feat(coding-agent): preview bash-skill commands as bash in collapsed cells

[snimu]

In the interactive TUI, a python cell that runs a shell command through the bash skill collapses to a line like python · r = await bash('…') - the command string is erased by the long-string redaction in the preview descriptor, and even short commands show the python wrapper instead of the command. Repeated bash-skill calls are indistinguishable (screenshot case: three consecutive python · r = await bash('…') lines).

The fix

%%bash cells already have the right treatment: routed through previewBashCommand, labeled bash, bash-highlighted, salient-command descriptor. This PR extends that to bash-skill calls: after the python scorer picks the preview line, if that line is a bash(...) / await bash(...) / x = await bash(...) call whose first argument is a plain string literal (single-, double-, or triple-quoted; raw strings included), the literal is extracted and previewed via the existing previewBashCommand:

✓ bash · git status --porcelain · ↑ 2 lines · 21ms

• One extraction function + one regex in code-preview.ts; no component changes (ipython-cell.ts already labels from preview.language).
• The extracted command flows through the same descriptor/redaction path as %%bash cells (secrets stay redacted; verified with export/token/password cases).
• Non-literal arguments (variables, f-strings, concatenation) and escaped-quote literals that cannot be cut safely fall back to the current python preview - extraction never shows a command that differs from what ran.
• Match is anchored to the scorer-chosen line; trailing arguments (bash(cmd, timeout=...)) are tolerated.

Tests

Five focused cases in code-preview.test.ts: literal routing (short + >=160-char command with kwarg, proving the redaction-erasure is gone), triple-quoted multi-line body, non-literal fallback (variable + f-string), non-literal-first-argument/escaped-quote fallback (including the grep -n \")\" mis-cut guard), and scorer coexistence with other code. The routing assertions were proven red against the pre-fix preview.

Linear: ENG-5802

---

Note

Low Risk
UI-only preview heuristics in code-preview.ts with conservative fallbacks; extracted commands reuse existing bash redaction paths.

Overview
Collapsed ipython cells that invoke the bash skill with a plain string literal now show bash · <command> (via previewBashCommand) instead of a generic python · await bash('…') line where long commands were truncated or redacted.

previewPythonCode detects bash(...) / await bash(...) on the scorer’s preview line, parses the first argument with a small Python string-literal scanner (single/double/triple quotes, raw strings, common escapes), and falls back to the existing Python preview when the argument isn’t a safe literal (variables, f-strings, concatenation, unclosed strings, or escapes like \x/\b that aren’t evaluated). redactNoise also redacts Authorization: headers in preview text so curl-style bash-skill calls stay safe.

Tests cover routing, literal evaluation, fallbacks, and docstring false positives; no TUI component changes.

^{Reviewed by Cursor Bugbot for commit 2402762. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Preview bash(...) skill calls as bash in collapsed ipython cells

• When an ipython cell invokes bash("...") with a standalone quoted string literal, previewPythonCode now returns a bash-language preview (bash · <command>) instead of the Python wrapper. The new extractBashSkillCommand helper uses BASH_SKILL_CALL_PATTERN to locate the call and scanPythonStringLiteral to decode the literal, rejecting unterminated strings, unsupported escapes, or non-literal first arguments.
• Adds endsInsideMultilineString so bash-like text inside an open triple-quoted Python string is not misinterpreted as a bash call.
• redactNoise now redacts Authorization: header values (including optional Bearer prefix) from preview text.
• Behavioral Change: previewPythonCode in code-preview.ts gains new code paths; cells that previously previewed as Python may now preview as bash when they match the pattern. redactNoise additionally strips Authorization tokens that were previously visible in previews.

^{Macroscope summarized 2402762.}

[sethkarten]

One issue before approval: the new Authorization: redaction only handles Bearer as a two-part value. Other valid schemes leave the credential visible. For example, Authorization: Basic dXNlcjpwYXNz becomes Authorization: <redacted> dXNlcjpwYXNz, and Authorization: ApiKey secret has the same problem.

Please redact the complete authorization-header value through the closing quote or line, and add behavioral coverage for Basic and another non-Bearer scheme through the bash preview path.

Minor cleanup while touching the PR: please rewrite the changelog in the required user-facing past-tense form, for example: Fixed collapsed IPython cells that invoke the bash skill to preview the command instead of the Python wrapper.