dsh-filesnap

Configuration

Every field has a default that is right on an ordinary machine; most deployments set none of them.

field	default
command	(resolved)	normally unset — the binary installed with this package is found automatically. Set it to use a different build, or to a bare name that the subprocess provider resolves through its own PATH when its execution world is not this machine.
dataDir	platform data directory	where the store lives — $XDG_DATA_HOME or ~/.local/share on Unix, %LOCALAPPDATA% on Windows. Never inside your project.
timeoutMs	120000	wall-clock bound for one invocation. The expensive one is the per-turn scan.
graceMs	2000	SIGTERM-to-SIGKILL grace when a deadline or a cancelled turn ends a run.
maxOutputBytes	1048576	in-memory cap per collected stream.
declareEdits	true	record pre-images before edits. Turning it off narrows coverage to whatever the per-turn scan sees.

An unknown key or an unusable value fails at load, not at the first turn: a misconfiguration that surfaces as a missing snapshot an hour later is indistinguishable from a bug.

filesnap's scan limits are deliberately not exposed. A bound you have to discover is not a bound, and filesnap status answers the question that setting would have been reached for — which files in this project are not protected, and why.