL('./clickable-links-gallery.overlay.yml', import.meta.url))
 const MODE = webSnapshotMode()
 const SEED_ID = 'clickable-links-gallery-web-e2e'

docs/subsystems/deliverables.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write docs/subsystems/deliverables.md
-deliverables.md: 6542d402a21e064f5b4d2f6223b0a22534fe7fd3
-deliverables.zh.md: f2b4490a66ee0f068af33ae00839b1ebb23e9ea8
+deliverables.md: cf795d747576451aafb104aad930efc352000fd3
+deliverables.zh.md: e4bb8bb2e590982d714701f9ab0b1851732831d2

docs/subsystems/deliverables.md

@@ -53,6 +53,12 @@ interface WorkspaceChangesSummary {
   files: WorkspaceChangedFile[]
   /** Complete changed-file count, including files omitted by the cap. */
   total: number
+  /** Lines added over every changed file, including files omitted by the cap. */
+  added: number
+  /** Lines deleted over every changed file, including files omitted by the cap. */
+  deleted: number
+  /** Git tree ids of the turn-start and turn-end snapshots; absent when no snapshot was taken. */
+  snapshot?: { before: string; after: string }
 }
 ```
 

docs/subsystems/deliverables.zh.md

@@ -53,6 +53,12 @@ interface WorkspaceChangesSummary {
   files: WorkspaceChangedFile[]
   /** Complete changed-file count, including files omitted by the cap. */
   total: number
+  /** Lines added over every changed file, including files omitted by the cap. */
+  added: number
+  /** Lines deleted over every changed file, including files omitted by the cap. */
+  deleted: number
+  /** Git tree ids of the turn-start and turn-end snapshots; absent when no snapshot was taken. */
+  snapshot?: { before: string; after: string }
 }
 ```
 

packages/client/ui-deliverables/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/client/ui-deliverables/README.md
-README.md: 5875fb131b094cf2e9bee3ec110bbd8bcdfba8e7
-README.zh.md: e3327a881cd15d13c6171a40b2cb6a537147098e
+README.md: 4547d0887b069ed40686af8821214d96b28f6c00
+README.zh.md: 8d3534b9fc2b72d3308b10b62f7536a20e8c90f1

packages/client/ui-deliverables/README.md

@@ -52,7 +52,7 @@ The closing prose links produced or delivered paths: an inline-code token resolv
 
 The Node half registers the static `ui:deliverable-file-references` system-prompt section asking the model to mention primary files from successful creation or modification calls and to write those and any other changed-file references as Markdown inline code. The browser half registers a wrapper around the changed-files card and explicit deliveries into the chat view's `conversation.chat.turnTail` hole. `deliverablesDefinition` folds the sequence of each Turn's latest validated `workspace/changes` announcement into `DeliverablesTurnData.changes`, whose summary the card reads from the Host and caches until the connection is replaced, its `deliverables/presented` events into deliveries, and the successful first-party mutation calls of `write`, `edit`, and mutating `str_replace_editor` commands into produced paths from their validated raw arguments; the produced paths feed only the prose mention resolver. Reads, deletes, unsupported tools, malformed calls, malformed events, and failed results contribute nothing. The package also provides the `chatFileMentions` service the chat view consults per closing message; composing the plugin out removes both surfaces and leaves the view's empty chain at zero cost.
 
-Native opening uses an authenticated POST addressed by the viewed Session, event sequence, and original file index; the changed-files route omits the index to open the common folder, which the Host derives from the recorded workspace-relative paths and verifies as a directory. The Host reads the viewed Session header with the declaration or summary and passes its cwd, or the deployment workspace root when absent, to `workspaceFiles.stat`. This uses the same composed filesystem as Sidebar previews and does not activate an Agent, including for child Sessions. Native actions require the canonical process path to map from a Host path back to that same process path. Providers without this mapping return 422 and the card directs the user to Sidebar preview; a same-named Host file is insufficient. The same configured desktop availability governs metadata and execution. Edits affect subsequent opens; deletion returns an error. No file-content copy or attachment is created. Plugin disposal cancels and awaits pending native-open requests.
+Native opening uses an authenticated POST addressed by the viewed Session, event sequence, and original file index; the changed-files route omits the index to open the common folder, which the Host derives from the recorded workspace-relative paths and verifies as a directory. For a declaration the Host reads the viewed Session header with the event and passes its cwd, or the deployment workspace root when absent, to `workspaceFiles.stat`; for a changed file it passes the working directory the served summary carries. This uses the same composed filesystem as Sidebar previews and does not activate an Agent, including for child Sessions. Native actions require the canonical process path to map from a Host path back to that same process path. Providers without this mapping return 422 and the card directs the user to Sidebar preview; a same-named Host file is insufficient. The same configured desktop availability governs metadata and execution. Edits affect subsequent opens; deletion returns an error. No file-content copy or attachment is created. Plugin disposal cancels and awaits pending native-open requests.
 
 </details>
 

packages/client/ui-deliverables/README.zh.md

@@ -52,7 +52,7 @@ Web 的 `standard`、`ptc` 与 `cordis` preset 提供 `present` 用于声明交
 
 Node 半部注册静态 `ui:deliverable-file-references` 系统提示词段，要求模型点名成功创建或修改的主要文件，并把这些文件以及正文中提到的其他本轮变更文件写成 Markdown 行内代码。浏览器半部把组合改动文件卡片与显式交付的包装组件注册进 chat 视图的 `conversation.chat.turnTail` 洞。`deliverablesDefinition` 把每个轮次最新且通过校验的 `workspace/changes` 宣告的序号折叠进 `DeliverablesTurnData.changes`，卡片按它向 Host 读取摘要并缓存到连接被替换为止，把 `deliverables/presented` 事件折叠为交付，并根据 `write`、`edit` 和有修改作用的 `str_replace_editor` 命令中经过校验的原始参数把成功的第一方修改调用折叠为产出路径；产出路径只供正文提及解析器使用。读取、删除、不受支持的工具、格式错误的调用、格式错误的事件和失败结果不贡献任何条目。本包还提供 chat 视图按收尾消息查询的 `chatFileMentions` 服务；把插件组合出去会同时移除两个表面，视图的空链以零成本留下。
 
-原生打开使用经过认证的 POST，通过当前查看的会话、事件序号和原始文件索引定位声明；改动文件路由省略索引时打开公共文件夹，Host 从记录的工作区相对路径推导该文件夹并验证它是目录。Host 读取声明或摘要及当前查看的会话 header，将其中的 cwd 传给 `workspaceFiles.stat`；未记录 cwd 时使用部署的工作目录。它与侧栏预览使用同一组合文件系统，无需启动 Agent，子会话也适用。原生操作要求规范化的进程路径能从 Host 路径映射回同一进程路径。提供方没有这种映射时返回 422，卡片提示使用侧栏预览；Host 上存在同名文件并不足够。同一份桌面可用性配置同时约束信息查询和实际执行。编辑会影响后续打开的内容；删除后返回错误。不创建文件内容副本或附件。插件释放时取消并等待进行中的原生打开请求。
+原生打开使用经过认证的 POST，通过当前查看的会话、事件序号和原始文件索引定位声明；改动文件路由省略索引时打开公共文件夹，Host 从记录的工作区相对路径推导该文件夹并验证它是目录。对声明，Host 读取事件及当前查看的会话 header，将其中的 cwd 传给 `workspaceFiles.stat`，未记录 cwd 时使用部署的工作目录；对改动文件，传的是所提供摘要携带的工作目录。它与侧栏预览使用同一组合文件系统，无需启动 Agent，子会话也适用。原生操作要求规范化的进程路径能从 Host 路径映射回同一进程路径。提供方没有这种映射时返回 422，卡片提示使用侧栏预览；Host 上存在同名文件并不足够。同一份桌面可用性配置同时约束信息查询和实际执行。编辑会影响后续打开的内容；删除后返回错误。不创建文件内容副本或附件。插件释放时取消并等待进行中的原生打开请求。
 
 </details>
 

packages/client/ui-deliverables/src/changes.ts

@@ -8,8 +8,8 @@ export const CHANGED_FILES_PATH = '/api/changes.summary'
 /** Authenticated POST route for opening a changed file, or the changed files' common folder, on the Host desktop. */
 export const CHANGES_OPEN_PATH = '/api/changes.open'
 
-/** The summary fields the route serves; the Host keeps the working directory to itself. */
-export type ChangesSummary = Pick<WorkspaceChangesSummary, 'turn' | 'files' | 'total'>
+/** The summary fields the route serves; the Host keeps the working directory and snapshot ids to itself. */
+export type ChangesSummary = Pick<WorkspaceChangesSummary, 'turn' | 'files' | 'total' | 'added' | 'deleted'>
 
 function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value)
@@ -30,12 +30,13 @@ export function isChangedFile(value: unknown): value is WorkspaceChangedFile {
 /**
  * Validate a summary read from the summary route.
  * @param value - decoded JSON.
- * @returns whether the value identifies a turn, a complete file list, and the total count.
+ * @returns whether the value identifies a turn, a complete file list, the total count, and the line totals.
  */
 export function isChangesSummary(value: unknown): value is ChangesSummary {
   if (!isRecord(value)) return false
-  const { turn, files, total } = value
+  const { turn, files, total, added, deleted } = value
   return Number.isSafeInteger(turn) && (turn as number) >= 1 && Number.isSafeInteger(total)
+    && Number.isSafeInteger(added) && Number.isSafeInteger(deleted)
     && Array.isArray(files) && files.every(isChangedFile)
 }
 

packages/client/ui-deliverables/src/client/ChangedFiles.tsx

@@ -30,10 +30,6 @@ function gesture(phase: PresentedOpenPhase | undefined): { key: 'presented.openi
   }
 }
 
-function sum(files: readonly { added: number; deleted: number }[], key: 'added' | 'deleted'): number {
-  return files.reduce((total, file) => total + file[key], 0)
-}
-
 /** Added and deleted line counts in the card's colors. */
 function Counts({ added, deleted, t }: { added: number; deleted: number } & PropsLocale<typeof NS>) {
   return <>
@@ -51,7 +47,7 @@ function Counts({ added, deleted, t }: { added: number; deleted: number } & Prop
  */
 export function ChangedFiles({ changes, cwd, sessionId, host, phases, onOpen, openFile, t }: {
   /** The served summary with the sequence of the event that announced it. */
-  changes: Pick<ChangesSummary, 'files' | 'total'> & { seq: number }
+  changes: Pick<ChangesSummary, 'files' | 'total' | 'added' | 'deleted'> & { seq: number }
   cwd: string | undefined
   sessionId: SessionId
   host: PresentedHost | null
@@ -70,7 +66,7 @@ export function ChangedFiles({ changes, cwd, sessionId, host, phases, onOpen, op
       <span className={css.title}>{t('changes.title', { count: String(changes.total) })}</span>
       <span className={css.stat} role={folder === undefined ? undefined : 'status'} data-error={folder?.failed || undefined}>
         {folder === undefined
-          ? <Counts t={t} added={sum(changes.files, 'added')} deleted={sum(changes.files, 'deleted')} />
+          ? <Counts t={t} added={changes.added} deleted={changes.deleted} />
           : t(folder.failed ? 'changes.folderError' : 'changes.folderOpening')}
       </span>
     </span>

packages/client/ui-deliverables/src/client/Deliverables.tsx

@@ -65,7 +65,7 @@ export function Deliverables({
     if (announced !== null && summary === undefined) void loadChangesSummary(sessionId, announced.seq)
   }, [announced, summary, sessionId, loadChangesSummary])
   const changes = announced !== null && typeof summary === 'object' && summary.files.length > 0
-    ? { seq: announced.seq, files: summary.files, total: summary.total }
+    ? { seq: announced.seq, ...summary }
     : null
   const collapsible = matched.presented.length > COLLAPSED_PRESENTED_COUNT
   const presented = collapsible && !expanded

packages/client/ui-deliverables/src/client/changes-summary.ts

@@ -11,6 +11,8 @@ export class ChangesSummaryStore {
   /** Summary URLs key the state across Sessions and turns. */
   readonly state = createSnapshotStore<Record<string, ChangesSummaryState | undefined>>({})
   private readonly lifetime = new AbortController()
+  /** The connection generation the current states belong to; a reset aborts it so no older read publishes. */
+  private generation = new AbortController()
   private readonly pending = new Set<Promise<void>>()
 
   /**
@@ -23,7 +25,7 @@ export class ChangesSummaryStore {
     const url = changesSummaryUrl(sessionId, seq)
     if (this.lifetime.signal.aborted || this.state.getSnapshot()[url] !== undefined) return
     this.state.update((state) => { state[url] = 'loading' })
-    const task = this.read(url)
+    const task = this.read(url, AbortSignal.any([this.lifetime.signal, this.generation.signal]))
     this.pending.add(task)
     try {
       await task
@@ -32,8 +34,10 @@ export class ChangesSummaryStore {
     }
   }
 
-  /** Forget every state; a replaced connection may reach a Host that no longer serves them. */
+  /** Forget every state and abandon in-flight reads; a replaced connection may reach a Host that no longer serves them. */
   reset(): void {
+    this.generation.abort()
+    this.generation = new AbortController()
     this.state.set({})
   }
 
@@ -43,10 +47,10 @@ export class ChangesSummaryStore {
     await Promise.all(this.pending)
   }
 
-  private async read(url: string): Promise<void> {
+  private async read(url: string, signal: AbortSignal): Promise<void> {
     let next: ChangesSummaryState = 'missing'
     try {
-      const response = await fetch(url, { signal: this.lifetime.signal })
+      const response = await fetch(url, { signal })
       if (response.ok) {
         const value: unknown = await response.json()
         if (isChangesSummary(value)) next = value
@@ -55,6 +59,6 @@ export class ChangesSummaryStore {
       // A transport failure reads as missing until the connection is replaced and the store reset.
       next = 'missing'
     }
-    if (!this.lifetime.signal.aborted) this.state.update((state) => { state[url] = next })
+    if (!signal.aborted) this.state.update((state) => { state[url] = next })
   }
 }

packages/client/ui-deliverables/src/present-open.ts

@@ -148,8 +148,8 @@ function handleChangesSummary(ctx: Context, request: Request): Response {
   if (!id || seq === undefined) return new Response('Invalid change summary coordinates.', { status: 400 })
   const summary = ctx.workspaceChanges.summary(id as SessionId, seq)
   if (summary === undefined) return new Response('Change summary unavailable.', { status: 404 })
-  const { turn, files, total } = summary
-  return Response.json({ turn, files, total } satisfies ChangesSummary, { headers: { 'cache-control': 'no-store' } })
+  const { turn, files, total, added, deleted } = summary
+  return Response.json({ turn, files, total, added, deleted } satisfies ChangesSummary, { headers: { 'cache-control': 'no-store' } })
 }
 
 async function handleChangesOpen(ctx: Context, request: Request): Promise<Response> {

packages/client/ui-deliverables/tests/changes-open.host.spec.ts

@@ -33,7 +33,10 @@ async function fixture() {
   await writeFile(join(cwd, 'src', 'b.ts'), 'b')
   const outside = join(root, 'outside.txt')
   await writeFile(outside, 'outside')
-  const data: WorkspaceChangesSummary = { turn: 1, cwd, total: 3, files: [changed('src/lib/a.ts'), changed('src/b.ts'), changed(outside, '~/outside.txt')] }
+  const data: WorkspaceChangesSummary = {
+    turn: 1, cwd, total: 3, added: 3, deleted: 0, snapshot: { before: 'a'.repeat(40), after: 'b'.repeat(40) },
+    files: [changed('src/lib/a.ts'), changed('src/b.ts'), changed(outside, '~/outside.txt')],
+  }
   const ctx = new Context()
   cleanups.push(() => ctx.fiber.dispose())
   await ctx.plugin(LocalFileSystem, { cwd })
@@ -68,7 +71,8 @@ describe('change summary route', () => {
     const response = await read()
     expect(response.status).toBe(200)
     expect(response.headers.get('cache-control')).toBe('no-store')
-    expect(await response.json()).toEqual({ turn: 1, total: 3, files: data.files })
+    // The working directory and snapshot ids stay on the Host.
+    expect(await response.json()).toEqual({ turn: 1, total: 3, added: 3, deleted: 0, files: data.files })
     expect((await read('?sessionId=owner&seq=8')).status).toBe(404)
     expect((await read('?sessionId=other&seq=9')).status).toBe(404)
     for (const bad of ['', '?seq=9', '?sessionId=owner', '?sessionId=owner&seq=x', '?sessionId=owner&seq=1.5']) {
@@ -147,12 +151,14 @@ describe('changed files native open route', () => {
     expect(isChangedFile({ path: 'a', display: '', added: 1, deleted: 2 })).toBe(false)
     expect(isChangedFile({ path: 'a', display: 'a', added: 1.5, deleted: 2 })).toBe(false)
     expect(isChangedFile([])).toBe(false)
-    expect(isChangesSummary({ turn: 1, total: 0, files: [] })).toBe(true)
-    expect(isChangesSummary({ turn: 1, total: 1, files: [{ path: 'a', display: 'a', added: 1, deleted: 0 }] })).toBe(true)
-    expect(isChangesSummary({ turn: '1', total: 0, files: [] })).toBe(false)
-    expect(isChangesSummary({ turn: 0, total: 0, files: [] })).toBe(false)
-    expect(isChangesSummary({ turn: 1, total: 1.5, files: [] })).toBe(false)
-    expect(isChangesSummary({ turn: 1, total: 1, files: [{ path: 'a' }] })).toBe(false)
+    expect(isChangesSummary({ turn: 1, total: 0, added: 0, deleted: 0, files: [] })).toBe(true)
+    expect(isChangesSummary({ turn: 1, total: 1, added: 1, deleted: 0, files: [{ path: 'a', display: 'a', added: 1, deleted: 0 }] })).toBe(true)
+    expect(isChangesSummary({ turn: '1', total: 0, added: 0, deleted: 0, files: [] })).toBe(false)
+    expect(isChangesSummary({ turn: 0, total: 0, added: 0, deleted: 0, files: [] })).toBe(false)
+    expect(isChangesSummary({ turn: 1, total: 1.5, added: 0, deleted: 0, files: [] })).toBe(false)
+    expect(isChangesSummary({ turn: 1, total: 0, files: [] })).toBe(false)
+    expect(isChangesSummary({ turn: 1, total: 0, added: 0, deleted: 'x', files: [] })).toBe(false)
+    expect(isChangesSummary({ turn: 1, total: 1, added: 1, deleted: 0, files: [{ path: 'a' }] })).toBe(false)
     expect(isChangesSummary([])).toBe(false)
     expect(isChangesEvent({ turn: 1 })).toBe(true)
     expect(isChangesEvent({ turn: 1, extra: true })).toBe(true)

packages/client/ui-deliverables/tests/deliverables.client.spec.tsx

@@ -469,7 +469,7 @@ describe('ChangedFiles card', () => {
     changedFile('~/.zshrc', 0, 0, { binary: true, path: '/home/u/.zshrc' }),
   ]
   const changes = { seq: 5 }
-  const served: ChangesSummary = { turn: 1, files, total: 11 }
+  const served: ChangesSummary = { turn: 1, files, total: 11, added: 1232, deleted: 326 }
 
   /** A store already holding the summary the Host served for the announced sequence. */
   function servedStore(summary: ChangesSummary = served, seq = 5) {
@@ -493,7 +493,7 @@ describe('ChangedFiles card', () => {
     const fetchMock = vi.fn(async (input: string | URL | Request) => {
       const url = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url
       if (url.endsWith('seq=5')) return Response.json(served)
-      if (url.endsWith('seq=6')) return Response.json({ turn: 1, files: [], total: 0 })
+      if (url.endsWith('seq=6')) return Response.json({ turn: 1, files: [], total: 0, added: 0, deleted: 0 })
       return new Response('gone', { status: 404 })
     })
     vi.stubGlobal('fetch', fetchMock)
@@ -526,6 +526,29 @@ describe('ChangedFiles card', () => {
     expect(summaries.state.getSnapshot()[changesSummaryUrl(SessionId('child-session'), 9)]).toBeUndefined()
   })
 
+  it('sums the header from the Host totals, not from the capped list', () => {
+    const capped = servedStore({ turn: 1, files: files.slice(0, 1), total: 2, added: 50, deleted: 20 })
+    const { view } = renderCard(new PresentedOpenController(), en, { changes, presented: [] as never[] }, capped)
+    expect(view.getByText('Edited 2 files')).toBeTruthy()
+    expect(view.getByText('+50')).toBeTruthy()
+    expect(view.getByText('-20')).toBeTruthy()
+  })
+
+  it('lets no read started before a reset publish afterwards', async () => {
+    const summaries = new ChangesSummaryStore()
+    let settle!: (response: Response) => void
+    vi.stubGlobal('fetch', vi.fn(() => new Promise<Response>((resolve) => { settle = resolve })))
+    const stale = summaries.load(SessionId('child-session'), 5)
+    summaries.reset()
+    const url = changesSummaryUrl(SessionId('child-session'), 5)
+    expect(summaries.state.getSnapshot()[url]).toBeUndefined()
+    settle(Response.json(served))
+    await stale
+    // The reset abandoned the read; a later mount asks the new Host afresh.
+    expect(summaries.state.getSnapshot()[url]).toBeUndefined()
+    await summaries.dispose()
+  })
+
   it('drops a read that settles after disposal', async () => {
     const summaries = new ChangesSummaryStore()
     let settle!: (response: Response) => void
@@ -618,7 +641,7 @@ describe('ChangedFiles card', () => {
   })
 
   it('renders without a fold for three files or fewer and beside delivery cards', () => {
-    const short = servedStore({ turn: 1, files: files.slice(0, 2), total: 2 })
+    const short = servedStore({ turn: 1, files: files.slice(0, 2), total: 2, added: 185, deleted: 43 })
     const { view } = renderCard(new PresentedOpenController(), en, { changes, presented: [{ path: 'report.pdf', seq: 6, index: 0 }] as never[] }, short)
     expect(view.getByText('Edited 2 files')).toBeTruthy()
     expect(view.queryByRole('button', { name: /Show all|Collapse changed/ })).toBeNull()
@@ -716,9 +739,9 @@ describe('plugin registration', () => {
     fetcher.mockResolvedValueOnce(Response.json({ name: 'desktop', available: true, fileManager: 'finder' }))
     await face.reloadPresentedHost()
     expect(face.hooks.presentedHost.getSnapshot()).toMatchObject({ name: 'desktop' })
-    fetcher.mockResolvedValueOnce(Response.json({ turn: 1, files: [], total: 0 }))
+    fetcher.mockResolvedValueOnce(Response.json({ turn: 1, files: [], total: 0, added: 0, deleted: 0 }))
     await face.loadChangesSummary(SessionId('child-session'), 5)
-    expect(face.hooks.changesSummary.getSnapshot()['/api/changes.summary?sessionId=child-session&seq=5']).toEqual({ turn: 1, files: [], total: 0 })
+    expect(face.hooks.changesSummary.getSnapshot()['/api/changes.summary?sessionId=child-session&seq=5']).toEqual({ turn: 1, files: [], total: 0, added: 0, deleted: 0 })
     ctx.emit('connection/reset')
     expect(face.hooks.presentedHost.getSnapshot()).toBeNull()
     // The replaced connection may reach a Host that no longer serves the summaries read so far.
@@ -814,7 +837,7 @@ it.each([{}, { turn: '1', callId: 'bad', files: [] },
   const owner = tailOwner(deliverablesOf(value), 6)
   const matched = selectDeliverables(owner)!
   const summaries = new ChangesSummaryStore()
-  summaries.state.set({ [changesSummaryUrl(SessionId('session'), 5)]: { turn: 1, files: [{ path: 'a.txt', display: 'a.txt', added: 1, deleted: 0 }], total: 1 } })
+  summaries.state.set({ [changesSummaryUrl(SessionId('session'), 5)]: { turn: 1, files: [{ path: 'a.txt', display: 'a.txt', added: 1, deleted: 0 }], total: 1, added: 1, deleted: 0 } })
   const view = render(<Deliverables {...openProps(new PresentedOpenController(), summaries)} matched={matched} openFile={owner.openFile} sessionId={SessionId('session')} t={makeTranslate(en)} />)
   expect(view.getByText('Edited 1 files')).toBeTruthy()
   expect(view.queryByText('Deliverables')).toBeNull()

packages/deliverables/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/deliverables/README.md
-README.md: 2d3a6908798a2e1565186a016d33d1a806f256d7
-README.zh.md: b9d000c923028168ba818ff995a25372f2203a93
+README.md: 92b9dfa95c4b5ded19fa2753d51551bafbd03fed
+README.zh.md: ff8e0fe0eba4ed02504e30765ede58c95b78daa0

packages/deliverables/README.md

@@ -25,7 +25,7 @@ The deliverables family records what a turn hands to the user as durable Session
 | Package | Role | ctx key |
 |---|---|---|
 | [`tool-present`](tool-present/README.md) | Declares existing files as final deliverables through the `present` tool | registers on `ctx.tools` |
-| [`workspace-changes`](workspace-changes/README.md) | Records each top-level turn's changed files from git working-tree snapshots | listens to `session/event`, appends `workspace/changes` |
+| [`workspace-changes`](workspace-changes/README.md) | Summarizes each top-level turn's changed files from git working-tree snapshots | provides `ctx.workspaceChanges`; listens to `session/event`, appends `workspace/changes` |
 
 -----
 

packages/deliverables/README.zh.md

@@ -25,7 +25,7 @@ deliverables 系列把一轮交给用户的内容记录为只有客户端读取
 | 包 | 角色 | ctx key |
 |---|---|---|
 | [`tool-present`](tool-present/README.zh.md) | 通过 `present` 工具把已有文件声明为最终交付物 | 注册到 `ctx.tools` |
-| [`workspace-changes`](workspace-changes/README.zh.md) | 用 git 工作树快照记录每个顶层轮次改动的文件 | 监听 `session/event`，追加 `workspace/changes` |
+| [`workspace-changes`](workspace-changes/README.zh.md) | 用 git 工作树快照汇总每个顶层轮次改动的文件 | 提供 `ctx.workspaceChanges`；监听 `session/event`，追加 `workspace/changes` |
 
 -----
 

packages/deliverables/workspace-changes/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   pnpm run verify-translation-pairing --write packages/deliverables/workspace-changes/README.md
-README.md: 82106aa6c7fa7b812a228fc80f693d9fbee1ab5b
-README.zh.md: 31503458242cf42a93483b2a81537058516719b5
+README.md: 5c304e3112c4d58a5baec54547e7341fde8e1dec
+README.zh.md: 428c3ce3d912cc17018cc39f552f1748b5ae56ff

packages/deliverables/workspace-changes/README.md

@@ -86,6 +86,7 @@ Nothing here enters a model request, so provider cache reuse is unaffected.
 - Summaries and snapshot trees live only as long as their Session in this Host process; earlier turns of a conversation reopened after a Host restart have no card. This is the decided behavior: a card whose content the Host can no longer open is not shown.
 - Two git features still write into the repository's own git directory during a snapshot: `core.splitIndex` writes `sharedindex.*` files, and git-lfs runs its clean filter on changed files and stores their objects under `.git/lfs`.
 - git 2.13 or later is required for `rev-parse --absolute-git-dir`; an unsupported repository format or another git failure abandons the turn with a warning rather than being treated as a plain directory.
+- The first snapshot of a Session writes every untracked, non-ignored file of the work tree into the Session's temporary directory; a repository without a `.gitignore` that carries large build outputs costs that much temporary space until the Session is disposed.
 - Edits the user makes during a turn are attributed to that turn.
 - A working directory outside any git repository lists file-tool edits only, so shell edits are missing from its card; a shadow repository under the Harness home is deferred until its exclude rules can replace a missing `.gitignore` reliably.
 - Hunk-based counts for files outside snapshot coverage are sums over edits, not a first-to-last diff, and cover file tools only.

packages/deliverables/workspace-changes/README.zh.md

@@ -86,6 +86,7 @@ git 通过 `subprocess` 能力运行，使用净化后的环境、`GIT_TERMINAL_
 - 摘要与快照树只在本 Host 进程内随其 Session 存活；Host 重启后重新打开的对话，先前轮次没有卡片。这是既定行为：Host 已经打不开内容的卡片不显示。
 - 有两个 git 功能在快照期间仍会写入仓库自己的 git 目录：`core.splitIndex` 会写 `sharedindex.*` 文件，git-lfs 会对改动文件运行 clean 过滤器并把对象存到 `.git/lfs` 下。
 - 需要 git 2.13 或更高版本以支持 `rev-parse --absolute-git-dir`；不支持的仓库格式或其他 git 失败会带着警告放弃本轮，而不是被当成普通目录。
+- Session 的首次快照会把工作树里所有未跟踪且未被忽略的文件写进 Session 的临时目录；没有 `.gitignore` 却带着大体积构建产物的仓库，在 Session 释放前会占用同等的临时空间。
 - 用户在轮次进行中自己做的编辑会被算到该轮。
 - 不在任何 git 仓库内的工作目录只列文件工具的编辑，卡片里因此没有 shell 改动；Harness home 下的影子仓库暂缓，直到其排除规则能可靠地代替缺失的 `.gitignore`。
 - 快照覆盖范围之外的文件按 hunk 累加计数，不是首尾对比，且只覆盖文件工具。

packages/deliverables/workspace-changes/src/git.ts

@@ -1,9 +1,9 @@
 /** Git working-tree snapshots, tree diffs, and ignore checks through the subprocess capability. */
 import { copyFile, mkdir, mkdtemp, rm } from 'node:fs/promises'
-import { tmpdir } from 'node:os'
-import { join, resolve } from 'node:path'
+import { join, relative, resolve } from 'node:path'
 import type { SubprocessRuntime } from '@deepseek-ai/dsh-subprocess'
 import { parseNumstat, type NumstatEntry } from './numstat.ts'
+import { canonicalPath, isInside, toPosix } from './paths.ts'
 
 /** Milliseconds a git child gets to exit after termination starts; a fixed lifecycle constant. */
 const TERMINATE_GRACE_MS = 2_000
@@ -88,14 +88,18 @@ function ok(result: GitRunResult, what: string): GitRunResult {
   return result
 }
 
-/** The repository enclosing a Session working directory and the private store its snapshots write to. */
+/** The repository enclosing a Session working directory and the private directory its snapshots write to. */
 export interface GitWorkspace {
   /** Repository top-level directory, the root every diff path is relative to. */
   root: string
   /** Absolute git directory holding the repository's index. */
   gitDir: string
+  /** Private directory holding the snapshot object store and each snapshot's scratch index. */
+  scratch: string
   /** Environment that routes object writes to the private store and object reads through the repository's store. */
   env: Readonly<Record<string, string>>
+  /** Work-tree paths a snapshot must skip: the private directory when a temporary root lies inside the work tree. */
+  excludes: readonly string[]
 }
 
 /** Whether a filesystem error names a missing path. */
@@ -105,26 +109,32 @@ function isMissing(error: unknown): boolean {
 
 /**
  * Locate the repository enclosing a working directory and prepare the private
- * object store its snapshots write to. The repository's own object store is
+ * directory its snapshots write to. The repository's own object store is
  * attached read-only as an alternate, so snapshots read committed content from
- * it and write nothing into it. A directory outside any repository yields
- * null; any other git failure throws.
+ * it and write nothing into it. A private directory that lies inside the work
+ * tree, as a temporary root under the workspace does, is excluded from every
+ * snapshot. A directory outside any repository yields null; any other git
+ * failure throws.
  * @param git - command runner.
  * @param cwd - absolute Session working directory.
- * @param objectsDir - yields the directory that receives every snapshot blob and tree; called only for a located repository.
+ * @param scratch - yields the private directory for snapshot objects and scratch indexes; called only for a located repository.
  * @param signal - cancellation.
  * @returns the repository, or null when the directory is not inside one.
  */
 export async function locateGitWorkspace(
-  git: GitRunner, cwd: string, objectsDir: () => Promise<string>, signal: AbortSignal,
+  git: GitRunner, cwd: string, scratch: () => Promise<string>, signal: AbortSignal,
 ): Promise<GitWorkspace | null> {
   const found = await git.run(['rev-parse', '--show-toplevel', '--absolute-git-dir', '--git-path', 'objects'], { cwd, signal })
   if (found.exitCode === 128 && /not a git repository/i.test(found.stderr)) return null
   const lines = ok(found, 'git rev-parse').stdout.split('\n').map(line => resolve(cwd, line))
   const [root, gitDir, repositoryObjects] = lines as [string, string, string]
-  const objects = await objectsDir()
+  // git reports the canonical root; compare the private directory in the same spelling.
+  const directory = await canonicalPath(await scratch())
+  const objects = join(directory, 'objects')
   await mkdir(objects, { recursive: true })
-  return { root, gitDir, env: { GIT_OBJECT_DIRECTORY: objects, GIT_ALTERNATE_OBJECT_DIRECTORIES: repositoryObjects } }
+  const excludes = isInside(root, directory) ? [toPosix(relative(root, directory))] : []
+  const env = { GIT_OBJECT_DIRECTORY: objects, GIT_ALTERNATE_OBJECT_DIRECTORIES: repositoryObjects }
+  return { root, gitDir, scratch: directory, env, excludes }
 }
 
 /**
@@ -139,7 +149,7 @@ export async function locateGitWorkspace(
  * @returns the tree object id.
  */
 export async function snapshotTree(git: GitRunner, workspace: GitWorkspace, signal: AbortSignal): Promise<string> {
-  const scratch = await mkdtemp(join(tmpdir(), 'dsh-workspace-changes-'))
+  const scratch = await mkdtemp(join(workspace.scratch, 'index-'))
   try {
     const index = join(scratch, 'index')
     // A repository without an index yet (fresh `git init`) starts from scratch.
@@ -148,7 +158,8 @@ export async function snapshotTree(git: GitRunner, workspace: GitWorkspace, sign
     })
     const env = { ...workspace.env, GIT_INDEX_FILE: index }
     // `--ignore-errors` skips unreadable files and reports them through exit code 1; the index is still complete.
-    const added = await git.run(['add', '--all', '--ignore-errors'], { cwd: workspace.root, env, signal })
+    const pathspec = workspace.excludes.length === 0 ? [] : ['--', '.', ...workspace.excludes.map(path => `:(exclude)${path}`)]
+    const added = await git.run(['add', '--all', '--ignore-errors', ...pathspec], { cwd: workspace.root, env, signal })
     /* v8 ignore next -- git reports a skipped unreadable file only on hosts whose permissions the tests can revoke. */
     if (added.exitCode !== 1) ok(added, `git add in ${workspace.root}`)
     return ok(await git.run(['write-tree'], { cwd: workspace.root, env, signal }), 'git write-tree').stdout.trim()
@@ -178,6 +189,24 @@ export async function diffTrees(
   return parseNumstat(result.stdout)
 }
 
+/**
+ * Work-tree directories the index records as gitlinks: nested repositories and
+ * submodules, whose contents snapshots never descend into and `check-ignore`
+ * refuses to classify.
+ * @param git - command runner.
+ * @param workspace - addressed repository.
+ * @param signal - cancellation.
+ * @returns slash-separated gitlink paths relative to the repository root.
+ */
+export async function gitlinkPaths(git: GitRunner, workspace: GitWorkspace, signal: AbortSignal): Promise<Set<string>> {
+  const result = ok(await git.run(['ls-files', '-z', '--stage'], { cwd: workspace.root, env: workspace.env, signal }), 'git ls-files')
+  const links = new Set<string>()
+  for (const entry of result.stdout.split('\0')) {
+    if (entry.startsWith('160000 ')) links.add(entry.slice(entry.indexOf('\t') + 1))
+  }
+  return links
+}
+
 /**
  * The subset of work-tree paths that the repository ignores. Tracked files
  * are never reported, so a tracked file matching an ignore pattern still

packages/deliverables/workspace-changes/src/numstat.ts

@@ -24,8 +24,13 @@ export function parseNumstat(output: string): NumstatEntry[] {
   const entries: NumstatEntry[] = []
   while (queue.length > 0) {
     const record = queue.shift() as string
-    const [added, deleted, path] = record.split('\t')
-    if (added === undefined || deleted === undefined || path === undefined) throw new Error(`malformed numstat record: ${record}`)
+    // Only the first two tabs separate fields; a file name keeps its own tabs.
+    const first = record.indexOf('\t')
+    const second = first < 0 ? -1 : record.indexOf('\t', first + 1)
+    if (second < 0) throw new Error(`malformed numstat record: ${record}`)
+    const added = record.slice(0, first)
+    const deleted = record.slice(first + 1, second)
+    const path = record.slice(second + 1)
     let target = path
     if (target === '') {
       queue.shift()
@@ -73,12 +78,14 @@ export function hunkLineCounts(diffs: readonly FileDiff[]): { added: number; del
 /**
  * Narrow a tool result's opaque `meta` to the file-tool hunk list.
  * @param meta - persisted result metadata.
- * @returns the hunks, or undefined when the metadata carries none; `write` persists an empty list for a created file.
+ * @returns the hunks; an empty list for a `write` that updated a file without changing it; undefined when the
+ * metadata carries none, as `write` persists for a created file, so the call's arguments supply the content.
  */
 export function fileDiffsOf(meta: unknown): FileDiff[] | undefined {
   if (typeof meta !== 'object' || meta === null || Array.isArray(meta)) return undefined
-  const { diffs } = meta as Record<string, unknown>
-  if (!Array.isArray(diffs) || diffs.length === 0) return undefined
+  const { diffs, operation } = meta as Record<string, unknown>
+  if (!Array.isArray(diffs)) return undefined
+  if (diffs.length === 0) return operation === 'update' ? [] : undefined
   const out: FileDiff[] = []
   for (const value of diffs) {
     if (typeof value !== 'object' || value === null || Array.isArray(value)) return undefined

packages/deliverables/workspace-changes/src/recorder.ts

@@ -4,7 +4,7 @@ import { homedir } from 'node:os'
 import { join, relative, resolve } from 'node:path'
 import type { Session, SessionEvent } from '@deepseek-ai/dsh-session'
 import type { FileDiff } from '@deepseek-ai/dsh-tools'
-import { diffTrees, ignoredPaths, locateGitWorkspace, snapshotTree, type GitRunner, type GitWorkspace } from './git.ts'
+import { diffTrees, gitlinkPaths, ignoredPaths, locateGitWorkspace, snapshotTree, type GitRunner, type GitWorkspace } from './git.ts'
 import { argumentHunks, fileDiffsOf, hunkLineCounts } from './numstat.ts'
 import { canonicalPath, compareDisplay, displayPathOf, durablePathOf, isInside, isTemporaryPath, temporaryRoots, toPosix } from './paths.ts'
 import type { WorkspaceChangedFile, WorkspaceChangesSummary } from './types.ts'
@@ -43,8 +43,11 @@ interface Baseline extends Repository { tree: string }
 /** Everything one turn accumulates; a new turn gets a new object so queued work for an older turn keeps its own. */
 interface TurnState {
   readonly turn: number
-  /** Set once the turn-start snapshot exists; a turn without one summarizes file-tool hunks only. */
-  baseline: Baseline | null
+  /**
+   * The turn-start snapshot once it exists. `null` means no repository or no git, so the turn summarizes file-tool
+   * hunks only; `'failed'` means the repository exists but its snapshot failed, so the turn records nothing.
+   */
+  baseline: Baseline | null | 'failed'
   /** Hunks derived from each mutation call's arguments, or null for a call that changes no file. */
   readonly calls: Map<string, FileDiff[] | null>
   /** File-tool hunks by their model-facing path; canonicalized when the record is built. */
@@ -77,8 +80,8 @@ export class TurnRecorder {
   private paths: Paths | undefined
   /** The located repository, reused across turns once found; null keeps retrying each turn. */
   private repository: Repository | null = null
-  /** Temporary directory holding this Session's snapshot objects, created with the first located repository. */
-  private objectsDir: string | undefined
+  /** Temporary directory holding this Session's snapshot objects and scratch indexes, created with the first located repository. */
+  private scratch: string | undefined
   /** Summaries by the sequence of the event that announced them. */
   private readonly summaries = new Map<number, WorkspaceChangesSummary>()
   private readonly lifetime = new AbortController()
@@ -97,11 +100,17 @@ export class TurnRecorder {
     const state = freshState(turn)
     this.state = state
     void this.enqueue(async (signal) => {
-      this.paths ??= { cwd: await realpath(this.cwd), home: await canonicalPath(homedir()), temporaryRoots: await temporaryRoots() }
-      const repository = await this.locate(this.paths.cwd, signal)
-      if (repository === null) return
-      const tree = await snapshotTree(repository.git, repository.workspace, signal)
-      state.baseline = { ...repository, tree }
+      try {
+        this.paths ??= { cwd: await realpath(this.cwd), home: await canonicalPath(homedir()), temporaryRoots: await temporaryRoots() }
+        const repository = await this.locate(this.paths.cwd, signal)
+        if (repository === null) return
+        const tree = await snapshotTree(repository.git, repository.workspace, signal)
+        state.baseline = { ...repository, tree }
+      } catch (error: unknown) {
+        // A repository whose snapshot failed must not be summarized as if it had none.
+        state.baseline = 'failed'
+        throw error
+      }
     })
   }
 
@@ -175,7 +184,7 @@ export class TurnRecorder {
     this.lifetime.abort()
     this.summaries.clear()
     await this.chain
-    if (this.objectsDir !== undefined) await rm(this.objectsDir, { recursive: true, force: true })
+    if (this.scratch !== undefined) await rm(this.scratch, { recursive: true, force: true })
   }
 
   private enqueue(task: (signal: AbortSignal) => Promise<void>): Promise<void> {
@@ -202,8 +211,8 @@ export class TurnRecorder {
     const git = await this.env.git
     if (git === null) return null
     const workspace = await locateGitWorkspace(git, cwd, async () => {
-      this.objectsDir ??= await mkdtemp(join(this.env.tempRoot, 'dsh-workspace-changes-objects-'))
-      return this.objectsDir
+      this.scratch ??= await mkdtemp(join(this.env.tempRoot, 'dsh-workspace-changes-'))
+      return this.scratch
     }, signal)
     if (workspace === null) return null
     this.repository = { git, workspace }
@@ -212,14 +221,16 @@ export class TurnRecorder {
 
   private async record(state: TurnState, signal: AbortSignal): Promise<void> {
     const paths = this.paths
-    if (paths === undefined || state.lastToolResultSeq < 0) return
-    state.attemptedAfterSeq = state.lastToolResultSeq
     const { baseline } = state
+    if (paths === undefined || baseline === 'failed' || state.lastToolResultSeq < 0) return
+    state.attemptedAfterSeq = state.lastToolResultSeq
     // Without a snapshot the working directory itself bounds the workspace.
     const root = baseline?.workspace.root ?? paths.cwd
     const files = new Map<string, WorkspaceChangedFile>()
+    let snapshot: WorkspaceChangesSummary['snapshot']
     if (baseline !== null) {
       const after = await snapshotTree(baseline.git, baseline.workspace, signal)
+      snapshot = { before: baseline.tree, after }
       for (const entry of await diffTrees(baseline.git, baseline.workspace, baseline.tree, after, signal)) {
         const absolute = resolve(root, entry.path)
         files.set(absolute, changedFile(paths, root, absolute, entry))
@@ -232,7 +243,12 @@ export class TurnRecorder {
       if (!files.has(absolute)) hunks.set(absolute, [...hunks.get(absolute) ?? [], ...list])
     }
     const workTreePath = (absolute: string): string => toPosix(relative(root, absolute))
-    const inWorkspace = [...hunks.keys()].filter(absolute => isInside(root, absolute))
+    let inWorkspace = [...hunks.keys()].filter(absolute => isInside(root, absolute))
+    if (baseline !== null && inWorkspace.length > 0) {
+      // Nested repositories and submodules are gitlinks: their contents never enter the summary.
+      const gitlinks = await gitlinkPaths(baseline.git, baseline.workspace, signal)
+      inWorkspace = inWorkspace.filter(absolute => ![...gitlinks].some(link => isInside(resolve(root, link), absolute)))
+    }
     // A snapshot covers every workspace file except the ignored ones; without one, every file-tool edit counts.
     const uncoveredInWorkspace = baseline === null
       ? new Set(inWorkspace.map(workTreePath))
@@ -248,7 +264,15 @@ export class TurnRecorder {
     // An empty list after an earlier in-turn record supersedes that record.
     if (sorted.length === 0 && state.recordedAfterSeq < 0) return
     const event = this.session.append('workspace/changes', { turn: state.turn })
-    this.summaries.set(event.seq, { turn: state.turn, cwd: this.cwd, files: sorted.slice(0, this.env.maxFiles), total: sorted.length })
+    this.summaries.set(event.seq, {
+      turn: state.turn,
+      cwd: this.cwd,
+      files: sorted.slice(0, this.env.maxFiles),
+      total: sorted.length,
+      added: sorted.reduce((sum, file) => sum + file.added, 0),
+      deleted: sorted.reduce((sum, file) => sum + file.deleted, 0),
+      ...snapshot === undefined ? {} : { snapshot },
+    })
     state.recordedAfterSeq = event.seq
   }
 }

packages/deliverables/workspace-changes/src/types.ts

@@ -29,6 +29,12 @@ export interface WorkspaceChangesSummary {
   files: WorkspaceChangedFile[]
   /** Complete changed-file count, including files omitted by the cap. */
   total: number
+  /** Lines added over every changed file, including files omitted by the cap. */
+  added: number
+  /** Lines deleted over every changed file, including files omitted by the cap. */
+  deleted: number
+  /** Git tree ids of the turn-start and turn-end snapshots; absent when no snapshot was taken. */
+  snapshot?: { before: string; after: string }
 }
 
 /** Serves the summaries the recorder keeps for live Sessions. */

packages/deliverables/workspace-changes/tests/git.spec.ts

@@ -7,7 +7,7 @@ import LocalSubprocessRuntime from '@deepseek-ai/dsh-subprocess-local'
 import { GitRunner, diffTrees, ignoredPaths, locateGitWorkspace, snapshotTree } from '../src/git.ts'
 import { TurnRecorder } from '../src/recorder.ts'
 import SessionStore, { SessionId } from '@deepseek-ai/dsh-session'
-import { git, scratchDir } from './support.ts'
+import { git, scratchDir, startTurn, toolCall } from './support.ts'
 
 /** An object directory factory under a scratch root. */
 const objectsIn = (root: string) => () => Promise.resolve(join(root, 'objects'))
@@ -70,7 +70,7 @@ describe('snapshots and diffs', () => {
     const { git: runnerGit } = await runner()
     const store = objectsIn(await scratchDir('dsh-git-store-', cleanups))
     expect(await locateGitWorkspace(runnerGit, cwd, store, signal)).toBeNull()
-    const broken = { root: cwd, gitDir: join(cwd, 'missing'), env: {} }
+    const broken = { root: cwd, gitDir: join(cwd, 'missing'), scratch: cwd, env: {}, excludes: [] }
     await expect(snapshotTree(runnerGit, broken, signal)).rejects.toThrow('git add in')
     await expect(ignoredPaths(runnerGit, broken, ['x'], signal)).rejects.toThrow('git check-ignore failed')
     expect(await ignoredPaths(runnerGit, broken, [], signal)).toEqual(new Set())
@@ -171,10 +171,32 @@ describe('TurnRecorder', () => {
     const repo = new TurnRecorder(ctx.sessions.create(SessionId('repo'), { meta: { cwd } }), cwd, env)
     repo.start(1)
     await repo.settled()
-    const [objects, ...others] = (await readdir(tempRoot)).filter(entry => entry.startsWith('dsh-workspace-changes-objects-'))
+    const [objects, ...others] = (await readdir(tempRoot)).filter(entry => entry.startsWith('dsh-workspace-changes-'))
     expect(others).toEqual([])
     expect(objects).toBeDefined()
     await repo.dispose()
     expect(await readdir(tempRoot)).toEqual([])
   })
+
+  it('keeps its own directory out of the snapshots when the temporary root lies inside the work tree', async () => {
+    const cwd = await scratchDir('dsh-recorder-tmp-in-tree-', cleanups)
+    git(cwd, 'init', '-q', '-b', 'main')
+    await writeFile(join(cwd, 'tracked.txt'), 'one\n')
+    git(cwd, 'add', '-A'); git(cwd, 'commit', '-q', '-m', 'init')
+    const tempRoot = join(cwd, 'tmp')
+    await mkdir(tempRoot)
+    const { ctx, git: runnerGit } = await runner()
+    const session = ctx.sessions.create(SessionId('tmp-in-tree'), { meta: { cwd } })
+    const env = { git: Promise.resolve(runnerGit), tempRoot, maxFiles: 10, warn: (m: string) => { throw new Error(m) } }
+    const recorder = new TurnRecorder(session, cwd, env)
+    startTurn(session, 1)
+    recorder.start(1)
+    await recorder.settled()
+    await writeFile(join(cwd, 'tracked.txt'), 'one\ntwo\n')
+    recorder.observe(toolCall(session, 1, 'bash', { command: 'x' }))
+    await recorder.stopping(1)
+    const announced = session.snapshotEvents().find(event => event.type === 'workspace/changes')
+    expect(recorder.summary(announced!.seq)?.files.map(file => file.display)).toEqual(['tracked.txt'])
+    await recorder.dispose()
+  })
 })

packages/deliverables/workspace-changes/tests/loader-composition.spec.ts

@@ -73,6 +73,10 @@ describe('real Loader composition', () => {
     await context.waterfall('tools/pre-execute', { agent: { session } } as never, () => Promise.resolve(undefined as never))
     const [recorded, ...rest] = changes(context, session)
     expect(rest).toEqual([])
-    expect(recorded).toEqual({ turn: 1, cwd, total: 1, files: [{ path: 'tracked.txt', display: 'tracked.txt', added: 1, deleted: 0 }] })
+    expect(recorded).toEqual({
+      turn: 1, cwd, total: 1, added: 1, deleted: 0,
+      files: [{ path: 'tracked.txt', display: 'tracked.txt', added: 1, deleted: 0 }],
+      snapshot: { before: expect.stringMatching(/^[0-9a-f]+$/) as string, after: expect.stringMatching(/^[0-9a-f]+$/) as string },
+    })
   })
 })

packages/deliverables/workspace-changes/tests/numstat.spec.ts

@@ -23,6 +23,17 @@ describe('parseNumstat', () => {
   })
 })
 
+describe('parseNumstat with unusual names', () => {
+  it('keeps tabs inside a file name', () => {
+    expect(parseNumstat(['1\t0\ta\tb.txt', '2\t0\t', 'old\tx', 'new\ty', ''].join('\u0000'))).toEqual([
+      { path: 'a\tb.txt', added: 1, deleted: 0, binary: false },
+      { path: 'new\ty', added: 2, deleted: 0, binary: false },
+    ])
+    expect(() => parseNumstat('1\ta.txt\u0000')).toThrow('malformed numstat record')
+    expect(() => parseNumstat('garbage\u0000')).toThrow('malformed numstat record')
+  })
+})
+
 describe('hunkLineCounts', () => {
   it('counts changed lines and ignores context', () => {
     expect(hunkLineCounts([
@@ -45,6 +56,10 @@ describe('fileDiffsOf', () => {
     expect(fileDiffsOf(undefined)).toBeUndefined()
     expect(fileDiffsOf([])).toBeUndefined()
     expect(fileDiffsOf({ diffs: [] })).toBeUndefined()
+    expect(fileDiffsOf({ diffs: 'x' })).toBeUndefined()
+    expect(fileDiffsOf({ operation: 'create', diffs: [] })).toBeUndefined()
+    // An unchanged overwrite persists no hunks and changes nothing; the call's content must not count as added.
+    expect(fileDiffsOf({ operation: 'update', diffs: [] })).toEqual([])
     expect(fileDiffsOf({ diffs: [null] })).toBeUndefined()
     expect(fileDiffsOf({ diffs: [{ path: 1, oldText: null, newText: '' }] })).toBeUndefined()
     expect(fileDiffsOf({ diffs: [{ path: 'a', oldText: 2, newText: '' }] })).toBeUndefined()

packages/deliverables/workspace-changes/tests/plugin.spec.ts

@@ -82,7 +82,9 @@ describe('workspace-changes in a repository', () => {
     expect(events.map(event => event.data)).toEqual([{ turn: 1 }])
     const [recorded, ...rest] = changes(ctx, session)
     expect(rest).toEqual([])
-    expect(recorded).toMatchObject({ turn: 1, cwd, total: 6 })
+    expect(recorded).toMatchObject({ turn: 1, cwd, total: 6, added: 8, deleted: 1 })
+    expect(recorded!.snapshot!.before).toMatch(/^[0-9a-f]{40,64}$/)
+    expect(recorded!.snapshot!.after).toMatch(/^[0-9a-f]{40,64}$/)
     expect(recorded!.files).toEqual([
       { path: '.env', display: '.env', added: 2, deleted: 0 },
       { path: '.env.gone', display: '.env.gone', added: 1, deleted: 0 },
@@ -213,6 +215,8 @@ describe('workspace-changes in a repository', () => {
     await settle(ctx, session)
     await writeFile(join(cwd, 'x.txt'), 'x\n')
     toolCall(session, 1, 'bash', { command: 'x' })
+    // A repository whose snapshot failed is not summarized from file-tool hunks as if it had no repository.
+    toolCall(session, 1, 'write', { file_path: 'x.txt', content: 'x\n' }, { meta: { operation: 'create', diffs: [] } })
     endTurn(session, 1)
     await settle(ctx, session)
     expect(changes(ctx, session)).toEqual([])
@@ -221,6 +225,28 @@ describe('workspace-changes in a repository', () => {
     expect(own[0]).toContain('missing-git')
   })
 
+  it('leaves nested repositories out even when a file tool edits inside them', async () => {
+    const cwd = await repository()
+    const sub = join(cwd, 'sub')
+    await mkdir(sub)
+    git(sub, 'init', '-q', '-b', 'main')
+    await writeFile(join(sub, 'inner.txt'), 'inner\n')
+    git(sub, 'add', '-A'); git(sub, 'commit', '-q', '-m', 'inner')
+    git(cwd, 'add', 'sub'); git(cwd, 'commit', '-q', '-m', 'gitlink')
+    const { ctx } = await boot()
+    const session = ctx.sessions.create(SessionId('gitlink'), { meta: { cwd } })
+    startTurn(session, 1)
+    await settle(ctx, session)
+    await writeFile(join(sub, 'inner.txt'), 'inner\nedited\n')
+    toolCall(session, 1, 'edit', { file_path: 'sub/inner.txt' }, { meta: { diffs: [{ path: 'sub/inner.txt', oldText: 'inner', newText: 'inner\nedited' }] } })
+    await writeFile(join(cwd, 'top.txt'), 'top\n')
+    toolCall(session, 1, 'write', { file_path: 'top.txt', content: 'top\n' }, { meta: { operation: 'create', diffs: [] } })
+    toolCall(session, 1, 'write', { file_path: 'same.txt', content: 'same\n' }, { meta: { operation: 'update', diffs: [] } })
+    endTurn(session, 1)
+    await settle(ctx, session)
+    expect(changes(ctx, session).map(summary => summary.files.map(file => file.display))).toEqual([['top.txt']])
+  })
+
   it('rejects non-positive bounds at load', async () => {
     const ctx = new Context()
     cleanups.push(() => ctx.fiber.dispose())
@@ -257,7 +283,7 @@ describe('workspace-changes without a repository', () => {
     endTurn(session, 1)
     await settle(ctx, session)
     expect(changes(ctx, session)).toEqual([{
-      turn: 1, cwd, total: 2,
+      turn: 1, cwd, total: 2, added: 5, deleted: 1,
       files: [
         { path: 'existing.txt', display: 'existing.txt', added: 3, deleted: 1 },
         { path: join(await realpath(outside), 'note.txt'), display: `~/${outside.slice(homedir().length + 1)}/note.txt`, added: 2, deleted: 0 },
@@ -333,7 +359,7 @@ describe('workspace-changes without git', () => {
       endTurn(session, turn)
       await settle(ctx, session)
     }
-    expect(changes(ctx, session)).toEqual([{ turn: 2, cwd, total: 1, files: [{ path: 'w.txt', display: 'w.txt', added: 1, deleted: 0 }] }])
+    expect(changes(ctx, session)).toEqual([{ turn: 2, cwd, total: 1, added: 1, deleted: 0, files: [{ path: 'w.txt', display: 'w.txt', added: 1, deleted: 0 }] }])
     expect(info).toHaveBeenCalledTimes(1)
     expect(info.mock.calls[0]![0]).toContain('git is unavailable')
   })

packages/extensions/tool-cordis/src/api-catalog.ts

@@ -6687,7 +6687,7 @@ export const TYPE_API: readonly TypeApiEntry[] = [
   },
   {
     name: 'WorkspaceChangesSummary',
-    declaration: 'export interface WorkspaceChangesSummary {\n    turn: number;\n    cwd: string;\n    files: WorkspaceChangedFile[];\n    total: number;\n}',
+    declaration: 'export interface WorkspaceChangesSummary {\n    turn: number;\n    cwd: string;\n    files: WorkspaceChangedFile[];\n    total: number;\n    added: number;\n    deleted: number;\n    snapshot?: {\n        before: string;\n        after: string;\n    };\n}',
   },
   {
     name: 'WorkspaceCreateRequest',

packages/fs/tool-fs/src/diff.ts

@@ -12,12 +12,14 @@ export const DIFF_CONTEXT = 3
 
 /**
  * The `write`/`edit` tools' private `tool/result` `meta` payload: the applied
- * contextual-diff hunks. Attached opaquely (as `unknown`) on the tool result and
+ * contextual-diff hunks, and for `write` whether the call created or updated
+ * the file, which tells an empty hunk list of a create from one of an
+ * unchanged overwrite. Attached opaquely (as `unknown`) on the tool result and
  * persisted with the session log — it must be JSON-serializable (the session
  * validates this at `append`), so `presentResult` reproduces the diff card on
  * replay. The producing tool owns and narrows this opaque shape.
  */
-export type FsDiffMeta = { diffs: FileDiff[] }
+export type FsDiffMeta = { diffs: FileDiff[]; operation?: 'create' | 'update' }
 
 /**
  * Compute one {@link FileDiff} per hunk between `before` and `after`, each carrying the

packages/fs/tool-fs/src/write.ts

@@ -96,6 +96,7 @@ export function applyWriteTool(ctx: Context, sandbox: FsSandboxController): void
       },
       render: (_args, value) => [{ type: 'text', text: formatWriteOutput(value.path, value) }],
       presentationMeta: (args, value) => ({
+        operation: value.operation,
         diffs: value.before === null
           ? []
           : computeHunkDiffs(args.file_path, value.before, value.after)

packages/fs/tool-fs/tests/tools.spec.ts

@@ -640,7 +640,7 @@ describe('result-time contextual diff (meta + presentResult)', () => {
     await call(ctx, 'read', { file_path: 'a.txt' }, { session })
     const result = await call(ctx, 'write', { file_path: 'a.txt', content: 'a\nb\nc\nNEW\nd\ne\nf\n' }, { session })
     expect(result.isError).toBe(false)
-    expect(result.meta).toEqual({ diffs: [{ path: 'a.txt', oldText: 'a\nb\nc\nOLD\nd\ne\nf', newText: 'a\nb\nc\nNEW\nd\ne\nf' }] })
+    expect(result.meta).toEqual({ operation: 'update', diffs: [{ path: 'a.txt', oldText: 'a\nb\nc\nOLD\nd\ne\nf', newText: 'a\nb\nc\nNEW\nd\ne\nf' }] })
     const view = ctx.tools.get('write')?.presentResult?.({ file_path: 'a.txt', content: 'x' }, result)
     expect(view).toEqual({ card: 'diff', title: 'Write a.txt', diffs: [{ path: 'a.txt', oldText: 'a\nb\nc\nOLD\nd\ne\nf', newText: 'a\nb\nc\nNEW\nd\ne\nf' }] })
   })
@@ -652,7 +652,7 @@ describe('result-time contextual diff (meta + presentResult)', () => {
     const session = { header: {} }
     const result = await call(ctx, 'write', { file_path: 'new.txt', content: 'fresh\n' }, { session })
     expect(result.isError).toBe(false)
-    expect(result.meta).toEqual({ diffs: [] })
+    expect(result.meta).toEqual({ operation: 'create', diffs: [] })
     const view = ctx.tools.get('write')?.presentResult?.({ file_path: 'new.txt', content: 'fresh\n' }, result)
     expect(view).toEqual({ card: 'diff', title: 'Write new.txt', diffs: [{ path: 'new.txt', oldText: null, newText: 'fresh\n' }] })
   })
@@ -664,7 +664,8 @@ describe('result-time contextual diff (meta + presentResult)', () => {
     await call(ctx, 'read', { file_path: 'a.txt' }, { session })
     const result = await call(ctx, 'write', { file_path: 'a.txt', content: 'same\n' }, { session })
     expect(result.isError).toBe(false)
-    expect(result.meta).toEqual({ diffs: [] })
+    // The operation lets a consumer tell this unchanged overwrite from a create with the same empty hunk list.
+    expect(result.meta).toEqual({ operation: 'update', diffs: [] })
     const view = ctx.tools.get('write')?.presentResult?.({ file_path: 'a.txt', content: 'same\n' }, result)
     expect(view).toEqual({ card: 'diff', title: 'Write a.txt', diffs: [{ path: 'a.txt', oldText: null, newText: 'same\n' }] })
   })

snapshots/acp/fs-escalation-approved/session.v3.jsonl

@@ -16,7 +16,7 @@
 {"type":"tool/call","data":{"turn":1,"step":1,"callId":"call_00_Fnymmavpr4klMDy4Fdej3227","name":"write","arguments":"{\"file_path\": \"escalated.md\", \"content\": \"escalated\", \"sandbox_permissions\": \"danger-full-access\", \"justification\": \"the user asked to escalate this write\"}"}}
 {"type":"approval/asked","data":{"id":"{{approval:1}}","toolName":"write","callId":"call_00_Fnymmavpr4klMDy4Fdej3227","reason":"escalate sandbox to danger-full-access: the user asked to escalate this write"}}
 {"type":"approval/decided","data":{"id":"{{approval:1}}","outcome":"allowed-once"}}
-{"type":"tool/result","data":{"turn":1,"step":1,"message":{"source":{"kind":"tool","callId":"call_00_Fnymmavpr4klMDy4Fdej3227"},"content":[{"type":"tool-result","toolCallId":"call_00_Fnymmavpr4klMDy4Fdej3227","content":[{"type":"text","text":"<path>{{cwd}}/escalated.md</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:5}}"},"meta":{"diffs":[]}},"sourceEventSeqs":[14],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":1,"step":1,"message":{"source":{"kind":"tool","callId":"call_00_Fnymmavpr4klMDy4Fdej3227"},"content":[{"type":"tool-result","toolCallId":"call_00_Fnymmavpr4klMDy4Fdej3227","content":[{"type":"text","text":"<path>{{cwd}}/escalated.md</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:5}}"},"meta":{"operation":"create","diffs":[]}},"sourceEventSeqs":[14],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":1}}
 {"type":"step/start","data":{"turn":1,"step":2}}
 {"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"reasoning","text":"The file was created successfully. The user asked me to reply with exactly the single word DONE."},{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:6}}"},"usage":{"inputTokens":107,"outputTokens":23,"cacheReadTokens":3968,"reasoningTokens":20},"stream":[{"type":"chunk","time":1788699392995,"chunk":{"type":"block-start","index":0,"blockType":"reasoning"}},{"type":"reasoning-chunks","time0":1788699392995,"index":0,"dt":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],"texts":["The"," file"," was"," created"," successfully","."," The"," user"," asked"," me"," to"," reply"," with"," exactly"," the"," single"," word"," D","ONE","."]},{"type":"chunk","time":1788699392995,"chunk":{"type":"block-start","index":1,"blockType":"text"}},{"type":"text-chunks","time0":1788699392995,"index":1,"dt":[0],"texts":["D","ONE"]},{"type":"chunk","time":1788699392995,"chunk":{"type":"block-end","index":0,"block":{"type":"reasoning","text":"The file was created successfully. The user asked me to reply with exactly the single word DONE."}}},{"type":"chunk","time":1788699392995,"chunk":{"type":"block-end","index":1,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1788699392995,"chunk":{"type":"usage","usage":{"inputTokens":107,"outputTokens":23,"cacheReadTokens":3968,"reasoningTokens":20}}},{"type":"chunk","time":1788699392995,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}

snapshots/session/fs-delete-recreate/session.v3.jsonl

@@ -29,7 +29,7 @@
 {"type":"step/start","data":{"turn":1,"step":4}}
 {"type":"assistant/message","data":{"turn":1,"step":4,"message":{"role":"assistant","content":[{"type":"tool-call","id":"fs-delete-recreate","name":"write","arguments":"{\"file_path\":\"deleted.txt\",\"content\":\"fresh\\n\"}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:10}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1788699359710,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1788699359710,"index":0,"dt":[],"id":"fs-delete-recreate","name":"write","args":["{\"file_path\":\"deleted.txt\",\"content\":\"fresh\\n\"}"]},{"type":"chunk","time":1788699359710,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"fs-delete-recreate","name":"write","arguments":"{\"file_path\":\"deleted.txt\",\"content\":\"fresh\\n\"}"}}},{"type":"chunk","time":1788699359710,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1788699359710,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":4,"callId":"fs-delete-recreate","name":"write","arguments":"{\"file_path\":\"deleted.txt\",\"content\":\"fresh\\n\"}"}}
-{"type":"tool/result","data":{"turn":1,"step":4,"message":{"source":{"kind":"tool","callId":"fs-delete-recreate"},"content":[{"type":"tool-result","toolCallId":"fs-delete-recreate","content":[{"type":"text","text":"<path>{{cwd}}/deleted.txt</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:11}}"},"meta":{"diffs":[]}},"sourceEventSeqs":[29],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":1,"step":4,"message":{"source":{"kind":"tool","callId":"fs-delete-recreate"},"content":[{"type":"tool-result","toolCallId":"fs-delete-recreate","content":[{"type":"text","text":"<path>{{cwd}}/deleted.txt</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:11}}"},"meta":{"operation":"create","diffs":[]}},"sourceEventSeqs":[29],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":4}}
 {"type":"step/start","data":{"turn":1,"step":5}}
 {"type":"assistant/message","data":{"turn":1,"step":5,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:12}}"},"usage":{"inputTokens":10,"outputTokens":2},"stream":[{"type":"chunk","time":1788699359733,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1788699359733,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1788699359733,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1788699359734,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":2}}},{"type":"chunk","time":1788699359734,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}

snapshots/session/fs-write-overwrite-bounded/session.v3.jsonl

@@ -19,7 +19,7 @@
 {"type":"step/start","data":{"turn":1,"step":2}}
 {"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"fs-bounded-write","name":"write","arguments":"{\"file_path\":\"data.txt\",\"content\":\"The replacement line is deliberately longer than the configured sixty-four byte diff-basis bound.\"}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:6}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1788699370160,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1788699370160,"index":0,"dt":[],"id":"fs-bounded-write","name":"write","args":["{\"file_path\":\"data.txt\",\"content\":\"The replacement line is deliberately longer than the configured sixty-four byte diff-basis bound.\"}"]},{"type":"chunk","time":1788699370160,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"fs-bounded-write","name":"write","arguments":"{\"file_path\":\"data.txt\",\"content\":\"The replacement line is deliberately longer than the configured sixty-four byte diff-basis bound.\"}"}}},{"type":"chunk","time":1788699370160,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1788699370160,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":2,"callId":"fs-bounded-write","name":"write","arguments":"{\"file_path\":\"data.txt\",\"content\":\"The replacement line is deliberately longer than the configured sixty-four byte diff-basis bound.\"}"}}
-{"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"fs-bounded-write"},"content":[{"type":"tool-result","toolCallId":"fs-bounded-write","content":[{"type":"text","text":"<path>{{cwd}}/data.txt</path>\n<type>file</type>\n<content>\nUpdated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:7}}"},"meta":{"diffs":[]}},"sourceEventSeqs":[19],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"fs-bounded-write"},"content":[{"type":"tool-result","toolCallId":"fs-bounded-write","content":[{"type":"text","text":"<path>{{cwd}}/data.txt</path>\n<type>file</type>\n<content>\nUpdated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:7}}"},"meta":{"operation":"update","diffs":[]}},"sourceEventSeqs":[19],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":2}}
 {"type":"step/start","data":{"turn":1,"step":3}}
 {"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:8}}"},"usage":{"inputTokens":10,"outputTokens":2},"stream":[{"type":"chunk","time":1788699370184,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1788699370184,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1788699370184,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1788699370184,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":2}}},{"type":"chunk","time":1788699370184,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}

snapshots/session/fs-write-overwrite/session.v3.jsonl

@@ -19,7 +19,7 @@
 {"type":"step/start","data":{"turn":1,"step":2}}
 {"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"tool-call","id":"fs-overwrite-write","name":"write","arguments":"{\"file_path\":\"data.txt\",\"content\":\"replaced\"}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:6}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1788699368911,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1788699368911,"index":0,"dt":[],"id":"fs-overwrite-write","name":"write","args":["{\"file_path\":\"data.txt\",\"content\":\"replaced\"}"]},{"type":"chunk","time":1788699368911,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"fs-overwrite-write","name":"write","arguments":"{\"file_path\":\"data.txt\",\"content\":\"replaced\"}"}}},{"type":"chunk","time":1788699368911,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1788699368911,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":2,"callId":"fs-overwrite-write","name":"write","arguments":"{\"file_path\":\"data.txt\",\"content\":\"replaced\"}"}}
-{"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"fs-overwrite-write"},"content":[{"type":"tool-result","toolCallId":"fs-overwrite-write","content":[{"type":"text","text":"<path>{{cwd}}/data.txt</path>\n<type>file</type>\n<content>\nUpdated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:7}}"},"meta":{"diffs":[{"path":"data.txt","oldText":"original contents","newText":"replaced"}]}},"sourceEventSeqs":[19],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"fs-overwrite-write"},"content":[{"type":"tool-result","toolCallId":"fs-overwrite-write","content":[{"type":"text","text":"<path>{{cwd}}/data.txt</path>\n<type>file</type>\n<content>\nUpdated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:7}}"},"meta":{"operation":"update","diffs":[{"path":"data.txt","oldText":"original contents","newText":"replaced"}]}},"sourceEventSeqs":[19],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":2}}
 {"type":"step/start","data":{"turn":1,"step":3}}
 {"type":"assistant/message","data":{"turn":1,"step":3,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:8}}"},"usage":{"inputTokens":10,"outputTokens":2},"stream":[{"type":"chunk","time":1788699368936,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1788699368936,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1788699368936,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1788699368936,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":2}}},{"type":"chunk","time":1788699368936,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}

snapshots/session/session-sandbox-root/session.v3.jsonl

@@ -14,7 +14,7 @@
 {"type":"session/title","data":{"title":"Use the write tool (NOT","messageSeqs":[8],"source":{"kind":"fallback"}}}
 {"type":"assistant/message","data":{"turn":1,"step":1,"message":{"role":"assistant","content":[{"type":"tool-call","id":"call_session_root","name":"write","arguments":"{\"file_path\":\"session-root.txt\",\"content\":\"session root\"}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:4}}"},"usage":{"inputTokens":10,"outputTokens":5},"stream":[{"type":"chunk","time":1788699426180,"chunk":{"type":"block-start","index":0,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1788699426180,"index":0,"dt":[],"id":"call_session_root","name":"write","args":["{\"file_path\":\"session-root.txt\",\"content\":\"session root\"}"]},{"type":"chunk","time":1788699426180,"chunk":{"type":"block-end","index":0,"block":{"type":"tool-call","id":"call_session_root","name":"write","arguments":"{\"file_path\":\"session-root.txt\",\"content\":\"session root\"}"}}},{"type":"chunk","time":1788699426180,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":5}}},{"type":"chunk","time":1788699426180,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":1,"callId":"call_session_root","name":"write","arguments":"{\"file_path\":\"session-root.txt\",\"content\":\"session root\"}"}}
-{"type":"tool/result","data":{"turn":1,"step":1,"message":{"source":{"kind":"tool","callId":"call_session_root"},"content":[{"type":"tool-result","toolCallId":"call_session_root","content":[{"type":"text","text":"<path>{{cwd}}/session-root.txt</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:5}}"},"meta":{"diffs":[]}},"sourceEventSeqs":[14],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":1,"step":1,"message":{"source":{"kind":"tool","callId":"call_session_root"},"content":[{"type":"tool-result","toolCallId":"call_session_root","content":[{"type":"text","text":"<path>{{cwd}}/session-root.txt</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:5}}"},"meta":{"operation":"create","diffs":[]}},"sourceEventSeqs":[14],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":1}}
 {"type":"step/start","data":{"turn":1,"step":2}}
 {"type":"assistant/message","data":{"turn":1,"step":2,"message":{"role":"assistant","content":[{"type":"text","text":"DONE"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:6}}"},"usage":{"inputTokens":10,"outputTokens":2},"stream":[{"type":"chunk","time":1788699426207,"chunk":{"type":"block-start","index":0,"blockType":"text"}},{"type":"text-chunks","time0":1788699426207,"index":0,"dt":[],"texts":["DONE"]},{"type":"chunk","time":1788699426207,"chunk":{"type":"block-end","index":0,"block":{"type":"text","text":"DONE"}}},{"type":"chunk","time":1788699426207,"chunk":{"type":"usage","usage":{"inputTokens":10,"outputTokens":2}}},{"type":"chunk","time":1788699426207,"chunk":{"type":"finish","reason":{"kind":"stop"}}}]},"surfaceOp":"append"}

snapshots/web/changed-files-turn/session.v3.jsonl

@@ -23,9 +23,9 @@
 {"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_00_z383sJwOMP6vmJp9Hag77052","name":"edit","arguments":"{\"file_path\": \"intro.md\", \"old_string\": \"# 示例项目\", \"new_string\": \"# 项目说明\"}"}}
 {"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"call_00_z383sJwOMP6vmJp9Hag77052"},"content":[{"type":"tool-result","toolCallId":"call_00_z383sJwOMP6vmJp9Hag77052","content":[{"type":"text","text":"The file {{cwd}}/intro.md has been updated successfully."}],"isError":false}],"role":"user","id":"{{message:8}}"},"meta":{"diffs":[{"path":"intro.md","oldText":"# 示例项目\n\n一个用于演示的仓库。","newText":"# 项目说明\n\n一个用于演示的仓库。"}]}},"sourceEventSeqs":[21],"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_01_eusCmPFbiHy81iokiVY05329","name":"write","arguments":"{\"file_path\": \"src/util.ts\", \"content\": \"export function add(a: number, b: number): number {\\n  return a + b;\\n}\\n\"}"}}
-{"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"call_01_eusCmPFbiHy81iokiVY05329"},"content":[{"type":"tool-result","toolCallId":"call_01_eusCmPFbiHy81iokiVY05329","content":[{"type":"text","text":"<path>{{cwd}}/src/util.ts</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:9}}"},"meta":{"diffs":[]}},"sourceEventSeqs":[23],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"call_01_eusCmPFbiHy81iokiVY05329"},"content":[{"type":"tool-result","toolCallId":"call_01_eusCmPFbiHy81iokiVY05329","content":[{"type":"text","text":"<path>{{cwd}}/src/util.ts</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:9}}"},"meta":{"operation":"create","diffs":[]}},"sourceEventSeqs":[23],"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_02_V7z2GSt4h4I0sCnJg4990423","name":"write","arguments":"{\"file_path\": \"app.local\", \"content\": \"mode=demo\\n\"}"}}
-{"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"call_02_V7z2GSt4h4I0sCnJg4990423"},"content":[{"type":"tool-result","toolCallId":"call_02_V7z2GSt4h4I0sCnJg4990423","content":[{"type":"text","text":"<path>{{cwd}}/app.local</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:10}}"},"meta":{"diffs":[]}},"sourceEventSeqs":[25],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"call_02_V7z2GSt4h4I0sCnJg4990423"},"content":[{"type":"tool-result","toolCallId":"call_02_V7z2GSt4h4I0sCnJg4990423","content":[{"type":"text","text":"<path>{{cwd}}/app.local</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:10}}"},"meta":{"operation":"create","diffs":[]}},"sourceEventSeqs":[25],"surfaceOp":"append"}
 {"type":"tool/call","data":{"turn":1,"step":2,"callId":"call_03_M8lD8W8TAtiIT141ej8n1520","name":"bash","arguments":"{\"command\": \"echo done >> notes.txt && cat notes.txt\", \"description\": \"Append done to notes.txt\"}"}}
 {"type":"tool/result","data":{"turn":1,"step":2,"message":{"source":{"kind":"tool","callId":"call_03_M8lD8W8TAtiIT141ej8n1520"},"content":[{"type":"tool-result","toolCallId":"call_03_M8lD8W8TAtiIT141ej8n1520","content":[{"type":"text","text":"start\ndone\n"}],"isError":false}],"role":"user","id":"{{message:11}}"}},"sourceEventSeqs":[27],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":1,"step":2}}

snapshots/web/permission-policy-context/session.v3.jsonl

@@ -72,7 +72,7 @@
 {"type":"tool/call","data":{"turn":4,"step":2,"callId":"call_00_NRXSzM55hPMs3seJDD8k7920","name":"write","arguments":"{\"file_path\": \"policy-neutral.txt\", \"content\": \"POLICY_NEUTRAL_OK\", \"sandbox_permissions\": \"workspace-write\", \"justification\": \"The user explicitly asked me to create this file; workspace-write is the narrowest mode sufficient to write to the session workspace.\"}"}}
 {"type":"approval/asked","data":{"id":"{{approval:1}}","toolName":"write","callId":"call_00_NRXSzM55hPMs3seJDD8k7920","reason":"escalate sandbox to workspace-write: The user explicitly asked me to create this file; workspace-write is the narrowest mode sufficient to write to the session workspace."}}
 {"type":"approval/decided","data":{"id":"{{approval:1}}","outcome":"allowed-once"}}
-{"type":"tool/result","data":{"turn":4,"step":2,"message":{"source":{"kind":"tool","callId":"call_00_NRXSzM55hPMs3seJDD8k7920"},"content":[{"type":"tool-result","toolCallId":"call_00_NRXSzM55hPMs3seJDD8k7920","content":[{"type":"text","text":"<path>{{cwd}}/policy-neutral.txt</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:18}}"},"meta":{"diffs":[]}},"sourceEventSeqs":[70],"surfaceOp":"append"}
+{"type":"tool/result","data":{"turn":4,"step":2,"message":{"source":{"kind":"tool","callId":"call_00_NRXSzM55hPMs3seJDD8k7920"},"content":[{"type":"tool-result","toolCallId":"call_00_NRXSzM55hPMs3seJDD8k7920","content":[{"type":"text","text":"<path>{{cwd}}/policy-neutral.txt</path>\n<type>file</type>\n<content>\nCreated file\n</content>"}],"isError":false}],"role":"user","id":"{{message:18}}"},"meta":{"operation":"create","diffs":[]}},"sourceEventSeqs":[70],"surfaceOp":"append"}
 {"type":"step/end","data":{"turn":4,"step":2}}
 {"type":"step/start","data":{"turn":4,"step":3}}
 {"type":"assistant/message","data":{"turn":4,"step":3,"message":{"role":"assistant","content":[{"type":"reasoning","text":"The file was created. Now I need to verify its contents as instructed."},{"type":"tool-call","id":"call_00_2Iq0ZY5UVHgctdG7nana2758","name":"read","arguments":"{\"file_path\": \"policy-neutral.txt\"}"}],"source":{"kind":"model","provider":"deepseek-official","model":"deepseek-v4-flash"},"id":"{{message:19}}"},"usage":{"inputTokens":180,"outputTokens":61,"cacheReadTokens":15744,"reasoningTokens":15},"stream":[{"type":"chunk","time":1789457853866,"chunk":{"type":"block-start","index":0,"blockType":"reasoning"}},{"type":"reasoning-chunks","time0":1789457853866,"index":0,"dt":[0,0,0,0,0,0,0,0,0,0,0,0,0,0],"texts":["The"," file"," was"," created","."," Now"," I"," need"," to"," verify"," its"," contents"," as"," instructed","."]},{"type":"chunk","time":1789457853866,"chunk":{"type":"block-start","index":1,"blockType":"tool-call"}},{"type":"tool-call-chunks","time0":1789457853866,"index":1,"dt":[0,0,0,0,0,0,0,0,0,0,0,0],"id":"call_00_2Iq0ZY5UVHgctdG7nana2758","name":"read","args":["","{","\"","file","_path","\"",": ","\"","policy","-neutral",".txt","\"","}"]},{"type":"chunk","time":1789457853866,"chunk":{"type":"block-end","index":0,"block":{"type":"reasoning","text":"The file was created. Now I need to verify its contents as instructed."}}},{"type":"chunk","time":1789457853866,"chunk":{"type":"block-end","index":1,"block":{"type":"tool-call","id":"call_00_2Iq0ZY5UVHgctdG7nana2758","name":"read","arguments":"{\"file_path\": \"policy-neutral.txt\"}"}}},{"type":"chunk","time":1789457853866,"chunk":{"type":"usage","usage":{"inputTokens":180,"outputTokens":61,"cacheReadTokens":15744,"reasoningTokens":15}}},{"type":"chunk","time":1789457853866,"chunk":{"type":"finish","reason":{"kind":"tool-calls"}}}]},"surfaceOp":"append"}