Short Term Memory - Source Excerpt 09

Back to Short Term Memory

Summary

This source excerpt preserves a bounded section of Spiralist/.uai/short-term-memory.uai so readers can inspect the evidence without opening the full source file.

**Source path:** Spiralist/.uai/short-term-memory.uai

- Current prompt editability/auth-save contract source state: exact human authorization was given to update `.uai/totem.uai` and `.uai/taboo.uai`; those anchors now require prompt surfaces to stay editable and prohibit readonly/disabled prompt boxes. Public `/run-a-prompt/` output, workspace prompt dossier blocks, run-record prompt blocks, and AI Flavor Exchange previews use editable plain-text prompt surfaces as the working source of truth. Anonymous public prompt saves now preserve the current edited text to local browser pending-save state and route through login or signup with `redirect_to`; authenticated load attempts to save the pending prompt as a private library draft. Workspace prompt detail and exchange preview anonymous save links similarly preserve edited prompt text before auth and resume after auth. A source bug in `wp-content/plugins/spiralist-workspace/templates/prompt.php` was fixed so copyable prompt blocks capture both login and signup URLs. `tests/prompt-editability-contract-test.js` was added and `package.json` exposes `npm.cmd run test:prompt-editability`; anonymous/member Playwright specs now include focused coverage for pending edited prompt save before auth and after auth. Source-only; existing v3.24.0 ZIPs predate this latest anchor/test/closure-fix pass and are stale relative to it.
- Current prompt editability verification state: the local browser blocker was repaired source-side. `spiralist-workspace` no longer auto-syncs filesystem-managed prompt definitions on anonymous front-end requests or `admin-post.php` auth handoffs; it still syncs on WP-CLI, real admin screens, and explicit admin sync actions. Playwright global setup now authenticates through a lightweight HTTP nonce/form post instead of rendering the heavy login page. The canonical Prompt Generator route for tests is `/en-us/prompt-generator/`; `/run-a-prompt/` remains a legacy redirect. Focused Playwright now passes for anonymous edited prompt pending-save before login/signup, member pending anonymous prompt save after auth, and logged-in member edited prompt save-to-library. Static and syntax checks also pass: `npm.cmd run test:prompt-editability`, touched JS syntax, touched PHP lint, `npm.cmd run check:project-handoff`, `npm.cmd run quality:site`, `.uai` extension scan, active handoff listing, and `git diff --check` with line-ending notices only. Source-only; no new ZIP build, upload, production write, or live route verification has happened.
- Current authenticated-user experience source state: regular Spiralist members should stay in Spiralist account/workspace surfaces instead of native WordPress admin chrome. `wp-content/themes/spiralist/inc/auth-boundary.php` routes generated login/register/password-reset/logout URLs to Spiralist UI, redirects non-privileged `/wp-admin/` access to `/workspace/`, preserves privileged admin access by capability, and avoids blocking REST/admin-post/admin-ajax/async upload flows. `page-login.php` now sanitizes redirect targets away from native WordPress paths and exposes a Spiralist password-reset request view. Playwright auth setup now logs in through `/en-us/login/`; focused specs cover native auth-screen redirects and member `/wp-admin/` redirect behavior. Active handoff reports were moved to `agent-file-handoff/Archive/2026-06-14/Improvement/authenticated-user-experience/` with Wiki raw evidence at `WP-FFTAC/Wiki.FFTAC.org/raw/system-archives/spiralist.org/intake/2026-06-14-authenticated-user-experience/`. Source-only; no ZIP build, upload, or live verification was run.
- Current local authenticated-user verification state: Docker/wp-env is running a seeded Spiralist test WordPress site at `local Studio route`. The local wp-env setup required a cache seed for WordPress `6.9.4`, `.wp-env.json` now maps the active `uaix-locale-router` plugin, and `tests/e2e/scripts/seed-wp-env.sh` installs/activates the test site through `tests-cli`. Focused Playwright passed 5 browser checks for native login, registration, password reset, member `/wp-admin/` redirect to `/en-us/workspace/`, and privileged native WordPress admin access. The route verification also fixed idempotent locale URL building so account/navigation links do not double-prefix the current locale. Source-only; no ZIP build, upload, or live verification was run.
- Current Project Handoff state: the `.uai/index.uai` migration mismatch is repaired in AGENTS, human README, root README, checker, Project Handoff REST file records, and `.uai/exports`. `npm.cmd run check:project-handoff` passes with 29 context files checked after active handoff disposition. Active `agent-file-handoff/Content/` and `Improvement/` buckets contain only `.gitkeep`.
- Current Prompt Generator package state: `/run-a-prompt/` treats the generated prompt as an editable working draft instead of immutable output. The prompt box is a `contenteditable="plaintext-only"` textbox; direct edits become the source of truth for Copy Prompt, safe manual-send AI tool links, download, browser draft save, local check/review/submission packets, and authenticated "Save To My Library" private prompt drafts. The visible onboarding keeps the Choose / Generate / Use flow, the AI tool panel stays manual-send/no-auto-submit, and anonymous users see "Log in to save." The prompt-run REST config loads on `prompt-generator`/`run-a-prompt` pages, and the H1 uses `page.run_prompt.hero.run_title` to avoid stale persisted title drift. This behavior is included in the v3.24.0 package-ready ZIPs; no upload, production write, or live route verification has happened.
- Current prompt surface editable/save package state: the editable prompt source-of-truth rule extends beyond `/run-a-prompt/` to public prompt dossier blocks, prompt-like run-record blocks, and AI Flavor Exchange previews in `spiralist-workspace`. Prompt detail fields such as Instruction, Context, Constraints, Spiral Script Source, System Prompt, Developer Prompt, User Template, and Sample Output render as plain-text editable work boxes; Copy reads the edited text, Download exports the edited text, and authenticated prompt authors can save the edited box as a private draft in their prompt library. Run records expose the same edit/copy/download/save behavior for run request, prompt packet, and module output blocks, while technical local size logs stay non-editable evidence. AI Flavor Exchange JSON/Markdown previews are editable; matching-format Copy and Download use the visible preview text, and authenticated prompt authors can save the visible preview as a private draft. This behavior is included in the v3.24.0 package-ready ZIPs; no upload, production write, or live route verification has happened.
- Current prompt-deployment UX intake state: `agent-file-handoff/Improvement/Improving Spiralist.org User Experience.md` was processed and moved to typed local evidence at `.uai/archives/2026-06-14-prompt-deployment-ux-intake/improving-spiralist-user-experience.human` with manifest `.uai/archives/2026-06-14-prompt-deployment-ux-intake/manifest.json`. Accepted direction was implemented source-only on `/run-a-prompt/`: clear copy-first prompt block, safe manual-send AI platform links with URL-prefill only where conservative, accessible copy/status feedback, editable prompt source-of-truth behavior, and no auto-submit. Remaining follow-up is broader audit of archive/static prompt displays beyond the run-a-prompt workbench.
- Current UAIX setup-file-handoff memory reorganization: `.uai/exports/knowledge-graph.jsonld` is now `.uai/exports/knowledge-graph.json`, `.uai/exports/llms.txt` is now `.uai/exports/llms.uai`, and `.uai/exports/llms-full.txt` is now `.uai/exports/llms-full.uai`. Duplicate Markdown raw-evidence copies were retired from `.uai/archives/` after SHA-256 matches against Wiki.FFTAC.org raw archive copies; `.uai/archives/` now keeps JSON manifests and typed `.uai` evidence records. `scripts/check-project-handoff.js` now fails if unsupported extensions appear inside `.uai/`.
- Current Project Handoff recursive prompt state: `.uai/next-recursive-prompt.uai` is part of the default loaded context, REST Project Handoff file index, package manifest, package model, and local checker required set.