Release/agentic cli 2 - #179

Synced from agenticCLI cadee49: run_command's deny gate now also blocks
rm -rf home variants, block-device writes, fork bombs, chown -R on
system paths, shutdown/reboot-class commands, pipe-to-shell downloads,
history wiping, and macOS disk erase/CSR-disable. UT green.

…p 1)

Synced from agenticCLI 2307c7c: SessionEventLog (append-only JSONL per
topic, schema-versioned, best-effort) + SessionManager.event_log() with
topic/created, topic/switched, topic/renamed lifecycle events. The
history.json read/write paths are untouched. UT green.

Synced from agenticCLI (935465b, 59024c3, plus per-topic scene memory
b2037d2 and startup patchability fix eba051b):

- Opt-in OS sandbox for shell commands (P0-L3): sandbox.py backend
  detection (macOS sandbox-exec / Linux bwrap), write-confinement to the
  workspace, graceful degradation; config `sandbox` flag; run_command
  uses the sandbox argv when enabled+available.
- Skill distillation quality (P3): analyze_trajectory now requires the
  final tool result to have succeeded.
- Per-topic scene memory and WORKSPACE_DIR-at-call-time startup fix.

pre-commit (changed files): green. UT: 454 passed, 6 skipped.

Synced from agenticCLI 3b96f4f: directive proposals use recency-weighted
frequency (14-day half-life); experience recall boosts failure lessons.
UT green.

Synced from agenticCLI 7221691: SessionManager.record_turn_event appends
a per-turn turn/end event to the topic's events.jsonl; the agent records
it best-effort at turn end (aligned with the scene-memory design). UT
green.

Sync from agenticCLI: messages/snapshot dual-write at turn end,
resume_from_events() rebuilds from latest snapshot, fork_topic()
copies the event log, read_raw() for schema-tolerant projection.

Sync from agenticCLI: atomic compact_snapshots() (tmp + os.replace)
keeps the audit trail and newest snapshots; SessionManager
auto-compacts past 8 snapshots down to 2.

Sync from agenticCLI: load_session() restores from the newest
messages/snapshot (torn-line tolerant), history.json demoted to
compat fallback; turn-end events written before history.json;
shared latest_snapshot_messages() helper.

__version__ 0.6.0 -> 0.6.1; black wraps the rewritten
dashscope.acli.sdk import (exceeds 79 cols after prefix rewrite).

JediTerm translates wheel notches into arrow-key bursts; decelerating
gesture tails (20-350ms gaps) leaked past the 20ms burst classifier into
history recall and completion popups, and the sticky-follow band yanked
the view back down mid-gesture.

- Absorb deferred arrows within 350ms of the last wheel-classified key
  into the scroll queue instead of history/popup routing
- Suppress sticky follow for 0.5s after a wheel-up; wheel-down re-engages

…pture

Sync from agenticCLI (5ad5ce4): watchdog for leaked mouse capture,
pointer re-anchor on new drag, edge auto-scroll armed on #output,
ACLI_DEBUG_SELECT instrumentation.

Sync from agenticCLI (35f6142).

dashscope __version__ 1.27.0 -> 1.27.1; acli 0.6.1 -> 0.6.2
(drag-select edge auto-scroll, stale capture watchdog, bottom jitter
follow state, Ctrl+C copy hints, clear-before-toast).

CI runs pre-commit --all-files while local commits only checked staged
files, so the synced tree (rewritten acli. -> dashscope.acli., +10 cols
per import) was never black-formatted: 23 files reformatted. The rewrite
also pushed four noqa'd imports past 79 cols; black wrapped them and the
trailing noqa no longer covered F401/E402 — fixed at the source with
exploded first-line-noqa imports (agenticCLI). commands.py implicit
string concat joined by black tripped pylint W1404 — single literal at
the source.

sync_acli.sh now runs the repo-pinned black on the synced tree so local
output always satisfies CI. Also commit the two sync scripts.