fix(caprock): include redirected_statement stages in pipeline clause decomposition

Pipeline stages wrapped in a redirected_statement (e.g. `cmd 2>&1 | tail -30`)
were silently dropped, causing only the tail end of the pipeline to appear as
an invocation. A provision on `tail *` would then incorrectly auto-accept the
entire command. Now all stages are collected regardless of redirect wrappers.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: grypez

packages/caprock/src/bash.test.ts

@@ -281,5 +281,24 @@ describe('decompose', () => {
       expect(result.clauses).toHaveLength(1);
       expect(result.clauses[0]).toHaveLength(2);
     });
+
+    it('includes a redirected_statement pipeline stage in the clause', () => {
+      // `cmd 2>&1 | tail -30` — the first stage is a redirected_statement wrapping a command
+      const result = decompose('yarn build 2>&1 | tail -30');
+      expect(result.ok).toBe(true);
+      expect(result.clauses).toHaveLength(1);
+      expect(result.clauses[0]).toHaveLength(2);
+      expect(result.clauses[0]?.[0]?.name).toBe('yarn');
+      expect(result.clauses[0]?.[1]?.name).toBe('tail');
+    });
+
+    it('captures stderr redirect on a pipeline stage', () => {
+      const result = decompose('yarn build 2>&1 | tail -30');
+      expect(result.ok).toBe(true);
+      const firstStage = result.clauses[0]?.[0];
+      expect(firstStage?.redirects).toStrictEqual([
+        { kind: 'fd-dup', target: '1' },
+      ]);
+    });
   });
 });

packages/caprock/src/bash.ts

@@ -166,12 +166,17 @@ function collectClauses(node: Parser.SyntaxNode): Pipeline[] {
       return result;
     }
     case 'pipeline': {
-      // All commands in this pipeline form one clause
+      // All commands in this pipeline form one clause.
+      // Each stage may be a bare `command` or a `redirected_statement` wrapping one.
       const cmds: ParsedCommand[] = [];
       for (let i = 0; i < node.namedChildCount; i++) {
         const child = node.namedChild(i);
-        if (child !== null && child.type === 'command') {
-          cmds.push(extractCommand(child));
+        if (child === null) {
+          continue;
+        }
+        const cmd = extractPipelineStage(child);
+        if (cmd !== null) {
+          cmds.push(cmd);
         }
       }
       return cmds.length > 0 ? [cmds] : [];
@@ -200,6 +205,37 @@ function collectClauses(node: Parser.SyntaxNode): Pipeline[] {
   }
 }
 
+/**
+ * Extract a ParsedCommand from a single pipeline stage node.
+ *
+ * A pipeline stage is either a bare `command` or a `redirected_statement`
+ * wrapping a command with I/O redirects (e.g. `cmd 2>&1`).
+ *
+ * @param node - A named child of a `pipeline` node.
+ * @returns The extracted ParsedCommand, or null if the stage is not a command.
+ */
+function extractPipelineStage(node: Parser.SyntaxNode): ParsedCommand | null {
+  if (node.type === 'command') {
+    return extractCommand(node);
+  }
+  if (node.type === 'redirected_statement') {
+    for (let i = 0; i < node.namedChildCount; i++) {
+      const child = node.namedChild(i);
+      if (
+        child !== null &&
+        child.type !== 'file_redirect' &&
+        child.type !== 'heredoc_redirect' &&
+        child.type !== 'herestring_redirect'
+      ) {
+        if (child.type === 'command') {
+          return extractCommand(child);
+        }
+      }
+    }
+  }
+  return null;
+}
+
 /**
  * Determine where in a pipeline a command sits.
  *