@rewind-ai/cli 0.6.2

package/dist/src/protect/fingerprint.js

@@ -0,0 +1,49 @@
+import path from "node:path";
+import { createHash } from "node:crypto";
+import { lstat, readdir, readFile, readlink } from "node:fs/promises";
+import { isPathInside } from "../paths.js";
+import { toRelativePosix } from "../manifest.js";
+const SKIP = new Set([".rewind", ".cursor", "node_modules", ".git", "dist"]);
+/**
+ * Deterministic fingerprint of protected project file contents (excludes .rewind/.cursor).
+ */
+export async function fingerprintProject(projectRoot) {
+    const entries = [];
+    async function walk(dir) {
+        let kids;
+        try {
+            kids = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        kids.sort((a, b) => a.name.localeCompare(b.name));
+        for (const ent of kids) {
+            if (SKIP.has(ent.name))
+                continue;
+            const abs = path.join(dir, ent.name);
+            if (!isPathInside(projectRoot, abs))
+                continue;
+            const rel = toRelativePosix(projectRoot, abs);
+            if (ent.isSymbolicLink()) {
+                const target = await readlink(abs);
+                entries.push(`L:${rel}:${target}`);
+                continue;
+            }
+            if (ent.isDirectory()) {
+                entries.push(`D:${rel}`);
+                await walk(abs);
+                continue;
+            }
+            if (ent.isFile()) {
+                const data = await readFile(abs);
+                const h = createHash("sha256").update(data).digest("hex");
+                const st = await lstat(abs);
+                entries.push(`F:${rel}:${h}:${st.mode & 0o7777}`);
+            }
+        }
+    }
+    await walk(projectRoot);
+    return createHash("sha256").update(entries.join("\n")).digest("hex");
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/src/protect/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../../src/protect/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IAC1D,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC;gBAAE,SAAS;YAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAC9C,IAAI,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;gBACzB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1D,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC"}

package/dist/src/protect/hook-cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/src/protect/hook-cli.js

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * Hook CLI entry — reads Cursor hook JSON on stdin, writes decision JSON on stdout.
+ * Invoked by .cursor/hooks/rewind-protect.mjs
+ */
+import { readFileSync } from "node:fs";
+import path from "node:path";
+import { handlePostFailure, handlePostHook, handlePreHook, recoverCrashState, } from "./intercept.js";
+import { loadActiveSession, loadProtectState, saveSession } from "./store.js";
+import { appendAuditEvent } from "./audit.js";
+function projectRootOf() {
+    if (process.env.REWIND_PROTECT_ROOT) {
+        return path.resolve(process.env.REWIND_PROTECT_ROOT);
+    }
+    return path.resolve(process.cwd());
+}
+function deny(msg) {
+    process.stdout.write(JSON.stringify({
+        permission: "deny",
+        user_message: msg,
+        agent_message: msg,
+    }));
+    process.exit(2);
+}
+async function main() {
+    const projectRoot = projectRootOf();
+    const state = await loadProtectState(projectRoot);
+    if (!state?.protected) {
+        process.stdout.write(JSON.stringify({ permission: "allow" }));
+        return;
+    }
+    let raw = "";
+    try {
+        raw = readFileSync(0, "utf8");
+    }
+    catch {
+        deny("REWIND: failed to read hook stdin");
+    }
+    let payload;
+    try {
+        payload = JSON.parse(raw || "{}");
+    }
+    catch {
+        deny("REWIND: invalid hook JSON");
+    }
+    const event = String(payload.hook_event_name ?? "");
+    try {
+        if (event === "sessionStart") {
+            await recoverCrashState(projectRoot);
+            const session = await loadActiveSession(projectRoot);
+            await appendAuditEvent({
+                type: "CURSOR_SESSION_STARTED",
+                sessionId: session?.id,
+                detail: String(payload.session_id ?? ""),
+            }, projectRoot);
+            process.stdout.write(JSON.stringify({
+                additional_context: "REWIND protected session active. Native file edits are ledgered automatically. Prefer Write/StrReplace/Delete over shell for mutations.",
+            }));
+            return;
+        }
+        if (event === "sessionEnd") {
+            const session = await loadActiveSession(projectRoot);
+            if (session && session.status === "ACTIVE") {
+                // Keep ACTIVE across Cursor restarts while protect is enabled —
+                // only mark COMPLETED on explicit unprotect / undo-session completion.
+                if (typeof payload.session_id === "string") {
+                    session.cursor.sessionId = payload.session_id;
+                }
+                await saveSession(session, projectRoot);
+            }
+            process.stdout.write(JSON.stringify({}));
+            return;
+        }
+        if (event === "postToolUse" ||
+            event === "afterFileEdit" ||
+            event === "afterShellExecution" ||
+            event === "afterMCPExecution") {
+            const decision = await handlePostHook(payload, projectRoot);
+            process.stdout.write(JSON.stringify(decision));
+            return;
+        }
+        if (event === "postToolUseFailure") {
+            const decision = await handlePostFailure(payload, projectRoot);
+            process.stdout.write(JSON.stringify(decision));
+            return;
+        }
+        // Default: pre-style gates
+        const decision = await handlePreHook(payload, projectRoot);
+        process.stdout.write(JSON.stringify(decision));
+    }
+    catch (err) {
+        // Fail closed for security-critical paths
+        const critical = event === "preToolUse" ||
+            event === "beforeShellExecution" ||
+            event === "" ||
+            !event;
+        const msg = err instanceof Error ? err.message : String(err);
+        if (critical) {
+            deny(`REWIND hook error (fail closed): ${msg}`);
+        }
+        process.stdout.write(JSON.stringify({ permission: "allow" }));
+    }
+}
+await main().catch((err) => {
+    deny(err instanceof Error ? err.message : String(err));
+});
+//# sourceMappingURL=hook-cli.js.map

package/dist/src/protect/hook-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-cli.js","sourceRoot":"","sources":["../../../src/protect/hook-cli.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,SAAS,aAAa;IACpB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;QACb,UAAU,EAAE,MAAM;QAClB,YAAY,EAAE,GAAG;QACjB,aAAa,EAAE,GAAG;KACnB,CAAC,CACH,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,WAAW,GAAG,aAAa,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAA4B,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAEpD,IAAI,CAAC;QACH,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACrD,MAAM,gBAAgB,CACpB;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,SAAS,EAAE,OAAO,EAAE,EAAE;gBACtB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;aACzC,EACD,WAAW,CACZ,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CAAC;gBACb,kBAAkB,EAChB,yIAAyI;aAC5I,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACrD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC3C,gEAAgE;gBAChE,uEAAuE;gBACvE,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;oBAC3C,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;gBAChD,CAAC;gBACD,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IACE,KAAK,KAAK,aAAa;YACvB,KAAK,KAAK,eAAe;YACzB,KAAK,KAAK,qBAAqB;YAC/B,KAAK,KAAK,mBAAmB,EAC7B,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,IAAI,KAAK,KAAK,oBAAoB,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0CAA0C;QAC1C,MAAM,QAAQ,GACZ,KAAK,KAAK,YAAY;YACtB,KAAK,KAAK,sBAAsB;YAChC,KAAK,KAAK,EAAE;YACZ,CAAC,KAAK,CAAC;QACT,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACzB,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC"}

package/dist/src/protect/index.d.ts

@@ -0,0 +1,12 @@
+export type { ProtectedSession, ProtectState, ProtectActionRecord, SessionUndoResult, AuditEvent, HookDecision, } from "./types.js";
+export { protectProject, unprotectProject, resolveProtectTarget } from "./protect.js";
+export { undoProtectAction, undoProtectedSession } from "./undo-session.js";
+export { formatProtectStatus, formatSessionsList, formatActionsList, classifyProtectUnknownMutation, } from "./status.js";
+export { decideProtectedShell } from "./shell-policy.js";
+export { handlePreHook, handlePostHook, handlePostFailure, recoverCrashState, } from "./intercept.js";
+export { mergeHooksJson, stripRewindHooks, mergeMcpJson, stripMcpServer, breakProtectHook, restoreProtectHook, installProtectArtifacts, } from "./install.js";
+export { loadProtectState, loadActiveSession, listSessions, listProtectActions, loadSession, loadProtectAction, markIncompleteProtectFailed, } from "./store.js";
+export { appendAuditEvent, readAuditEvents } from "./audit.js";
+export { fingerprintProject } from "./fingerprint.js";
+export { captureProtectedEntry, restoreProtectedSnapshot, snapshotIdentityHash, } from "./capture.js";
+export { resolveProtectedRelative } from "./root-paths.js";

package/dist/src/protect/index.js

@@ -0,0 +1,12 @@
+export { protectProject, unprotectProject, resolveProtectTarget } from "./protect.js";
+export { undoProtectAction, undoProtectedSession } from "./undo-session.js";
+export { formatProtectStatus, formatSessionsList, formatActionsList, classifyProtectUnknownMutation, } from "./status.js";
+export { decideProtectedShell } from "./shell-policy.js";
+export { handlePreHook, handlePostHook, handlePostFailure, recoverCrashState, } from "./intercept.js";
+export { mergeHooksJson, stripRewindHooks, mergeMcpJson, stripMcpServer, breakProtectHook, restoreProtectHook, installProtectArtifacts, } from "./install.js";
+export { loadProtectState, loadActiveSession, listSessions, listProtectActions, loadSession, loadProtectAction, markIncompleteProtectFailed, } from "./store.js";
+export { appendAuditEvent, readAuditEvents } from "./audit.js";
+export { fingerprintProject } from "./fingerprint.js";
+export { captureProtectedEntry, restoreProtectedSnapshot, snapshotIdentityHash, } from "./capture.js";
+export { resolveProtectedRelative } from "./root-paths.js";
+//# sourceMappingURL=index.js.map

package/dist/src/protect/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/protect/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EACL,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,WAAW,EACX,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/src/protect/install.d.ts

@@ -0,0 +1,34 @@
+export interface HooksJson {
+    version: number;
+    hooks: Record<string, HookEntry[]>;
+}
+export interface HookEntry {
+    command: string;
+    matcher?: string;
+    failClosed?: boolean;
+    timeout?: number;
+    type?: string;
+    /** Internal marker — stripped before write if present */
+    _rewind?: boolean;
+}
+export declare function mergeHooksJson(existing: HooksJson | null, rewindEntries: Record<string, HookEntry[]>): HooksJson;
+export declare function stripRewindHooks(existing: HooksJson): HooksJson;
+export interface McpJson {
+    mcpServers?: Record<string, unknown>;
+}
+export declare function mergeMcpJson(existing: McpJson | null, serverName: string, serverConfig: unknown): McpJson;
+export declare function stripMcpServer(existing: McpJson, serverName: string): McpJson;
+export declare function resolveHookModule(packageRoot: string): string;
+export declare function buildRewindHookEntries(hookCommand: string): Record<string, HookEntry[]>;
+export declare function installProtectArtifacts(projectRoot: string, options?: {
+    rewindPackageRoot?: string;
+}): Promise<{
+    hookCommand: string;
+    hookModule: string;
+    managedEvents: string[];
+    mcpServerName: string;
+}>;
+export declare function uninstallProtectArtifacts(projectRoot: string, mcpServerName?: string): Promise<void>;
+/** Test helper: break hook for fail-closed demos (rename aside). */
+export declare function breakProtectHook(projectRoot: string): Promise<string>;
+export declare function restoreProtectHook(projectRoot: string): Promise<void>;

package/dist/src/protect/install.js

@@ -0,0 +1,293 @@
+/**
+ * Install / merge Cursor hooks + MCP config for a protected project.
+ * Preserves unrelated user configuration.
+ */
+import path from "node:path";
+import { mkdir, writeFile, readFile, chmod, access, copyFile, } from "node:fs/promises";
+import { constants as fsConstants, existsSync } from "node:fs";
+import { getPackageRoot } from "../paths.js";
+const REWIND_HOOK_MARKER = "rewind-protect";
+function isRewindHook(entry) {
+    return (entry.command.includes(REWIND_HOOK_MARKER) ||
+        entry.command.includes("rewind-protect"));
+}
+export function mergeHooksJson(existing, rewindEntries) {
+    const base = existing ?? { version: 1, hooks: {} };
+    const hooks = { ...base.hooks };
+    for (const [event, entries] of Object.entries(rewindEntries)) {
+        const prev = hooks[event] ?? [];
+        const kept = prev.filter((e) => !isRewindHook(e));
+        hooks[event] = [...kept, ...entries];
+    }
+    return { version: 1, hooks };
+}
+export function stripRewindHooks(existing) {
+    const hooks = {};
+    for (const [event, entries] of Object.entries(existing.hooks ?? {})) {
+        const kept = entries.filter((e) => !isRewindHook(e));
+        if (kept.length > 0)
+            hooks[event] = kept;
+    }
+    return { version: existing.version ?? 1, hooks };
+}
+export function mergeMcpJson(existing, serverName, serverConfig) {
+    const base = existing ? { ...existing } : {};
+    const servers = { ...(base.mcpServers ?? {}) };
+    servers[serverName] = serverConfig;
+    return { ...base, mcpServers: servers };
+}
+export function stripMcpServer(existing, serverName) {
+    const servers = { ...(existing.mcpServers ?? {}) };
+    delete servers[serverName];
+    return { ...existing, mcpServers: servers };
+}
+function rewindPackageRoot() {
+    return getPackageRoot();
+}
+export function resolveHookModule(packageRoot) {
+    const dist = path.join(packageRoot, "dist", "src", "protect", "hook-cli.js");
+    const src = path.join(packageRoot, "src", "protect", "hook-cli.ts");
+    if (existsSync(dist))
+        return dist;
+    return src;
+}
+export function buildRewindHookEntries(hookCommand) {
+    return {
+        sessionStart: [
+            {
+                command: hookCommand,
+                failClosed: false,
+            },
+        ],
+        sessionEnd: [
+            {
+                command: hookCommand,
+                failClosed: false,
+            },
+        ],
+        preToolUse: [
+            {
+                command: hookCommand,
+                matcher: "Write|Delete|StrReplace|EditNotebook|Shell",
+                failClosed: true,
+            },
+        ],
+        postToolUse: [
+            {
+                command: hookCommand,
+                matcher: "Write|Delete|StrReplace|EditNotebook",
+                failClosed: false,
+            },
+        ],
+        postToolUseFailure: [
+            {
+                command: hookCommand,
+                matcher: "Write|Delete|StrReplace|EditNotebook",
+                failClosed: false,
+            },
+        ],
+        afterFileEdit: [
+            {
+                command: hookCommand,
+                failClosed: false,
+            },
+        ],
+        beforeShellExecution: [
+            {
+                command: hookCommand,
+                failClosed: true,
+            },
+        ],
+        beforeMCPExecution: [
+            {
+                command: hookCommand,
+                failClosed: false,
+            },
+        ],
+    };
+}
+export async function installProtectArtifacts(projectRoot, options = {}) {
+    const pkg = options.rewindPackageRoot ?? rewindPackageRoot();
+    const hookModule = resolveHookModule(pkg);
+    const cursorDir = path.join(projectRoot, ".cursor");
+    const hooksDir = path.join(cursorDir, "hooks");
+    await mkdir(hooksDir, { recursive: true });
+    // Thin wrapper script — always resolves project-local config
+    const wrapperPath = path.join(hooksDir, "rewind-protect.mjs");
+    const wrapper = `#!/usr/bin/env node
+/**
+ * REWIND V4 protect hook — fail closed on errors for security-critical events.
+ * Managed by \`rewind protect\` / \`rewind unprotect\`. Do not edit by hand.
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const projectRoot = process.cwd();
+const cfgPath = path.join(projectRoot, ".rewind", "protect", "config.json");
+
+function deny(msg) {
+  process.stdout.write(JSON.stringify({
+    permission: "deny",
+    user_message: msg,
+    agent_message: msg,
+  }));
+  process.exit(2);
+}
+
+let raw = "";
+try {
+  raw = readFileSync(0, "utf8");
+} catch {
+  deny("REWIND hook: failed to read stdin");
+}
+
+if (!existsSync(cfgPath)) {
+  // Not protected — allow (should not be installed without config)
+  process.stdout.write(JSON.stringify({ permission: "allow" }));
+  process.exit(0);
+}
+
+let cfg;
+try {
+  cfg = JSON.parse(readFileSync(cfgPath, "utf8"));
+} catch {
+  deny("REWIND hook: invalid protect config");
+}
+
+const hookModule = cfg.hookModule;
+const isTs = hookModule.endsWith(".ts");
+const runner = isTs
+  ? ["npx", ["tsx", hookModule]]
+  : ["node", [hookModule]];
+
+const result = spawnSync(runner[0], runner[1], {
+  input: raw,
+  encoding: "utf8",
+  cwd: projectRoot,
+  env: {
+    ...process.env,
+    REWIND_PROTECT_ROOT: projectRoot,
+  },
+  timeout: 30000,
+});
+
+if (result.error || result.status === null) {
+  deny("REWIND hook: runner failed to start");
+}
+
+if (result.status !== 0) {
+  // Propagate deny / fail-closed
+  if (result.stdout) process.stdout.write(result.stdout);
+  else deny("REWIND hook: non-zero exit without JSON");
+  process.exit(result.status === 2 ? 2 : 2);
+}
+
+process.stdout.write(result.stdout || JSON.stringify({ permission: "allow" }));
+process.exit(0);
+`;
+    await writeFile(wrapperPath, wrapper, "utf8");
+    await chmod(wrapperPath, 0o755);
+    const hookCommand = "node .cursor/hooks/rewind-protect.mjs";
+    const rewindEntries = buildRewindHookEntries(hookCommand);
+    // Merge hooks.json
+    const hooksPath = path.join(cursorDir, "hooks.json");
+    let existingHooks = null;
+    try {
+        existingHooks = JSON.parse(await readFile(hooksPath, "utf8"));
+    }
+    catch {
+        /* none */
+    }
+    const merged = mergeHooksJson(existingHooks, rewindEntries);
+    await writeFile(hooksPath, JSON.stringify(merged, null, 2) + "\n", "utf8");
+    // Merge mcp.json — optional REWIND server pointing at package
+    const mcpPath = path.join(cursorDir, "mcp.json");
+    let existingMcp = null;
+    try {
+        existingMcp = JSON.parse(await readFile(mcpPath, "utf8"));
+    }
+    catch {
+        /* none */
+    }
+    const mcpServerName = "rewind";
+    // MCP is optional for Model A; still wire for undo/status convenience
+    const serverConfig = {
+        command: "npx",
+        args: ["tsx", path.join(pkg, "src", "mcp", "server.ts")],
+        env: {
+            REWIND_PROJECT_ROOT: pkg,
+        },
+    };
+    const mergedMcp = mergeMcpJson(existingMcp, mcpServerName, serverConfig);
+    await writeFile(mcpPath, JSON.stringify(mergedMcp, null, 2) + "\n", "utf8");
+    // Self-test: wrapper exists and is executable
+    await access(wrapperPath, fsConstants.X_OK).catch(async () => {
+        await chmod(wrapperPath, 0o755);
+    });
+    return {
+        hookCommand,
+        hookModule,
+        managedEvents: Object.keys(rewindEntries),
+        mcpServerName,
+    };
+}
+export async function uninstallProtectArtifacts(projectRoot, mcpServerName = "rewind") {
+    const cursorDir = path.join(projectRoot, ".cursor");
+    const hooksPath = path.join(cursorDir, "hooks.json");
+    try {
+        const existing = JSON.parse(await readFile(hooksPath, "utf8"));
+        const stripped = stripRewindHooks(existing);
+        await writeFile(hooksPath, JSON.stringify(stripped, null, 2) + "\n", "utf8");
+    }
+    catch {
+        /* none */
+    }
+    const mcpPath = path.join(cursorDir, "mcp.json");
+    try {
+        const existing = JSON.parse(await readFile(mcpPath, "utf8"));
+        // Only remove if it looks like our managed entry (tsx path to rewind mcp)
+        const entry = existing.mcpServers?.[mcpServerName];
+        if (entry?.args?.some((a) => typeof a === "string" && a.includes("mcp") && a.includes("rewind")) ||
+            entry?.args?.some((a) => typeof a === "string" && a.includes("server.ts"))) {
+            const stripped = stripMcpServer(existing, mcpServerName);
+            await writeFile(mcpPath, JSON.stringify(stripped, null, 2) + "\n", "utf8");
+        }
+    }
+    catch {
+        /* none */
+    }
+    // Leave rewind-protect.mjs in place but harmless without config;
+    // optionally remove wrapper
+    try {
+        const { unlink } = await import("node:fs/promises");
+        await unlink(path.join(cursorDir, "hooks", "rewind-protect.mjs"));
+    }
+    catch {
+        /* */
+    }
+}
+/** Test helper: break hook for fail-closed demos (rename aside). */
+export async function breakProtectHook(projectRoot) {
+    const src = path.join(projectRoot, ".cursor", "hooks", "rewind-protect.mjs");
+    const bak = src + ".broken-bak";
+    await copyFile(src, bak);
+    await writeFile(src, "#!/usr/bin/env node\nthrow new Error('broken');\n", "utf8");
+    await chmod(src, 0o755);
+    return bak;
+}
+export async function restoreProtectHook(projectRoot) {
+    const src = path.join(projectRoot, ".cursor", "hooks", "rewind-protect.mjs");
+    const bak = src + ".broken-bak";
+    const { rename: ren, unlink } = await import("node:fs/promises");
+    try {
+        await ren(bak, src);
+    }
+    catch {
+        // reinstall
+        await installProtectArtifacts(projectRoot);
+    }
+    await unlink(bak).catch(() => undefined);
+}
+//# sourceMappingURL=install.js.map

package/dist/src/protect/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/protect/install.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,KAAK,EACL,SAAS,EACT,QAAQ,EACR,KAAK,EACL,MAAM,EACN,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAiB5C,SAAS,YAAY,CAAC,KAAgB;IACpC,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC1C,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,QAA0B,EAC1B,aAA0C;IAE1C,MAAM,IAAI,GAAc,QAAQ,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAgC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAE7D,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAmB;IAClD,MAAM,KAAK,GAAgC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAMD,MAAM,UAAU,YAAY,CAC1B,QAAwB,EACxB,UAAkB,EAClB,YAAqB;IAErB,MAAM,IAAI,GAAY,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/C,OAAO,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC;IACnC,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAiB,EAAE,UAAkB;IAClE,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;IACnD,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,OAAO,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,OAAO;QACL,YAAY,EAAE;YACZ;gBACE,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,KAAK;aAClB;SACF;QACD,UAAU,EAAE;YACV;gBACE,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,KAAK;aAClB;SACF;QACD,UAAU,EAAE;YACV;gBACE,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,4CAA4C;gBACrD,UAAU,EAAE,IAAI;aACjB;SACF;QACD,WAAW,EAAE;YACX;gBACE,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,sCAAsC;gBAC/C,UAAU,EAAE,KAAK;aAClB;SACF;QACD,kBAAkB,EAAE;YAClB;gBACE,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,sCAAsC;gBAC/C,UAAU,EAAE,KAAK;aAClB;SACF;QACD,aAAa,EAAE;YACb;gBACE,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,KAAK;aAClB;SACF;QACD,oBAAoB,EAAE;YACpB;gBACE,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,IAAI;aACjB;SACF;QACD,kBAAkB,EAAE;YAClB;gBACE,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,KAAK;aAClB;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,UAA0C,EAAE;IAO5C,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,IAAI,iBAAiB,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,6DAA6D;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwEjB,CAAC;IACA,MAAM,SAAS,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAEhC,MAAM,WAAW,GAAG,uCAAuC,CAAC;IAC5D,MAAM,aAAa,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAE1D,mBAAmB;IACnB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,aAAa,GAAqB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAc,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAE3E,8DAA8D;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,WAAW,GAAmB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAY,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,CAAC;IAC/B,sEAAsE;IACtE,MAAM,YAAY,GAAG;QACnB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACxD,GAAG,EAAE;YACH,mBAAmB,EAAE,GAAG;SACzB;KACF,CAAC;IACF,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IACzE,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5E,8CAA8C;IAC9C,MAAM,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,WAAW;QACX,UAAU;QACV,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;QACzC,aAAa;KACd,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAmB,EACnB,aAAa,GAAG,QAAQ;IAExB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAc,CAAC;QAC5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAY,CAAC;QACxE,0EAA0E;QAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,aAAa,CAEpC,CAAC;QACd,IACE,KAAK,EAAE,IAAI,EAAE,IAAI,CACf,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC1E;YACD,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAC1E,CAAC;YACD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YACzD,MAAM,SAAS,CACb,OAAO,EACP,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACxC,MAAM,CACP,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IAED,iEAAiE;IACjE,4BAA4B;IAC5B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,GAAG,GAAG,aAAa,CAAC;IAChC,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACzB,MAAM,SAAS,CAAC,GAAG,EAAE,mDAAmD,EAAE,MAAM,CAAC,CAAC;IAClF,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,GAAG,GAAG,aAAa,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;QACZ,MAAM,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/protect/intercept.d.ts

@@ -0,0 +1,11 @@
+import type { HookDecision } from "./types.js";
+/**
+ * Handle preToolUse / beforeShellExecution / beforeMCPExecution.
+ */
+export declare function handlePreHook(payload: Record<string, unknown>, projectRoot: string): Promise<HookDecision>;
+/**
+ * Handle postToolUse / afterFileEdit — complete PREPARED/EXECUTING actions.
+ */
+export declare function handlePostHook(payload: Record<string, unknown>, projectRoot: string): Promise<HookDecision>;
+export declare function handlePostFailure(payload: Record<string, unknown>, projectRoot: string): Promise<HookDecision>;
+export declare function recoverCrashState(projectRoot: string): Promise<number>;