@rewind-ai/cli 0.6.2

package/.env.example

@@ -0,0 +1,8 @@
+# REWIND local Stripe TEST MODE (copy to .env — never commit .env)
+# Use Stripe Dashboard TEST mode keys only (sk_test_… / pk_test_…).
+# Webhook secret: from `stripe listen` output (whsec_…) for local proof.
+
+REWIND_STRIPE_SECRET_KEY=
+REWIND_STRIPE_PRICE_ID=
+REWIND_STRIPE_WEBHOOK_SECRET=
+REWIND_STRIPE_PUBLISHABLE_KEY=

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 REWIND
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,39 @@
+# REWIND
+
+**Undo for AI agents.** — REWIND Personal (£2.99/month)
+
+Local control and transaction layer for AI agent actions.
+
+## Install
+
+```bash
+npm install -g @rewind-ai/cli
+cd your-project
+rewind setup
+rewind doctor
+rewind open
+```
+
+The npm package is `@rewind-ai/cli`. The CLI command remains `rewind`.
+
+## Develop from source
+
+```bash
+npm install && npm run build
+npm pack && npm install -g ./rewind-ai-cli-*.tgz
+# or: npx tsx src/cli.ts setup
+```
+
+Mediated agent actions are recorded as reversible transactions.  
+Native editor writes outside REWIND are **not** claimed as protected.
+
+## Docs
+
+- [docs/PRODUCT-V6.md](docs/PRODUCT-V6.md) — product surface
+- [docs/HUMAN-SETUP.md](docs/HUMAN-SETUP.md) — Stripe / Auth / keys checklist
+- [docs/COMMERCIAL.md](docs/COMMERCIAL.md) — privacy + offline + undo invariant
+- [docs/PACKAGING.md](docs/PACKAGING.md) — pack / publish / paths
+- [docs/THREAT-MODEL.md](docs/THREAT-MODEL.md)
+- [docs/PRODUCT-V5.md](docs/PRODUCT-V5.md) — core architecture
+
+Marketing site under `website/` is separate.

package/dist/src/action/capture.d.ts

@@ -0,0 +1,15 @@
+import { type SandboxName } from "../paths.js";
+import type { EntrySnapshot } from "./types.js";
+/**
+ * Resolve a user/MCP-supplied path to a sandbox-relative POSIX path.
+ * Rejects escapes, absolute outsides, .rewind, empty, etc.
+ */
+export declare function resolveSandboxRelative(input: string, projectRoot: string, sandboxName?: SandboxName): string;
+export declare function sandboxAbs(rel: string, projectRoot: string, sandboxName?: SandboxName): string;
+/** Capture snapshot of a single path; optionally store file contents. */
+export declare function captureEntry(rel: string, projectRoot: string, options?: {
+    storeContent?: boolean;
+    captureSubtree?: boolean;
+    sandboxName?: SandboxName;
+}): Promise<EntrySnapshot>;
+export declare function snapshotIdentityHash(snap: EntrySnapshot): string | null;

package/dist/src/action/capture.js

@@ -0,0 +1,215 @@
+import path from "node:path";
+import { lstat, readFile, readlink, readdir } from "node:fs/promises";
+import { assertNoSymlinkEscape, assertSafeRelativePath, getSandboxPath, isPathInside, PathSafetyError, SANDBOX_DIR_NAME, } from "../paths.js";
+import { sha256 } from "../hash.js";
+import { storeObject } from "./objects.js";
+import { toRelativePosix } from "../manifest.js";
+function modeOf(m) {
+    return m & 0o7777;
+}
+function sandboxOf(projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    return getSandboxPath(projectRoot, sandboxName);
+}
+/**
+ * Resolve a user/MCP-supplied path to a sandbox-relative POSIX path.
+ * Rejects escapes, absolute outsides, .rewind, empty, etc.
+ */
+export function resolveSandboxRelative(input, projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    if (!input || input.includes("\0")) {
+        throw new PathSafetyError("Invalid path");
+    }
+    // Strip leading ./ 
+    let cleaned = input.replace(/\\/g, "/");
+    if (cleaned.startsWith("/")) {
+        // Absolute: must resolve inside sandbox
+        const sandbox = sandboxOf(projectRoot, sandboxName);
+        const abs = path.resolve(cleaned);
+        if (!isPathInside(sandbox, abs) || abs === path.resolve(sandbox)) {
+            // allow only paths inside sandbox, not the root itself for file ops? root itself ok for list
+            if (abs !== path.resolve(sandbox)) {
+                throw new PathSafetyError(`Absolute path outside sandbox: ${input}`);
+            }
+            return "";
+        }
+        cleaned = toRelativePosix(sandbox, abs);
+    }
+    // Block .rewind and parent escapes via relative form
+    const safe = cleaned === "" || cleaned === "."
+        ? ""
+        : assertSafeRelativePath(cleaned);
+    if (safe === ".rewind" ||
+        safe.startsWith(".rewind/") ||
+        safe.split("/").includes(".rewind")) {
+        throw new PathSafetyError("Refusing to access .rewind internals via MCP");
+    }
+    if (safe === ".." || safe.startsWith("../")) {
+        throw new PathSafetyError(`Path traversal rejected: ${input}`);
+    }
+    const sandbox = sandboxOf(projectRoot, sandboxName);
+    const abs = safe === "" ? sandbox : path.resolve(sandbox, safe);
+    if (!isPathInside(sandbox, abs)) {
+        throw new PathSafetyError(`Path escapes sandbox: ${input}`);
+    }
+    return safe;
+}
+export function sandboxAbs(rel, projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    const sandbox = sandboxOf(projectRoot, sandboxName);
+    if (rel === "" || rel === ".")
+        return sandbox;
+    const safe = assertSafeRelativePath(rel);
+    const abs = path.resolve(sandbox, safe);
+    if (!isPathInside(sandbox, abs)) {
+        throw new PathSafetyError(`Path escapes sandbox: ${rel}`);
+    }
+    return abs;
+}
+/** Capture snapshot of a single path; optionally store file contents. */
+export async function captureEntry(rel, projectRoot, options = {}) {
+    const sandboxName = options.sandboxName ?? SANDBOX_DIR_NAME;
+    const abs = sandboxAbs(rel, projectRoot, sandboxName);
+    const sandbox = sandboxOf(projectRoot, sandboxName);
+    await assertNoSymlinkEscape(abs, sandbox).catch(() => undefined);
+    let st;
+    try {
+        st = await lstat(abs);
+    }
+    catch {
+        return {
+            exists: false,
+            kind: "absent",
+            hash: null,
+            size: 0,
+            mode: null,
+            linkTarget: null,
+            objectId: null,
+        };
+    }
+    if (st.isSymbolicLink()) {
+        const linkTarget = await readlink(abs);
+        const hash = sha256(linkTarget);
+        return {
+            exists: true,
+            kind: "symlink",
+            hash,
+            size: Buffer.byteLength(linkTarget),
+            mode: modeOf(st.mode),
+            linkTarget,
+            objectId: null,
+        };
+    }
+    if (st.isDirectory()) {
+        const kids = await readdir(abs);
+        kids.sort((a, b) => a.localeCompare(b));
+        const listingHash = sha256(kids.join("\n"));
+        const snap = {
+            exists: true,
+            kind: "directory",
+            hash: listingHash,
+            size: kids.length,
+            mode: modeOf(st.mode),
+            linkTarget: null,
+            objectId: null,
+        };
+        if (options.captureSubtree) {
+            snap.subtree = await captureSubtree(rel, projectRoot, sandboxName);
+            snap.hash = snapshotIdentityHash({ ...snap, subtree: snap.subtree });
+        }
+        return snap;
+    }
+    if (st.isFile()) {
+        const data = await readFile(abs);
+        const hash = sha256(data);
+        let objectId = null;
+        if (options.storeContent !== false) {
+            objectId = await storeObject(data, projectRoot);
+        }
+        return {
+            exists: true,
+            kind: "file",
+            hash,
+            size: data.length,
+            mode: modeOf(st.mode),
+            linkTarget: null,
+            objectId,
+        };
+    }
+    throw new PathSafetyError(`Unsupported entry type at ${rel}`);
+}
+async function captureSubtree(rootRel, projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    const sandbox = sandboxOf(projectRoot, sandboxName);
+    const rootAbs = sandboxAbs(rootRel, projectRoot, sandboxName);
+    const out = [];
+    async function walk(rel) {
+        const abs = sandboxAbs(rel, projectRoot, sandboxName);
+        await assertNoSymlinkEscape(abs, sandbox);
+        const st = await lstat(abs);
+        if (st.isSymbolicLink()) {
+            const linkTarget = await readlink(abs);
+            out.push({
+                path: rel,
+                kind: "symlink",
+                hash: sha256(linkTarget),
+                size: Buffer.byteLength(linkTarget),
+                mode: modeOf(st.mode),
+                linkTarget,
+                objectId: null,
+            });
+            return;
+        }
+        if (st.isDirectory()) {
+            out.push({
+                path: rel,
+                kind: "directory",
+                hash: null,
+                size: 0,
+                mode: modeOf(st.mode),
+                linkTarget: null,
+                objectId: null,
+            });
+            const kids = await readdir(abs);
+            kids.sort((a, b) => a.localeCompare(b));
+            for (const name of kids) {
+                const childRel = rel === "" || rel === "." ? name : `${rel}/${name}`;
+                await walk(childRel);
+            }
+            return;
+        }
+        if (st.isFile()) {
+            const data = await readFile(abs);
+            const objectId = await storeObject(data, projectRoot);
+            out.push({
+                path: rel,
+                kind: "file",
+                hash: sha256(data),
+                size: data.length,
+                mode: modeOf(st.mode),
+                linkTarget: null,
+                objectId,
+            });
+        }
+    }
+    // Include root itself
+    await walk(rootRel === "" ? toRelativePosix(sandbox, rootAbs) : rootRel);
+    // Sort deepest last for restore-friendly order (dirs first by path)
+    out.sort((a, b) => a.path.localeCompare(b.path));
+    return out;
+}
+export function snapshotIdentityHash(snap) {
+    if (!snap.exists)
+        return "ABSENT";
+    if (snap.kind === "directory") {
+        if (snap.subtree) {
+            return sha256(JSON.stringify(snap.subtree.map((e) => ({
+                path: e.path,
+                kind: e.kind,
+                hash: e.hash,
+                mode: e.mode,
+                linkTarget: e.linkTarget,
+            }))));
+        }
+        // Immediate children listing hash is stored in snap.hash by captureEntry
+        return `DIR:${snap.mode ?? 0}:${snap.hash ?? ""}:${snap.size}`;
+    }
+    return snap.hash;
+}
+//# sourceMappingURL=capture.js.map

package/dist/src/action/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/action/capture.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,gBAAgB,GAEjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,CAAC,GAAG,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAChB,WAAmB,EACnB,cAA2B,gBAAgB;IAE3C,OAAO,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAa,EACb,WAAmB,EACnB,cAA2B,gBAAgB;IAE3C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC;IACD,oBAAoB;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,wCAAwC;QACxC,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,6FAA6F;YAC7F,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,eAAe,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,qDAAqD;IACrD,MAAM,IAAI,GAAG,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;QAC5C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACpC,IACE,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,8CAA8C,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,GAAW,EACX,WAAmB,EACnB,cAA2B,gBAAgB;IAE3C,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC;IAC9C,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,WAAmB,EACnB,UAII,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,gBAAgB,CAAC;IAC5D,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEjE,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS;YACf,IAAI;YACJ,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YACnC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;YACrB,UAAU;YACV,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAkB;YAC1B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;YACrB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YACnC,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAClD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;YACrB,UAAU,EAAE,IAAI;YAChB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,eAAe,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,WAAmB,EACnB,cAA2B,gBAAgB;IAE3C,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAmB,EAAE,CAAC;IAE/B,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;gBACxB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;gBACnC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACrB,UAAU;gBACV,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACrB,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBACrE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACrB,UAAU,EAAE,IAAI;gBAChB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACzE,oEAAoE;IACpE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAmB;IACtD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,MAAM,CACX,IAAI,CAAC,SAAS,CACZ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CACJ,CACF,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,OAAO,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC"}

package/dist/src/action/mediate.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Filesystem mediation — thin wrappers over the V5 transaction engine.
+ * Preserves the V2 ActionRecord return shape for existing callers/tests.
+ */
+import { type SandboxName } from "../paths.js";
+import type { ActionRecord, MediateContext } from "./types.js";
+export interface MediateWriteInput {
+    path: string;
+    content: string;
+    createOnly?: boolean;
+}
+export interface MediateDeleteInput {
+    path: string;
+}
+export interface MediateMoveInput {
+    from: string;
+    to: string;
+}
+export interface MediateDirInput {
+    path: string;
+}
+export declare function mediateWriteFile(ctx: MediateContext, input: MediateWriteInput): Promise<ActionRecord>;
+export declare function mediateDeleteFile(ctx: MediateContext, input: MediateDeleteInput): Promise<ActionRecord>;
+export declare function mediateMoveFile(ctx: MediateContext, input: MediateMoveInput): Promise<ActionRecord>;
+export declare function mediateCreateDirectory(ctx: MediateContext, input: MediateDirInput): Promise<ActionRecord>;
+export declare function mediateDeleteDirectory(ctx: MediateContext, input: MediateDirInput): Promise<ActionRecord>;
+export declare function formatActionResponse(action: ActionRecord): string;
+export declare function defaultMediateContext(projectRoot?: string, client?: ActionRecord["client"], sandboxName?: SandboxName): MediateContext;

package/dist/src/action/mediate.js

@@ -0,0 +1,109 @@
+/**
+ * Filesystem mediation — thin wrappers over the V5 transaction engine.
+ * Preserves the V2 ActionRecord return shape for existing callers/tests.
+ */
+import { getProjectRoot, SANDBOX_DIR_NAME, } from "../paths.js";
+import { snapshotIdentityHash } from "./capture.js";
+import { actorFromMcpClient, } from "../core/types.js";
+import { executeTransaction, transactionToLegacyAction, } from "../core/engine.js";
+function sandboxNameOf(ctx) {
+    return ctx.sandboxName ?? SANDBOX_DIR_NAME;
+}
+function baseIntent(ctx, operation, input, resourceHint) {
+    const intent = {
+        adapter: "filesystem",
+        operation,
+        target: {
+            type: "file",
+            resource: resourceHint,
+            displayName: resourceHint,
+            secondary: null,
+        },
+        input,
+        actor: actorFromMcpClient(ctx.client),
+        source: "MCP",
+        sandbox: sandboxNameOf(ctx),
+        metadata: { projectRoot: ctx.projectRoot },
+    };
+    if (ctx.sessionId !== "pending") {
+        intent.sessionId = ctx.sessionId;
+    }
+    return intent;
+}
+export async function mediateWriteFile(ctx, input) {
+    const operation = input.createOnly ? "create" : "write";
+    const txn = await executeTransaction(baseIntent(ctx, operation, input, input.path), ctx.projectRoot);
+    if (txn.status === "AWAITING_APPROVAL") {
+        return transactionToLegacyAction(txn);
+    }
+    return transactionToLegacyAction(txn);
+}
+export async function mediateDeleteFile(ctx, input) {
+    const txn = await executeTransaction(baseIntent(ctx, "delete", input, input.path), ctx.projectRoot);
+    return transactionToLegacyAction(txn);
+}
+export async function mediateMoveFile(ctx, input) {
+    const intent = baseIntent(ctx, "move", input, input.from);
+    intent.target = {
+        type: "file",
+        resource: input.from,
+        displayName: `${input.from} → ${input.to}`,
+        secondary: input.to,
+    };
+    const txn = await executeTransaction(intent, ctx.projectRoot);
+    return transactionToLegacyAction(txn);
+}
+export async function mediateCreateDirectory(ctx, input) {
+    const intent = baseIntent(ctx, "create_directory", input, input.path);
+    intent.target = {
+        type: "directory",
+        resource: input.path,
+        displayName: input.path,
+        secondary: null,
+    };
+    const txn = await executeTransaction(intent, ctx.projectRoot);
+    return transactionToLegacyAction(txn);
+}
+export async function mediateDeleteDirectory(ctx, input) {
+    const intent = baseIntent(ctx, "delete_directory", input, input.path);
+    intent.target = {
+        type: "directory",
+        resource: input.path,
+        displayName: input.path,
+        secondary: null,
+    };
+    const txn = await executeTransaction(intent, ctx.projectRoot);
+    return transactionToLegacyAction(txn);
+}
+export function formatActionResponse(action) {
+    const before = snapshotIdentityHash(action.before);
+    const after = snapshotIdentityHash(action.after);
+    return [
+        "Action completed.",
+        "",
+        `Action ID: ${action.id}`,
+        `Tool: ${action.tool}`,
+        `Sandbox: ${action.sandbox ?? SANDBOX_DIR_NAME}`,
+        `Target: ${action.target}${action.targetSecondary ? ` → ${action.targetSecondary}` : ""}`,
+        `Before: ${before}`,
+        `After: ${after}`,
+        `Reversible: ${action.reversibility === "REVERSIBLE" ? "YES" : action.reversibility}`,
+        `Trust: AUTHORITATIVE`,
+        `Source: MCP`,
+        `Client: ${action.client.name}@${action.client.version}`,
+        `Session: ${action.sessionId}`,
+        `Sequence: ${action.sequence}`,
+    ].join("\n");
+}
+export function defaultMediateContext(projectRoot = getProjectRoot(), client = {
+    name: "UNKNOWN_MCP_CLIENT",
+    version: "unknown",
+}, sandboxName = SANDBOX_DIR_NAME) {
+    return {
+        projectRoot,
+        sessionId: "pending",
+        client,
+        sandboxName,
+    };
+}
+//# sourceMappingURL=mediate.js.map

package/dist/src/action/mediate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediate.js","sourceRoot":"","sources":["../../../src/action/mediate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,GAEjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EACL,kBAAkB,GAEnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAqB3B,SAAS,aAAa,CAAC,GAAmB;IACxC,OAAO,GAAG,CAAC,WAAW,IAAI,gBAAgB,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CACjB,GAAmB,EACnB,SAAiB,EACjB,KAAc,EACd,YAAoB;IAEpB,MAAM,MAAM,GAAsB;QAChC,OAAO,EAAE,YAAY;QACrB,SAAS;QACT,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,YAAY;YACtB,WAAW,EAAE,YAAY;YACzB,SAAS,EAAE,IAAI;SAChB;QACD,KAAK;QACL,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;QACrC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC;QAC3B,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;KAC3C,CAAC;IACF,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAmB,EACnB,KAAwB;IAExB,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAClC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAC7C,GAAG,CAAC,WAAW,CAChB,CAAC;IACF,IAAI,GAAG,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACvC,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAmB,EACnB,KAAyB;IAEzB,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAClC,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,EAC5C,GAAG,CAAC,WAAW,CAChB,CAAC;IACF,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAmB,EACnB,KAAuB;IAEvB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,GAAG;QACd,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,EAAE;QAC1C,SAAS,EAAE,KAAK,CAAC,EAAE;KACpB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAmB,EACnB,KAAsB;IAEtB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,GAAG;QACd,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,WAAW,EAAE,KAAK,CAAC,IAAI;QACvB,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAmB,EACnB,KAAsB;IAEtB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,GAAG;QACd,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,WAAW,EAAE,KAAK,CAAC,IAAI;QACvB,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9D,OAAO,yBAAyB,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAoB;IACvD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO;QACL,mBAAmB;QACnB,EAAE;QACF,cAAc,MAAM,CAAC,EAAE,EAAE;QACzB,SAAS,MAAM,CAAC,IAAI,EAAE;QACtB,YAAY,MAAM,CAAC,OAAO,IAAI,gBAAgB,EAAE;QAChD,WAAW,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACzF,WAAW,MAAM,EAAE;QACnB,UAAU,KAAK,EAAE;QACjB,eAAe,MAAM,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE;QACrF,sBAAsB;QACtB,aAAa;QACb,WAAW,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE;QACxD,YAAY,MAAM,CAAC,SAAS,EAAE;QAC9B,aAAa,MAAM,CAAC,QAAQ,EAAE;KAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,WAAW,GAAG,cAAc,EAAE,EAC9B,SAAiC;IAC/B,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE,SAAS;CACnB,EACD,cAA2B,gBAAgB;IAE3C,OAAO;QACL,WAAW;QACX,SAAS,EAAE,SAAS;QACpB,MAAM;QACN,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/src/action/mutate.d.ts

@@ -0,0 +1,11 @@
+import { type SandboxName } from "../paths.js";
+import type { EntrySnapshot } from "./types.js";
+export declare function writeFileMediated(rel: string, content: string | Buffer, projectRoot: string, mode?: number, sandboxName?: SandboxName): Promise<void>;
+export declare function createFileMediated(rel: string, content: string | Buffer, projectRoot: string, mode?: number, sandboxName?: SandboxName): Promise<void>;
+export declare function deleteFileMediated(rel: string, projectRoot: string, sandboxName?: SandboxName): Promise<void>;
+export declare function moveFileMediated(fromRel: string, toRel: string, projectRoot: string, sandboxName?: SandboxName): Promise<void>;
+export declare function createDirectoryMediated(rel: string, projectRoot: string, mode?: number, sandboxName?: SandboxName): Promise<void>;
+export declare function deleteDirectoryMediated(rel: string, projectRoot: string, sandboxName?: SandboxName): Promise<void>;
+/** Restore an entry snapshot onto a relative path (inverse apply). */
+export declare function restoreSnapshot(rel: string, snap: EntrySnapshot, projectRoot: string, sandboxName?: SandboxName): Promise<void>;
+export declare function listDirectoryMediated(rel: string, projectRoot: string, sandboxName?: SandboxName): Promise<string[]>;

package/dist/src/action/mutate.js

@@ -0,0 +1,189 @@
+import path from "node:path";
+import { mkdir, writeFile, rm, rename, chmod, symlink, lstat, readdir, } from "node:fs/promises";
+import { assertApprovedSandbox, getSandboxPath, isPathInside, PathSafetyError, SANDBOX_DIR_NAME, ENFORCED_SANDBOX_DIR_NAME, } from "../paths.js";
+import { sandboxAbs } from "./capture.js";
+import { readObject } from "./objects.js";
+import { withEnforcedWriteAccess, } from "../enforcement/readonly.js";
+import { isEnforcedLocked, loadEnforcementState, } from "../enforcement/setup.js";
+async function ensureParent(abs, sandbox) {
+    const parent = path.dirname(abs);
+    if (!isPathInside(sandbox, parent) && parent !== sandbox) {
+        throw new PathSafetyError(`Parent escapes sandbox: ${parent}`);
+    }
+    await mkdir(parent, { recursive: true });
+}
+async function maybeBroker(projectRoot, sandboxName, fn) {
+    if (sandboxName !== ENFORCED_SANDBOX_DIR_NAME) {
+        return fn();
+    }
+    const state = await loadEnforcementState(projectRoot);
+    if (state?.enabled && state.locked) {
+        return withEnforcedWriteAccess(projectRoot, fn);
+    }
+    // Even if state missing, check lock bit via isEnforcedLocked
+    if (await isEnforcedLocked(projectRoot)) {
+        return withEnforcedWriteAccess(projectRoot, fn);
+    }
+    return fn();
+}
+export async function writeFileMediated(rel, content, projectRoot, mode = 0o644, sandboxName = SANDBOX_DIR_NAME) {
+    const sandbox = getSandboxPath(projectRoot, sandboxName);
+    await assertApprovedSandbox(sandbox, projectRoot, sandboxName);
+    await maybeBroker(projectRoot, sandboxName, async () => {
+        const abs = sandboxAbs(rel, projectRoot, sandboxName);
+        await ensureParent(abs, sandbox);
+        const data = typeof content === "string" ? Buffer.from(content, "utf8") : content;
+        const tmp = `${abs}.rewind-mcp-tmp-${process.pid}`;
+        await writeFile(tmp, data, { mode });
+        await rename(tmp, abs);
+        await chmod(abs, mode);
+    });
+}
+export async function createFileMediated(rel, content, projectRoot, mode = 0o644, sandboxName = SANDBOX_DIR_NAME) {
+    const abs = sandboxAbs(rel, projectRoot, sandboxName);
+    try {
+        await lstat(abs);
+        throw new PathSafetyError(`File already exists: ${rel}`);
+    }
+    catch (err) {
+        if (err instanceof PathSafetyError)
+            throw err;
+        const code = err && typeof err === "object" && "code" in err
+            ? String(err.code)
+            : "";
+        if (code !== "ENOENT")
+            throw err;
+    }
+    await writeFileMediated(rel, content, projectRoot, mode, sandboxName);
+}
+export async function deleteFileMediated(rel, projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    const sandbox = getSandboxPath(projectRoot, sandboxName);
+    await assertApprovedSandbox(sandbox, projectRoot, sandboxName);
+    await maybeBroker(projectRoot, sandboxName, async () => {
+        const abs = sandboxAbs(rel, projectRoot, sandboxName);
+        const st = await lstat(abs);
+        if (!st.isFile() && !st.isSymbolicLink()) {
+            throw new PathSafetyError(`Not a file: ${rel}`);
+        }
+        await rm(abs, { force: true });
+    });
+}
+export async function moveFileMediated(fromRel, toRel, projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    const sandbox = getSandboxPath(projectRoot, sandboxName);
+    await assertApprovedSandbox(sandbox, projectRoot, sandboxName);
+    await maybeBroker(projectRoot, sandboxName, async () => {
+        const fromAbs = sandboxAbs(fromRel, projectRoot, sandboxName);
+        const toAbs = sandboxAbs(toRel, projectRoot, sandboxName);
+        await ensureParent(toAbs, sandbox);
+        await rename(fromAbs, toAbs);
+    });
+}
+export async function createDirectoryMediated(rel, projectRoot, mode = 0o755, sandboxName = SANDBOX_DIR_NAME) {
+    const sandbox = getSandboxPath(projectRoot, sandboxName);
+    await assertApprovedSandbox(sandbox, projectRoot, sandboxName);
+    await maybeBroker(projectRoot, sandboxName, async () => {
+        const abs = sandboxAbs(rel, projectRoot, sandboxName);
+        await mkdir(abs, { recursive: true, mode });
+        await chmod(abs, mode);
+    });
+}
+export async function deleteDirectoryMediated(rel, projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    const sandbox = getSandboxPath(projectRoot, sandboxName);
+    await assertApprovedSandbox(sandbox, projectRoot, sandboxName);
+    await maybeBroker(projectRoot, sandboxName, async () => {
+        const abs = sandboxAbs(rel, projectRoot, sandboxName);
+        if (abs === path.resolve(sandbox)) {
+            throw new PathSafetyError("Refusing to delete sandbox root");
+        }
+        const st = await lstat(abs);
+        if (!st.isDirectory()) {
+            throw new PathSafetyError(`Not a directory: ${rel}`);
+        }
+        await rm(abs, { recursive: true, force: true });
+    });
+}
+/** Restore an entry snapshot onto a relative path (inverse apply). */
+export async function restoreSnapshot(rel, snap, projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    const sandbox = getSandboxPath(projectRoot, sandboxName);
+    await assertApprovedSandbox(sandbox, projectRoot, sandboxName);
+    await maybeBroker(projectRoot, sandboxName, async () => {
+        const abs = sandboxAbs(rel, projectRoot, sandboxName);
+        if (!snap.exists) {
+            await rm(abs, { recursive: true, force: true });
+            return;
+        }
+        if (snap.kind === "directory" && snap.subtree) {
+            await rm(abs, { recursive: true, force: true }).catch(() => undefined);
+            await restoreSubtree(snap.subtree, projectRoot, sandboxName);
+            return;
+        }
+        if (snap.kind === "directory") {
+            await mkdir(abs, { recursive: true });
+            if (snap.mode != null)
+                await chmod(abs, snap.mode);
+            return;
+        }
+        if (snap.kind === "symlink") {
+            if (!snap.linkTarget)
+                throw new Error(`Missing linkTarget for ${rel}`);
+            await ensureParent(abs, sandbox);
+            await rm(abs, { force: true }).catch(() => undefined);
+            await symlink(snap.linkTarget, abs);
+            return;
+        }
+        if (snap.kind === "file") {
+            if (!snap.objectId) {
+                throw new Error(`Missing objectId for file restore: ${rel}`);
+            }
+            const data = await readObject(snap.objectId, projectRoot);
+            // Nested writeFileMediated would double-broker — call inner directly
+            const fileAbs = sandboxAbs(rel, projectRoot, sandboxName);
+            await ensureParent(fileAbs, sandbox);
+            const tmp = `${fileAbs}.rewind-mcp-tmp-${process.pid}`;
+            await writeFile(tmp, data, { mode: snap.mode ?? 0o644 });
+            await rename(tmp, fileAbs);
+            await chmod(fileAbs, snap.mode ?? 0o644);
+            return;
+        }
+        throw new Error(`Cannot restore kind ${snap.kind} at ${rel}`);
+    });
+}
+async function restoreSubtree(entries, projectRoot, sandboxName) {
+    const sandbox = getSandboxPath(projectRoot, sandboxName);
+    for (const e of entries.filter((x) => x.kind === "directory")) {
+        const abs = sandboxAbs(e.path, projectRoot, sandboxName);
+        await mkdir(abs, { recursive: true });
+        await chmod(abs, e.mode);
+    }
+    for (const e of entries.filter((x) => x.kind === "file")) {
+        if (!e.objectId)
+            throw new Error(`Missing object for ${e.path}`);
+        const data = await readObject(e.objectId, projectRoot);
+        const abs = sandboxAbs(e.path, projectRoot, sandboxName);
+        await ensureParent(abs, sandbox);
+        const tmp = `${abs}.rewind-mcp-tmp-${process.pid}`;
+        await writeFile(tmp, data, { mode: e.mode });
+        await rename(tmp, abs);
+        await chmod(abs, e.mode);
+    }
+    for (const e of entries.filter((x) => x.kind === "symlink")) {
+        if (!e.linkTarget)
+            throw new Error(`Missing link for ${e.path}`);
+        const abs = sandboxAbs(e.path, projectRoot, sandboxName);
+        await mkdir(path.dirname(abs), { recursive: true });
+        await rm(abs, { force: true }).catch(() => undefined);
+        const resolved = path.resolve(path.dirname(abs), e.linkTarget);
+        if (!isPathInside(sandbox, resolved)) {
+            throw new PathSafetyError(`Symlink escape on restore: ${e.path}`);
+        }
+        await symlink(e.linkTarget, abs);
+    }
+}
+export async function listDirectoryMediated(rel, projectRoot, sandboxName = SANDBOX_DIR_NAME) {
+    const target = rel === "" || rel === "."
+        ? getSandboxPath(projectRoot, sandboxName)
+        : sandboxAbs(rel, projectRoot, sandboxName);
+    const names = await readdir(target);
+    return names.sort((a, b) => a.localeCompare(b));
+}
+//# sourceMappingURL=mutate.js.map