Added

  • Command vault: encrypted local command history with fish-style ghost text suggestions

  • Imports ~/.zsh_history on first launch (deduplicated)

  • Inline ghost text appears as you type; right arrow accepts the suggestion

  • AES-256-GCM encryption at rest with auto-generated key (~/.config/zurm/vault.key)

  • Space-prefixed commands excluded from storage (matches zsh HIST_IGNORE_SPACE)

  • Completed commands captured via OSC 133 D (shell integration)

  • New [vault] config section: enabled, history_path, vault_path, ignore_prefix, suggestion_color

  • Disabled by default; set vault.enabled = true to activate