@rewind-ai/cli 0.6.2

package/dist/src/core/types.js

@@ -0,0 +1,37 @@
+/**
+ * REWIND V5 — general transaction domain model.
+ *
+ * Filesystem ActionRecord (v2) remains the on-disk ledger shape for mediated
+ * FS actions. Transaction (v5) is the in-memory / query / adapter-facing model.
+ * See compatibility.ts for mapping. Do not treat planned adapters as shipped.
+ */
+export const TRANSACTION_MODEL_VERSION = 5;
+export function unknownAuthority() {
+    return {
+        status: "UNKNOWN",
+        principal: null,
+        scope: null,
+        constraints: [],
+        expiresAt: null,
+        limits: null,
+        delegationChain: null,
+    };
+}
+export function actorFromMcpClient(client) {
+    const unknown = client.name === "UNKNOWN_MCP_CLIENT" || client.version === "unknown";
+    return {
+        type: unknown ? "unknown" : "mcp_client",
+        client: client.name,
+        clientVersion: client.version,
+        identity: null,
+    };
+}
+export function emptyUndoInfo() {
+    return {
+        status: "NONE",
+        attemptedAt: null,
+        result: null,
+        conflict: null,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/src/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC;AA6KpD,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAGlC;IACC,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,KAAK,oBAAoB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;IACvE,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;QACxC,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,aAAa,EAAE,MAAM,CAAC,OAAO;QAC7B,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC"}

package/dist/src/destroy.d.ts

@@ -0,0 +1,21 @@
+export interface DestroyResult {
+    modified: number;
+    deleted: number;
+    created: number;
+    renamed: number;
+    moved: number;
+    permissionChanges: number;
+    totalActions: number;
+    timingsMs: number;
+}
+/**
+ * Safeguard 1: explicit approved path equality via printChaosSafetyBanner.
+ * Safeguard 2: basename must be sandbox-test-project.
+ * Safeguard 3: realpath already checked in assertApprovedSandbox.
+ * Safeguard 4: every mutation re-checks isPathInside.
+ * Safeguard 5: refuse if REWIND_ALLOW_CHAOS === "0".
+ */
+export declare function destroySandbox(projectRoot?: string): Promise<DestroyResult>;
+/** Used by failure tests — attempt destroy on an arbitrary path (must refuse). */
+export declare function destroyArbitraryPath(target: string): Promise<never>;
+export declare function assertSandboxHasContent(projectRoot?: string): Promise<void>;

package/dist/src/destroy.js

@@ -0,0 +1,219 @@
+import path from "node:path";
+import { readFile, writeFile, rm, mkdir, rename, chmod, readdir, lstat, } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { getProjectRoot, getSandboxPath, printChaosSafetyBanner, isPathInside, PathSafetyError, assertSafeRelativePath, } from "./paths.js";
+import { walkTree, toRelativePosix } from "./manifest.js";
+import { Timer } from "./timing.js";
+/**
+ * Deterministic chaos destroyer.
+ * Multiple independent safeguards refuse to run outside the approved sandbox.
+ */
+const CHAOS_SEED = "rewind-v0-chaos-v1";
+function hashPick(seed, items, count) {
+    if (items.length === 0 || count <= 0)
+        return [];
+    const scored = items.map((item) => ({
+        item,
+        score: createHash("sha256").update(`${seed}:${item}`).digest("hex"),
+    }));
+    scored.sort((a, b) => a.score.localeCompare(b.score));
+    return scored.slice(0, Math.min(count, scored.length)).map((s) => s.item);
+}
+async function listRegularFiles(sandbox) {
+    const all = await walkTree(sandbox);
+    const files = [];
+    for (const abs of all) {
+        const st = await lstat(abs);
+        if (st.isFile())
+            files.push(abs);
+    }
+    return files.sort((a, b) => a.localeCompare(b));
+}
+/**
+ * Safeguard 1: explicit approved path equality via printChaosSafetyBanner.
+ * Safeguard 2: basename must be sandbox-test-project.
+ * Safeguard 3: realpath already checked in assertApprovedSandbox.
+ * Safeguard 4: every mutation re-checks isPathInside.
+ * Safeguard 5: refuse if REWIND_ALLOW_CHAOS === "0".
+ */
+export async function destroySandbox(projectRoot = getProjectRoot()) {
+    if (process.env.REWIND_ALLOW_CHAOS === "0") {
+        throw new PathSafetyError("Chaos disabled via REWIND_ALLOW_CHAOS=0");
+    }
+    const timer = new Timer();
+    const sandbox = getSandboxPath(projectRoot);
+    // Safeguard: basename
+    if (path.basename(sandbox) !== "sandbox-test-project") {
+        throw new PathSafetyError("Chaos refused: unexpected sandbox basename");
+    }
+    // Safeguard: must be direct child of project root
+    if (path.dirname(path.resolve(sandbox)) !== path.resolve(projectRoot)) {
+        throw new PathSafetyError("Chaos refused: sandbox not under project root");
+    }
+    await printChaosSafetyBanner(sandbox, projectRoot);
+    const files = await listRegularFiles(sandbox);
+    if (files.length < 50) {
+        throw new Error("Sandbox too small for chaos test — recreate it first");
+    }
+    let modified = 0;
+    let deleted = 0;
+    let created = 0;
+    let renamed = 0;
+    let moved = 0;
+    let permissionChanges = 0;
+    const mutate = async (abs, fn) => {
+        if (!isPathInside(sandbox, abs)) {
+            throw new PathSafetyError(`Chaos mutation escapes sandbox: ${abs}`);
+        }
+        await fn();
+    };
+    // Modify ~40 files
+    const toModify = hashPick(`${CHAOS_SEED}:modify`, files, 40);
+    for (const abs of toModify) {
+        await mutate(abs, async () => {
+            const prev = await readFile(abs);
+            const stamp = createHash("sha256")
+                .update(`${CHAOS_SEED}:mod:${toRelativePosix(sandbox, abs)}`)
+                .digest("hex")
+                .slice(0, 16);
+            if (abs.endsWith(".bin")) {
+                const next = Buffer.concat([prev, Buffer.from(stamp, "hex")]);
+                await writeFile(abs, next);
+            }
+            else {
+                await writeFile(abs, Buffer.concat([
+                    prev,
+                    Buffer.from(`\n/* CHAOS ${stamp} */\n`, "utf8"),
+                ]));
+            }
+            modified++;
+        });
+    }
+    // Refresh file list after mods (same paths)
+    let remaining = (await listRegularFiles(sandbox)).filter((f) => !toModify.includes(f));
+    // Delete ~20 files
+    const toDelete = hashPick(`${CHAOS_SEED}:delete`, remaining, 20);
+    for (const abs of toDelete) {
+        await mutate(abs, async () => {
+            await rm(abs, { force: true });
+            deleted++;
+        });
+    }
+    remaining = remaining.filter((f) => !toDelete.includes(f));
+    // Rename ~10 files (same directory, new basename)
+    const toRename = hashPick(`${CHAOS_SEED}:rename`, remaining, 10);
+    for (const abs of toRename) {
+        await mutate(abs, async () => {
+            const dir = path.dirname(abs);
+            const base = path.basename(abs);
+            const next = path.join(dir, `renamed-${base}`);
+            if (!isPathInside(sandbox, next)) {
+                throw new PathSafetyError("Rename target escapes");
+            }
+            await rename(abs, next);
+            renamed++;
+        });
+    }
+    remaining = remaining.filter((f) => !toRename.includes(f));
+    // Move ~10 files into chaos-moved/
+    const moveDir = path.join(sandbox, "chaos-moved");
+    await mutate(moveDir, async () => {
+        await mkdir(moveDir, { recursive: true });
+    });
+    const toMove = hashPick(`${CHAOS_SEED}:move`, remaining, 10);
+    for (const abs of toMove) {
+        await mutate(abs, async () => {
+            const dest = path.join(moveDir, path.basename(abs));
+            if (!isPathInside(sandbox, dest)) {
+                throw new PathSafetyError("Move target escapes");
+            }
+            await rename(abs, dest);
+            moved++;
+        });
+    }
+    // Create ~25 new files + nested dirs
+    for (let i = 0; i < 25; i++) {
+        const rel = assertSafeRelativePath(`chaos-created/nested-${i % 5}/new-file-${String(i).padStart(2, "0")}.txt`);
+        const abs = path.join(sandbox, rel);
+        await mutate(abs, async () => {
+            await mkdir(path.dirname(abs), { recursive: true });
+            const body = createHash("sha256")
+                .update(`${CHAOS_SEED}:create:${i}`)
+                .digest("hex");
+            await writeFile(abs, `chaos created ${i}\n${body}\n`, "utf8");
+            created++;
+        });
+    }
+    // Replace one binary wholesale
+    const bins = (await listRegularFiles(sandbox)).filter((f) => f.endsWith(".bin"));
+    if (bins[0]) {
+        await mutate(bins[0], async () => {
+            await writeFile(bins[0], createHash("sha256").update(`${CHAOS_SEED}:binreplace`).digest());
+            // count as modified if not already
+            if (!toModify.includes(bins[0]))
+                modified++;
+        });
+    }
+    // Remove an empty-ish directory tree leaf if present
+    const emptyDir = path.join(sandbox, "empty-dir");
+    if (isPathInside(sandbox, emptyDir)) {
+        try {
+            await rm(emptyDir, { recursive: true, force: true });
+            deleted++; // directory deletion
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    // Permission changes on a few remaining files
+    const forChmod = hashPick(`${CHAOS_SEED}:chmod`, await listRegularFiles(sandbox), 5);
+    for (const abs of forChmod) {
+        await mutate(abs, async () => {
+            await chmod(abs, 0o600);
+            permissionChanges++;
+            // Mode change alone is a modification if content unchanged —
+            // diff will pick it up; don't double-count content mods.
+            if (!toModify.includes(abs) && abs !== bins[0]) {
+                modified++;
+            }
+        });
+    }
+    // Create deeply nested chaos path
+    const deep = path.join(sandbox, "chaos-created/deep/a/b/c/d/e/wreckage.txt");
+    await mutate(deep, async () => {
+        await mkdir(path.dirname(deep), { recursive: true });
+        await writeFile(deep, "deep wreckage\n", "utf8");
+        created++;
+    });
+    const totalActions = modified + deleted + created + renamed + moved + permissionChanges;
+    return {
+        modified,
+        deleted,
+        created,
+        renamed,
+        moved,
+        permissionChanges,
+        totalActions,
+        timingsMs: timer.elapsedMs(),
+    };
+}
+/** Used by failure tests — attempt destroy on an arbitrary path (must refuse). */
+export async function destroyArbitraryPath(target) {
+    // Re-use the same validation gate: only getSandboxPath is approved.
+    const projectRoot = getProjectRoot();
+    const approved = getSandboxPath(projectRoot);
+    if (path.resolve(target) !== path.resolve(approved)) {
+        throw new PathSafetyError(`REFUSED: chaos will not run on ${path.resolve(target)}`);
+    }
+    // If somehow equal, still go through full banner.
+    await destroySandbox(projectRoot);
+    throw new Error("unreachable");
+}
+export async function assertSandboxHasContent(projectRoot = getProjectRoot()) {
+    const sandbox = getSandboxPath(projectRoot);
+    const entries = await readdir(sandbox).catch(() => []);
+    if (entries.length === 0) {
+        throw new Error("Sandbox is empty — run sandbox:create first");
+    }
+}
+//# sourceMappingURL=destroy.js.map

package/dist/src/destroy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy.js","sourceRoot":"","sources":["../../src/destroy.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,QAAQ,EACR,SAAS,EACT,EAAE,EACF,KAAK,EACL,MAAM,EACN,KAAK,EACL,OAAO,EACP,KAAK,GACN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,YAAY,EACZ,eAAe,EACf,sBAAsB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC;;;GAGG;AAEH,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAExC,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAe,EAAE,KAAa;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI;QACJ,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACpE,CAAC,CAAC,CAAC;IACJ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC;AAaD,KAAK,UAAU,gBAAgB,CAAC,OAAe;IAC7C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,EAAE,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAW,GAAG,cAAc,EAAE;IAE9B,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,EAAE,CAAC;QAC3C,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAE5C,sBAAsB;IACtB,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,sBAAsB,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;IAC1E,CAAC;IAED,kDAAkD;IAClD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,MAAM,MAAM,GAAG,KAAK,EAAE,GAAW,EAAE,EAAuB,EAAE,EAAE;QAC5D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,eAAe,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,EAAE,CAAC;IACb,CAAC,CAAC;IAEF,mBAAmB;IACnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,UAAU,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC;iBAC/B,MAAM,CAAC,GAAG,UAAU,QAAQ,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;iBAC5D,MAAM,CAAC,KAAK,CAAC;iBACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChB,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9D,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,CACb,GAAG,EACH,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI;oBACJ,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,OAAO,EAAE,MAAM,CAAC;iBAChD,CAAC,CACH,CAAC;YACJ,CAAC;YACD,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,IAAI,SAAS,GAAG,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC7B,CAAC;IAEF,mBAAmB;IACnB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,UAAU,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3D,kDAAkD;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,UAAU,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3D,mCAAmC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,UAAU,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,eAAe,CAAC,qBAAqB,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxB,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,sBAAsB,CAChC,wBAAwB,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAC3E,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;iBAC9B,MAAM,CAAC,GAAG,UAAU,WAAW,CAAC,EAAE,CAAC;iBACnC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjB,MAAM,SAAS,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;YAC9D,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1D,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACnB,CAAC;IACF,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACZ,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,SAAS,CACb,IAAI,CAAC,CAAC,CAAE,EACR,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,UAAU,aAAa,CAAC,CAAC,MAAM,EAAE,CACjE,CAAC;YACF,mCAAmC;YACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;gBAAE,QAAQ,EAAE,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,CAAC,CAAC,qBAAqB;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CACvB,GAAG,UAAU,QAAQ,EACrB,MAAM,gBAAgB,CAAC,OAAO,CAAC,EAC/B,CAAC,CACF,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxB,iBAAiB,EAAE,CAAC;YACpB,6DAA6D;YAC7D,yDAAyD;YACzD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,OAAO,EACP,2CAA2C,CAC5C,CAAC;IACF,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC5B,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAChB,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAErE,OAAO;QACL,QAAQ;QACR,OAAO;QACP,OAAO;QACP,OAAO;QACP,KAAK;QACL,iBAAiB;QACjB,YAAY;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc;IACvD,oEAAoE;IACpE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACvB,kCAAkC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CACzD,CAAC;IACJ,CAAC;IACD,kDAAkD;IAClD,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/src/diff.d.ts

@@ -0,0 +1,13 @@
+import type { Change, Manifest, Transaction } from "./types.js";
+/**
+ * Diff checkpoint manifest vs current manifest.
+ * Rename/move inference: unmatched DELETED + CREATED with identical content hash.
+ * - Same basename, different dirname → MOVED
+ * - Different basename → RENAMED
+ * Uncertain pairs remain DELETE + CREATE (never fake certainty beyond hash match).
+ */
+export declare function diffManifests(before: Manifest, after: Manifest): Change[];
+export declare function createTransaction(checkpointId: string, targetPath: string, changes: Change[], diffMs: number): Transaction;
+export declare function saveTransaction(tx: Transaction, projectRoot?: string): Promise<string>;
+export declare function recordDiffTransaction(before: Manifest, after: Manifest, checkpointId: string, targetPath: string, projectRoot?: string): Promise<Transaction>;
+export declare function printTransactionSummary(tx: Transaction): void;

package/dist/src/diff.js

@@ -0,0 +1,251 @@
+import { Timer } from "./timing.js";
+import { randomBytes } from "node:crypto";
+import { mkdir, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { getTransactionsDir } from "./paths.js";
+function emptySummary() {
+    return {
+        total: 0,
+        modified: 0,
+        created: 0,
+        deleted: 0,
+        renamed: 0,
+        moved: 0,
+        reversible: 0,
+        compensable: 0,
+        irreversible: 0,
+    };
+}
+function summarize(changes) {
+    const s = emptySummary();
+    s.total = changes.length;
+    for (const c of changes) {
+        switch (c.type) {
+            case "MODIFIED":
+                s.modified++;
+                break;
+            case "CREATED":
+                s.created++;
+                break;
+            case "DELETED":
+                s.deleted++;
+                break;
+            case "RENAMED":
+                s.renamed++;
+                break;
+            case "MOVED":
+                s.moved++;
+                break;
+        }
+        switch (c.reversibility) {
+            case "REVERSIBLE":
+                s.reversible++;
+                break;
+            case "COMPENSABLE":
+                s.compensable++;
+                break;
+            case "IRREVERSIBLE":
+                s.irreversible++;
+                break;
+        }
+    }
+    return s;
+}
+function sameContent(a, b) {
+    return (a.kind === b.kind &&
+        a.hash !== null &&
+        b.hash !== null &&
+        a.hash === b.hash &&
+        a.kind !== "directory");
+}
+function dirnamePosix(p) {
+    const i = p.lastIndexOf("/");
+    return i === -1 ? "" : p.slice(0, i);
+}
+function basenamePosix(p) {
+    const i = p.lastIndexOf("/");
+    return i === -1 ? p : p.slice(i + 1);
+}
+/**
+ * Diff checkpoint manifest vs current manifest.
+ * Rename/move inference: unmatched DELETED + CREATED with identical content hash.
+ * - Same basename, different dirname → MOVED
+ * - Different basename → RENAMED
+ * Uncertain pairs remain DELETE + CREATE (never fake certainty beyond hash match).
+ */
+export function diffManifests(before, after) {
+    const beforeMap = new Map(before.entries.map((e) => [e.path, e]));
+    const afterMap = new Map(after.entries.map((e) => [e.path, e]));
+    const changes = [];
+    const deleted = [];
+    const created = [];
+    for (const [p, b] of beforeMap) {
+        const a = afterMap.get(p);
+        if (!a) {
+            deleted.push(b);
+            continue;
+        }
+        // Directory presence alone isn't a content change; mode-only changes count as MODIFIED.
+        if (b.kind === "directory" && a.kind === "directory") {
+            if (b.mode !== a.mode) {
+                changes.push({
+                    type: "MODIFIED",
+                    pathBefore: p,
+                    pathAfter: p,
+                    hashBefore: null,
+                    hashAfter: null,
+                    sizeBefore: 0,
+                    sizeAfter: 0,
+                    reversibility: "REVERSIBLE",
+                });
+            }
+            continue;
+        }
+        if (b.kind !== a.kind ||
+            b.hash !== a.hash ||
+            b.size !== a.size ||
+            b.mode !== a.mode ||
+            b.linkTarget !== a.linkTarget) {
+            changes.push({
+                type: "MODIFIED",
+                pathBefore: p,
+                pathAfter: p,
+                hashBefore: b.hash,
+                hashAfter: a.hash,
+                sizeBefore: b.size,
+                sizeAfter: a.size,
+                reversibility: "REVERSIBLE",
+            });
+        }
+    }
+    for (const [p, a] of afterMap) {
+        if (!beforeMap.has(p)) {
+            created.push(a);
+        }
+    }
+    // Infer renames/moves by content hash (files + symlinks only).
+    const unmatchedDeleted = [...deleted];
+    const unmatchedCreated = [...created];
+    const usedCreated = new Set();
+    const usedDeleted = new Set();
+    for (let di = 0; di < unmatchedDeleted.length; di++) {
+        const d = unmatchedDeleted[di];
+        if (d.kind === "directory" || !d.hash)
+            continue;
+        let bestCi = -1;
+        for (let ci = 0; ci < unmatchedCreated.length; ci++) {
+            if (usedCreated.has(ci))
+                continue;
+            const c = unmatchedCreated[ci];
+            if (c.kind === "directory" || !c.hash)
+                continue;
+            if (sameContent(d, c)) {
+                bestCi = ci;
+                break; // first hash match is enough; honest inference
+            }
+        }
+        if (bestCi < 0)
+            continue;
+        usedDeleted.add(di);
+        usedCreated.add(bestCi);
+        const c = unmatchedCreated[bestCi];
+        const sameName = basenamePosix(d.path) === basenamePosix(c.path);
+        const sameDir = dirnamePosix(d.path) === dirnamePosix(c.path);
+        const type = sameName && !sameDir ? "MOVED" : !sameName ? "RENAMED" : "MOVED";
+        changes.push({
+            type,
+            pathBefore: d.path,
+            pathAfter: c.path,
+            hashBefore: d.hash,
+            hashAfter: c.hash,
+            sizeBefore: d.size,
+            sizeAfter: c.size,
+            reversibility: "REVERSIBLE",
+        });
+    }
+    for (let di = 0; di < unmatchedDeleted.length; di++) {
+        if (usedDeleted.has(di))
+            continue;
+        const d = unmatchedDeleted[di];
+        changes.push({
+            type: "DELETED",
+            pathBefore: d.path,
+            pathAfter: null,
+            hashBefore: d.hash,
+            hashAfter: null,
+            sizeBefore: d.size,
+            sizeAfter: null,
+            reversibility: "REVERSIBLE",
+        });
+    }
+    for (let ci = 0; ci < unmatchedCreated.length; ci++) {
+        if (usedCreated.has(ci))
+            continue;
+        const c = unmatchedCreated[ci];
+        changes.push({
+            type: "CREATED",
+            pathBefore: null,
+            pathAfter: c.path,
+            hashBefore: null,
+            hashAfter: c.hash,
+            sizeBefore: null,
+            sizeAfter: c.size,
+            reversibility: "REVERSIBLE",
+        });
+    }
+    // Stable order for readability
+    changes.sort((a, b) => {
+        const pa = a.pathAfter ?? a.pathBefore ?? "";
+        const pb = b.pathAfter ?? b.pathBefore ?? "";
+        return pa.localeCompare(pb) || a.type.localeCompare(b.type);
+    });
+    return changes;
+}
+export function createTransaction(checkpointId, targetPath, changes, diffMs) {
+    return {
+        id: `tx-${new Date().toISOString().replace(/[:.]/g, "-")}-${randomBytes(3).toString("hex")}`,
+        startedAt: new Date().toISOString(),
+        completedAt: new Date().toISOString(),
+        checkpointId,
+        targetPath,
+        changes,
+        status: "recorded",
+        summary: summarize(changes),
+        timingsMs: { diff: diffMs },
+    };
+}
+export async function saveTransaction(tx, projectRoot) {
+    const dir = getTransactionsDir(projectRoot);
+    await mkdir(dir, { recursive: true });
+    const filePath = path.join(dir, `${tx.id}.json`);
+    const tmp = `${filePath}.tmp`;
+    await writeFile(tmp, JSON.stringify(tx, null, 2) + "\n", "utf8");
+    const { rename } = await import("node:fs/promises");
+    await rename(tmp, filePath);
+    await writeFile(path.join(dir, "latest.json"), JSON.stringify({ id: tx.id }, null, 2) + "\n", "utf8");
+    return filePath;
+}
+export async function recordDiffTransaction(before, after, checkpointId, targetPath, projectRoot) {
+    const timer = new Timer();
+    const changes = diffManifests(before, after);
+    const tx = createTransaction(checkpointId, targetPath, changes, timer.elapsedMs());
+    await saveTransaction(tx, projectRoot);
+    return tx;
+}
+export function printTransactionSummary(tx) {
+    const s = tx.summary;
+    console.log("REWIND");
+    console.log("");
+    console.log("Transaction detected");
+    console.log("");
+    console.log(`${s.total} filesystem changes`);
+    console.log("");
+    console.log(`Modified       ${s.modified}`);
+    console.log(`Created        ${s.created}`);
+    console.log(`Deleted        ${s.deleted}`);
+    console.log(`Renamed/moved  ${s.renamed + s.moved}`);
+    console.log("");
+    console.log(`Reversible     ${s.reversible}`);
+    console.log(`Irreversible   ${s.irreversible}`);
+}
+//# sourceMappingURL=diff.js.map

package/dist/src/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/diff.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,SAAS,YAAY;IACnB,OAAO;QACL,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,CAAC;QACR,UAAU,EAAE,CAAC;QACb,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAiB;IAClC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;IACzB,CAAC,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,UAAU;gBACb,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACb,MAAM;YACR,KAAK,SAAS;gBACZ,CAAC,CAAC,OAAO,EAAE,CAAC;gBACZ,MAAM;YACR,KAAK,SAAS;gBACZ,CAAC,CAAC,OAAO,EAAE,CAAC;gBACZ,MAAM;YACR,KAAK,SAAS;gBACZ,CAAC,CAAC,OAAO,EAAE,CAAC;gBACZ,MAAM;YACR,KAAK,OAAO;gBACV,CAAC,CAAC,KAAK,EAAE,CAAC;gBACV,MAAM;QACV,CAAC;QACD,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;YACxB,KAAK,YAAY;gBACf,CAAC,CAAC,UAAU,EAAE,CAAC;gBACf,MAAM;YACR,KAAK,aAAa;gBAChB,CAAC,CAAC,WAAW,EAAE,CAAC;gBAChB,MAAM;YACR,KAAK,cAAc;gBACjB,CAAC,CAAC,YAAY,EAAE,CAAC;gBACjB,MAAM;QACV,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,CAAgB,EAAE,CAAgB;IACrD,OAAO,CACL,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QACjB,CAAC,CAAC,IAAI,KAAK,IAAI;QACf,CAAC,CAAC,IAAI,KAAK,IAAI;QACf,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QACjB,CAAC,CAAC,IAAI,KAAK,WAAW,CACvB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAgB,EAChB,KAAe;IAEf,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,wFAAwF;QACxF,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,UAAU;oBAChB,UAAU,EAAE,CAAC;oBACb,SAAS,EAAE,CAAC;oBACZ,UAAU,EAAE,IAAI;oBAChB,SAAS,EAAE,IAAI;oBACf,UAAU,EAAE,CAAC;oBACb,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QACD,IACE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YACjB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YACjB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YACjB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YACjB,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAC7B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,CAAC,CAAC,IAAI;gBAClB,SAAS,EAAE,CAAC,CAAC,IAAI;gBACjB,UAAU,EAAE,CAAC,CAAC,IAAI;gBAClB,SAAS,EAAE,CAAC,CAAC,IAAI;gBACjB,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,gBAAgB,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IACtC,MAAM,gBAAgB,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAE,CAAC;QAChC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,SAAS;QAEhD,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;QAChB,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;YACpD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAClC,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAE,CAAC;YAChC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,IAAI;gBAAE,SAAS;YAChD,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACtB,MAAM,GAAG,EAAE,CAAC;gBACZ,MAAM,CAAC,+CAA+C;YACxD,CAAC;QACH,CAAC;QACD,IAAI,MAAM,GAAG,CAAC;YAAE,SAAS;QAEzB,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpB,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,IAAI,GACR,QAAQ,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAEnE,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,UAAU,EAAE,CAAC,CAAC,IAAI;YAClB,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,UAAU,EAAE,CAAC,CAAC,IAAI;YAClB,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,UAAU,EAAE,CAAC,CAAC,IAAI;YAClB,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QACpD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAClC,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,CAAC,CAAC,IAAI;YAClB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,CAAC,CAAC,IAAI;YAClB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,CAAC,CAAC,IAAI;YAClB,SAAS,EAAE,IAAI;YACf,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QACpD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAClC,MAAM,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,CAAC,CAAC,IAAI;YACjB,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;QAC7C,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;QAC7C,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,UAAkB,EAClB,OAAiB,EACjB,MAAc;IAEd,OAAO;QACL,EAAE,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;QAC5F,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,YAAY;QACZ,UAAU;QACV,OAAO;QACP,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;QAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAe,EACf,WAAoB;IAEpB,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,QAAQ,MAAM,CAAC;IAC9B,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpD,MAAM,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5B,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC7C,MAAM,CACP,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAgB,EAChB,KAAe,EACf,YAAoB,EACpB,UAAkB,EAClB,WAAoB;IAEpB,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,iBAAiB,CAC1B,YAAY,EACZ,UAAU,EACV,OAAO,EACP,KAAK,CAAC,SAAS,EAAE,CAClB,CAAC;IACF,MAAM,eAAe,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACvC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAe;IACrD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,qBAAqB,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/enforcement/detect.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Detect unexplained mutations in the enforced sandbox.
+ * Does NOT attribute actor identity — only absence of mediated action.
+ */
+export declare function classifyExternalMutation(relPath: string, projectRoot?: string): Promise<{
+    trusted: boolean;
+    policyEventId: string | null;
+    message: string;
+}>;
+export declare function recordBlockedWrite(relPath: string, mechanism: string, evidence: string, projectRoot?: string): Promise<import("./types.js").PolicyEvent>;
+export declare function ensureUntrustedIfNeeded(relPath: string, projectRoot?: string): Promise<string | null>;
+/** Stable content fingerprint helper for tests. */
+export declare function contentFingerprint(data: string | Buffer): string;

package/dist/src/enforcement/detect.js

@@ -0,0 +1,75 @@
+import { createHash } from "node:crypto";
+import { readFile, lstat } from "node:fs/promises";
+import { ENFORCED_SANDBOX_DIR_NAME, getEnforcedSandboxPath, getProjectRoot, } from "../paths.js";
+import { listActions } from "../action/store.js";
+import { recordPolicyEvent, formatPolicyViolation } from "./policy.js";
+import { markUntrusted, getPathTrust } from "./trust.js";
+import { sha256 } from "../hash.js";
+/**
+ * Detect unexplained mutations in the enforced sandbox.
+ * Does NOT attribute actor identity — only absence of mediated action.
+ */
+export async function classifyExternalMutation(relPath, projectRoot = getProjectRoot()) {
+    const actions = await listActions(projectRoot);
+    const mediated = actions.filter((a) => (a.sandbox ?? "sandbox-test-project") === ENFORCED_SANDBOX_DIR_NAME &&
+        a.status === "COMPLETED" &&
+        (a.target === relPath || a.targetSecondary === relPath));
+    // If any completed mediated action's after-hash still matches live content, authoritative
+    const abs = `${getEnforcedSandboxPath(projectRoot)}/${relPath}`;
+    let liveHash = null;
+    try {
+        const st = await lstat(abs);
+        if (st.isFile()) {
+            liveHash = sha256(await readFile(abs));
+        }
+    }
+    catch {
+        liveHash = null;
+    }
+    for (const a of mediated.slice().reverse()) {
+        const after = a.target === relPath
+            ? a.after.hash
+            : a.afterSecondary?.hash ?? null;
+        if (liveHash && after && liveHash === after) {
+            return {
+                trusted: true,
+                policyEventId: null,
+                message: `Matches mediated action ${a.id}`,
+            };
+        }
+    }
+    const event = await recordPolicyEvent({
+        type: "UNKNOWN_MUTATION",
+        path: relPath,
+        mechanism: "bypass-detection",
+        evidence: `No COMPLETED mediated action explains current state of ${relPath} (liveHash=${liveHash ?? "ABSENT"})`,
+        status: "UNTRUSTED",
+    }, projectRoot);
+    await markUntrusted(relPath, event.id, "External unexplained mutation", projectRoot);
+    return {
+        trusted: false,
+        policyEventId: event.id,
+        message: formatPolicyViolation(event),
+    };
+}
+export async function recordBlockedWrite(relPath, mechanism, evidence, projectRoot = getProjectRoot()) {
+    return recordPolicyEvent({
+        type: "BLOCKED_WRITE",
+        path: relPath,
+        mechanism,
+        evidence,
+        status: "BLOCKED",
+    }, projectRoot);
+}
+export async function ensureUntrustedIfNeeded(relPath, projectRoot = getProjectRoot()) {
+    const existing = await getPathTrust(relPath, projectRoot);
+    if (existing?.state === "UNTRUSTED")
+        return existing.lastPolicyEventId;
+    const result = await classifyExternalMutation(relPath, projectRoot);
+    return result.policyEventId;
+}
+/** Stable content fingerprint helper for tests. */
+export function contentFingerprint(data) {
+    return createHash("sha256").update(data).digest("hex");
+}
+//# sourceMappingURL=detect.js.map