Skip to content

Add explicit history retention, purge, and private-session controls #11

Description

@protostatis

Summary

history.md is valuable for context recovery, but it records complete code, stdout, stderr, and tracebacks. It survives both stop and clean.

On the reviewed macOS installation, the session directory was mode 0755 and history.md was 0644, making contents readable to other local users on a shared host.

Expected

Make retention and cleanup explicit, while preserving the useful default workflow.

Possible scope

  • Add pyreplab clean --history or a dedicated history purge command.
  • Document persistence and the risk of printing secrets.
  • Create and validate a per-user session directory with restrictive permissions such as 0700 (for example under $XDG_RUNTIME_DIR).
  • Reject unexpected ownership or symlinked IPC/history paths.

Priority context

This is low priority on a private single-user machine, but is important privacy hygiene for shared machines or agent workflows that may print credentials.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions