UI polish pass: word count, slash commands, task lists, graph peek, bulk delete, export

- WordCount component (toggle words/chars vs read time, persisted mode)
- TipTap: TaskList/TaskItem extensions, slash command menu (H1-H3, lists, code, quote, task)
- Markdown serializer: task list → `- [ ]` / `- [x]` roundtrip
- GraphView: slide-in peek panel for note/task nodes (body, tags, linked nodes); tag nodes still navigate
- ChatView: bulk-select conversations with two-click confirm delete + chat retention policy (default 90d)
- NoteEditorView: pill tab bar with animated edit/preview toggle + WordCount in toolbar
- WorkspaceNoteEditor: inline search with tag matching, inline new-note creation, WordCount
- WorkspaceTaskPanel: task body rendered in slide-over + Edit link
- Settings: data export (Markdown ZIP / JSON) via GET /api/export
- Accessibility: skip-to-content link, aria-labels on all icon-only buttons
- Fix: export route used non-existent fabledassistant.database — corrected to async_session()
- Fix: ToolCallRecord.status type now includes "running" (was causing TS build error)
- Dockerfile: upgrade npm to latest before install to suppress major-version notice
- npm audit fix: patched minimatch (ReDoS) and rollup (path traversal) — 0 vulnerabilities

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/views/SettingsView.vue

@@ -28,6 +28,19 @@ const exporting = ref(false);
 const restoring = ref(false);
 const restoreFileInput = ref<HTMLInputElement | null>(null);
 
+// Chat retention
+const chatRetentionDays = ref(90);
+const savingRetention = ref(false);
+
+async function saveRetention() {
+  savingRetention.value = true;
+  try {
+    await apiPut("/api/settings", { chat_retention_days: String(chatRetentionDays.value) });
+  } finally {
+    savingRetention.value = false;
+  }
+}
+
 // Notification preferences
 const notifyTaskReminders = ref(true);
 const notifySecurityAlerts = ref(true);
@@ -92,6 +105,9 @@ onMounted(async () => {
   // Load notification preferences from user settings
   const allSettings = await apiGet<Record<string, string>>("/api/settings");
   defaultModel.value = allSettings.default_model ?? "";
+  chatRetentionDays.value = allSettings.chat_retention_days !== undefined
+    ? Number(allSettings.chat_retention_days)
+    : 90;
   if (allSettings.notify_task_reminders !== undefined) {
     notifyTaskReminders.value = allSettings.notify_task_reminders !== "false";
   }
@@ -234,6 +250,29 @@ async function exportData(scope: "user" | "full") {
   }
 }
 
+const exportingNotes = ref(false);
+
+async function exportNotes(format: "markdown" | "json") {
+  exportingNotes.value = true;
+  try {
+    const res = await fetch(`/api/export?format=${format}`);
+    if (!res.ok) throw new Error(`Error ${res.status}`);
+    const blob = await res.blob();
+    const ext = format === "json" ? "json" : "zip";
+    const stamp = new Date().toISOString().slice(0, 10);
+    const a = document.createElement("a");
+    a.href = URL.createObjectURL(blob);
+    a.download = `fabledassistant-${stamp}.${ext}`;
+    a.click();
+    URL.revokeObjectURL(a.href);
+    toastStore.show("Export downloaded");
+  } catch (e) {
+    toastStore.show("Export failed: " + (e as Error).message, "error");
+  } finally {
+    exportingNotes.value = false;
+  }
+}
+
 function triggerRestoreUpload() {
   restoreFileInput.value?.click();
 }
@@ -561,11 +600,41 @@ function hostname(url: string): string {
         </div>
       </section>
 
+      <!-- ── Chat Retention ── half width ── -->
+      <section class="settings-section">
+        <h2>Chat History</h2>
+        <p class="section-desc">
+          Conversations older than this many days are automatically deleted when you load the chat.
+          Set to <strong>0</strong> to keep conversations forever.
+        </p>
+        <div class="field retention-field">
+          <label class="field-label">Retention period (days)</label>
+          <div class="retention-row">
+            <input
+              v-model.number="chatRetentionDays"
+              type="number"
+              min="0"
+              max="3650"
+              class="input retention-input"
+            />
+            <button class="btn-primary" :disabled="savingRetention" @click="saveRetention">
+              {{ savingRetention ? 'Saving...' : 'Save' }}
+            </button>
+          </div>
+        </div>
+      </section>
+
       <!-- ── Data ── half width ── -->
       <section class="settings-section">
         <h2>Data</h2>
         <p class="section-desc">Export your data or restore from a backup.</p>
         <div class="data-actions">
+          <button class="btn-secondary" @click="exportNotes('markdown')" :disabled="exportingNotes">
+            {{ exportingNotes ? "Exporting..." : "Export as Markdown" }}
+          </button>
+          <button class="btn-secondary" @click="exportNotes('json')" :disabled="exportingNotes">
+            {{ exportingNotes ? "Exporting..." : "Export as JSON" }}
+          </button>
           <button class="btn-secondary" @click="exportData('user')" :disabled="exporting">
             {{ exporting ? "Exporting..." : "Export My Data" }}
           </button>
@@ -960,6 +1029,17 @@ function hostname(url: string): string {
   color: var(--color-danger);
 }
 
+.retention-row {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  margin-top: 0.4rem;
+}
+
+.retention-input {
+  width: 6rem;
+}
+
 /* Data buttons */
 .data-actions {
   display: flex;