@rewind-ai/cli 0.6.2

package/dist/src/enforcement/setup.js

@@ -0,0 +1,168 @@
+import path from "node:path";
+import { mkdir, writeFile, readFile, rm, chmod } from "node:fs/promises";
+import { spawn } from "node:child_process";
+import { ENFORCED_SANDBOX_DIR_NAME, PathSafetyError, getEnforcementDir, getEnforcedSandboxPath, getProjectRoot, isPathInside, } from "../paths.js";
+import { SANDBOX_SEED } from "../sandbox.js";
+import { planSandboxForRoot } from "./sandbox-clone.js";
+import { lockEnforcedReadonly, unlockEnforcedWritable } from "./readonly.js";
+import { recordPolicyEvent } from "./policy.js";
+const STATE_FILE = "state.json";
+async function writeJsonAtomic(file, data) {
+    await mkdir(path.dirname(file), { recursive: true });
+    const tmp = `${file}.tmp-${process.pid}`;
+    await writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
+    const { rename } = await import("node:fs/promises");
+    await rename(tmp, file);
+}
+export function enforcementStatePath(projectRoot = getProjectRoot()) {
+    return path.join(getEnforcementDir(projectRoot), STATE_FILE);
+}
+export async function loadEnforcementState(projectRoot = getProjectRoot()) {
+    try {
+        const raw = await readFile(enforcementStatePath(projectRoot), "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export async function saveEnforcementState(state, projectRoot = getProjectRoot()) {
+    await writeJsonAtomic(enforcementStatePath(projectRoot), state);
+}
+/**
+ * Create sandbox-enforced-project from the same deterministic plan as V0,
+ * without touching sandbox-test-project.
+ */
+export async function createEnforcedSandbox(projectRoot = getProjectRoot()) {
+    const root = getEnforcedSandboxPath(projectRoot);
+    if (path.basename(root) !== ENFORCED_SANDBOX_DIR_NAME) {
+        throw new PathSafetyError("Refusing unexpected enforced sandbox name");
+    }
+    if (path.dirname(root) !== path.resolve(projectRoot)) {
+        throw new PathSafetyError("Enforced sandbox not under project root");
+    }
+    const testSandbox = path.join(projectRoot, "sandbox-test-project");
+    if (root === testSandbox) {
+        throw new PathSafetyError("Refusing to recreate test sandbox as enforced");
+    }
+    await chmod(root, 0o755).catch(() => undefined);
+    await unlockEnforcedWritable(projectRoot).catch(() => undefined);
+    const result = await planSandboxForRoot(root, SANDBOX_SEED);
+    return { root, ...result };
+}
+export async function writeSeatbeltProfile(projectRoot = getProjectRoot()) {
+    const dir = getEnforcementDir(projectRoot);
+    await mkdir(dir, { recursive: true });
+    const enforced = getEnforcedSandboxPath(projectRoot);
+    const profilePath = path.join(dir, "agent-deny-enforced-write.sb");
+    const body = `(version 1)
+(allow default)
+(deny file-write* (subpath "${enforced}"))
+`;
+    await writeFile(profilePath, body, "utf8");
+    return profilePath;
+}
+/**
+ * Run a command under sandbox-exec with writes to enforced sandbox denied.
+ */
+export function runUnderWriteDenySeatbelt(command, args, profilePath) {
+    return new Promise((resolve) => {
+        const child = spawn("sandbox-exec", ["-f", profilePath, command, ...args], {
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout.on("data", (d) => {
+            stdout += d.toString("utf8");
+        });
+        child.stderr.on("data", (d) => {
+            stderr += d.toString("utf8");
+        });
+        child.on("close", (code) => {
+            resolve({ code: code ?? 1, stdout, stderr });
+        });
+    });
+}
+export async function enableEnforcement(projectRoot = getProjectRoot(), options = {}) {
+    const mechanism = options.mechanism ?? "combined";
+    await createEnforcedSandbox(projectRoot);
+    const profilePath = mechanism === "sandbox-exec" || mechanism === "combined"
+        ? await writeSeatbeltProfile(projectRoot)
+        : null;
+    if (mechanism === "fs-readonly" || mechanism === "combined") {
+        await lockEnforcedReadonly(projectRoot);
+    }
+    const hooksInstalled = options.installHooks !== false;
+    const now = new Date().toISOString();
+    const state = {
+        version: 3,
+        enabled: true,
+        mechanism,
+        sandboxName: ENFORCED_SANDBOX_DIR_NAME,
+        locked: mechanism === "fs-readonly" || mechanism === "combined",
+        createdAt: now,
+        updatedAt: now,
+        hooksInstalled,
+        seatbeltProfilePath: profilePath,
+        notes: [
+            "fs-readonly: same UID; broker unlocks for mediated writes",
+            "sandbox-exec: restricts child processes only; Cursor itself is not wrapped unless launched under it",
+            "cursor-hooks: vendor tool-loop enforcement; not OS filesystem enforcement",
+            "Human editor writes are NOT blocked by Cursor agent hooks",
+        ],
+    };
+    await saveEnforcementState(state, projectRoot);
+    await recordPolicyEvent({
+        type: "ENFORCEMENT_ENABLED",
+        path: ENFORCED_SANDBOX_DIR_NAME,
+        mechanism,
+        evidence: `Enforcement enabled mechanism=${mechanism} locked=${state.locked}`,
+        status: "RECORDED",
+    }, projectRoot);
+    return state;
+}
+export async function disableEnforcement(projectRoot = getProjectRoot(), options = {}) {
+    const state = await loadEnforcementState(projectRoot);
+    try {
+        await unlockEnforcedWritable(projectRoot);
+    }
+    catch {
+        /* may not exist */
+    }
+    if (options.removeTree) {
+        const root = getEnforcedSandboxPath(projectRoot);
+        if (path.basename(root) === ENFORCED_SANDBOX_DIR_NAME &&
+            isPathInside(path.resolve(projectRoot), root)) {
+            await chmod(root, 0o755).catch(() => undefined);
+            await unlockEnforcedWritable(projectRoot).catch(() => undefined);
+            await rm(root, { recursive: true, force: true });
+        }
+    }
+    const now = new Date().toISOString();
+    const next = {
+        version: 3,
+        enabled: false,
+        mechanism: "none",
+        sandboxName: ENFORCED_SANDBOX_DIR_NAME,
+        locked: false,
+        createdAt: state?.createdAt ?? now,
+        updatedAt: now,
+        hooksInstalled: false,
+        seatbeltProfilePath: null,
+        notes: ["Enforcement disabled"],
+    };
+    await saveEnforcementState(next, projectRoot);
+    await recordPolicyEvent({
+        type: "ENFORCEMENT_DISABLED",
+        path: ENFORCED_SANDBOX_DIR_NAME,
+        mechanism: state?.mechanism ?? "none",
+        evidence: "Enforcement disabled; tree unlocked",
+        status: "RECORDED",
+    }, projectRoot);
+}
+/** True when mediated writes to enforced sandbox must use broker unlock. */
+export async function isEnforcedLocked(projectRoot = getProjectRoot()) {
+    const state = await loadEnforcementState(projectRoot);
+    return Boolean(state?.enabled && state.locked);
+}
+//# sourceMappingURL=setup.js.map

package/dist/src/enforcement/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../src/enforcement/setup.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACtB,cAAc,EACd,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa;IACxD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACpD,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAW,GAAG,cAAc,EAAE;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAW,GAAG,cAAc,EAAE;IAE9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAuB,EACvB,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,eAAe,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAAW,GAAG,cAAc,EAAE;IAO9B,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,yBAAyB,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IACnE,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC5D,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG;;8BAEe,QAAQ;CACrC,CAAC;IACA,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,IAAc,EACd,WAAmB;IAEnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE;YACzE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAW,GAAG,cAAc,EAAE,EAC9B,UAAoC,EAAE;IAEtC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,WAAW,GACf,SAAS,KAAK,cAAc,IAAI,SAAS,KAAK,UAAU;QACtD,CAAC,CAAC,MAAM,oBAAoB,CAAC,WAAW,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC5D,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAqB;QAC9B,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,IAAI;QACb,SAAS;QACT,WAAW,EAAE,yBAAyB;QACtC,MAAM,EAAE,SAAS,KAAK,aAAa,IAAI,SAAS,KAAK,UAAU;QAC/D,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,cAAc;QACd,mBAAmB,EAAE,WAAW;QAChC,KAAK,EAAE;YACL,2DAA2D;YAC3D,qGAAqG;YACrG,2EAA2E;YAC3E,2DAA2D;SAC5D;KACF,CAAC;IACF,MAAM,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC/C,MAAM,iBAAiB,CACrB;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,yBAAyB;QAC/B,SAAS;QACT,QAAQ,EAAE,iCAAiC,SAAS,WAAW,KAAK,CAAC,MAAM,EAAE;QAC7E,MAAM,EAAE,UAAU;KACnB,EACD,WAAW,CACZ,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAW,GAAG,cAAc,EAAE,EAC9B,UAAoC,EAAE;IAEtC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACjD,IACE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,yBAAyB;YACjD,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,EAC7C,CAAC;YACD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAqB;QAC7B,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,yBAAyB;QACtC,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG;QAClC,SAAS,EAAE,GAAG;QACd,cAAc,EAAE,KAAK;QACrB,mBAAmB,EAAE,IAAI;QACzB,KAAK,EAAE,CAAC,sBAAsB,CAAC;KAChC,CAAC;IACF,MAAM,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9C,MAAM,iBAAiB,CACrB;QACE,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,MAAM;QACrC,QAAQ,EAAE,qCAAqC;QAC/C,MAAM,EAAE,UAAU;KACnB,EACD,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACtD,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/dist/src/enforcement/trust.d.ts

@@ -0,0 +1,10 @@
+import type { PathTrustRecord, PathTrustState } from "./types.js";
+export declare function setPathTrust(relPath: string, state: PathTrustState, meta?: {
+    lastMediatedActionId?: string | null;
+    lastPolicyEventId?: string | null;
+    note?: string | null;
+}, projectRoot?: string): Promise<PathTrustRecord>;
+export declare function markAuthoritative(relPath: string, actionId: string, projectRoot?: string): Promise<PathTrustRecord>;
+export declare function markUntrusted(relPath: string, policyEventId: string, note: string, projectRoot?: string): Promise<PathTrustRecord>;
+export declare function getPathTrust(relPath: string, projectRoot?: string): Promise<PathTrustRecord | null>;
+export declare function listTrustRecords(projectRoot?: string): Promise<PathTrustRecord[]>;

package/dist/src/enforcement/trust.js

@@ -0,0 +1,71 @@
+import path from "node:path";
+import { mkdir, writeFile, readFile, readdir, rename } from "node:fs/promises";
+import { getProjectRoot, getTrustDir } from "../paths.js";
+function trustKey(relPath) {
+    return relPath.replace(/[^A-Za-z0-9._-]+/g, "__").slice(0, 180);
+}
+async function writeJsonAtomic(file, data) {
+    await mkdir(path.dirname(file), { recursive: true });
+    const tmp = `${file}.tmp-${process.pid}`;
+    await writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
+    await rename(tmp, file);
+}
+export async function setPathTrust(relPath, state, meta = {}, projectRoot = getProjectRoot()) {
+    const record = {
+        path: relPath,
+        state,
+        updatedAt: new Date().toISOString(),
+        lastMediatedActionId: meta.lastMediatedActionId ?? null,
+        lastPolicyEventId: meta.lastPolicyEventId ?? null,
+        note: meta.note ?? null,
+    };
+    const dir = getTrustDir(projectRoot);
+    await mkdir(dir, { recursive: true });
+    await writeJsonAtomic(path.join(dir, `${trustKey(relPath)}.json`), record);
+    return record;
+}
+export async function markAuthoritative(relPath, actionId, projectRoot = getProjectRoot()) {
+    return setPathTrust(relPath, "AUTHORITATIVE", {
+        lastMediatedActionId: actionId,
+        note: "Updated by mediated REWIND action",
+    }, projectRoot);
+}
+export async function markUntrusted(relPath, policyEventId, note, projectRoot = getProjectRoot()) {
+    return setPathTrust(relPath, "UNTRUSTED", {
+        lastPolicyEventId: policyEventId,
+        note,
+    }, projectRoot);
+}
+export async function getPathTrust(relPath, projectRoot = getProjectRoot()) {
+    try {
+        const raw = await readFile(path.join(getTrustDir(projectRoot), `${trustKey(relPath)}.json`), "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export async function listTrustRecords(projectRoot = getProjectRoot()) {
+    const dir = getTrustDir(projectRoot);
+    let names;
+    try {
+        names = await readdir(dir);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const n of names) {
+        if (!n.endsWith(".json"))
+            continue;
+        try {
+            const raw = await readFile(path.join(dir, n), "utf8");
+            out.push(JSON.parse(raw));
+        }
+        catch {
+            /* skip */
+        }
+    }
+    return out.sort((a, b) => a.path.localeCompare(b.path));
+}
+//# sourceMappingURL=trust.js.map

package/dist/src/enforcement/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../../src/enforcement/trust.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1D,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa;IACxD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,KAAqB,EACrB,OAII,EAAE,EACN,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,MAAM,GAAoB;QAC9B,IAAI,EAAE,OAAO;QACb,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI;QACvD,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,IAAI;QACjD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;KACxB,CAAC;IACF,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,QAAgB,EAChB,WAAW,GAAG,cAAc,EAAE;IAE9B,OAAO,YAAY,CACjB,OAAO,EACP,eAAe,EACf;QACE,oBAAoB,EAAE,QAAQ;QAC9B,IAAI,EAAE,mCAAmC;KAC1C,EACD,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAe,EACf,aAAqB,EACrB,IAAY,EACZ,WAAW,GAAG,cAAc,EAAE;IAE9B,OAAO,YAAY,CACjB,OAAO,EACP,WAAW,EACX;QACE,iBAAiB,EAAE,aAAa;QAChC,IAAI;KACL,EACD,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,WAAW,GAAG,cAAc,EAAE;IAE9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAChE,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/enforcement/types.d.ts

@@ -0,0 +1,40 @@
+/** V3 enforcement / policy types. */
+export type PolicyEventType = "BYPASS_ATTEMPT" | "BLOCKED_WRITE" | "UNKNOWN_MUTATION" | "ENFORCEMENT_ENABLED" | "ENFORCEMENT_DISABLED" | "WRAPPER_DENIED";
+export type PolicyEventStatus = "RECORDED" | "BLOCKED" | "DETECTED" | "UNTRUSTED";
+export interface PolicyEvent {
+    id: string;
+    version: 3;
+    time: string;
+    type: PolicyEventType;
+    path: string | null;
+    mechanism: string;
+    evidence: string;
+    status: PolicyEventStatus;
+}
+export type PathTrustState = "AUTHORITATIVE" | "UNTRUSTED";
+export interface PathTrustRecord {
+    path: string;
+    state: PathTrustState;
+    updatedAt: string;
+    lastMediatedActionId: string | null;
+    lastPolicyEventId: string | null;
+    note: string | null;
+}
+export type EnforcementMechanism = "none" | "fs-readonly" | "sandbox-exec" | "cursor-hooks" | "combined";
+export interface EnforcementState {
+    version: 3;
+    enabled: boolean;
+    mechanism: EnforcementMechanism;
+    sandboxName: "sandbox-enforced-project";
+    locked: boolean;
+    createdAt: string;
+    updatedAt: string;
+    hooksInstalled: boolean;
+    seatbeltProfilePath: string | null;
+    notes: string[];
+}
+export interface PerfSample {
+    name: string;
+    ms: number;
+    detail?: string;
+}

package/dist/src/enforcement/types.js

@@ -0,0 +1,3 @@
+/** V3 enforcement / policy types. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/enforcement/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/enforcement/types.ts"],"names":[],"mappings":"AAAA,qCAAqC"}

package/dist/src/entitlement/provider.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Entitlement boundary — commercial provider plugs in without Stripe in Core.
+ *
+ * INVARIANT: recovery of already-recorded transactions is never paywalled.
+ * `allowUndoExisting` is always true for any valid product configuration.
+ */
+export type EntitlementTier = "DEVELOPMENT" | "UNLICENSED" | "FREE" | "PERSONAL" | "UNKNOWN";
+export interface EntitlementSnapshot {
+    provider: string;
+    tier: EntitlementTier;
+    /** Human-readable status for CLI/API. */
+    label: string;
+    /** Whether NEW mediated mutations may proceed. */
+    allowMediatedMutations: boolean;
+    /**
+     * Always true. Existing locally recorded transactions remain undoable
+     * regardless of subscription state. NEVER set false in product code.
+     */
+    allowUndoExisting: true;
+    /** ISO timestamp when checked. */
+    checkedAt: string;
+    notes: string[];
+    plan?: string;
+    offline?: boolean;
+    inGrace?: boolean;
+    expiresAt?: string;
+    graceUntil?: string;
+}
+export interface EntitlementProvider {
+    readonly id: string;
+    check(): Promise<EntitlementSnapshot>;
+}
+/**
+ * Local development provider — never locks the developer out.
+ */
+export declare class DevelopmentEntitlementProvider implements EntitlementProvider {
+    readonly id = "development";
+    check(): Promise<EntitlementSnapshot>;
+}
+export declare function resolveEntitlementProvider(): Promise<EntitlementProvider>;
+export declare function getEntitlementProvider(): EntitlementProvider;
+export declare function setEntitlementProvider(provider: EntitlementProvider): void;
+export declare function requireMediationEntitlement(): Promise<EntitlementSnapshot>;
+/**
+ * Undo entitlement check — ALWAYS allows if we got this far.
+ * Exists so callers explicitly assert the invariant.
+ */
+export declare function requireUndoEntitlement(): Promise<EntitlementSnapshot>;

package/dist/src/entitlement/provider.js

@@ -0,0 +1,95 @@
+/**
+ * Entitlement boundary — commercial provider plugs in without Stripe in Core.
+ *
+ * INVARIANT: recovery of already-recorded transactions is never paywalled.
+ * `allowUndoExisting` is always true for any valid product configuration.
+ */
+/**
+ * Local development provider — never locks the developer out.
+ */
+export class DevelopmentEntitlementProvider {
+    id = "development";
+    async check() {
+        return {
+            provider: this.id,
+            tier: "DEVELOPMENT",
+            label: "DEVELOPMENT / UNLICENSED (local build)",
+            allowMediatedMutations: true,
+            allowUndoExisting: true,
+            checkedAt: new Date().toISOString(),
+            notes: [
+                "Development provider — full access.",
+                "Commercial mode: REWIND_ENTITLEMENT_MODE=signed",
+                "UNDO of recorded work is never paywalled.",
+            ],
+            plan: "development",
+        };
+    }
+}
+let activeProvider = null;
+export async function resolveEntitlementProvider() {
+    if (activeProvider)
+        return activeProvider;
+    const mode = process.env.REWIND_ENTITLEMENT_MODE ?? "auto";
+    if (mode === "development") {
+        activeProvider = new DevelopmentEntitlementProvider();
+        return activeProvider;
+    }
+    if (mode === "signed" || mode === "commercial" || mode === "auto") {
+        // auto: use signed when credentials/session exist, else development for repo work
+        if (mode === "signed" || mode === "commercial") {
+            const { SignedEntitlementProvider } = await import("../commercial/entitlement/provider.js");
+            activeProvider = new SignedEntitlementProvider();
+            return activeProvider;
+        }
+        // auto
+        try {
+            const { loadSession } = await import("../commercial/auth/provider.js");
+            const session = await loadSession();
+            if (session || process.env.REWIND_FORCE_COMMERCIAL === "1") {
+                const { SignedEntitlementProvider } = await import("../commercial/entitlement/provider.js");
+                activeProvider = new SignedEntitlementProvider();
+                return activeProvider;
+            }
+        }
+        catch {
+            /* fall through */
+        }
+    }
+    activeProvider = new DevelopmentEntitlementProvider();
+    return activeProvider;
+}
+export function getEntitlementProvider() {
+    if (!activeProvider) {
+        activeProvider = new DevelopmentEntitlementProvider();
+    }
+    return activeProvider;
+}
+export function setEntitlementProvider(provider) {
+    activeProvider = provider;
+}
+export async function requireMediationEntitlement() {
+    const provider = await resolveEntitlementProvider();
+    activeProvider = provider;
+    const snap = await provider.check();
+    if (!snap.allowMediatedMutations) {
+        throw new Error(`Entitlement denies new mediated mutations (${snap.tier}): ${snap.label}. ` +
+            `Existing recorded transactions remain undoable.`);
+    }
+    return snap;
+}
+/**
+ * Undo entitlement check — ALWAYS allows if we got this far.
+ * Exists so callers explicitly assert the invariant.
+ */
+export async function requireUndoEntitlement() {
+    const provider = await resolveEntitlementProvider();
+    activeProvider = provider;
+    const snap = await provider.check();
+    if (snap.allowUndoExisting !== true) {
+        // Should be unreachable — defend in depth
+        throw new Error("INTERNAL: entitlement violated allowUndoExisting invariant");
+    }
+    return snap;
+}
+//# sourceMappingURL=provider.js.map

package/dist/src/entitlement/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/entitlement/provider.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAoCH;;GAEG;AACH,MAAM,OAAO,8BAA8B;IAChC,EAAE,GAAG,aAAa,CAAC;IAE5B,KAAK,CAAC,KAAK;QACT,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,wCAAwC;YAC/C,sBAAsB,EAAE,IAAI;YAC5B,iBAAiB,EAAE,IAAI;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE;gBACL,qCAAqC;gBACrC,iDAAiD;gBACjD,2CAA2C;aAC5C;YACD,IAAI,EAAE,aAAa;SACpB,CAAC;IACJ,CAAC;CACF;AAED,IAAI,cAAc,GAA+B,IAAI,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC;IAC3D,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,cAAc,GAAG,IAAI,8BAA8B,EAAE,CAAC;QACtD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAClE,kFAAkF;QAClF,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/C,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAChD,uCAAuC,CACxC,CAAC;YACF,cAAc,GAAG,IAAI,yBAAyB,EAAE,CAAC;YACjD,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,OAAO;QACP,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YACpC,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,EAAE,CAAC;gBAC3D,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAChD,uCAAuC,CACxC,CAAC;gBACF,cAAc,GAAG,IAAI,yBAAyB,EAAE,CAAC;gBACjD,OAAO,cAAc,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,cAAc,GAAG,IAAI,8BAA8B,EAAE,CAAC;IACtD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,8BAA8B,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAA6B;IAClE,cAAc,GAAG,QAAQ,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,EAAE,CAAC;IACpD,cAAc,GAAG,QAAQ,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,IAAI;YACzE,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,EAAE,CAAC;IACpD,cAAc,GAAG,QAAQ,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACpC,0CAA0C;QAC1C,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/hash.d.ts

@@ -0,0 +1,9 @@
+/** SHA-256 hex digest of a Buffer or string. */
+export declare function sha256(data: Buffer | string): string;
+/** SHA-256 of file contents via streaming (memory-safe for larger files). */
+export declare function sha256File(absolutePath: string): Promise<string>;
+/** Read file and return both contents and hash. */
+export declare function readAndHash(absolutePath: string): Promise<{
+    data: Buffer;
+    hash: string;
+}>;

package/dist/src/hash.js

@@ -0,0 +1,23 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { readFile } from "node:fs/promises";
+/** SHA-256 hex digest of a Buffer or string. */
+export function sha256(data) {
+    return createHash("sha256").update(data).digest("hex");
+}
+/** SHA-256 of file contents via streaming (memory-safe for larger files). */
+export async function sha256File(absolutePath) {
+    return new Promise((resolve, reject) => {
+        const hash = createHash("sha256");
+        const stream = createReadStream(absolutePath);
+        stream.on("data", (chunk) => hash.update(chunk));
+        stream.on("error", reject);
+        stream.on("end", () => resolve(hash.digest("hex")));
+    });
+}
+/** Read file and return both contents and hash. */
+export async function readAndHash(absolutePath) {
+    const data = await readFile(absolutePath);
+    return { data, hash: sha256(data) };
+}
+//# sourceMappingURL=hash.js.map

package/dist/src/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,gDAAgD;AAChD,MAAM,UAAU,MAAM,CAAC,IAAqB;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,YAAoB;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACtC,CAAC"}

package/dist/src/ledger/query.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Query layer over transaction history.
+ * Prefers V5 overlays; falls back to v2 ActionRecords.
+ * Append-only: never silently rewrite historical facts.
+ */
+import { type Transaction, type TransactionStatus } from "../core/types.js";
+export interface TransactionQuery {
+    status?: TransactionStatus | undefined;
+    adapter?: string | undefined;
+    actorClient?: string | undefined;
+    limit?: number | undefined;
+}
+export declare function listTransactions(projectRoot?: string, query?: TransactionQuery): Promise<Transaction[]>;
+export declare function getTransaction(id: string, projectRoot?: string): Promise<Transaction>;
+export declare function formatTransaction(txn: Transaction): string;
+export declare function formatTransactionList(txns: Transaction[]): string;
+export declare function ledgerStatusSummary(projectRoot?: string): Promise<string>;
+/** Load raw v2 action without upgrade — for compat tests. */
+export declare function loadLegacyAction(id: string, projectRoot?: string): Promise<import("../action/types.js").ActionRecord>;