@calliopelabs/cli 2.5.0 → 3.0.0

package/dist/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../src/budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AA+BtC,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,oEAAoE;AACpE,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,OAAQ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAA4B,IAAI,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,CACL,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;QACtC,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;QACxC,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAC3C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,IAAI,QAAQ,GAAG,UAAU,CAAC;IAC1B,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAkB;IACjD,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA0B,CAAC;QACnF,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnG,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,OAAe;IACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC;IAE5C,MAAM,IAAI,GAAiB;QACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,OAAO;QACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QACvD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC;AACvB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,KAAkB;IACjE,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACrF,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,KAAK,CAAC,UAAU;YACvB,GAAG,EAAE,IAAI,CAAC,aAAa;YACvB,OAAO,EAAE,0BAA0B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;SAC1G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACxF,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,KAAK,CAAC,SAAS;YACtB,GAAG,EAAE,IAAI,CAAC,eAAe;YACzB,OAAO,EAAE,0BAA0B,KAAK,CAAC,SAAS,OAAO,IAAI,CAAC,eAAe,MAAM;SACpF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjG,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,KAAK,CAAC,cAAc;YAC3B,GAAG,EAAE,IAAI,CAAC,iBAAiB;YAC3B,OAAO,EAAE,8BAA8B,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;SACtH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,gBAAgB,CAAC,OAAsB;IACrD,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,QAAQ;QACrC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,KAAK,QAAQ;QACnC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,uBAAuB,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,YAAY,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,GAAG,YAAY,CAAC;AACnH,CAAC"}

package/dist/checkpoint.d.ts

@@ -1,49 +1,82 @@
 /**
- * Calliope CLI - Checkpoint/Restore Module (#20)
+ * Calliope CLI - Checkpoint / Restore (git-based, #181)
  *
- * Saves file content before overwrites so users can restore previous versions.
- * Checkpoints are stored as individual JSON files in ~/.calliope-cli/checkpoints/
- * organized by session date.
+ * A single, git-backed checkpoint mechanism. Before a destructive tool call the
+ * agent creates a checkpoint commit of the working tree (createCheckpoint) and
+ * records a lightweight ref under refs/calliope/checkpoints/ so the checkpoint
+ * can later be listed, restored from, or cleared — all without rewriting
+ * history:
+ *  - listCheckpoints()        enumerates the checkpoint refs (newest first)
+ *  - restoreFromCheckpoint()  restores a single file's content from a checkpoint
+ *                             commit via `git show <ref>:<path>`
+ *  - clearCheckpoints()       deletes the checkpoint refs (the commits remain
+ *                             reachable from branch history; only the pointers
+ *                             are dropped, so history is never rewritten)
+ *  - revertToLastCheckpoint() hard-resets the repo to the last checkpoint commit
+ *
+ * Inspired by autoresearch's git-as-ledger pattern where every experiment is a
+ * commit, making the full history auditable.
+ *
+ * Outside a git work tree every operation is a clean no-op: shouldCheckpoint
+ * returns false, createCheckpoint returns null, listCheckpoints returns [],
+ * restoreFromCheckpoint returns undefined, and clearCheckpoints returns 0.
  */
-export interface Checkpoint {
-    filePath: string;
-    content: string;
-    timestamp: string;
-    sessionId?: string;
-}
 export interface CheckpointSummary {
-    file: string;
-    filePath: string;
+    /** Full ref name under refs/calliope/checkpoints/. */
+    ref: string;
+    /** Short commit hash of the checkpoint. */
+    hash: string;
+    /** Commit subject (e.g. "[checkpoint] before write_file: src/main.ts"). */
+    subject: string;
+    /** ISO-8601 commit timestamp. */
     timestamp: string;
-    sessionId?: string;
-    size: number;
 }
 /**
- * Returns the checkpoint directory path (~/.calliope-cli/checkpoints/).
+ * Check if a tool call should trigger a checkpoint.
+ */
+export declare function shouldCheckpoint(tool: string, args: Record<string, unknown>): boolean;
+/**
+ * Create a checkpoint commit with the current staged + unstaged changes and
+ * record a ref pointing at it. Returns the commit hash if successful, null if
+ * nothing to commit.
+ */
+export declare function createCheckpoint(tool: string, args: Record<string, unknown>): string | null;
+/**
+ * Revert to the last checkpoint.
  */
-export declare function getCheckpointDir(): string;
+export declare function revertToLastCheckpoint(): boolean;
 /**
- * Create a checkpoint for a file before it gets overwritten.
- * If content is provided, uses that; otherwise reads current content from disk.
- * Returns the checkpoint filename on success, or undefined if the file doesn't exist
- * and no content was provided.
+ * Get checkpoint stats.
  */
-export declare function createCheckpoint(filePath: string, content?: string, sessionId?: string): string | undefined;
+export declare function getCheckpointStats(): {
+    enabled: boolean;
+    count: number;
+    lastHash: string | null;
+};
 /**
- * Restore a file from its most recent checkpoint (or a specific index).
- * Index 0 = most recent, 1 = second most recent, etc.
- * Returns the restored content, or undefined if no checkpoint found.
+ * Enable or disable automatic checkpointing.
  */
-export declare function restoreCheckpoint(filePath: string, index?: number): string | undefined;
+export declare function setEnabled(value: boolean): void;
 /**
- * List available checkpoints, optionally filtered by file path.
- * Returns summaries sorted newest-first.
+ * List available checkpoints, newest-first. When filePath is provided, only
+ * checkpoints whose commit tree contains that file are returned. Outside a git
+ * work tree this returns an empty list.
  */
 export declare function listCheckpoints(filePath?: string): CheckpointSummary[];
 /**
- * Clean up old checkpoints. If olderThanDays is provided, removes checkpoints
- * older than that many days. If omitted, removes all checkpoints.
- * Returns the number of checkpoints removed.
+ * Restore a single file's content from a checkpoint. Index 0 = most recent
+ * checkpoint containing the file, 1 = next, etc. The file's content is read
+ * from the checkpoint commit (`git show <hash>:<path>`) and written back to
+ * disk. Returns the restored content, or undefined if no matching checkpoint
+ * exists (including outside a git work tree).
+ */
+export declare function restoreFromCheckpoint(filePath: string, index?: number): string | undefined;
+/**
+ * Delete checkpoint refs. When olderThanDays is provided, only refs whose
+ * checkpoint commit is older than that many days are dropped; otherwise all
+ * checkpoint refs are dropped. The underlying commits remain reachable from
+ * branch history — only the checkpoint pointers are removed, so git history is
+ * never rewritten. Returns the number of refs removed (0 outside a git repo).
  */
 export declare function clearCheckpoints(olderThanDays?: number): number;
 //# sourceMappingURL=checkpoint.d.ts.map

package/dist/checkpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../src/checkpoint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAMD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC;AA0BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmD3G;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,MAAU,GAAG,MAAM,GAAG,SAAS,CAiBzF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAsCtE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAiC/D"}
+{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../src/checkpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AA8BH,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAgBD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAYrF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAmD3F;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAoBhD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAEjG;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE/C;AAMD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE,CA0CtE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,MAAU,GAAG,MAAM,GAAG,SAAS,CAyB7F;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAmC/D"}

package/dist/checkpoint.js

@@ -1,231 +1,318 @@
 /**
- * Calliope CLI - Checkpoint/Restore Module (#20)
+ * Calliope CLI - Checkpoint / Restore (git-based, #181)
  *
- * Saves file content before overwrites so users can restore previous versions.
- * Checkpoints are stored as individual JSON files in ~/.calliope-cli/checkpoints/
- * organized by session date.
+ * A single, git-backed checkpoint mechanism. Before a destructive tool call the
+ * agent creates a checkpoint commit of the working tree (createCheckpoint) and
+ * records a lightweight ref under refs/calliope/checkpoints/ so the checkpoint
+ * can later be listed, restored from, or cleared — all without rewriting
+ * history:
+ *  - listCheckpoints()        enumerates the checkpoint refs (newest first)
+ *  - restoreFromCheckpoint()  restores a single file's content from a checkpoint
+ *                             commit via `git show <ref>:<path>`
+ *  - clearCheckpoints()       deletes the checkpoint refs (the commits remain
+ *                             reachable from branch history; only the pointers
+ *                             are dropped, so history is never rewritten)
+ *  - revertToLastCheckpoint() hard-resets the repo to the last checkpoint commit
+ *
+ * Inspired by autoresearch's git-as-ledger pattern where every experiment is a
+ * commit, making the full history auditable.
+ *
+ * Outside a git work tree every operation is a clean no-op: shouldCheckpoint
+ * returns false, createCheckpoint returns null, listCheckpoints returns [],
+ * restoreFromCheckpoint returns undefined, and clearCheckpoints returns 0.
  */
+import { execFileSync } from 'child_process';
 import * as fs from 'fs';
 import * as path from 'path';
-import * as os from 'os';
 // ============================================================================
-// Directory Management
+// Configuration
+// ============================================================================
+/** Namespace for the lightweight refs that mark each checkpoint commit. */
+const CHECKPOINT_REF_PREFIX = 'refs/calliope/checkpoints';
+/** Shell commands that are destructive (write, delete, move). */
+const DESTRUCTIVE_SHELL_PATTERNS = [
+    /\brm\b/,
+    /\bmv\b/,
+    /\bcp\b.*\s-[^-]*f/, // cp -f (force overwrite)
+    /\bgit\s+(reset|checkout\s+--)\b/,
+    /\bgit\s+clean\b/,
+    /\bsed\s+-i\b/,
+    />\s*\S/, // output redirection
+    /\bdd\b/,
+    /\btruncate\b/,
+];
+// ============================================================================
+// State
+// ============================================================================
+let enabled = true;
+let lastCheckpointHash = null;
+/** Repo root the lastCheckpointHash belongs to — revert must target this, not live cwd. */
+let lastCheckpointRoot = null;
+let checkpointCount = 0;
+// ============================================================================
+// Public API — automatic checkpointing (agent loop)
 // ============================================================================
 /**
- * Returns the checkpoint directory path (~/.calliope-cli/checkpoints/).
+ * Check if a tool call should trigger a checkpoint.
  */
-export function getCheckpointDir() {
-    const dir = path.join(os.homedir(), '.calliope-cli', 'checkpoints');
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
+export function shouldCheckpoint(tool, args) {
+    if (!enabled)
+        return false;
+    if (!isGitRepo())
+        return false;
+    if (tool === 'write_file')
+        return true;
+    if (tool === 'shell') {
+        const command = String(args.command || '');
+        return DESTRUCTIVE_SHELL_PATTERNS.some(p => p.test(command));
     }
-    return dir;
-}
-let checkpointCounter = 0;
-/** Auto-cleanup: remove checkpoints older than this many days */
-const AUTO_CLEANUP_DAYS = 7;
-/** Minimum interval between auto-cleanup runs (1 hour in ms) */
-const AUTO_CLEANUP_INTERVAL = 60 * 60 * 1000;
-/** Timestamp of last auto-cleanup run */
-let lastAutoCleanup = 0;
-/**
- * Generate a unique checkpoint filename from a timestamp.
- */
-function makeFilename(timestamp) {
-    // Replace colons and dots for filesystem safety + add counter to avoid same-millisecond collisions
-    const counter = String(checkpointCounter++).padStart(4, '0');
-    return `checkpoint-${timestamp.replace(/[:\.]/g, '-')}-${counter}.json`;
+    return false;
 }
-// ============================================================================
-// Core API
-// ============================================================================
 /**
- * Create a checkpoint for a file before it gets overwritten.
- * If content is provided, uses that; otherwise reads current content from disk.
- * Returns the checkpoint filename on success, or undefined if the file doesn't exist
- * and no content was provided.
+ * Create a checkpoint commit with the current staged + unstaged changes and
+ * record a ref pointing at it. Returns the commit hash if successful, null if
+ * nothing to commit.
  */
-export function createCheckpoint(filePath, content, sessionId) {
-    // Auto-cleanup old checkpoints periodically (at most once per hour)
-    const now = Date.now();
-    if (now - lastAutoCleanup > AUTO_CLEANUP_INTERVAL) {
-        lastAutoCleanup = now;
+export function createCheckpoint(tool, args) {
+    if (!isGitRepo())
+        return null;
+    try {
+        // Capture the repo root once, at checkpoint time, and pin every git call for
+        // this checkpoint to it. process.cwd() may change before the matching revert.
+        const root = gitRepoRoot();
+        if (!root)
+            return null;
+        // Check if there are any changes to commit
+        const status = git(root, 'status', '--porcelain');
+        if (!status.trim())
+            return null; // Nothing to checkpoint
+        // Stage all tracked changes (don't add untracked files)
+        git(root, 'add', '-u');
+        // Check if there's anything staged
+        const staged = git(root, 'diff', '--cached', '--stat');
+        if (!staged.trim())
+            return null;
+        // Create checkpoint commit
+        const argSummary = tool === 'write_file'
+            ? String(args.path || '')
+            : tool === 'shell'
+                ? String(args.command || '').substring(0, 50)
+                : tool;
+        const message = `[checkpoint] before ${tool}: ${argSummary}`;
+        git(root, 'commit', '-m', message, '--no-gpg-sign');
+        // Get the commit hash
+        const hash = git(root, 'rev-parse', '--short', 'HEAD').trim();
+        lastCheckpointHash = hash;
+        lastCheckpointRoot = root;
+        checkpointCount++;
+        // Record a lightweight ref so this checkpoint can be listed, restored, and
+        // cleared without rewriting history. Best-effort: a ref failure must not
+        // invalidate the (already committed) checkpoint.
         try {
-            clearCheckpoints(AUTO_CLEANUP_DAYS);
+            const refId = `${new Date().toISOString().replace(/[:.]/g, '-')}-${String(checkpointCount).padStart(4, '0')}`;
+            git(root, 'update-ref', `${CHECKPOINT_REF_PREFIX}/${refId}`, hash);
         }
         catch {
-            // Don't let cleanup errors block checkpoint creation
+            // Ref tracking is best-effort; the checkpoint commit already exists.
         }
+        return hash;
     }
-    const absPath = path.resolve(filePath);
-    // Determine content to save
-    let fileContent;
-    if (content !== undefined) {
-        fileContent = content;
+    catch {
+        // Checkpoint failed silently — don't block the agent
+        return null;
     }
-    else {
-        try {
-            if (!fs.existsSync(absPath)) {
-                return undefined;
-            }
-            fileContent = fs.readFileSync(absPath, 'utf-8');
-        }
-        catch {
-            return undefined;
-        }
+}
+/**
+ * Revert to the last checkpoint.
+ */
+export function revertToLastCheckpoint() {
+    if (!lastCheckpointHash || !lastCheckpointRoot)
+        return false;
+    // Reset only the repo the checkpoint was created in. If that root has since
+    // moved or no longer resolves to the same repo, bail rather than risk a
+    // destructive cross-repo `git reset --hard` against the live cwd.
+    let currentRoot;
+    try {
+        currentRoot = gitRepoRoot(lastCheckpointRoot);
     }
-    const timestamp = new Date().toISOString();
-    const checkpoint = {
-        filePath: absPath,
-        content: fileContent,
-        timestamp,
-        ...(sessionId ? { sessionId } : {}),
-    };
-    const dir = getCheckpointDir();
-    const filename = makeFilename(timestamp);
-    const fullPath = path.join(dir, filename);
-    // Atomic write so a crash mid-write can't leave a truncated checkpoint.
-    const tmp = `${fullPath}.${process.pid}.${Date.now()}.tmp`;
+    catch {
+        return false;
+    }
+    if (currentRoot !== lastCheckpointRoot)
+        return false;
     try {
-        fs.writeFileSync(tmp, JSON.stringify(checkpoint, null, 2));
-        fs.renameSync(tmp, fullPath);
+        git(lastCheckpointRoot, 'reset', '--hard', lastCheckpointHash);
+        return true;
     }
-    catch (e) {
-        try {
-            fs.unlinkSync(tmp);
-        }
-        catch { /* best effort */ }
-        throw e;
+    catch {
+        return false;
     }
-    return filename;
 }
 /**
- * Restore a file from its most recent checkpoint (or a specific index).
- * Index 0 = most recent, 1 = second most recent, etc.
- * Returns the restored content, or undefined if no checkpoint found.
+ * Get checkpoint stats.
  */
-export function restoreCheckpoint(filePath, index = 0) {
-    const absPath = path.resolve(filePath);
-    const checkpoints = getCheckpointsForFile(absPath);
-    if (index < 0 || index >= checkpoints.length) {
-        return undefined;
-    }
-    const checkpoint = checkpoints[index];
-    // Write the content back to the original file
-    const dir = path.dirname(absPath);
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-    }
-    fs.writeFileSync(absPath, checkpoint.content);
-    return checkpoint.content;
+export function getCheckpointStats() {
+    return { enabled, count: checkpointCount, lastHash: lastCheckpointHash };
+}
+/**
+ * Enable or disable automatic checkpointing.
+ */
+export function setEnabled(value) {
+    enabled = value;
 }
+// ============================================================================
+// Public API — list / restore / clear (user commands)
+// ============================================================================
 /**
- * List available checkpoints, optionally filtered by file path.
- * Returns summaries sorted newest-first.
+ * List available checkpoints, newest-first. When filePath is provided, only
+ * checkpoints whose commit tree contains that file are returned. Outside a git
+ * work tree this returns an empty list.
  */
 export function listCheckpoints(filePath) {
-    const dir = getCheckpointDir();
-    let files;
+    const root = gitRepoRoot();
+    if (!root)
+        return [];
+    let out;
     try {
-        files = fs.readdirSync(dir).filter(f => f.startsWith('checkpoint-') && f.endsWith('.json'));
+        out = git(root, 'for-each-ref', '--sort=-refname', '--format=%(objectname:short)%09%(refname)%09%(committerdate:iso-strict)%09%(subject)', CHECKPOINT_REF_PREFIX);
     }
     catch {
         return [];
     }
+    const rel = filePath !== undefined ? path.relative(root, path.resolve(filePath)) : undefined;
     const summaries = [];
-    for (const file of files) {
-        try {
-            const raw = fs.readFileSync(path.join(dir, file), 'utf-8');
-            const cp = JSON.parse(raw);
-            // Filter by file path if specified
-            if (filePath) {
-                const absFilter = path.resolve(filePath);
-                if (cp.filePath !== absFilter)
-                    continue;
+    for (const line of out.split('\n')) {
+        if (!line.trim())
+            continue;
+        const parts = line.split('\t');
+        const hash = parts[0];
+        const ref = parts[1];
+        const timestamp = parts[2];
+        const subject = parts.slice(3).join('\t');
+        if (!hash || !ref)
+            continue;
+        // When filtering by file, keep only checkpoints whose tree contains it.
+        if (rel !== undefined) {
+            try {
+                git(root, 'cat-file', '-e', `${hash}:${rel}`);
+            }
+            catch {
+                continue;
             }
-            summaries.push({
-                file,
-                filePath: cp.filePath,
-                timestamp: cp.timestamp,
-                sessionId: cp.sessionId,
-                size: cp.content.length,
-            });
-        }
-        catch {
-            // Skip corrupted checkpoint files
         }
+        summaries.push({ ref, hash, subject, timestamp: timestamp ?? '' });
     }
-    // Sort newest first
-    summaries.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
     return summaries;
 }
 /**
- * Clean up old checkpoints. If olderThanDays is provided, removes checkpoints
- * older than that many days. If omitted, removes all checkpoints.
- * Returns the number of checkpoints removed.
+ * Restore a single file's content from a checkpoint. Index 0 = most recent
+ * checkpoint containing the file, 1 = next, etc. The file's content is read
+ * from the checkpoint commit (`git show <hash>:<path>`) and written back to
+ * disk. Returns the restored content, or undefined if no matching checkpoint
+ * exists (including outside a git work tree).
+ */
+export function restoreFromCheckpoint(filePath, index = 0) {
+    const root = gitRepoRoot();
+    if (!root)
+        return undefined;
+    const checkpoints = listCheckpoints(filePath);
+    if (index < 0 || index >= checkpoints.length)
+        return undefined;
+    const cp = checkpoints[index];
+    const absPath = path.resolve(filePath);
+    const rel = path.relative(root, absPath);
+    let content;
+    try {
+        content = git(root, 'show', `${cp.hash}:${rel}`);
+    }
+    catch {
+        return undefined;
+    }
+    const dir = path.dirname(absPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    fs.writeFileSync(absPath, content);
+    return content;
+}
+/**
+ * Delete checkpoint refs. When olderThanDays is provided, only refs whose
+ * checkpoint commit is older than that many days are dropped; otherwise all
+ * checkpoint refs are dropped. The underlying commits remain reachable from
+ * branch history — only the checkpoint pointers are removed, so git history is
+ * never rewritten. Returns the number of refs removed (0 outside a git repo).
  */
 export function clearCheckpoints(olderThanDays) {
-    const dir = getCheckpointDir();
-    let files;
+    const root = gitRepoRoot();
+    if (!root)
+        return 0;
+    let out;
     try {
-        files = fs.readdirSync(dir).filter(f => f.startsWith('checkpoint-') && f.endsWith('.json'));
+        out = git(root, 'for-each-ref', '--format=%(refname)%09%(committerdate:unix)', CHECKPOINT_REF_PREFIX);
     }
     catch {
         return 0;
     }
     const cutoff = olderThanDays !== undefined
-        ? new Date(Date.now() - olderThanDays * 24 * 60 * 60 * 1000)
+        ? Date.now() - olderThanDays * 24 * 60 * 60 * 1000
         : null;
     let removed = 0;
-    for (const file of files) {
-        const fullPath = path.join(dir, file);
+    for (const line of out.split('\n')) {
+        if (!line.trim())
+            continue;
+        const [ref, unix] = line.split('\t');
+        if (!ref)
+            continue;
+        if (cutoff !== null) {
+            const ts = parseInt(unix ?? '', 10) * 1000;
+            if (Number.isFinite(ts) && ts >= cutoff)
+                continue; // keep recent
+        }
         try {
-            if (cutoff) {
-                const raw = fs.readFileSync(fullPath, 'utf-8');
-                const cp = JSON.parse(raw);
-                const cpDate = new Date(cp.timestamp);
-                if (cpDate >= cutoff)
-                    continue;
-            }
-            fs.unlinkSync(fullPath);
+            git(root, 'update-ref', '-d', ref);
             removed++;
         }
         catch {
-            // Skip files that can't be read/deleted
+            // Skip refs we can't delete.
         }
     }
     return removed;
 }
 // ============================================================================
-// Internal Helpers
+// Helpers
 // ============================================================================
 /**
- * Get all checkpoints for a specific file path, sorted newest-first.
+ * Whether the given directory (default: live cwd) is inside a git work tree.
+ * Not memoized: the answer depends on cwd, which changes over a session.
  */
-function getCheckpointsForFile(absPath) {
-    const dir = getCheckpointDir();
-    let files;
+function isGitRepo(cwd = process.cwd()) {
     try {
-        files = fs.readdirSync(dir).filter(f => f.startsWith('checkpoint-') && f.endsWith('.json'));
+        git(cwd, 'rev-parse', '--is-inside-work-tree');
+        return true;
     }
     catch {
-        return [];
+        return false;
     }
-    const checkpoints = [];
-    for (const file of files) {
-        try {
-            const raw = fs.readFileSync(path.join(dir, file), 'utf-8');
-            const cp = JSON.parse(raw);
-            if (cp.filePath === absPath) {
-                checkpoints.push(cp);
-            }
-        }
-        catch {
-            // Skip corrupted files
-        }
+}
+/**
+ * Resolve the absolute repo root for the given directory (default: live cwd).
+ * Returns null if not inside a git work tree.
+ */
+function gitRepoRoot(cwd = process.cwd()) {
+    try {
+        const root = git(cwd, 'rev-parse', '--show-toplevel').trim();
+        return root || null;
+    }
+    catch {
+        return null;
     }
-    // Sort newest first
-    checkpoints.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
-    return checkpoints;
+}
+function git(cwd, ...args) {
+    return execFileSync('git', args, {
+        cwd,
+        encoding: 'utf-8',
+        timeout: 5000,
+        stdio: ['pipe', 'pipe', 'pipe'],
+    });
 }
 //# sourceMappingURL=checkpoint.js.map