@awak-app/simy-cli 0.5.61 → 0.5.63

package/README.md

@@ -631,3 +631,20 @@ cross-view consistency. The workflow requires independent design, implementation
 To-Be and PR reviews, plus explicitly opted-in SQM before and after PR creation.
 The [workflow reference](src/orchestrator/delivery/references/shared-system-specifications.md)
 explains baseline updates, historical regression coverage and evidence limits.
+
+
+### Desktop SQM history
+
+SQM Tasks has separate **Analysis** and **Checks** lists on macOS and Windows.
+Analysis retains local review summaries; Checks retains both `simy sqm min-check`
+and `simy sqm check` outcomes, including checks run by the Delivery Loop.
+Each list keeps the latest 100 runs under `SIMY_HOME/sqm-history` (default
+`~/.simy/sqm-history`), isolated by web origin, account and organization.
+History remains visible with local analysis off and after restarting. A saved
+in-flight analysis is shown as Interrupted until this client claims it again;
+it does not contribute to the running count. The web workspace owns retry status.
+
+Only summary metadata is retained, without analysis prompts, source inputs,
+model responses or credentials. Historical summaries are not a replacement for
+signed proof files or delivery acceptance. Records from versions that kept
+analysis only in memory cannot be recovered after that process exits.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.5.61",
+  "version": "0.5.63",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -40,7 +40,7 @@
     "check:session-supervision-syntax": "node --check ./src/session-supervision/index.js && node --check ./src/session-supervision/codex-app-server.js && node --check ./src/session-supervision/claude-sessions.js && node --check ./src/session-supervision/original-session-target.js && node --check ./src/session-supervision/action-association.js && node --check ./src/session-supervision/action-association-host.js && node --check ./src/session-supervision/action-association-api.js && node --check ./src/session-supervision/association-store.js && node --check ./src/session-supervision/action-deadline.js && node --check ./src/session-supervision/action-deadline-store.js && node --check ./src/codex-plugins/simy/hooks/action-association.mjs",
     "check:auto-update": "node --check ./src/auto-update.js && node --check ./scripts/auto-update-e2e.js && npm run check:sqm",
     "check:workflow-observation-sender": "node --check ./src/workflow-observation-sender.js",
-    "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
+    "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/history-store.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/claude-parity-runtime-e2e.js && node --check ./scripts/claude-plugin-runtime-e2e.js",
     "check:syntax": "node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/codex-plugins/simy/hooks/dev-work.mjs && node --check ./src/dev-work-events.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js && node --check ./src/session-supervision/automatic-continuation.js",
     "check:package": "node ./scripts/check-package-contents.js",

package/src/agent.js

@@ -1,3 +1,4 @@
+import { createSqmHistoryStore, projectSqmHistory, sqmHistoryScope } from "./sqm/history-store.js";
 import { createDesktopAccessPolicy, desktopAccessReady, requireDesktopAccess } from './desktop-access.js';
 import { readSqmEnabled, writeSqmEnabled } from "./desktop-sqm-settings.js";
 import { createServer } from "node:http";
@@ -198,6 +199,7 @@ export async function startAgent({
   let organizationState = "unknown";
   let organizationRefresh = null;
   let pendingOrganization = null;
+  let desktopLoginPending = false;
   await cleanupExpiredRuns();
   for (const task of await restoreLocalTasks({ root: taskStorageRoot })) {
     localTaskRegistry.create(task);
@@ -287,6 +289,7 @@ export async function startAgent({
   };
   refreshAvailableCapabilities();
   let durableLocalTaskWorker = null;
+  const sqmHistory = createSqmHistoryStore({ root: sessionRoot });
   let sqmLocalReviewWorker = null;
   let codexWorkPatternSync = null;
   let codexWorkPatternSyncInFlight = null;
@@ -467,7 +470,9 @@ export async function startAgent({
     })();
     return organizationRefresh;
   };
-  const requestDesktopLogin = (organizationId = null) => {
+  const requestDesktopLogin = (organizationId = null, { passive = false } = {}) => {
+    // Reopening the verification page must keep the original nonce and scope.
+    if (!organizationId && pendingOrganization) return loginUrl?.toString() ?? null;
     let organizationSlug = null;
     if (organizationId) {
       if (!isSessionValid(session, Date.now(), apiOrigin)) throw new Error("Sign in before switching organizations.");
@@ -484,8 +489,10 @@ export async function startAgent({
       notifyDesktopStatusChange();
     } else if (isSessionValid(session, Date.now(), apiOrigin)) {
       if (!enforceDesktopAccess || desktopAccess.snapshot().state !== 'signed_out') return null;
-      authNonce = randomBytes(16).toString("base64url");
-      loginUrl = null;
+      if (!passive || !loginUrl) {
+        authNonce = randomBytes(16).toString("base64url");
+        loginUrl = null;
+      }
     }
     if (!loginUrl) {
       loginUrl = new URL("/local-cli/connect", apiOrigin);
@@ -499,6 +506,7 @@ export async function startAgent({
         loginUrl.searchParams.set('org_slug', organizationSlug);
       }
     }
+    if (!passive) { desktopLoginPending = true; notifyDesktopStatusChange(); }
     return loginUrl.toString();
   };
 
@@ -541,7 +549,7 @@ export async function startAgent({
           const remoteRun = restoreRun({
             snapshot, session, apiOrigin,
             localPath: repository?.local_path || null,
-            localStateRoot: codingRunStateRoot,
+            localStateRoot: codingRunStateRoot, sqmHistoryRoot: sessionRoot,
           });
           Object.assign(localRun, {
             request: remoteRun.request,
@@ -565,7 +573,7 @@ export async function startAgent({
         session,
         apiOrigin,
         localPath: repository?.local_path || null,
-        localStateRoot: codingRunStateRoot,
+        localStateRoot: codingRunStateRoot, sqmHistoryRoot: sessionRoot,
       });
       registry.create(restoredRun);
       restored = true;
@@ -597,7 +605,7 @@ export async function startAgent({
         const run = restoreRun({
           snapshot, session, apiOrigin,
           localPath: repository?.local_path || null,
-          localStateRoot: codingRunStateRoot,
+          localStateRoot: codingRunStateRoot, sqmHistoryRoot: sessionRoot,
         });
         // Keep the persisted timestamp until the Web ledger has been compared.
         // Publishing recovery here would make an older local record look newest.
@@ -689,6 +697,8 @@ export async function startAgent({
             if (session?.device_id && session.token) reclaimableSession = session;
             session = null;
             loginUrl = null;
+            pendingOrganization = null;
+            desktopLoginPending = false;
             refreshAvailableCapabilities();
             requestDesktopLogin();
           }
@@ -836,6 +846,9 @@ export async function startAgent({
         return (dependencies.runSqmLocalReview || ((value, selected, options) => runStructuredProviderReview(selected, value, options)))(request, provider, { beforeDispatch });
       },
       onChange: notifyDesktopStatusChange,
+      getHistoryScope: () => sqmHistoryScope(apiOrigin, session),
+      recordHistory: (scope, item) => sqmHistory.record(scope, item),
+      onHistoryError: () => { if (!quiet) console.error("Could not save the local SQM analysis history."); },
       getProvider: () => !desktopWorkAllowed() || availableCapabilities?.features?.sqm_local_review !== true ? null : ["codex", "claude"].find(
         (provider) => availableCapabilities?.backends?.[provider] === true &&
           providerStatuses[provider]?.state === "ready",
@@ -1189,6 +1202,7 @@ export async function startAgent({
         await writeSession(apiOrigin, session, sessionRoot);
         authNonce = randomBytes(16).toString("base64url");
         pendingOrganization = null;
+        desktopLoginPending = false;
         sqmEnabled = await readSqmEnabled(sessionRoot, apiOrigin, session);
         if (changingScope) sqmLocalReviewWorker?.resetHistory?.();
         organizationState = "unknown";
@@ -1869,7 +1883,7 @@ export async function startAgent({
           },
           session,
           apiOrigin,
-          localStateRoot: codingRunStateRoot,
+          localStateRoot: codingRunStateRoot, sqmHistoryRoot: sessionRoot,
         });
         try {
           await saveCodingRunSnapshot(codingRunStateRoot, run.snapshot);
@@ -2151,7 +2165,7 @@ export async function startAgent({
   }
 
   if (!isSessionValid(session, Date.now(), apiOrigin)) {
-    requestDesktopLogin();
+    requestDesktopLogin(null, { passive: true });
     if (!quiet) {
       console.log(`Sign in to SIMY: ${loginUrl.toString()}`);
       console.log(`Session file: ${sessionPath(apiOrigin, sessionRoot)}`);
@@ -2213,6 +2227,12 @@ export async function startAgent({
   server.on("close", () => {
     void shutdown().catch((error) => reportDurableLocalTaskError(error, quiet));
   });
+  const currentHistoryScope = () => isSessionValid(session, Date.now(), apiOrigin) ? sqmHistoryScope(apiOrigin, session) : null;
+  const historyForCurrentScope = async () => {
+    const scope = currentHistoryScope();
+    const items = await sqmHistory.items(scope).catch(() => []);
+    return JSON.stringify(scope) === JSON.stringify(currentHistoryScope()) ? items : [];
+  };
   const getDesktopStatus = async () => {
     const auth = desktopAuthStatus(session, { webOrigin: apiOrigin });
     if (auth.state === "signed_in" && organizationState === "unknown") void refreshOrganizations();
@@ -2231,6 +2251,7 @@ export async function startAgent({
       version: CLI_VERSION,
       webOrigin: apiOrigin,
       auth,
+      authorization: { pending: Boolean(pendingOrganization || desktopLoginPending) },
       ...(enforceDesktopAccess ? { access: { ...desktopAccess.snapshot(), revision: desktopScopeRevision() } } : {}),
       connection: connectionStatus.snapshot({ authenticated: auth.state === "signed_in" }),
       tasks: desktopTaskStatus([registry, directRegistry, localTaskRegistry]),
@@ -2240,12 +2261,13 @@ export async function startAgent({
         activeJobId: sqmLocalReviewWorker?.snapshot?.().active_job_id ?? null,
         issue: sqmLocalReviewWorker?.snapshot?.().issue ?? null,
         providerReady: [codex, claude].some(provider => provider?.state === "ready") },
-      sqmTasks: sqmLocalReviewWorker?.desktopTasks?.() ?? { activeCount: 0, items: [] },
+      ...projectSqmHistory(await historyForCurrentScope(), sqmLocalReviewWorker?.desktopTasks?.()),
       update: updateManager?.snapshot?.() ?? null,
       codex,
       claude,
       providers: { codex, claude },
-      loginUrl: auth.state === "signed_in" ? null : requestDesktopLogin(),
+      // URLs stay inside the host; native UI reopens the current request by action.
+      loginUrl: auth.state === "signed_in" ? null : requestDesktopLogin(null, { passive: true }),
     };
   };
   return {
@@ -2259,9 +2281,10 @@ export async function startAgent({
     shutdown,
     webOrigin: apiOrigin,
     get loginUrl() {
-      return requestDesktopLogin();
+      return requestDesktopLogin(null, { passive: true });
     },
     requestDesktopLogin,
+    getPendingAuthorizationUrl: () => pendingOrganization || desktopLoginPending ? loginUrl?.toString() ?? null : null,
     async refreshDesktopAccess() {
       const previous = desktopAccess.snapshot().state;
       const result = await desktopAccess.refresh(true);
@@ -2273,7 +2296,7 @@ export async function startAgent({
     getDesktopAccess: () => ({ ...desktopAccess.snapshot(), revision: desktopScopeRevision() }),
     requireDesktopAccess: authorizeDesktopWork,
     refreshOrganizations,
-    cancelOrganizationSelection() { authNonce = randomBytes(16).toString("base64url"); pendingOrganization = null; loginUrl = null; refreshAvailableCapabilities(); notifyDesktopStatusChange(); },
+    cancelOrganizationSelection() { authNonce = randomBytes(16).toString("base64url"); pendingOrganization = null; desktopLoginPending = false; loginUrl = null; refreshAvailableCapabilities(); notifyDesktopStatusChange(); },
     async setSqmEnabled(enabled) {
       if (enabled) await authorizeDesktopWork();
       if (!isSessionValid(session, Date.now(), apiOrigin) || pendingOrganization) throw new Error("Sign in to an organization first.");
@@ -2286,7 +2309,16 @@ export async function startAgent({
       void heartbeat().catch(error => reportHeartbeatError(error, quiet));
     },
     getDesktopStatus,
-    getDesktopTask: (key) => sqmLocalReviewWorker?.desktopTaskDetail?.(key) ?? desktopTaskDetail([registry, directRegistry, localTaskRegistry], key),
+    getDesktopTask: async (key) => {
+      if (key?.startsWith("sqm:") || key?.startsWith("sqm-check:")) {
+        const scope = currentHistoryScope();
+        if (!scope) return null;
+        const detail = await sqmHistory.detail(scope, key).catch(() => null);
+        if (JSON.stringify(scope) !== JSON.stringify(currentHistoryScope())) return null;
+        return sqmLocalReviewWorker?.desktopTaskDetail?.(key) ?? detail;
+      }
+      return desktopTaskDetail([registry, directRegistry, localTaskRegistry], key);
+    },
     async refreshDesktopStatus() {
       if (isSessionValid(session, Date.now(), apiOrigin)) {
         await heartbeat().catch((error) => reportHeartbeatError(error, quiet));
@@ -2350,7 +2382,7 @@ export async function startAgent({
             });
         const runId = String(remoteRun?.id || "");
         if (!runId) throw new Error("SIMY Web did not return an Agentic Loop run id.");
-        const run = createRun({ runId, request, session, apiOrigin, localStateRoot: codingRunStateRoot });
+        const run = createRun({ runId, request, session, apiOrigin, localStateRoot: codingRunStateRoot, sqmHistoryRoot: sessionRoot });
         await saveCodingRunSnapshot(codingRunStateRoot, run.snapshot);
         registry.create(run);
         await authorizeDesktopWork(scope);

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.5.61";
+export const CLI_VERSION = "0.5.63";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(

package/src/desktop-access.js

@@ -7,7 +7,7 @@ export function validDesktopAccessPath(path, slug) {
   return path === expected || path === `${expected}/`;
 }
 export const desktopAccessReady = value => value?.state === 'ready';
-const recoveryActions = new Set(['refresh', 'reconnect', 'login', 'organization_select', 'organization_cancel', 'organizations_refresh',
+const recoveryActions = new Set(['refresh', 'reconnect', 'login', 'authorization_open', 'organization_select', 'organization_cancel', 'organizations_refresh',
   'check_update', 'update', 'quit', 'delivery_stop', 'delivery_pause', 'delivery_reject',
   'desktop_access_refresh', 'desktop_access_settings', 'desktop_access_members']);
 export function desktopActionAllowed(access, command) {

package/src/desktop-host.js

@@ -39,6 +39,7 @@ const silentLogger = { log() {}, error() {} };
 const MAX_DESKTOP_FRAME_BYTES = 8 * 1024 * 1024;
 
 function desktopActionError(action, error) {
+  if (action === 'authorization_open' || error?.code === 'desktop_browser_unavailable') return "Could not open your browser. Open the verification link again, or check your default browser.";
   if (error?.code === "desktop_access_required") return "Sign in to an organization with SQM and Developer access before using SIMY.";
   if (action === "session_deadline_decide") return error?.code === "conflict"
     ? "Deadline changed; refresh before deciding." : "The deadline is unavailable. Refresh this conversation before deciding.";
@@ -214,6 +215,7 @@ export async function startDesktopHost({ input = process.stdin, output = process
         for (const item of sessionStatus.sessions) automaticContinuation?.revoke(item.provider, item.session);
         if (currentAccess.state !== 'checking') await analysisManager.update([]);
         status.tasks = { activeCount: status.tasks?.activeCount || 0, items: [] };
+        status.sqmChecks = { activeCount: 0, items: [] };
         status.sqmTasks = { activeCount: status.sqmTasks?.activeCount || 0, items: [] };
         status.deliveryHooks = { runs: [], providers: {} };
         status.sessionSupervision = { sessions: [], providers: {}, refreshedAt: null };
@@ -435,16 +437,22 @@ export async function startDesktopHost({ input = process.stdin, output = process
         else if (action === "organizations_refresh") await agent.refreshOrganizations();
         else if (action === "sqm_set_enabled") await agent.setSqmEnabled(command.enabled);
         else if (action === "organization_cancel") agent.cancelOrganizationSelection();
-        else if (action === "login" || action === "organization_select") {
+        else if (action === "login" || action === "organization_select" || action === "authorization_open") {
           if (action === "organization_select" && (typeof command.organizationId !== "string" || !command.organizationId)) throw new Error("Select an organization first.");
           if (action === "organization_select" && activeQueuedAction && !["refresh", "reconnect", "task_detail", "organizations_refresh", "check_update"].includes(activeQueuedAction)) {
             throw Object.assign(new Error("Wait for the current action to finish before switching organizations."), { code: "desktop_organization_busy" });
           }
-          const url = await agent.requestDesktopLogin(action === "organization_select" ? command.organizationId : null);
+          const url = action === "authorization_open" ? agent.getPendingAuthorizationUrl?.()
+            : await agent.requestDesktopLogin(action === "organization_select" ? command.organizationId : null);
+          if (action === 'authorization_open' && !url) throw new Error('No pending authorization.');
           if (url) {
             if (new URL(url).origin !== webOrigin) throw new Error("Invalid login origin.");
-            const result = await (dependencies.openLogin || openAuthorizationUrl)(url, { logger: silentLogger });
-            if (!result.opened) { agent.cancelOrganizationSelection?.(); throw new Error("Could not open the login page."); }
+            // Keep the pending request after an OS/browser failure so the user can
+            // use the visible fallback without silently canceling authorization.
+            try {
+              const result = await (dependencies.openLogin || openAuthorizationUrl)(url, { logger: silentLogger });
+              if (!result.opened) throw new Error('Browser unavailable.');
+            } catch { throw Object.assign(new Error('Browser unavailable.'), { code: 'desktop_browser_unavailable' }); }
           }
         } else if (action === "check_update") await updater.checkNow();
         else if (action === "update") {
@@ -559,7 +567,7 @@ export async function startDesktopHost({ input = process.stdin, output = process
         emit({ type: "result", id: command.id, ok: false, message: desktopActionError(command.action, error) });
       }
     };
-    if (["login", "organization_select", "organization_cancel"].includes(command.action)) {
+    if (["login", "organization_select", "organization_cancel", "authorization_open"].includes(command.action)) {
       authorizationQueue = authorizationQueue.then(execute).catch(() => {});
     } else {
       queue = queue.then(async () => {

package/src/runner.js

@@ -86,7 +86,7 @@ const PR_PREPARATION_IDS = new Set(PR_PREPARATION_CHECKS.map((row) => row.id));
 
 export { LocalRunRegistry };
 
-export function createRun({ runId, request, session, apiOrigin, localStateRoot = null }) {
+export function createRun({ runId, request, session, apiOrigin, localStateRoot = null, sqmHistoryRoot = null }) {
   const emitter = new EventEmitter();
   const normalizedRequest = {
     ...request,
@@ -111,6 +111,7 @@ export function createRun({ runId, request, session, apiOrigin, localStateRoot =
     session,
     apiOrigin,
     localStateRoot,
+    sqmHistoryRoot,
     status: "queued",
     lastOutput: "",
     startedAt: null,
@@ -160,7 +161,7 @@ export function createRun({ runId, request, session, apiOrigin, localStateRoot =
   };
 }
 
-export function restoreRun({ snapshot, session, apiOrigin, localPath = null, localStateRoot = null }) {
+export function restoreRun({ snapshot, session, apiOrigin, localPath = null, localStateRoot = null, sqmHistoryRoot = null }) {
   if (!snapshot || typeof snapshot !== "object" || !snapshot.charter) {
     throw new Error("Cannot restore an invalid agentic loop snapshot.");
   }
@@ -170,6 +171,7 @@ export function restoreRun({ snapshot, session, apiOrigin, localPath = null, loc
     session,
     apiOrigin,
     localStateRoot,
+    sqmHistoryRoot,
     request: {
       backend: charter.backend === "claude" ? "claude" : "codex",
       execution_target: normalizeDesktopExecutionTarget(charter.execution_target),
@@ -678,6 +680,8 @@ async function runLocalCodingRun(
       token: run.session?.token,
       endpoint: sqmBundleEndpoint(run.session),
       evidenceEndpoint: sqmEvidenceEndpoint(run.session),
+      webOrigin: run.apiOrigin,
+      historyRoot: run.sqmHistoryRoot,
       accountId: run.session?.account_id || run.session?.auth_user_id || run.session?.device_id,
       organizationId: run.session?.organization_id || run.session?.org_id,
       deviceId: run.session?.device_id,
@@ -751,6 +755,8 @@ export async function recheckLocalCodingRun(run, { collectEvidence } = {}) {
       token: run.session?.token,
       endpoint: sqmBundleEndpoint(run.session),
       evidenceEndpoint: sqmEvidenceEndpoint(run.session),
+      webOrigin: run.apiOrigin,
+      historyRoot: run.sqmHistoryRoot,
       accountId: run.session?.account_id || run.session?.auth_user_id || run.session?.device_id,
       organizationId: run.session?.organization_id || run.session?.org_id,
       deviceId: run.session?.device_id,

package/src/sqm/command.js

@@ -1,3 +1,4 @@
+import { createSqmCheckRecorder } from "./history-store.js";
 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import path from "node:path";
@@ -46,54 +47,63 @@ export async function runSqmCommand(argv, { cliVersion }) {
     organizationId,
   };
 
-  if (argv[0] === "min-check") {
-    const result = await runSqmMinCheck(common);
-    const output = option(argv, "--output") || defaultMinResultPath();
-    await atomicJson(output, result);
-    if (argv.includes("--json")) console.log(JSON.stringify(result, null, 2));
-    else printMin(result, output);
-    return result.status === "unavailable" ? 2 : result.status === "preliminary_failed" ? 1 : 0;
-  }
-
-  const minPath = option(argv, "--min-result") || defaultMinResultPath();
-  let minCheck;
+  const save = createSqmCheckRecorder({ scope: { webOrigin, accountId, organizationId },
+    phase: argv[0] === "min-check" ? "min" : "full", cwd: common.cwd, baseBranch: common.baseBranch });
   try {
-    minCheck = JSON.parse(await readFile(minPath, "utf8"));
+    if (argv[0] === "min-check") {
+      const result = await runSqmMinCheck(common);
+      const output = option(argv, "--output") || defaultMinResultPath();
+      await atomicJson(output, result);
+      await save(result);
+      if (argv.includes("--json")) console.log(JSON.stringify(result, null, 2));
+      else printMin(result, output);
+      return result.status === "unavailable" ? 2 : result.status === "preliminary_failed" ? 1 : 0;
+    }
+
+    const minPath = option(argv, "--min-result") || defaultMinResultPath();
+    let minCheck;
+    try {
+      minCheck = JSON.parse(await readFile(minPath, "utf8"));
+    } catch (error) {
+      if (error?.code !== "ENOENT") throw error;
+      console.warn("No min-check result was found; running the deterministic min-check first.");
+      minCheck = await runSqmMinCheck(common);
+      await atomicJson(minPath, minCheck);
+    }
+    if (minCheck.status === "unavailable") { await save(minCheck); return printUnavailable(minCheck, argv); }
+    const result = await runSqmCheck({ ...common, minCheck, deviceId, signingKeyPath: option(argv, "--signing-key") || undefined });
+    if (result.status === "unavailable") { await save(result); return printUnavailable(result, argv); }
+    const proofPath = path.resolve(option(argv, "--proof") || "proof.json");
+    const evidencePath = path.resolve(option(argv, "--signed-evidence") || `${proofPath}.signed.json`);
+    const diagnosticsPath = path.resolve(option(argv, "--diagnostics") || `${proofPath}.diagnostics.json`);
+    await Promise.all([
+      atomicJson(proofPath, result.proof),
+      atomicJson(evidencePath, result.signed_evidence),
+      atomicJson(diagnosticsPath, {
+        policy_version: "sqm-reliability.v1",
+        matcher_diagnostics: result.matcher_diagnostics,
+      }),
+    ]);
+    let upload = { uploaded: false, reason: "disabled" };
+    if (!argv.includes("--no-upload")) {
+      const evidenceEndpoint = process.env.SIMY_SQM_EVIDENCE_URL || (validSession?.api_base_url ? new URL("sqm/run-evidence", validSession.api_base_url).href : undefined);
+      upload = await uploadRunEvidence({ endpoint: evidenceEndpoint, token, proof: result.proof, signedEvidence: result.signed_evidence });
+    }
+    result.upload = upload;
+    result.artifacts = {
+      min_check: minPath,
+      proof: proofPath,
+      signed_evidence: evidencePath,
+      diagnostics: diagnosticsPath,
+    };
+    await save(result);
+    if (argv.includes("--json")) console.log(JSON.stringify(result, null, 2));
+    else printFull(result);
+    return result.proof.outcome.status === "failed" ? 1 : 0;
   } catch (error) {
-    if (error?.code !== "ENOENT") throw error;
-    console.warn("No min-check result was found; running the deterministic min-check first.");
-    minCheck = await runSqmMinCheck(common);
-    await atomicJson(minPath, minCheck);
-  }
-  if (minCheck.status === "unavailable") return printUnavailable(minCheck, argv);
-  const result = await runSqmCheck({ ...common, minCheck, deviceId, signingKeyPath: option(argv, "--signing-key") || undefined });
-  if (result.status === "unavailable") return printUnavailable(result, argv);
-  const proofPath = path.resolve(option(argv, "--proof") || "proof.json");
-  const evidencePath = path.resolve(option(argv, "--signed-evidence") || `${proofPath}.signed.json`);
-  const diagnosticsPath = path.resolve(option(argv, "--diagnostics") || `${proofPath}.diagnostics.json`);
-  await Promise.all([
-    atomicJson(proofPath, result.proof),
-    atomicJson(evidencePath, result.signed_evidence),
-    atomicJson(diagnosticsPath, {
-      policy_version: "sqm-reliability.v1",
-      matcher_diagnostics: result.matcher_diagnostics,
-    }),
-  ]);
-  let upload = { uploaded: false, reason: "disabled" };
-  if (!argv.includes("--no-upload")) {
-    const evidenceEndpoint = process.env.SIMY_SQM_EVIDENCE_URL || (validSession?.api_base_url ? new URL("sqm/run-evidence", validSession.api_base_url).href : undefined);
-    upload = await uploadRunEvidence({ endpoint: evidenceEndpoint, token, proof: result.proof, signedEvidence: result.signed_evidence });
+    await save({ status: "failed" });
+    throw error;
   }
-  result.upload = upload;
-  result.artifacts = {
-    min_check: minPath,
-    proof: proofPath,
-    signed_evidence: evidencePath,
-    diagnostics: diagnosticsPath,
-  };
-  if (argv.includes("--json")) console.log(JSON.stringify(result, null, 2));
-  else printFull(result);
-  return result.proof.outcome.status === "failed" ? 1 : 0;
 }
 
 function printHelp() {

package/src/sqm/history-store.js

@@ -0,0 +1,108 @@
+import { createHash, randomUUID } from "node:crypto";
+import { mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
+import { basename, join } from "node:path";
+import { formatSqmCoverage } from "./report.js";
+import { defaultSessionRoot } from "../session-store.js";
+
+const LIMIT = 100;
+const hash = value => createHash("sha256").update(value).digest("hex");
+
+export function sqmHistoryScope(webOrigin, session) {
+  if (!session?.account_id || !session?.organization_id) return null;
+  return { webOrigin: new URL(webOrigin).origin, accountId: session.account_id, organizationId: session.organization_id };
+}
+
+// One atomic file per run prevents the daemon and independent CLI commands from
+// overwriting each other's history. Only display metadata is persisted.
+export function createSqmHistoryStore({ root = defaultSessionRoot(), now = () => Date.now() } = {}) {
+  const cache = new Map();
+  const directory = scope => scope?.webOrigin && scope?.accountId && scope?.organizationId
+    ? join(root, "sqm-history", hash(JSON.stringify([new URL(scope.webOrigin).origin, scope.accountId, scope.organizationId]))) : null;
+  async function list(scope) {
+    const dir = directory(scope);
+    if (!dir) return [];
+    const cached = cache.get(dir);
+    if (cached && now() - cached.at < 3000) return cached.items;
+    let names;
+    try { names = await readdir(dir); } catch (error) { if (error.code === "ENOENT") return []; throw error; }
+    const items = (await Promise.all(names.filter(name => /^[a-f0-9]{64}\.json$/.test(name)).map(async name => {
+      try {
+        const text = await readFile(join(dir, name), "utf8");
+        if (text.length > 16_384) return null;
+        return metadata(JSON.parse(text));
+      } catch { return null; }
+    }))).filter(Boolean).sort((a, b) => b.startedAt.localeCompare(a.startedAt));
+    cache.set(dir, { at: now(), items });
+    return items;
+  }
+  return {
+    async record(scope, entry) {
+      const dir = directory(scope), item = metadata(entry);
+      if (!dir || !item) return false;
+      await mkdir(dir, { recursive: true, mode: 0o700 });
+      const target = join(dir, `${hash(item.key)}.json`), temp = `${target}.${randomUUID()}.tmp`;
+      try {
+        await writeFile(temp, JSON.stringify(item), { mode: 0o600 });
+        await rename(temp, target);
+      } finally { await rm(temp, { force: true }); cache.delete(dir); }
+      const items = await list(scope);
+      for (const kind of ["analysis", "check"]) {
+        await Promise.all(items.filter(row => row.kind === kind).slice(LIMIT).map(row => rm(join(dir, `${hash(row.key)}.json`), { force: true })));
+      }
+      cache.delete(dir);
+      return true;
+    },
+    async items(scope) {
+      // A saved running row is not evidence that this process owns its lease.
+      return (await list(scope)).map(item => ({ ...item, state: item.state === "running" ? "interrupted" : item.state }));
+    },
+    async detail(scope, key) {
+      const item = (await this.items(scope)).find(item => item.key === key);
+      if (!item) return null;
+      return { key, instruction: item.instruction || `SQM local review · ${item.provider || "local"}`,
+        result: item.result || "", error: item.state === "interrupted" ? "This client stopped before the local run finished. Check the web workspace for its current retry status." : item.error || "", links: [] };
+    },
+  };
+}
+
+function metadata(entry) {
+  if (!entry || !["analysis", "check"].includes(entry.kind) || typeof entry.key !== "string" || !entry.key.startsWith(entry.kind === "analysis" ? "sqm:" : "sqm-check:")) return null;
+  if (!["running", "completed", "failed", "unavailable", "interrupted", "verification_pending"].includes(entry.state) || !Number.isFinite(Date.parse(entry.startedAt))) return null;
+  const item = {};
+  for (const name of ["key", "id", "kind", "label", "state", "provider", "phase", "repository", "startedAt", "finishedAt", "instruction", "result", "error"]) {
+    if (typeof entry[name] === "string") item[name] = entry[name].slice(0, ["instruction", "result", "error"].includes(name) ? 4096 : 512);
+  }
+  return item;
+}
+
+export function projectSqmHistory(items, live = { activeCount: 0, items: [] }) {
+  const analyses = new Map(items.filter(item => item.kind === "analysis").map(item => [item.key, item]));
+  for (const item of live.items || []) analyses.set(item.key, { ...analyses.get(item.key), ...item });
+  const rows = items => items.sort((a, b) => (b.startedAt || "").localeCompare(a.startedAt || "")).slice(0, LIMIT)
+    .map(({ instruction, result, error, ...item }) => item);
+  return { sqmTasks: { activeCount: live.activeCount || 0, items: rows([...analyses.values()]) },
+    sqmChecks: { activeCount: 0, items: rows(items.filter(item => item.kind === "check")) } };
+}
+
+export function createSqmCheckRecorder({ root, scope, phase, cwd, baseBranch, onError = () => console.warn("Could not save the local SQM check history.") }) {
+  if (!scope?.webOrigin || !scope?.accountId || !scope?.organizationId) return async () => {};
+  const history = createSqmHistoryStore({ root });
+  const key = `sqm-check:${randomUUID()}`;
+  const startedAt = new Date().toISOString();
+  return async result => {
+    const proof = result.proof, identity = proof?.repository_identity || result.repository_identity || result.min_check?.repository_identity;
+    const repository = identity?.repository || result.repository;
+    const outcome = proof?.outcome.status || result.min_check?.status || result.status;
+    const state = outcome === "unavailable" ? "unavailable" : ["failed", "preliminary_failed"].includes(outcome) ? "failed" : ["requires_human", "requires_post_deploy"].includes(outcome) ? "verification_pending" : "completed";
+    const summary = proof ? [`Full check: ${proof.outcome.status}`, formatSqmCoverage(proof), `Evidence upload: ${result.upload?.uploaded ? "uploaded" : "kept locally"}`].join("\n")
+      : state === "unavailable" ? "SQM could not obtain a verified result. Retry the command to see current diagnostics."
+      : state === "failed" && !identity ? "The command did not finish. Retry it to see current diagnostics."
+      : `Min-check: ${result.min_check?.status || result.status} · ${(result.preliminary_findings || result.min_check?.preliminary_findings)?.length || 0} preliminary finding(s) · ${(result.matched_modules || result.min_check?.matched_modules)?.length || 0} matched module(s).\nThis is a preflight; run the full check for signed verification.`;
+    try {
+      await history.record(scope, { key, id: key, kind: "check", phase, state, startedAt, finishedAt: new Date().toISOString(), repository,
+        label: `${phase === "min" ? "Min-check" : "Check"} · ${repository || basename(cwd)}`,
+        instruction: [repository || basename(cwd), `Base: ${identity?.base_ref || baseBranch}`, identity?.head_commit ? `Head: ${identity.head_commit}` : ""].filter(Boolean).join("\n"),
+        result: summary });
+    } catch { onError(); }
+  };
+}

package/src/sqm/index.js

@@ -1,3 +1,4 @@
+import { createSqmCheckRecorder } from "./history-store.js";
 import { evaluateKnowledgeBundle } from "./checkers.js";
 import { loadKnowledgeBundle } from "./bundle-store.js";
 import { uploadRunEvidence } from "./evidence-client.js";
@@ -15,6 +16,8 @@ export function createSqmChecker({
   accountId,
   organizationId,
   deviceId,
+  webOrigin,
+  historyRoot,
   evidenceEndpoint,
   uploadRunEvidenceImpl = uploadRunEvidence,
   inspectRepositoryImpl = inspectRepository,
@@ -27,7 +30,7 @@ export function createSqmChecker({
   let pinnedRepository = null;
   let latestMinCheck = null;
 
-  return async function checkCurrentRepository(_attempt = null, { phase = "min" } = {}) {
+  const checkCurrentRepository = async function(_attempt = null, { phase = "min" } = {}) {
     let repository;
     try {
       repository = await inspectRepositoryImpl(cwd, { baseBranch, runCommand: dependencies.runCommand });
@@ -64,6 +67,13 @@ export function createSqmChecker({
       return { ...unavailable(`SQM ${phase} execution failed: ${message(error)}`, repository.repository), bundle: bundleIdentity(loaded.bundle), warnings: [...loaded.warnings, `SQM ${phase} execution failed: ${message(error)}`] };
     }
   };
+  return async (attempt, options = {}) => {
+    const save = createSqmCheckRecorder({ root: historyRoot, scope: historyRoot ? { webOrigin, accountId, organizationId } : null, phase: options.phase || "min", cwd, baseBranch });
+    try {
+      const result = await checkCurrentRepository(attempt, options);
+      await save(result); return result;
+    } catch (error) { await save({ status: "failed" }); throw error; }
+  };
 }
 
 export async function runSqmMinCheck(options) {

package/src/sqm/review-worker.js

@@ -86,6 +86,9 @@ export function createSqmLocalReviewWorker({
   beginWork = () => () => {},
   onError = () => {},
   onChange = () => {},
+  getHistoryScope = () => null,
+  recordHistory = async () => {},
+  onHistoryError = () => {},
 } = {}) {
   if (!api || typeof api.request !== "function") throw new TypeError("api.request is required");
   let activeJobId = null;
@@ -93,9 +96,19 @@ export function createSqmLocalReviewWorker({
   let closed = false;
   let issue = null;
   const history = [];
-  const updateTask = (id, state) => {
+  const historyScopes = new WeakMap();
+  const visibleHistory = () => history.filter(item => historyScopes.get(item) === JSON.stringify(getHistoryScope()));
+  const persist = async (scope, item) => {
+    try { await recordHistory(scope, item); } catch { onHistoryError(); /* History failure must not fail a leased review. */ }
+  };
+  const updateTask = async (id, state, scope) => {
     const item = history.find(item => item.id === id);
-    if (item) item.state = state;
+    if (item) {
+      item.state = state; item.finishedAt = new Date().toISOString();
+      item.result = state === "completed" ? "SQM review submitted." : "";
+      item.error = state === "failed" ? "Local review failed. Check the SQM workspace for retry status." : "";
+      await persist(scope, item);
+    }
     onChange();
   };
 
@@ -108,10 +121,15 @@ export function createSqmLocalReviewWorker({
   });
 
   const processClaim = async (claim, provider) => {
+    const historyScope = getHistoryScope();
     activeJobId = claim.job_id;
+    const priorIndex = history.findIndex(item => item.id === claim.job_id);
+    if (priorIndex >= 0) history.splice(priorIndex, 1);
     history.unshift({ id: claim.job_id, key: `sqm:${claim.job_id}`, label: `SQM · ${String(claim.job_id).slice(0, 8)}`,
-      state: "running", provider, startedAt: new Date().toISOString() });
+      kind: "analysis", state: "running", provider, startedAt: new Date().toISOString() });
+    historyScopes.set(history[0], JSON.stringify(historyScope));
     history.splice(50);
+    await persist(historyScope, history[0]);
     onChange();
     let heartbeatTimer = null;
     const heartbeat = () => {
@@ -127,7 +145,7 @@ export function createSqmLocalReviewWorker({
         analysis_output: analysis.output,
         executor_model: analysis.model,
       });
-      if (advanced.completed) { updateTask(claim.job_id, "completed"); return advanced; }
+      if (advanced.completed) { await updateTask(claim.job_id, "completed", historyScope); return advanced; }
       const adjudication = await runReview(advanced.request, provider);
       const completed = await api.request({
         action: "complete",
@@ -136,10 +154,10 @@ export function createSqmLocalReviewWorker({
         adjudication_output: adjudication.output,
         executor_model: adjudication.model || analysis.model,
       });
-      updateTask(claim.job_id, "completed");
+      await updateTask(claim.job_id, "completed", historyScope);
       return completed;
     } catch (error) {
-      updateTask(claim.job_id, "failed");
+      await updateTask(claim.job_id, "failed", historyScope);
       throw error;
     } finally {
       if (heartbeatTimer) clearInterval(heartbeatTimer);
@@ -152,9 +170,9 @@ export function createSqmLocalReviewWorker({
     snapshot() {
       return { active_job_id: activeJobId, polling: Boolean(pollPromise), closed, issue };
     },
-    desktopTasks() { return { activeCount: activeJobId ? 1 : 0, items: history.map(item => ({ ...item })) }; },
+    desktopTasks() { return { activeCount: activeJobId ? 1 : 0, items: visibleHistory().map(item => ({ ...item })) }; },
     desktopTaskDetail(key) {
-      const item = history.find(item => item.key === key);
+      const item = visibleHistory().find(item => item.key === key);
       return item ? { key, instruction: `SQM local review · ${item.provider}`, result: item.state === "completed" ? "SQM review submitted." : "", error: item.state === "failed" ? "Local review failed. Check the SQM workspace for retry status." : "", links: [] } : null;
     },
     resetHistory() { if (!pollPromise) { history.splice(0); issue = null; } },