agentlas 1.0.38 → 1.0.39

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 1.0.39 — 2026-08-11
+
+pi-tui shell increment 2 + architecture mirror sync.
+
+- Experimental pi shell (`AGENTLAS_TUI=pi`): persisted history (cli-history.json
+  v2 contract), Shift-Tab permission cycling (same two-step FULL arming state
+  machine as the classic REPL), `!` shell passthrough (full-permission gate,
+  secret masking), and `/s` `/switch` `/kill` `/rm` `/sessions` `/tree` session
+  observation wired to the same orchestrator/renderer pair.
+- Streaming display masks the Memory Events envelope (runtime contract, not
+  user-facing text); the harvest pipeline is unchanged.
+- ARCHITECTURE_VERSION mirror synced 1.7.0 → 1.7.1 (vendor regenerated from
+  the desktop dist, value-level parity gate green).
+
 ## 1.0.38 — 2026-08-11
 
 Silence was the worst failure mode — this release makes failures speak.

package/engine/architecture.data.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.7.0",
+  "version": "1.7.1",
   "emitterBlock": "## Memory (Agentlas curated memory)\n\nAt the end of EVERY completed normal reply, emit exactly one hidden Memory Events\nenvelope. The runtime removes it before display. This envelope is the per-turn receipt:\nalways include a compact safe turn_summary, and use an empty candidates array when\nnothing durable was learned. Do not skip the envelope.\n\nRules:\n- Never include secrets, credentials, API keys, raw logs, or full transcripts.\n- Real credential values may live only in local project .env/.env.local,\n  ignored signing/ or credentials/ files, or a local keychain/vault. Memory\n  Events may mention env names and local relative paths only.\n- For deploy, release, store, billing, auth, API, or cloud work, first read the\n  project's .agentlas/local-credentials.map.json and the top\n  \"Local Credential Index\" section of .agentlas/project-soul-memory.md\n  before saying a credential is missing.\n- One candidate per durable item. Keep \"content\" to one or two sentences.\n- \"memory_kind\": fact | decision | preference | risk | procedure | hypothesis | evidence | deprecation | conflict\n- \"suggested_scope\": user_identity | team_memory | project (this folder) | agent_repo | session (temporary) | discard\n- Use user_identity for a stable operator preference or personal fact (their name, role, language, tone,\n  how they want you to behave) — these must outlive any one project. The curator only files user_identity\n  when you label it so with \"confidence\": \"high\"; it never promotes into that scope, so a preference emitted\n  at lower confidence is demoted to a throwaway session note.\n- \"agent_team\" is accepted only as a legacy alias for team_memory.\n- Add \"request_context\" when it improves future recall: user_intent, trigger_terms,\n  cwd_at_request, target_project, target_path, cross_context, outcome.\n- Never put the raw user prompt or transcript in request_context.\n- Suggest a scope; the separate Memory Curator decides the final destination.\n- turn_summary is one value-free sentence about the completed outcome. It is not the\n  user prompt, a transcript, raw log, secret, or absolute local path.\n\nFormat (always emit, including an empty candidates array):\n\n## Memory Events\n```json\n{\n  \"schema_version\": \"agentlas.memory-ticket.v1\",\n  \"turn_summary\": \"Completed outcome in one safe sentence.\",\n  \"candidates\": [\n    {\n      \"memory_kind\": \"decision\",\n      \"content\": \"...\",\n      \"suggested_scope\": \"project\",\n      \"confidence\": \"high\",\n      \"sensitivity\": \"internal\",\n      \"evidence_refs\": [],\n      \"request_context\": {\n        \"user_intent\": \"...\",\n        \"trigger_terms\": [\"...\"],\n        \"cwd_at_request\": null,\n        \"target_project\": null,\n        \"target_path\": null,\n        \"cross_context\": false,\n        \"outcome\": \"...\"\n      }\n    }\n  ]\n}\n```",
   "eventsHeading": "## Memory Events",
   "memoryDir": ".agentlas",

package/engine/ui/pitui-shell.cjs

@@ -202,6 +202,26 @@ async function startPiShell(ctx, opts = {}) {
   const editor = new pi.Editor(tui, editorTheme, { autocompleteMaxVisible: 8 });
   editor.setAutocompleteProvider(new pi.CombinedAutocompleteProvider(toSlashCommands(ctx.lang), process.cwd()));
 
+  // ── 히스토리 디스크 영속 (증분 2) — cli-history.json v2 계약을 그대로 재사용 ──
+  const input = require("../agentlas-input.cjs");
+  const historyLedger = (() => { try { return input.loadHistory(process.cwd()); } catch { return []; } })();
+  // readline 히스토리는 최신-우선 배열 — Editor에는 과거→최신 순으로 먹인다.
+  for (const entry of [...historyLedger].reverse()) editor.addToHistory(entry);
+  const recordHistory = (line) => {
+    historyLedger.unshift(line);
+    if (historyLedger.length > input.HISTORY_MAX) historyLedger.length = input.HISTORY_MAX;
+    try { input.saveHistory(historyLedger, process.cwd()); } catch { /* 히스토리는 최선노력 */ }
+  };
+
+  // ── Shift-Tab 권한 순환 (증분 2) — repl의 순수 상태기계를 그대로 재사용 ──
+  const { createPermissionShortcut } = require("./repl.cjs");
+  const permShortcut = createPermissionShortcut({
+    lang: ctx.lang,
+    getPermission: () => permission,
+    setPermission: (level) => { permission = level; },
+    onMessage: (msg) => { ui.ensureNl(); ui.line(ui.c.dim(msg.text)); },
+  });
+
   const commands = require("../commands/index.cjs");
   const handleSlash = async (cmdline) => {
     const raw = cmdline.split(/\s+/)[0] || "";
@@ -212,6 +232,26 @@ async function startPiShell(ctx, opts = {}) {
       ui.line(palette.renderPalette(ctx.lang));
       return;
     }
+    // 세션 관찰/전환 (증분 2b) — 기본 REPL과 같은 orch/renderer 배선
+    if (cmd === "sessions" || cmd === "tree") {
+      require("./repl.cjs").printSessions(shellCtx, orch);
+      return;
+    }
+    if (cmd === "s" || cmd === "switch" || cmd === "kill" || cmd === "rm") {
+      const token = rest[0];
+      if (!token) { ui.line(ui.c.dim(`Usage: /${cmd} <n>`)); return; }
+      const key = String(token).startsWith("s") ? token : `s${token}`;
+      if (cmd === "kill") { orch.kill(key); return; }
+      if (cmd === "rm") {
+        orch.remove(key);
+        const act = orch.active();
+        if (act) renderer.attach(act, { replay: false });
+        return;
+      }
+      const session = orch.setActive(key);
+      renderer.attach(session, { replay: true });
+      return;
+    }
     const EXCLUDED = new Set(["firm", "setup", "run"]);
     if (!EXCLUDED.has(cmd) && commands.COMMANDS[cmd]) {
       await commands.COMMANDS[cmd]().run(shellCtx, rest);
@@ -229,10 +269,16 @@ async function startPiShell(ctx, opts = {}) {
     const input = String(text || "").trim();
     if (!input) return;
     editor.addToHistory(input);
+    recordHistory(input);
     editor.setText("");
     ui.ensureNl();
     ui.line(ui.c.emerald("› ") + ui.c.text(input));
     (async () => {
+      if (input.startsWith("!")) {
+        await require("./repl.cjs").runShell(shellCtx, input.slice(1).trim(), permission)
+          .catch((e) => { if (e && (e.code || e.honestStop)) ui.error(e); else ui.error(); });
+        return;
+      }
       if (input.startsWith("/")) {
         const verdict = await handleSlash(input.slice(1)).catch((e) => {
           if (e && (e.code || e.honestStop)) ui.error(e);
@@ -265,6 +311,13 @@ async function startPiShell(ctx, opts = {}) {
   };
 
   tui.addInputListener((data) => {
+    // Shift-Tab 권한 순환 — pi-tui 가 raw mode 를 단독 소유하므로 readline 의
+    // swallowCompletion 우회 없이 여기서 직접 소비한다 (D2 위험 2의 해소 형태).
+    if (pi.matchesKey(data, "shift+tab")) {
+      permShortcut.handleKey("", { name: "tab", shift: true });
+      return { handled: true };
+    }
+    if (permShortcut.armed()) permShortcut.handleKey("", { name: "other" }); // 다른 키 = 무장 해제
     if (pi.matchesKey(data, "ctrl+c")) {
       const active = orch.active();
       if (active && active.isBusy()) {

package/engine/ui/repl.cjs

@@ -786,4 +786,4 @@ function handleSlash(ctx, cmdline, api) {
   }
 }
 
-module.exports = { startRepl, printSessions, createPermissionShortcut };
+module.exports = { startRepl, printSessions, createPermissionShortcut, runShell };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentlas",
-  "version": "1.0.38",
+  "version": "1.0.39",
   "description": "Agentlas project terminal — run project controllers and task-scoped agent teams from the terminal. Standalone: no desktop app process required.",
   "bin": {
     "agentlas": "bin/agentlas.cjs"