@timurproko/a1 0.1.8-dev.290 → 0.1.8-dev.299

package/dist/integrations/pi/session-ui/session-shell.js

@@ -1,3 +1,4 @@
+import { PromptHistoryController } from "./prompt-history-controller.js";
 import { PRODUCT_TEXT } from "../../../product-identity.js";
 import { boundedCleanup } from "../../../foundation/terminal-cleanup/index.js";
 import { assertOwnedUiCommand, assertPromptImages, ImageAttachmentError } from "../../../contracts/owned-ui/index.js";
@@ -21,6 +22,7 @@ export class OwnedUiSessionShell {
     #unsubscribe;
     #unsubscribePromptSuggestions;
     #promptSuggestions;
+    #promptHistory = null;
     #extensionBridge;
     #stopped;
     #resolveStopped;
@@ -78,6 +80,8 @@ export class OwnedUiSessionShell {
                 replacementSurfaceActive: !this.root.usesDefaultInputSurface(),
             }),
             enableDockInputReuse: options.inputPresentation?.viewportReuse !== false,
+            persistentHistory: this.#customViewport && options.promptHistory !== undefined,
+            ...(options.promptHistory === undefined ? {} : { historyEditor: options.promptHistory.editor }),
             onSubmit: text => { void this.submit(text).catch(() => this.#reportSubmissionError()); },
             onPasteRejected: error => this.#reportSubmissionError(error),
             onInterrupt: () => { void this.interrupt(); },
@@ -98,6 +102,7 @@ export class OwnedUiSessionShell {
             onInputSurfaceChanged: () => {
                 this.root.clearViewportPointerState();
                 promptSuggestionController?.invalidate();
+                this.#promptHistory?.synchronize();
             },
             onCopyText: text => {
                 runtime?.writeControl(`\u001b]52;c;${Buffer.from(text, "utf8").toString("base64")}\u0007`);
@@ -309,6 +314,17 @@ export class OwnedUiSessionShell {
                     this.root.setImagePresentation(this.#showImages, this.#imageWidthCells);
                 } },
         });
+        if (this.#customViewport && options.promptHistory !== undefined) {
+            this.#promptHistory = new PromptHistoryController({
+                editor: this.root.editor,
+                store: options.promptHistory.store,
+                limit: options.promptHistory.limit,
+                fallback: this.view().transcript.flatMap(block => block.kind === "user" ? [block.text] : []),
+                active: () => this.root.usesDefaultInputSurface(),
+                render: () => this.runtime.requestRender(),
+                failure: message => this.root.addExtensionNotification(message, "warning"),
+            });
+        }
         this.#extensionBridge = createPiExtensionUiBridge({
             runtime: {
                 getColumns: () => this.runtime.viewport().columns,
@@ -419,6 +435,7 @@ export class OwnedUiSessionShell {
             return;
         this.#started = true;
         this.runtime.start();
+        this.#promptHistory?.start();
         this.#syncTerminalProgress(this.view());
         if (this.#customViewport)
             this.#setPointerReporting(true);
@@ -472,6 +489,16 @@ export class OwnedUiSessionShell {
         for (const item of this.#waitingImages.values())
             item.controller.abort();
     }
+    #rememberInput(text, kind) {
+        this.root.editor.addToHistory(text);
+        if (this.#promptHistory !== null) {
+            const reusable = this.root.prepareHistoryText(text);
+            if (reusable.length === 0)
+                this.#promptHistory.rememberRecovery(text);
+            else
+                this.#promptHistory.capture(reusable, kind, this.#cwd, this.backend.sessionId);
+        }
+    }
     async #submit(text) {
         this.#promptSuggestions?.invalidate();
         const displayInput = text.trim();
@@ -486,7 +513,7 @@ export class OwnedUiSessionShell {
             const excludeFromContext = input.startsWith("!!");
             const command = input.slice(excludeFromContext ? 2 : 1).trim();
             if (command) {
-                this.root.editor.addToHistory(displayInput);
+                this.#rememberInput(displayInput, "bash");
                 try {
                     const result = await this.backend.executeBashWorkflow(command, excludeFromContext);
                     const workflow = {
@@ -508,7 +535,7 @@ export class OwnedUiSessionShell {
             }
         }
         if (this.view().status.workingMessage?.startsWith("Compacting") === true) {
-            this.root.editor.addToHistory(displayInput);
+            this.#rememberInput(displayInput, "steer");
             this.#compactionQueue.push({
                 text: input,
                 draft: displayInput,
@@ -520,7 +547,7 @@ export class OwnedUiSessionShell {
             return { outcome: "completed", diagnostic: null };
         }
         const type = this.view().lifecycle === "busy" ? "steer" : "prompt";
-        this.root.editor.addToHistory(displayInput);
+        this.#rememberInput(displayInput, type);
         this.root.resumeViewportFollowing();
         return this.#execute({
             type,
@@ -633,7 +660,7 @@ export class OwnedUiSessionShell {
         const prepared = this.root.preparePromptSubmission(displayInput);
         assertPromptImages(prepared.images);
         const text = prepared.text.trim();
-        this.root.editor.addToHistory(displayInput);
+        this.#rememberInput(displayInput, "follow-up");
         if (this.root.editor.getText() === draft)
             this.root.editor.setText("");
         this.root.resumeViewportFollowing();
@@ -1157,6 +1184,8 @@ export class OwnedUiSessionShell {
             failures.push(error);
         } };
         let pasteCleanup = Promise.resolve();
+        let historyCleanup = Promise.resolve(true);
+        attempt(() => { historyCleanup = this.#promptHistory?.close() ?? Promise.resolve(true); });
         attempt(() => { pasteCleanup = this.root.disposePendingPastes(); });
         attempt(() => this.root.clearViewportPointerState());
         attempt(() => this.#setPointerReporting(false, true));
@@ -1182,6 +1211,9 @@ export class OwnedUiSessionShell {
         attempt(() => this.#extensionBridge.dispose());
         // Invariant: terminal restoration precedes any potentially stalled backend teardown.
         await this.runtime.dispose().catch(error => failures.push(error));
+        const historySaved = await historyCleanup.catch(() => false);
+        if (!historySaved)
+            this.runtime.writeAfterStop("Prompt history could not finish saving before exit.\n");
         await boundedCleanup(() => pasteCleanup).catch(error => failures.push(error));
         await boundedCleanup(() => this.backend.unbindExtensionUi()).catch(error => failures.push(error));
         if (failures.length > 0)
@@ -1219,6 +1251,7 @@ export class OwnedUiSessionShell {
             this.root.resetPendingPastes();
             this.#promptSuggestions?.invalidate();
             this.#sessionGeneration = this.backend.sessionGeneration;
+            this.#promptHistory?.reset(view.transcript.flatMap(block => block.kind === "user" ? [block.text] : []));
             this.#activeLoginDialog = undefined;
             this.#extensionBridge.reset();
             // Invariant: a replaced session takes its transient viewport and owned-route state with it.
@@ -1377,7 +1410,7 @@ export class OwnedUiSessionShell {
         if (isWorkflowRoute(name))
             return this.runWorkflow({ command: name, argument });
         // Compatibility: unknown slash input, prompt templates, skills, and extension commands remain Pi prompt input.
-        this.root.editor.addToHistory(text);
+        this.#rememberInput(text, "slash");
         this.root.resumeViewportFollowing();
         return this.#execute({
             type: this.view().lifecycle === "busy" ? "steer" : "prompt",
@@ -1523,6 +1556,7 @@ export class OwnedUiSessionShell {
         catch {
             // Security: dispatch might already have reached the provider. Never retry automatically.
             this.root.editor.addToHistory(draft);
+            this.#promptHistory?.rememberRecovery(draft);
             this.#reportSubmissionError(undefined, "Submission failed; delivery is uncertain. Check the conversation before retrying. Press Up to recover the draft.");
             return { outcome: "failed", diagnostic: "submission delivery is uncertain" };
         }
@@ -1540,6 +1574,7 @@ export class OwnedUiSessionShell {
     }
     #recoverSubmission(draft, revision, error) {
         this.root.editor.addToHistory(draft);
+        this.#promptHistory?.rememberRecovery(draft);
         // Concurrency: never overwrite input typed (even typed and cleared) after this submission.
         if (revision === this.#editorRevision && this.root.editor.getText().length === 0)
             this.root.editor.setText(draft);

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-09-11T07:23:35.242Z",
+  "builtAt": "2026-09-11T15:30:41.585Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "9db1726bbe3fc2e8292f2ead1e7e9d0fd4d7d0dc9217b372582bf354b0f565dc",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-11T07:23:38.591Z",
+  "builtAt": "2026-09-11T15:30:45.869Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "d8cda6b0c7cb36c0cc41e90802aceebf6c02eaebbc08a83d7d963d2e918dbd7a",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-09-11T07:23:55.165Z",
+  "builtAt": "2026-09-11T15:31:16.823Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "57d07c4be5d43295bb5af2ddafc482f8f79b47c7245c953222690b2e91d302fc",
+    "sha256": "78359342ae74e12b31ce05aff4a6b06f25d6e9777b081822c860604d674ec08d",
     "size": 177664
   },
   "provenance": {

package/dist/product-identity.d.ts

@@ -3,7 +3,7 @@ declare const FILESYSTEM_KEYS: readonly ["slug", "windowsDirectory", "unixDirect
 declare const STATE_KEYS: readonly ["windowsControlDirectory", "unixControlDirectory", "developmentDirectory", "piAgentProfile", "piVanillaProfile"];
 declare const ENDPOINT_KEYS: readonly ["windowsPipeStem", "unixSocketFilename", "metadataFilename", "supervisorLogFilename", "databaseFilename"];
 declare const MANIFEST_KEYS: readonly ["releaseFilename", "packageFilename"];
-declare const PROTOCOL_KEYS: readonly ["namespace", "controlEnvelope", "supervisorSchema", "nativeHostSchema", "structuredAgentSchema", "controlStoreSchema", "releaseCohortSchema", "updateJournalSchema"];
+declare const PROTOCOL_KEYS: readonly ["namespace", "controlEnvelope", "supervisorSchema", "nativeHostSchema", "structuredAgentSchema", "controlStoreSchema", "promptHistorySchema", "releaseCohortSchema", "updateJournalSchema"];
 declare const EVIDENCE_KEYS: readonly ["nativeSpikeSchema", "terminalProvenanceSchema", "terminalProofSchema", "stableReleaseSchema", "previewReleaseSchema", "releaseCertificationSchema", "previewPlatformVerdictSchema", "piSourceLedgerSchema", "piComponentParitySchema", "piEventFrameParitySchema", "startupTraceSchema", "dependencyLayerSchema", "dependencyLayerCertificationSchema", "runtimePayloadSchema"];
 declare const ARTIFACT_KEYS: readonly ["cliEntry", "supervisorEntry", "guardianEntry", "uiEntry", "nativeExecutable", "nativeCrate", "processGuardianExecutable", "releaseTarballStem", "diagnosticStem"];
 type StringRecord<Keys extends readonly string[]> = {

package/dist/product-identity.js

@@ -40,7 +40,7 @@ const FILESYSTEM_KEYS = ["slug", "windowsDirectory", "unixDirectory", "temporary
 const STATE_KEYS = ["windowsControlDirectory", "unixControlDirectory", "developmentDirectory", "piAgentProfile", "piVanillaProfile"];
 const ENDPOINT_KEYS = ["windowsPipeStem", "unixSocketFilename", "metadataFilename", "supervisorLogFilename", "databaseFilename"];
 const MANIFEST_KEYS = ["releaseFilename", "packageFilename"];
-const PROTOCOL_KEYS = ["namespace", "controlEnvelope", "supervisorSchema", "nativeHostSchema", "structuredAgentSchema", "controlStoreSchema", "releaseCohortSchema", "updateJournalSchema"];
+const PROTOCOL_KEYS = ["namespace", "controlEnvelope", "supervisorSchema", "nativeHostSchema", "structuredAgentSchema", "controlStoreSchema", "promptHistorySchema", "releaseCohortSchema", "updateJournalSchema"];
 const EVIDENCE_KEYS = ["nativeSpikeSchema", "terminalProvenanceSchema", "terminalProofSchema", "stableReleaseSchema", "previewReleaseSchema", "releaseCertificationSchema", "previewPlatformVerdictSchema", "piSourceLedgerSchema", "piComponentParitySchema", "piEventFrameParitySchema", "startupTraceSchema", "dependencyLayerSchema", "dependencyLayerCertificationSchema", "runtimePayloadSchema"];
 const ARTIFACT_KEYS = ["cliEntry", "supervisorEntry", "guardianEntry", "uiEntry", "nativeExecutable", "nativeCrate", "processGuardianExecutable", "releaseTarballStem", "diagnosticStem"];
 const ROOT_KEYS = ["schema", "displayName", "commandName", "packageName", "filesystem", "environment", "state", "endpoint", "manifest", "protocol", "evidence", "artifacts"];

package/dist/product-identity.json

@@ -71,6 +71,7 @@
         "nativeHostSchema": "a1-native-host-v1",
         "structuredAgentSchema": "a1-structured-agent-v1",
         "controlStoreSchema": "a1-control-store-v1",
+        "promptHistorySchema": "a1-prompt-history-v1",
         "releaseCohortSchema": "a1-release-cohort-v1",
         "updateJournalSchema": "a1-update-journal-v1"
     },

package/dist/ui/settings/declarations.js

@@ -30,6 +30,24 @@ export const OWNED_UI_SETTING_DECLARATIONS = Object.freeze([
         defaultValue: "normal",
         allowedValues: Object.freeze(["normal", "fast", "high"]),
     }),
+    Object.freeze({
+        id: "promptHistoryEnabled",
+        label: "Persistent history",
+        section: Object.freeze({ id: "history", title: "History" }),
+        description: "Retain reusable prompts across sessions. Applies on next start; disabling does not erase saved history or stop existing instances.",
+        application: "restart",
+        defaultValue: true,
+        allowedValues: Object.freeze([true, false]),
+    }),
+    Object.freeze({
+        id: "promptHistoryMaxItems",
+        label: "History limit",
+        section: Object.freeze({ id: "history", title: "History" }),
+        description: "Maximum recent unique prompts after next start. Byte limits also apply; increasing the limit cannot restore pruned entries.",
+        application: "restart",
+        defaultValue: 100,
+        allowedValues: Object.freeze([10, 20, 30, 40, 50, 60, 70, 80, 90, 100]),
+    }),
     Object.freeze({
         id: "promptSuggestions",
         label: "Prompt suggestions",

package/dist/ui/settings/session.js

@@ -10,12 +10,17 @@ export class OwnedUiSettingsSession {
     #resolution;
     #agentSnapshot = null;
     #pending = new Map();
+    #restartEffective = new Map();
     constructor(options) {
         this.#store = options.store;
         this.#agent = options.agent ?? null;
         this.#agentProvider = options.agentProvider ?? null;
         this.#hiddenAgentSettingIds = new Set(options.hiddenAgentSettingIds ?? []);
         this.#resolution = options.store.read();
+        for (const setting of this.#resolution.settings) {
+            if (setting.declaration.application === "restart")
+                this.#restartEffective.set(setting.declaration.id, setting.value);
+        }
     }
     get resolution() {
         return this.#resolution;
@@ -27,10 +32,15 @@ export class OwnedUiSettingsSession {
         this.#notify();
     }
     sections() {
-        return buildOwnedUiSettingsSections({ resolution: this.#resolution, agent: this.#agentSnapshot });
+        return buildOwnedUiSettingsSections({ resolution: this.#resolution, agent: this.#agentSnapshot }).map(section => ({
+            ...section,
+            entries: section.entries.map(entry => entry.backend === "a1" && this.#restartEffective.has(entry.id)
+                ? { ...entry, effectiveValue: this.#restartEffective.get(entry.id) }
+                : entry),
+        }));
     }
     value(id) {
-        return this.#resolution.settings.find(setting => setting.declaration.id === id)?.value ?? null;
+        return this.#restartEffective.get(id) ?? this.#resolution.settings.find(setting => setting.declaration.id === id)?.value ?? null;
     }
     pendingValue(id) {
         return this.#pending.get(id) ?? null;
@@ -61,9 +71,8 @@ export class OwnedUiSettingsSession {
         const previousSetting = previous.settings.find(setting => setting.declaration.id === id);
         if (previousSetting?.declaration.application === "restart") {
             this.#pending.set(id, value);
-            this.#resolution = previous;
             this.#notify();
-            return changed("deferred", "next-start", value, previousSetting.value);
+            return changed("deferred", "next-start", value, this.#restartEffective.get(id));
         }
         this.#pending.delete(id);
         this.#notify();

package/docs/architecture/boundaries.md

@@ -28,6 +28,7 @@ The owned Pi-backed surface is not an arbitrary-CLI terminal multiplexer. A feat
 - `structured-agent-runtime`: planned typed event/command/snapshot runtime. It must not infer semantics from terminal text, own pseudoterminals, or reconstruct screens.
 - `native-host-protocol`: bounded typed local boundary for terminal-host identity, topology revisions, lifecycle, and recovery. Terminal bytes, per-event child input, and rendered cells are forbidden across it.
 - `protocol`: additive control handshake, bounded line framing, authenticated launch-instance commands, typed stop intent, snapshots, and command results.
+- `prompt-history`: narrowly typed user-input retention in separate profile-owned application-data databases, with bounded worker queues and no supervisor/control-store payloads. The editor's owned history state machine remains inside the Pi component boundary; the session UI only coordinates snapshots and classified submissions.
 - `storage`: SQLite migrations, prior-boot reconciliation, and plural launch-instance persistence. Legacy foreground rows are historical migration input and never authorize current ownership.
 - `supervisor`: endpoint identity, plural cohort ownership, per-instance reconciliation, and aggregate release shutdown coordination. It owns no terminal surface.
 - `pi-engine-adapter`, `pi-component-adapter`, `pi-tui-runtime-adapter`, and `pi-session-ui-integration`: isolate pinned Pi engine and presentation knowledge behind neutral contracts; product features do not import them directly. The session UI render root assembles semantic document and dock rows, while its focused viewport controller owns follow state, pointer routing, selection, and interaction timers. Owned-app route lifecycle belongs to the neutral `ui-apps` owner and is only hosted by the Pi session UI.

package/docs/architecture/history-editor-provenance.md

@@ -0,0 +1,96 @@
+# History editor source boundary
+
+The history-enabled default editor is derived from Pi 0.84.2 at commit
+`914cf1472e715297caa30db4b9535d534a9eb718`, repository
+<https://github.com/earendil-works/pi>. The approved scope is
+`openspec/changes/add-persistent-prompt-history/design.md`, decision 2a.
+
+## Source and import inventory
+
+The owning directory is `src/integrations/pi/components/upstream/history/`.
+
+| Owned unit | Upstream source under `packages/tui/src/` | Retained behavior |
+|---|---|---|
+| `editor-core.ts` | `components/editor.ts` | Editor state machine, layout, history boundaries, paste backing, autocomplete, undo integration |
+| `kill-ring.ts` | `kill-ring.ts` | Kill/yank accumulation and rotation |
+| `undo-stack.ts` | `undo-stack.ts` | Clone-on-push undo storage |
+| `word-navigation.ts` | `word-navigation.ts` | Word/atomic-segment navigation |
+| `text-helpers.ts` | selected declarations in `utils.ts` | Shared local segmenters, CJK break classification, punctuation/whitespace predicates only |
+| `printable-key.ts` | selected declarations in `keys.ts` | Pure modifyOtherKeys printable helper and modifier constants; delegates Kitty decoding to the public export |
+
+All reusable terminal APIs come from `#pi-tui`: keybinding state, `matchesKey`,
+`decodeKittyPrintable`, `CURSOR_MARKER`, width/slicing, `SelectList`, and public
+component/autocomplete types. No terminal runtime, parser stack, terminal
+renderer, package loader, or dependency copy is introduced. The terminal-package
+alias and exported constructors remain unchanged.
+
+`node scripts/pi/extract-history-editor-source.mjs` resolves the terminal package
+from pinned Pi's entry and extracts references and hashes into the ignored
+`.artifacts/history-editor-upstream/` directory. It never overwrites owned code.
+The source ledger records upstream and owned destination hashes. Source maps are
+used only by provenance tooling, not by the shipped runtime. Changed source must
+be explicitly reconciled, not automatically adopted in an engine upgrade.
+
+## Owned changes and collaborator boundaries
+
+The core uses public imports, a distinct `HistoryEditorCore` class, and strict
+TypeScript declaration adjustments. Persistent history is opt-in: its typed
+snapshot installation and observation methods preserve input and undo state,
+freeze an active browse cycle, and change caret placement only in that mode.
+The editor renders position/overflow in its existing border. The position label
+uses an injected neutral status-text style (`dim`), while the surrounding rules
+retain the active input-border color, as clarified during manual review. Recall temporarily
+separates the draft's live paste backing from recalled literal text, restoring it
+on return; ordinary pinned mode remains source-equivalent.
+
+The integration inventory is:
+
+- `shell-editor-autocomplete.ts`: choose the default editor through a typed
+  component interface, never cast the owned core to the concrete Pi editor.
+- `upstream/components/owned-editor.ts`: retain its pinned-based comparison and
+  disabled-history route; share app actions and owned prefix/suggestion behavior
+  through typed composition for the history-enabled route.
+- `owned-editor-ux.ts`: selection, atomic segmentation, visual-line geometry,
+  provisional paste completion, and undo repair need a typed owned collaborator
+  boundary. Existing compatibility access on the pinned route is not permission
+  for new private access on the owned core.
+- `shell-extension-ui.ts`: public text, shortcut, autocomplete, and factory
+  behavior remain extension-owned. A custom editor is not patched for recall.
+- `session-shell-root.ts` and `session-shell.ts`: deliver semantic snapshot and
+  submission events; they must not own a second history index, mutable draft,
+  undo stack, or rendered-border parser.
+
+`test/integrations/pi/components/history-editor-core.test.ts` independently runs
+real pinned and owned editors against the same input tapes, comparing rows,
+text/expanded text, cursor, autocomplete, and submissions. Separate fixtures
+cover v2 directional placement and numbering, deferred snapshots, draft/undo
+restoration, and literal paste-marker collisions. This is editor-core evidence,
+not acceptance of the complete persistent-history feature.
+
+## License
+
+Upstream license at the recorded commit:
+
+```text
+MIT License
+
+Copyright (c) 2025 Mario Zechner
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```

package/docs/architecture/project-structure.md

@@ -13,6 +13,7 @@ src/
   features/
     launch/                        launch profiles, profile paths, and runtime selection
     owned-ui/                      owned screens, settings application, diagnostics, and runtime lifecycle
+    prompt-history/                profile-isolated prompt retention and bounded SQLite worker lifecycle
     workspace/                     multi-agent presentation, reducer state, routing, and persistence orchestration
   contracts/
     agent-engine/                  dependency-free agent engine, session, package, and capability ports

package/docs/architecture/resource-and-data-policy.md

@@ -31,7 +31,8 @@ Every asynchronous consumer must implement a finite queue or window. Backpressur
 | Class | Examples | Storage policy |
 |---|---|---|
 | Workspace metadata | IDs, names, lifecycle, capability versions, topology revisions, recovery references | May persist in the control store |
-| Structured payloads | Messages, tool calls, snapshots, attachments | Bound and process; persist only under a future typed retention policy |
+| Structured payloads | Messages, tool calls, snapshots, attachments | Bound and process; arbitrary payload persistence remains unsupported |
+| User-authored prompt recall | Canonical interactive input and bounded provenance | May persist only through the profile-isolated prompt-history policy below, never in the control store |
 | Terminal content | PTY bytes, scrollback, selection, rendered cells | Never persist in A1's control store or diagnostics |
 | Host topology metadata | Window/tab/pane/session IDs, layout shape, dimensions, revision | May persist; not terminal content |
 | Native proof evidence | Artifact hashes, source revisions, workloads, latency/resource measurements, paint diagnostics | May persist in versioned evidence files without terminal content |
@@ -42,6 +43,26 @@ Every asynchronous consumer must implement a finite queue or window. Backpressur
 
 Sanitization must classify before logging or storing. Unknown or untyped values are potentially sensitive by default and must not be persisted. Terminal bytes must never be written to logs as a debugging shortcut.
 
+## Typed prompt-history retention
+
+The `prompt-history` feature owns only reusable interactive user input, not
+structured-message archives. It stores one independent profile database under
+`<dataDir>/history`, never agent resources or cache/release directories. Text is
+unencrypted and potentially sensitive. Retain up to 100 unique entries (configured
+10-100), at most 1 MiB per entry and 8 MiB total canonical text. Background queues
+are limited to 32 writes/8 MiB per instance; reads are coalesced, lock retries are
+bounded to one second off-thread, and graceful shutdown drains for at most two
+seconds. SQLite page/journal limits and a 64 MiB maintenance threshold bound
+physical growth separately from text retention.
+
+Only typed canonical text, submission identity, recency/timestamp, input kind,
+and bounded cwd/session provenance are allowed. No image bytes, transformed
+agent prompts, environment/credential copies, tool results, terminal streams, or
+private input in diagnostics are permitted. Disabling persistence is next-start
+and does not erase data or stop other live instances. Cache and release cleanup
+must not touch history. See [prompt history](../features/prompt-history.md) for
+retention, failure semantics, profile identity, and stopped-instance removal.
+
 ## Required architectural outcomes
 
 - Structured/RPC semantics must not be inferred from ANSI text, terminal timing, or visual content.

package/docs/features/prompt-history.md

@@ -0,0 +1,121 @@
+# Persistent prompt history
+
+Bare A1 recalls recent prompts across sessions and projects within the same A1
+profile. It is input recall, not conversation recovery or agent memory. The Pi
+comparison (`a1 pi`) retains its ordinary current-session history.
+
+## Recall
+
+Use Up/Down at the editor's normal history boundaries. Up enters older prompts
+with the caret at the end; Down enters newer prompts at the beginning. Moving
+past the newest restores your draft, including its cursor and live pasted text.
+Multiline cursor movement and autocomplete keep their existing priority.
+
+The existing editor border shows `History 100/100` for the newest of 100 entries
+and `History 1/100` for the oldest. The label uses the status bar's neutral grey
+(`dim` theme role), independently of the thinking/bash colors on the input bars. Repeated prompts move forward instead of
+creating duplicates. Other instances refresh in the background; the selected
+history and its count stay fixed until you leave that browse cycle. An
+extension-provided custom editor keeps its own behavior; the default editor is
+resynchronized when restored.
+
+Ordinary prompts, steering, follow-ups, queued inputs, nonempty bash commands,
+and user-entered skill/template/extension prompt routes are eligible. Opening
+settings or session/workflow screens does not add history. Loading a transcript,
+retrying a dispatch internally, draining a queue, or displaying a suggestion does
+not create another entry. An explicit user submission is retained even if the
+provider later rejects it or the turn is interrupted.
+
+Text pastes, URL targets, and file paths remain reusable after restart. History
+keeps the user invocation before template/extension expansion, not the expanded
+request. Image-bearing prompts retain only their text; images are not reattached.
+Image-only prompts do not create saved entries. No v2, Pi, or Claude history is
+imported automatically.
+
+## Storage and privacy
+
+| Platform | Default durable location |
+|---|---|
+| Windows | `%LOCALAPPDATA%/a1/history/<profile-id>.sqlite3` |
+| Current Unix policy (including macOS) | `$XDG_DATA_HOME/a1/history/<profile-id>.sqlite3`, or `~/.local/share/a1/history/<profile-id>.sqlite3` |
+| Explicit override | `<A1_DATA_DIR>/history/<profile-id>.sqlite3` |
+
+The profile filename is `a1-` followed by a SHA-256 digest of a versioned tuple
+containing the launch kind and normalized effective agent-profile path. It is
+independent of project, session, checkout, and release. Windows ordinary case and
+separator variants normalize together. Different profile roots use different
+files. Moving a profile, unresolved symlink aliases, or selecting a different
+data root can select a different history; A1 never silently merges or imports it.
+
+The database is separate from `control.sqlite3`, agent resources, and disposable
+caches. Upgrades, release rollback, cache cleanup, and conversation deletion do
+not clear it. SQLite may keep `-wal` and `-shm` sidecars beside the database.
+
+**History is unencrypted potentially sensitive user text.** Owner permissions
+are restricted where supported; Windows uses the account's application-data
+ACLs. These protections do not make it safe to submit secrets. Credential files,
+image data, arbitrary environment values, assistant/tool output, and terminal
+streams are not copied into this store. Prompt content and private provenance
+must not appear in history diagnostics or test evidence.
+
+## Settings and limits
+
+The History section in `/settings` provides:
+
+- **Persistent history:** on by default; applies on the next start. Off disables
+  storage and cross-session recall for subsequent launches, not current-session
+  recovery. Existing enabled instances keep running until closed.
+- **History limit:** 10-100 in increments of 10, default 100; applies when a new
+  enabled instance starts. All writers then use that profile store's updated
+  retention limit. Raising the limit cannot restore pruned entries.
+
+The settings use A1's existing settings document, not Pi's settings or a separate
+history configuration file. Disabling persistence does not delete saved data;
+re-enabling makes compatible retained entries available again.
+
+Additional bounds protect memory and disk:
+
+- At most 1 MiB UTF-8 per persisted prompt, never silently truncated.
+- At most 8 MiB retained canonical text, evicting oldest entries even below the
+  configured count.
+- At most 32 queued/in-flight writes and 8 MiB queued text per instance.
+- Provenance: up to 8 KiB cwd and 256 bytes session identity; oversized optional
+  provenance is omitted.
+- Short off-thread transactions, a one-second lock retry window, and coalesced
+  refresh with at most one read in flight.
+- SQLite page/journal limits and a 64 MiB database/sidecar maintenance threshold;
+  text limits exclude transient SQLite overhead.
+
+Persistence failure leaves prompt execution and local recall usable. A corrupt,
+wrong-profile, or newer-schema database is preserved, not silently recreated.
+A committed entry survives restart. A hard kill before asynchronous commit can
+lose the newest queued entries. Graceful exit attempts to drain writes within
+two seconds and reports an incomplete flush without preventing exit.
+
+## Remove saved history
+
+First close **every instance using the selected profile**. Then remove only that
+profile's `.sqlite3` file and its matching `-wal` and `-shm` sidecars, if present.
+Do not delete an open database or the whole application-data root. Disabling the
+setting alone is not an erase operation. There is no interactive clear/export
+command in this release.
+
+## Manual acceptance
+
+Build the checkout, then launch it through `./scripts/dev`. Use an isolated
+`A1_DATA_DIR` for disposable history checks; keep that same directory on each
+restart and in both concurrent terminals. Test:
+
+1. Submit two text prompts and one repeated prompt; start `/new`, then restart.
+   The latest unique prompts remain recallable.
+2. Browse multiline input with a draft present. Check v2 caret placement,
+   newest/oldest numbering, and draft restoration.
+3. Submit from a second instance while the first browses. The first selection
+   stays fixed; the update appears on a later safe browse cycle.
+4. Recall pasted text after restart; image tokens must not promise reattachment.
+5. Save both History settings, restart, and verify effective values and opt-out.
+6. Use a second isolated effective profile and verify no sharing. Run
+   `./scripts/dev pi` and verify its ordinary history/editor remain unchanged.
+
+Source ownership and differential editor evidence are described in
+[history-editor-provenance.md](../architecture/history-editor-provenance.md).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.1.8-dev.290",
+  "version": "0.1.8-dev.299",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "packageManager": "npm@11.13.0",