@rewind-ai/cli 0.6.2

package/dist/src/product/setup.js

@@ -0,0 +1,300 @@
+/**
+ * Product setup / doctor / uninstall / open — user-facing install path.
+ */
+import path from "node:path";
+import os from "node:os";
+import { mkdir, writeFile, readFile, rename, access, rm, } from "node:fs/promises";
+import { constants as fsConstants } from "node:fs";
+import { getProjectRoot, getRewindHome, REWIND_DIR_NAME } from "../paths.js";
+import { CursorIntegration, statusAllClients } from "../clients/types.js";
+import { savePolicy, defaultPolicyDocument, loadPolicy } from "../permission/engine.js";
+import { resolveEntitlementProvider } from "../entitlement/provider.js";
+import { loadSession } from "../commercial/auth/provider.js";
+import { listTransactions } from "../ledger/query.js";
+import { listPendingApprovals } from "../approval/store.js";
+import { createSandbox } from "../sandbox.js";
+import { getSandboxPath, SANDBOX_DIR_NAME } from "../paths.js";
+export const PRODUCT_VERSION = "0.6.2";
+async function exists(p) {
+    try {
+        await access(p, fsConstants.F_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function writeJsonAtomic(file, data) {
+    await mkdir(path.dirname(file), { recursive: true });
+    const tmp = `${file}.tmp-${process.pid}`;
+    await writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
+    await rename(tmp, file);
+}
+export async function loadProjectConfig(projectRoot = getProjectRoot()) {
+    try {
+        const raw = await readFile(path.join(getRewindHome(projectRoot), "project.json"), "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export async function runSetup(projectRoot = getProjectRoot(), opts = {}) {
+    const lines = [];
+    lines.push("REWIND");
+    lines.push("");
+    const platformOk = process.platform === "darwin" ||
+        process.platform === "linux" ||
+        process.platform === "win32";
+    lines.push(platformOk
+        ? `✓ Platform supported (${os.platform()} ${os.arch()}, node ${process.version})`
+        : `⚠ Platform ${os.platform()} — best-effort support`);
+    lines.push(`✓ Project detected (${projectRoot})`);
+    // 1. Init .rewind safely
+    const home = getRewindHome(projectRoot);
+    await mkdir(home, { recursive: true });
+    await mkdir(path.join(home, "actions"), { recursive: true });
+    await mkdir(path.join(home, "objects"), { recursive: true });
+    await mkdir(path.join(home, "transactions"), { recursive: true });
+    await mkdir(path.join(home, "approvals"), { recursive: true });
+    await mkdir(path.join(home, "policy"), { recursive: true });
+    const cfg = {
+        version: 6,
+        initializedAt: new Date().toISOString(),
+        projectRoot,
+        product: "REWIND Personal",
+        mediation: "connected",
+        notes: [
+            "REWIND CONNECTED — mediated actions will be recorded.",
+            "Native agent/editor writes outside REWIND are NOT authoritative transactions.",
+        ],
+    };
+    await writeJsonAtomic(path.join(home, "project.json"), cfg);
+    // Policy
+    try {
+        await loadPolicy(projectRoot);
+    }
+    catch {
+        /* */
+    }
+    const policyFile = path.join(home, "policy", "permissions.json");
+    if (!(await exists(policyFile))) {
+        await savePolicy(defaultPolicyDocument(), projectRoot);
+    }
+    // Sandbox for demo (optional)
+    if (!opts.skipSandbox) {
+        const sandbox = getSandboxPath(projectRoot, SANDBOX_DIR_NAME);
+        if (!(await exists(sandbox))) {
+            await createSandbox(projectRoot);
+        }
+    }
+    // MCP / Cursor
+    if (!opts.skipMcp) {
+        const cursor = new CursorIntegration();
+        const detected = await cursor.detect();
+        if (detected) {
+            lines.push("✓ Cursor detected");
+            const { path: mcpPath } = await cursor.install(projectRoot);
+            const v = await cursor.validate(projectRoot);
+            if (v.ok) {
+                lines.push(`✓ REWIND MCP configuration installed (${mcpPath})`);
+            }
+            else {
+                lines.push(`✗ MCP config: ${v.message}`);
+            }
+        }
+        else {
+            lines.push("⚠ Cursor not detected — install Cursor, then re-run: rewind setup");
+        }
+    }
+    lines.push("✓ Project initialized");
+    lines.push("✓ Local service available (rewind open / rewind api)");
+    const session = await loadSession();
+    if (session) {
+        lines.push(`✓ Signed in as ${session.email}`);
+    }
+    else {
+        lines.push("○ Not signed in — optional: rewind login");
+    }
+    const ent = await (await resolveEntitlementProvider()).check();
+    lines.push(`○ Entitlement: ${ent.label}`);
+    lines.push("");
+    lines.push("REWIND CONNECTED");
+    lines.push("");
+    lines.push("Mediated actions through REWIND can now be recorded as transactions.");
+    lines.push("");
+    lines.push("Honesty:");
+    lines.push("  Cursor can still perform native writes outside REWIND mediation.");
+    lines.push("  Only mediated MCP/CLI actions receive authoritative REWIND transactions.");
+    lines.push("");
+    lines.push("Next:");
+    lines.push("  1. Restart Cursor / reload MCP");
+    lines.push("  2. Ask your agent to create a test file via REWIND tools");
+    lines.push("  3. rewind transactions");
+    lines.push("  4. rewind undo <id>");
+    lines.push("  5. rewind open   — view Activity");
+    return lines.join("\n");
+}
+export async function runDoctor(projectRoot = getProjectRoot()) {
+    const checks = [];
+    checks.push({
+        id: "version",
+        status: "PASS",
+        title: "Installation version",
+        detail: `REWIND ${PRODUCT_VERSION}`,
+    });
+    checks.push({
+        id: "platform",
+        status: "PASS",
+        title: "Platform",
+        detail: `${os.platform()} ${os.arch()} node ${process.version}`,
+    });
+    const home = getRewindHome(projectRoot);
+    const cfg = await loadProjectConfig(projectRoot);
+    checks.push({
+        id: "project",
+        status: cfg ? "PASS" : "WARN",
+        title: "Project initialization",
+        detail: cfg
+            ? `Initialized at ${cfg.initializedAt}`
+            : `No ${REWIND_DIR_NAME}/project.json — run: rewind setup`,
+    });
+    checks.push({
+        id: "storage",
+        status: (await exists(home)) ? "PASS" : "FAIL",
+        title: "Storage (.rewind)",
+        detail: home,
+    });
+    try {
+        await loadPolicy(projectRoot);
+        checks.push({
+            id: "policy",
+            status: "PASS",
+            title: "Permission policy",
+            detail: "Readable",
+        });
+    }
+    catch (err) {
+        checks.push({
+            id: "policy",
+            status: "FAIL",
+            title: "Permission policy",
+            detail: String(err),
+        });
+    }
+    const txns = await listTransactions(projectRoot);
+    checks.push({
+        id: "ledger",
+        status: "PASS",
+        title: "Transaction store",
+        detail: `${txns.length} transaction(s)`,
+    });
+    const pending = await listPendingApprovals(projectRoot);
+    checks.push({
+        id: "approvals",
+        status: "PASS",
+        title: "Approvals",
+        detail: `${pending.length} pending`,
+    });
+    const clients = await statusAllClients(projectRoot);
+    for (const c of clients.filter((x) => x.supported || x.detected)) {
+        checks.push({
+            id: `client-${c.id}`,
+            status: c.status === "configured" || c.status === "connected" ? "PASS" : c.detected ? "WARN" : "WARN",
+            title: c.displayName,
+            detail: c.message,
+        });
+    }
+    checks.push({
+        id: "bypass",
+        status: "WARN",
+        title: "Native write bypass",
+        detail: "Cursor can still perform native writes outside REWIND mediation. " +
+            "Only mediated actions receive authoritative REWIND transactions.",
+    });
+    const session = await loadSession();
+    checks.push({
+        id: "auth",
+        status: session ? "PASS" : "WARN",
+        title: "Account",
+        detail: session ? `Signed in as ${session.email}` : "Not signed in — rewind login",
+    });
+    const ent = await (await resolveEntitlementProvider()).check();
+    checks.push({
+        id: "entitlement",
+        status: ent.allowMediatedMutations ? "PASS" : "WARN",
+        title: "Entitlement",
+        detail: `${ent.label} (undo existing: always allowed)`,
+    });
+    checks.push({
+        id: "api",
+        status: "PASS",
+        title: "Local API",
+        detail: "Start with: rewind open  (binds 127.0.0.1 only)",
+    });
+    const mcpSmoke = await smokeMcpStart(projectRoot);
+    checks.push(mcpSmoke);
+    const lines = ["REWIND DOCTOR", ""];
+    for (const c of checks) {
+        lines.push(`${c.status.padEnd(4)}  ${c.title}`);
+        lines.push(`      ${c.detail}`);
+        lines.push("");
+    }
+    const fails = checks.filter((c) => c.status === "FAIL").length;
+    const warns = checks.filter((c) => c.status === "WARN").length;
+    lines.push(`Summary: ${checks.length} checks — ${fails} FAIL, ${warns} WARN`);
+    return { checks, text: lines.join("\n") };
+}
+async function smokeMcpStart(projectRoot) {
+    try {
+        const { createRewindMcpServer } = await import("../mcp/server.js");
+        const server = await createRewindMcpServer(projectRoot);
+        // Just constructing is enough smoke; don't connect stdio
+        void server;
+        return {
+            id: "mcp-server",
+            status: "PASS",
+            title: "MCP server",
+            detail: "Server module loads and initializes",
+        };
+    }
+    catch (err) {
+        return {
+            id: "mcp-server",
+            status: "FAIL",
+            title: "MCP server",
+            detail: err instanceof Error ? err.message : String(err),
+        };
+    }
+}
+export async function runUninstall(opts = {}) {
+    const projectRoot = opts.projectRoot ?? getProjectRoot();
+    const lines = ["REWIND UNINSTALL", ""];
+    if (opts.removeMcp !== false) {
+        const cursor = new CursorIntegration();
+        const r = await cursor.remove(projectRoot);
+        lines.push(r.removed
+            ? `✓ Removed REWIND MCP entry from ${r.path}`
+            : `○ No REWIND MCP entry to remove`);
+    }
+    if (opts.deleteRecoveryData === true) {
+        const home = getRewindHome(projectRoot);
+        await rm(home, { recursive: true, force: true });
+        lines.push(`✓ Deleted recovery data at ${home}`);
+        lines.push("  (transactions, CAS objects, policies removed)");
+    }
+    else {
+        lines.push("○ Recovery data PRESERVED");
+        lines.push(`  Location: ${getRewindHome(projectRoot)}`);
+        lines.push("  To destroy recovery data, re-run with: --delete-recovery-data");
+        lines.push("  REWIND will never silently delete your undo history.");
+    }
+    lines.push("");
+    lines.push("Application removal: uninstall the npm package / binary separately:");
+    lines.push("  npm uninstall -g @rewind-ai/cli");
+    return lines.join("\n");
+}
+export function versionText() {
+    return `REWIND ${PRODUCT_VERSION}\nUndo for AI agents.\nREWIND Personal — £2.99/month (list price; billing via Stripe when configured).\n`;
+}
+//# sourceMappingURL=setup.js.map

package/dist/src/product/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../src/product/setup.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EACL,KAAK,EACL,SAAS,EACT,QAAQ,EACR,MAAM,EACN,MAAM,EACN,EAAE,GACH,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/D,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AASvC,KAAK,UAAU,MAAM,CAAC,CAAS;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa;IACxD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAW,GAAG,cAAc,EAAE;IAE9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,EACrD,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,WAAW,GAAG,cAAc,EAAE,EAC9B,OAAqD,EAAE;IAEvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC7B,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/B,KAAK,CAAC,IAAI,CACR,UAAU;QACR,CAAC,CAAC,yBAAyB,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,OAAO,CAAC,OAAO,GAAG;QACjF,CAAC,CAAC,cAAc,EAAE,CAAC,QAAQ,EAAE,wBAAwB,CACxD,CAAC;IAEF,KAAK,CAAC,IAAI,CAAC,uBAAuB,WAAW,GAAG,CAAC,CAAC;IAElD,yBAAyB;IACzB,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,GAAG,GAAkB;QACzB,OAAO,EAAE,CAAC;QACV,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACvC,WAAW;QACX,OAAO,EAAE,iBAAiB;QAC1B,SAAS,EAAE,WAAW;QACtB,KAAK,EAAE;YACL,uDAAuD;YACvD,+EAA+E;SAChF;KACF,CAAC;IACF,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;IAE5D,SAAS;IACT,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,UAAU,CAAC,qBAAqB,EAAE,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC7B,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC5D,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,yCAAyC,OAAO,GAAG,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAEnE,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,0BAA0B,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAE1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACnF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,CACR,oEAAoE,CACrE,CAAC;IACF,KAAK,CAAC,IAAI,CACR,4EAA4E,CAC7E,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACzE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAEjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,UAAU,eAAe,EAAE;KACpC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,UAAU;QACd,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,OAAO,CAAC,OAAO,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7B,KAAK,EAAE,wBAAwB;QAC/B,MAAM,EAAE,GAAG;YACT,CAAC,CAAC,kBAAkB,GAAG,CAAC,aAAa,EAAE;YACvC,CAAC,CAAC,MAAM,eAAe,mCAAmC;KAC7D,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC9C,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,QAAQ;YACZ,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,QAAQ;YACZ,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,QAAQ;QACZ,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,iBAAiB;KACxC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,UAAU;KACpC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACrG,KAAK,EAAE,CAAC,CAAC,WAAW;YACpB,MAAM,EAAE,CAAC,CAAC,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,QAAQ;QACZ,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EACJ,mEAAmE;YACnE,kEAAkE;KACrE,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,MAAM;QACV,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACjC,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,8BAA8B;KACnF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,0BAA0B,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/D,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,aAAa;QACjB,MAAM,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACpD,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,kCAAkC;KACvD,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,iDAAiD;KAC1D,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEtB,MAAM,KAAK,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,MAAM,aAAa,KAAK,UAAU,KAAK,OAAO,CAAC,CAAC;IAC9E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,WAAmB;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACxD,yDAAyD;QACzD,KAAK,MAAM,CAAC;QACZ,OAAO;YACL,EAAE,EAAE,YAAY;YAChB,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,qCAAqC;SAC9C,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,YAAY;YAChB,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,YAAY;YACnB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACzD,CAAC;IACJ,CAAC;AACH,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAyB,EAAE;IAE3B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,cAAc,EAAE,CAAC;IACzD,MAAM,KAAK,GAAG,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAEvC,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CACR,CAAC,CAAC,OAAO;YACP,CAAC,CAAC,mCAAmC,CAAC,CAAC,IAAI,EAAE;YAC7C,CAAC,CAAC,iCAAiC,CACtC,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,eAAe,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,eAAe,0GAA0G,CAAC;AAC7I,CAAC"}

package/dist/src/protect/audit.d.ts

@@ -0,0 +1,5 @@
+import type { AuditEvent } from "./types.js";
+export declare function appendAuditEvent(event: Omit<AuditEvent, "time"> & {
+    time?: string;
+}, projectRoot: string): Promise<AuditEvent>;
+export declare function readAuditEvents(projectRoot: string): Promise<AuditEvent[]>;

package/dist/src/protect/audit.js

@@ -0,0 +1,26 @@
+import path from "node:path";
+import { mkdir, appendFile, readFile } from "node:fs/promises";
+import { getProtectAuditDir } from "./root-paths.js";
+export async function appendAuditEvent(event, projectRoot) {
+    const full = {
+        ...event,
+        time: event.time ?? new Date().toISOString(),
+    };
+    const dir = getProtectAuditDir(projectRoot);
+    await mkdir(dir, { recursive: true });
+    await appendFile(path.join(dir, "events.jsonl"), JSON.stringify(full) + "\n", "utf8");
+    return full;
+}
+export async function readAuditEvents(projectRoot) {
+    try {
+        const raw = await readFile(path.join(getProtectAuditDir(projectRoot), "events.jsonl"), "utf8");
+        return raw
+            .split("\n")
+            .filter((l) => l.trim())
+            .map((l) => JSON.parse(l));
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/src/protect/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/protect/audit.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAmD,EACnD,WAAmB;IAEnB,MAAM,IAAI,GAAG;QACX,GAAG,KAAK;QACR,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC/B,CAAC;IAChB,MAAM,GAAG,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,UAAU,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,EAC3B,MAAM,CACP,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,EAC1D,MAAM,CACP,CAAC;QACF,OAAO,GAAG;aACP,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/src/protect/capture.d.ts

@@ -0,0 +1,7 @@
+import type { EntrySnapshot } from "../action/types.js";
+export declare function snapshotIdentityHash(snap: EntrySnapshot): string | null;
+export declare function captureProtectedEntry(rel: string, projectRoot: string, options?: {
+    storeContent?: boolean;
+    captureSubtree?: boolean;
+}): Promise<EntrySnapshot>;
+export declare function restoreProtectedSnapshot(rel: string, snap: EntrySnapshot, projectRoot: string): Promise<void>;

package/dist/src/protect/capture.js

@@ -0,0 +1,250 @@
+import path from "node:path";
+import { lstat, readFile, readlink, readdir, mkdir, writeFile, rm, rename, chmod, symlink, } from "node:fs/promises";
+import { sha256 } from "../hash.js";
+import { assertProtectedNoSymlinkEscape, protectedAbs, } from "./root-paths.js";
+import { PathSafetyError } from "../paths.js";
+function modeOf(m) {
+    return m & 0o7777;
+}
+async function storeProtectObject(data, projectRoot) {
+    const hash = sha256(data);
+    const dest = path.join(projectRoot, ".rewind", "objects", hash.slice(0, 2), hash);
+    await mkdir(path.dirname(dest), { recursive: true });
+    try {
+        await lstat(dest);
+        return hash;
+    }
+    catch {
+        /* create */
+    }
+    const tmp = `${dest}.tmp-${process.pid}-${Date.now()}`;
+    await writeFile(tmp, data);
+    try {
+        await rename(tmp, dest);
+    }
+    catch (err) {
+        await rm(tmp, { force: true }).catch(() => undefined);
+        try {
+            await lstat(dest);
+            return hash;
+        }
+        catch {
+            throw err;
+        }
+    }
+    return hash;
+}
+async function readProtectObject(hash, projectRoot) {
+    return readFile(path.join(projectRoot, ".rewind", "objects", hash.slice(0, 2), hash));
+}
+export function snapshotIdentityHash(snap) {
+    if (!snap.exists)
+        return "ABSENT";
+    if (snap.kind === "directory") {
+        if (snap.subtree) {
+            return sha256(JSON.stringify(snap.subtree.map((e) => ({
+                path: e.path,
+                kind: e.kind,
+                hash: e.hash,
+                mode: e.mode,
+                linkTarget: e.linkTarget,
+            }))));
+        }
+        return `DIR:${snap.mode ?? 0}:${snap.hash ?? ""}:${snap.size}`;
+    }
+    return snap.hash;
+}
+export async function captureProtectedEntry(rel, projectRoot, options = {}) {
+    const abs = protectedAbs(rel, projectRoot);
+    await assertProtectedNoSymlinkEscape(abs, projectRoot).catch(() => undefined);
+    let st;
+    try {
+        st = await lstat(abs);
+    }
+    catch {
+        return {
+            exists: false,
+            kind: "absent",
+            hash: null,
+            size: 0,
+            mode: null,
+            linkTarget: null,
+            objectId: null,
+        };
+    }
+    if (st.isSymbolicLink()) {
+        const linkTarget = await readlink(abs);
+        return {
+            exists: true,
+            kind: "symlink",
+            hash: sha256(linkTarget),
+            size: Buffer.byteLength(linkTarget),
+            mode: modeOf(st.mode),
+            linkTarget,
+            objectId: null,
+        };
+    }
+    if (st.isDirectory()) {
+        const kids = await readdir(abs);
+        kids.sort((a, b) => a.localeCompare(b));
+        const listingHash = sha256(kids.join("\n"));
+        const snap = {
+            exists: true,
+            kind: "directory",
+            hash: listingHash,
+            size: kids.length,
+            mode: modeOf(st.mode),
+            linkTarget: null,
+            objectId: null,
+        };
+        if (options.captureSubtree) {
+            snap.subtree = await captureSubtree(rel, projectRoot);
+            snap.hash = snapshotIdentityHash({ ...snap, subtree: snap.subtree });
+        }
+        return snap;
+    }
+    if (st.isFile()) {
+        const data = await readFile(abs);
+        const hash = sha256(data);
+        let objectId = null;
+        if (options.storeContent !== false) {
+            objectId = await storeProtectObject(data, projectRoot);
+        }
+        return {
+            exists: true,
+            kind: "file",
+            hash,
+            size: data.length,
+            mode: modeOf(st.mode),
+            linkTarget: null,
+            objectId,
+        };
+    }
+    throw new PathSafetyError(`Unsupported entry type at ${rel}`);
+}
+async function captureSubtree(rootRel, projectRoot) {
+    const out = [];
+    async function walk(rel) {
+        const abs = protectedAbs(rel, projectRoot);
+        await assertProtectedNoSymlinkEscape(abs, projectRoot);
+        const st = await lstat(abs);
+        if (st.isSymbolicLink()) {
+            const linkTarget = await readlink(abs);
+            out.push({
+                path: rel,
+                kind: "symlink",
+                hash: sha256(linkTarget),
+                size: Buffer.byteLength(linkTarget),
+                mode: modeOf(st.mode),
+                linkTarget,
+                objectId: null,
+            });
+            return;
+        }
+        if (st.isDirectory()) {
+            out.push({
+                path: rel,
+                kind: "directory",
+                hash: null,
+                size: 0,
+                mode: modeOf(st.mode),
+                linkTarget: null,
+                objectId: null,
+            });
+            const kids = await readdir(abs);
+            kids.sort((a, b) => a.localeCompare(b));
+            for (const name of kids) {
+                const childRel = rel === "" || rel === "." ? name : `${rel}/${name}`;
+                await walk(childRel);
+            }
+            return;
+        }
+        if (st.isFile()) {
+            const data = await readFile(abs);
+            const objectId = await storeProtectObject(data, projectRoot);
+            out.push({
+                path: rel,
+                kind: "file",
+                hash: sha256(data),
+                size: data.length,
+                mode: modeOf(st.mode),
+                linkTarget: null,
+                objectId,
+            });
+        }
+    }
+    await walk(rootRel);
+    out.sort((a, b) => a.path.localeCompare(b.path));
+    return out;
+}
+async function ensureParent(abs, projectRoot) {
+    const parent = path.dirname(abs);
+    if (!isPathInsideSafe(projectRoot, parent) && parent !== path.resolve(projectRoot)) {
+        throw new PathSafetyError(`Parent escapes protected root: ${parent}`);
+    }
+    await mkdir(parent, { recursive: true });
+}
+function isPathInsideSafe(root, candidate) {
+    const rootNorm = path.resolve(root);
+    const candNorm = path.resolve(candidate);
+    if (candNorm === rootNorm)
+        return true;
+    const prefix = rootNorm.endsWith(path.sep) ? rootNorm : rootNorm + path.sep;
+    return candNorm.startsWith(prefix);
+}
+export async function restoreProtectedSnapshot(rel, snap, projectRoot) {
+    const abs = protectedAbs(rel, projectRoot);
+    await assertProtectedNoSymlinkEscape(abs, projectRoot).catch(() => undefined);
+    if (!snap.exists) {
+        await rm(abs, { recursive: true, force: true });
+        return;
+    }
+    if (snap.kind === "file") {
+        if (!snap.objectId) {
+            throw new PathSafetyError(`Cannot restore file without objectId: ${rel}`);
+        }
+        const data = await readProtectObject(snap.objectId, projectRoot);
+        await ensureParent(abs, projectRoot);
+        const tmp = `${abs}.rewind-protect-tmp-${process.pid}`;
+        await writeFile(tmp, data, { mode: snap.mode ?? 0o644 });
+        await rename(tmp, abs);
+        if (snap.mode != null)
+            await chmod(abs, snap.mode);
+        return;
+    }
+    if (snap.kind === "symlink") {
+        await ensureParent(abs, projectRoot);
+        await rm(abs, { force: true }).catch(() => undefined);
+        await symlink(snap.linkTarget ?? "", abs);
+        return;
+    }
+    if (snap.kind === "directory") {
+        await ensureParent(abs, projectRoot);
+        await mkdir(abs, { recursive: true });
+        if (snap.mode != null)
+            await chmod(abs, snap.mode);
+        if (snap.subtree) {
+            // Remove unexpected children then restore subtree
+            await rm(abs, { recursive: true, force: true });
+            for (const e of snap.subtree) {
+                const childAbs = protectedAbs(e.path, projectRoot);
+                if (e.kind === "directory") {
+                    await mkdir(childAbs, { recursive: true });
+                    await chmod(childAbs, e.mode);
+                }
+                else if (e.kind === "file") {
+                    if (!e.objectId)
+                        continue;
+                    const data = await readProtectObject(e.objectId, projectRoot);
+                    await ensureParent(childAbs, projectRoot);
+                    await writeFile(childAbs, data, { mode: e.mode });
+                }
+                else if (e.kind === "symlink") {
+                    await ensureParent(childAbs, projectRoot);
+                    await symlink(e.linkTarget ?? "", childAbs);
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=capture.js.map

package/dist/src/protect/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/protect/capture.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,KAAK,EACL,SAAS,EACT,EAAE,EACF,MAAM,EACN,KAAK,EACL,OAAO,GACR,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,OAAO,EACL,8BAA8B,EAC9B,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,CAAC,GAAG,MAAM,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,WAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,WAAW,EACX,SAAS,EACT,SAAS,EACT,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAChB,IAAI,CACL,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvD,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,IAAY,EACZ,WAAmB;IAEnB,OAAO,QAAQ,CACb,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAmB;IACtD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,MAAM,CACX,IAAI,CAAC,SAAS,CACZ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;aACzB,CAAC,CAAC,CACJ,CACF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAW,EACX,WAAmB,EACnB,UAAgE,EAAE;IAElE,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC3C,MAAM,8BAA8B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE9E,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,CAAC;YACP,IAAI,EAAE,IAAI;YACV,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YACnC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;YACrB,UAAU;YACV,QAAQ,EAAE,IAAI;SACf,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAkB;YAC1B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;YACrB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;YACnC,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,MAAM;YACjB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;YACrB,UAAU,EAAE,IAAI;YAChB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,eAAe,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAe,EACf,WAAmB;IAEnB,MAAM,GAAG,GAAmB,EAAE,CAAC;IAE/B,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,8BAA8B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;gBACxB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;gBACnC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACrB,UAAU;gBACV,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACrB,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;gBACrE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;gBACrB,UAAU,EAAE,IAAI;gBAChB,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,WAAmB;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,eAAe,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,SAAiB;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC;IAC5E,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAW,EACX,IAAmB,EACnB,WAAmB;IAEnB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC3C,MAAM,8BAA8B,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE9E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjE,MAAM,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,GAAG,GAAG,uBAAuB,OAAO,CAAC,GAAG,EAAE,CAAC;QACvD,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI;YAAE,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACrC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,MAAM,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI;YAAE,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,kDAAkD;YAClD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBACnD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC3B,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3C,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,CAAC,QAAQ;wBAAE,SAAS;oBAC1B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAC9D,MAAM,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAC1C,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACpD,CAAC;qBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAChC,MAAM,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAC1C,MAAM,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/protect/fingerprint.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Deterministic fingerprint of protected project file contents (excludes .rewind/.cursor).
+ */
+export declare function fingerprintProject(projectRoot: string): Promise<string>;