@rewind-ai/cli 0.6.2

package/dist/src/protect/intercept.js

@@ -0,0 +1,390 @@
+import { PathSafetyError } from "../paths.js";
+import { appendAuditEvent } from "./audit.js";
+import { captureProtectedEntry, snapshotIdentityHash, } from "./capture.js";
+import { resolveProtectedRelative } from "./root-paths.js";
+import { decideProtectedShell } from "./shell-policy.js";
+import { loadActiveSession, loadProtectAction, listIncompleteProtectActions, markIncompleteProtectFailed, newProtectActionId, saveProtectAction, saveSession, } from "./store.js";
+const MUTATING_TOOLS = new Set([
+    "Write",
+    "Delete",
+    "StrReplace",
+    "EditNotebook",
+    "DeleteNotebookCell",
+]);
+function emptyAbsent() {
+    return {
+        exists: false,
+        kind: "absent",
+        hash: null,
+        size: 0,
+        mode: null,
+        linkTarget: null,
+        objectId: null,
+    };
+}
+function mapTool(name) {
+    switch (name) {
+        case "Write":
+            return "cursor_Write";
+        case "Delete":
+            return "cursor_Delete";
+        case "StrReplace":
+            return "cursor_StrReplace";
+        case "EditNotebook":
+        case "DeleteNotebookCell":
+            return "cursor_EditNotebook";
+        default:
+            return null;
+    }
+}
+function extractPaths(toolInput, payload) {
+    const out = [];
+    if (typeof payload.file_path === "string")
+        out.push(payload.file_path);
+    if (!toolInput || typeof toolInput !== "object")
+        return out;
+    const o = toolInput;
+    for (const k of ["path", "file_path", "target_notebook", "from", "to"]) {
+        if (typeof o[k] === "string")
+            out.push(o[k]);
+    }
+    if (Array.isArray(o.paths)) {
+        for (const p of o.paths) {
+            if (typeof p === "string")
+                out.push(p);
+        }
+    }
+    return [...new Set(out)];
+}
+function cursorFromPayload(payload) {
+    const binding = {};
+    if (typeof payload.conversation_id === "string") {
+        binding.conversationId = payload.conversation_id;
+    }
+    if (typeof payload.session_id === "string") {
+        binding.sessionId = payload.session_id;
+    }
+    if (typeof payload.generation_id === "string") {
+        binding.generationId = payload.generation_id;
+    }
+    if (typeof payload.cursor_version === "string") {
+        binding.cursorVersion = payload.cursor_version;
+    }
+    if (typeof payload.model === "string") {
+        binding.model = payload.model;
+    }
+    return binding;
+}
+function toolCallIdOf(payload) {
+    for (const k of ["tool_call_id", "toolCallId", "call_id"]) {
+        if (typeof payload[k] === "string")
+            return payload[k];
+    }
+    return null;
+}
+async function ensureSession(projectRoot, cursor) {
+    const session = await loadActiveSession(projectRoot);
+    if (!session || session.status !== "ACTIVE") {
+        throw new PathSafetyError("No ACTIVE protected session — run: rewind protect <path>");
+    }
+    // Bind cursor child-session ids when first seen
+    let dirty = false;
+    if (cursor.conversationId && !session.cursor.conversationId) {
+        session.cursor.conversationId = cursor.conversationId;
+        dirty = true;
+    }
+    if (cursor.sessionId && session.cursor.sessionId !== cursor.sessionId) {
+        if (!session.cursor.sessionId) {
+            session.cursor.sessionId = cursor.sessionId;
+            dirty = true;
+            await appendAuditEvent({
+                type: "CURSOR_SESSION_STARTED",
+                sessionId: session.id,
+                detail: cursor.sessionId,
+            }, projectRoot);
+        }
+    }
+    if (cursor.cursorVersion && !session.cursor.cursorVersion) {
+        session.cursor.cursorVersion = cursor.cursorVersion;
+        dirty = true;
+    }
+    if (cursor.model && !session.cursor.model) {
+        session.cursor.model = cursor.model;
+        dirty = true;
+    }
+    if (dirty)
+        await saveSession(session, projectRoot);
+    return session;
+}
+/**
+ * Handle preToolUse / beforeShellExecution / beforeMCPExecution.
+ */
+export async function handlePreHook(payload, projectRoot) {
+    const event = String(payload.hook_event_name ?? "");
+    const toolName = String(payload.tool_name ?? "");
+    const cursor = cursorFromPayload(payload);
+    // Shell gate
+    if (event === "beforeShellExecution" || toolName === "Shell") {
+        const command = String(payload.command ??
+            payload.tool_input?.command ??
+            "");
+        const decision = decideProtectedShell(command);
+        const session = await loadActiveSession(projectRoot);
+        if (decision.permission === "deny") {
+            if (session) {
+                session.blockedShellCount += 1;
+                await saveSession(session, projectRoot);
+            }
+            await appendAuditEvent({
+                type: "SHELL_BLOCKED",
+                sessionId: session?.id,
+                tool: "Shell",
+                detail: decision.reason,
+            }, projectRoot);
+            return {
+                permission: "deny",
+                user_message: `REWIND: shell blocked (${decision.reason})`,
+                agent_message: `POLICY: Shell command denied during protected session. ` +
+                    `Reason: ${decision.reason}. ` +
+                    `Use native Write/StrReplace/Delete tools for file changes (REWIND will ledger them), ` +
+                    `or use only allowlisted read-only shell commands (ls, cat, grep, git status, …).`,
+            };
+        }
+        await appendAuditEvent({
+            type: "SHELL_ALLOWED",
+            sessionId: session?.id,
+            tool: "Shell",
+            detail: decision.reason,
+        }, projectRoot);
+        return { permission: "allow" };
+    }
+    // MCP: allow REWIND tools; allow others (optional gate)
+    if (event === "beforeMCPExecution" || toolName.startsWith("MCP:")) {
+        return { permission: "allow" };
+    }
+    if (!MUTATING_TOOLS.has(toolName)) {
+        return { permission: "allow" };
+    }
+    const session = await ensureSession(projectRoot, cursor);
+    const paths = extractPaths(payload.tool_input, payload);
+    if (paths.length === 0) {
+        await appendAuditEvent({
+            type: "HOOK_DENY",
+            sessionId: session.id,
+            tool: toolName,
+            detail: "mutating tool with no identifiable path",
+        }, projectRoot);
+        return {
+            permission: "deny",
+            user_message: "REWIND: cannot protect mutation without a target path",
+            agent_message: "POLICY: Native mutation blocked — no path in tool input for BEFORE capture.",
+        };
+    }
+    const mapped = mapTool(toolName);
+    if (!mapped) {
+        return {
+            permission: "deny",
+            agent_message: `POLICY: Unsupported mutating tool ${toolName}`,
+        };
+    }
+    // Capture BEFORE for primary path (multi-path: prepare one action per path)
+    const preparedIds = [];
+    for (const rawPath of paths) {
+        let rel;
+        try {
+            rel = resolveProtectedRelative(rawPath, projectRoot);
+        }
+        catch (err) {
+            await appendAuditEvent({
+                type: "HOOK_DENY",
+                sessionId: session.id,
+                tool: toolName,
+                path: rawPath,
+                detail: err instanceof Error ? err.message : String(err),
+            }, projectRoot);
+            return {
+                permission: "deny",
+                user_message: `REWIND: path outside protected project (${rawPath})`,
+                agent_message: "POLICY: Path escapes protected root. Stay inside the project.",
+            };
+        }
+        await appendAuditEvent({
+            type: "TOOL_REQUESTED",
+            sessionId: session.id,
+            tool: toolName,
+            path: rel,
+        }, projectRoot);
+        const before = await captureProtectedEntry(rel, projectRoot, {
+            storeContent: true,
+        });
+        const sequence = session.actionIds.length + 1;
+        const action = {
+            id: newProtectActionId(),
+            version: 4,
+            protectedSessionId: session.id,
+            sequence,
+            source: "CURSOR_HOOK",
+            tool: mapped,
+            provenance: "cursor_agent_tool_request",
+            requestedAt: new Date().toISOString(),
+            completedAt: null,
+            target: rel,
+            targets: [rel],
+            targetSecondary: null,
+            before,
+            after: emptyAbsent(),
+            beforeSecondary: null,
+            afterSecondary: null,
+            reversibility: "REVERSIBLE",
+            status: "PREPARED",
+            client: {
+                name: "Cursor",
+                version: cursor.cursorVersion ?? "unknown",
+            },
+            cursor,
+            toolCallId: toolCallIdOf(payload),
+            error: null,
+            undoneAt: null,
+            undoVerification: null,
+            conflict: null,
+        };
+        action.status = "EXECUTING";
+        await saveProtectAction(action, projectRoot);
+        session.actionIds.push(action.id);
+        preparedIds.push(action.id);
+        await appendAuditEvent({
+            type: "ACTION_PREPARED",
+            sessionId: session.id,
+            actionId: action.id,
+            tool: mapped,
+            path: rel,
+        }, projectRoot);
+    }
+    await saveSession(session, projectRoot);
+    return {
+        permission: "allow",
+        // Keep agent_message minimal — user should not need to babysit REWIND
+    };
+}
+/**
+ * Handle postToolUse / afterFileEdit — complete PREPARED/EXECUTING actions.
+ */
+export async function handlePostHook(payload, projectRoot) {
+    const event = String(payload.hook_event_name ?? "");
+    const toolName = String(payload.tool_name ?? "");
+    const session = await loadActiveSession(projectRoot);
+    if (!session) {
+        return { permission: "allow" };
+    }
+    const paths = extractPaths(payload.tool_input, payload);
+    if (event === "afterFileEdit" && typeof payload.file_path === "string") {
+        paths.push(payload.file_path);
+    }
+    const unique = [...new Set(paths)];
+    if (unique.length === 0 && MUTATING_TOOLS.has(toolName)) {
+        // Cannot complete without path — leave EXECUTING for crash recovery
+        return { permission: "allow" };
+    }
+    const incomplete = await listIncompleteProtectActions(projectRoot);
+    const callId = toolCallIdOf(payload);
+    for (const raw of unique) {
+        let rel;
+        try {
+            rel = resolveProtectedRelative(raw, projectRoot);
+        }
+        catch {
+            continue;
+        }
+        // Prefer matching toolCallId, then newest EXECUTING/PREPARED for path
+        let action = incomplete.find((a) => a.protectedSessionId === session.id &&
+            a.target === rel &&
+            callId &&
+            a.toolCallId === callId) ??
+            [...incomplete]
+                .reverse()
+                .find((a) => a.protectedSessionId === session.id && a.target === rel);
+        if (!action) {
+            // afterFileEdit without pre — do NOT invent provenance
+            continue;
+        }
+        // Reload latest
+        action = await loadProtectAction(action.id, projectRoot);
+        if (action.status !== "PREPARED" && action.status !== "EXECUTING") {
+            continue;
+        }
+        try {
+            const after = await captureProtectedEntry(rel, projectRoot, {
+                storeContent: true,
+            });
+            action.after = after;
+            action.status = "COMPLETED";
+            action.completedAt = new Date().toISOString();
+            await saveProtectAction(action, projectRoot);
+            await appendAuditEvent({
+                type: "ACTION_COMPLETED",
+                sessionId: session.id,
+                actionId: action.id,
+                tool: action.tool,
+                path: rel,
+                detail: `after=${snapshotIdentityHash(after)}`,
+            }, projectRoot);
+        }
+        catch (err) {
+            action.status = "FAILED";
+            action.error = err instanceof Error ? err.message : String(err);
+            action.completedAt = new Date().toISOString();
+            await saveProtectAction(action, projectRoot);
+            await appendAuditEvent({
+                type: "ACTION_FAILED",
+                sessionId: session.id,
+                actionId: action.id,
+                path: rel,
+                detail: action.error,
+            }, projectRoot);
+        }
+    }
+    return { permission: "allow" };
+}
+export async function handlePostFailure(payload, projectRoot) {
+    const session = await loadActiveSession(projectRoot);
+    const paths = extractPaths(payload.tool_input, payload);
+    const incomplete = await listIncompleteProtectActions(projectRoot);
+    for (const raw of paths) {
+        let rel;
+        try {
+            rel = resolveProtectedRelative(raw, projectRoot);
+        }
+        catch {
+            continue;
+        }
+        const action = [...incomplete]
+            .reverse()
+            .find((a) => a.target === rel);
+        if (!action)
+            continue;
+        const a = await loadProtectAction(action.id, projectRoot);
+        a.status = "FAILED";
+        a.error = String(payload.error ?? "tool failure");
+        a.completedAt = new Date().toISOString();
+        await saveProtectAction(a, projectRoot);
+        await appendAuditEvent({
+            type: "ACTION_FAILED",
+            sessionId: session?.id,
+            actionId: a.id,
+            path: rel,
+            detail: a.error,
+        }, projectRoot);
+    }
+    return { permission: "allow" };
+}
+export async function recoverCrashState(projectRoot) {
+    const n = await markIncompleteProtectFailed(projectRoot);
+    if (n > 0) {
+        await appendAuditEvent({
+            type: "CRASH_RECOVERY",
+            detail: `Marked ${n} incomplete action(s) FAILED`,
+        }, projectRoot);
+    }
+    return n;
+}
+//# sourceMappingURL=intercept.js.map

package/dist/src/protect/intercept.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"intercept.js","sourceRoot":"","sources":["../../../src/protect/intercept.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC;AASpB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,OAAO;IACP,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,oBAAoB;CACrB,CAAC,CAAC;AAEH,SAAS,WAAW;IAClB,OAAO;QACL,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,cAAc,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,eAAe,CAAC;QACzB,KAAK,YAAY;YACf,OAAO,mBAAmB,CAAC;QAC7B,KAAK,cAAc,CAAC;QACpB,KAAK,oBAAoB;YACvB,OAAO,qBAAqB,CAAC;QAC/B;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,SAAkB,EAAE,OAAgC;IACxE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC5D,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgC;IACzD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,OAAgC;IACpD,KAAK,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,CAAC,CAAW,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,WAAmB,EACnB,MAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CACvB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,gDAAgD;IAChD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,MAAM,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5D,OAAO,CAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QACtD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC5C,KAAK,GAAG,IAAI,CAAC;YACb,MAAM,gBAAgB,CACpB;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,MAAM,EAAE,MAAM,CAAC,SAAS;aACzB,EACD,WAAW,CACZ,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QACpD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACpC,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,IAAI,KAAK;QAAE,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgC,EAChC,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE1C,aAAa;IACb,IAAI,KAAK,KAAK,sBAAsB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,CACpB,OAAO,CAAC,OAAO;YACZ,OAAO,CAAC,UAA+C,EAAE,OAAO;YACjE,EAAE,CACL,CAAC;QACF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YACnC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC;gBAC/B,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,gBAAgB,CACpB;gBACE,IAAI,EAAE,eAAe;gBACrB,SAAS,EAAE,OAAO,EAAE,EAAE;gBACtB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,EACD,WAAW,CACZ,CAAC;YACF,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,YAAY,EAAE,0BAA0B,QAAQ,CAAC,MAAM,GAAG;gBAC1D,aAAa,EACX,yDAAyD;oBACzD,WAAW,QAAQ,CAAC,MAAM,IAAI;oBAC9B,uFAAuF;oBACvF,kFAAkF;aACrF,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,OAAO,EAAE,EAAE;YACtB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,EACD,WAAW,CACZ,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,wDAAwD;IACxD,IAAI,KAAK,KAAK,oBAAoB,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,yCAAyC;SAClD,EACD,WAAW,CACZ,CAAC;QACF,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,YAAY,EAAE,uDAAuD;YACrE,aAAa,EACX,6EAA6E;SAChF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,aAAa,EAAE,qCAAqC,QAAQ,EAAE;SAC/D,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,wBAAwB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,gBAAgB,CACpB;gBACE,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,EACD,WAAW,CACZ,CAAC;YACF,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,YAAY,EAAE,2CAA2C,OAAO,GAAG;gBACnE,aAAa,EACX,+DAA+D;aAClE,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,GAAG;SACV,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,WAAW,EAAE;YAC3D,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAwB;YAClC,EAAE,EAAE,kBAAkB,EAAE;YACxB,OAAO,EAAE,CAAC;YACV,kBAAkB,EAAE,OAAO,CAAC,EAAE;YAC9B,QAAQ;YACR,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,2BAA2B;YACvC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,CAAC,GAAG,CAAC;YACd,eAAe,EAAE,IAAI;YACrB,MAAM;YACN,KAAK,EAAE,WAAW,EAAE;YACpB,eAAe,EAAE,IAAI;YACrB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,YAAY;YAC3B,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;aAC3C;YACD,MAAM;YACN,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC;YACjC,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;QAC5B,MAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,GAAG;SACV,EACD,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAExC,OAAO;QACL,UAAU,EAAE,OAAO;QACnB,sEAAsE;KACvE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgC,EAChC,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,eAAe,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,oEAAoE;QACpE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAErC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,wBAAwB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,sEAAsE;QACtE,IAAI,MAAM,GACR,UAAU,CAAC,IAAI,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,kBAAkB,KAAK,OAAO,CAAC,EAAE;YACnC,CAAC,CAAC,MAAM,KAAK,GAAG;YAChB,MAAM;YACN,CAAC,CAAC,UAAU,KAAK,MAAM,CAC1B;YACD,CAAC,GAAG,UAAU,CAAC;iBACZ,OAAO,EAAE;iBACT,IAAI,CACH,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAC/D,CAAC;QAEN,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,uDAAuD;YACvD,SAAS;QACX,CAAC;QAED,gBAAgB;QAChB,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClE,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,WAAW,EAAE;gBAC1D,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACrB,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;YAC5B,MAAM,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC7C,MAAM,gBAAgB,CACpB;gBACE,IAAI,EAAE,kBAAkB;gBACxB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,SAAS,oBAAoB,CAAC,KAAK,CAAC,EAAE;aAC/C,EACD,WAAW,CACZ,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;YACzB,MAAM,CAAC,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC7C,MAAM,gBAAgB,CACpB;gBACE,IAAI,EAAE,eAAe;gBACrB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,MAAM,CAAC,KAAK;aACrB,EACD,WAAW,CACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgC,EAChC,WAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,wBAAwB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC;aAC3B,OAAO,EAAE;aACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;QAClD,CAAC,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,iBAAiB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,OAAO,EAAE,EAAE;YACtB,QAAQ,EAAE,CAAC,CAAC,EAAE;YACd,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,CAAC,CAAC,KAAK;SAChB,EACD,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IACzD,MAAM,CAAC,GAAG,MAAM,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,UAAU,CAAC,8BAA8B;SAClD,EACD,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/src/protect/protect.d.ts

@@ -0,0 +1,17 @@
+import type { ProtectState, ProtectedSession } from "./types.js";
+export declare function resolveProtectTarget(pathArg: string | undefined): string;
+/**
+ * Enable protected Cursor session for a project directory.
+ * Idempotent: re-running refreshes hooks and ensures an ACTIVE session.
+ */
+export declare function protectProject(pathArg: string | undefined, options?: {
+    rewindPackageRoot?: string;
+}): Promise<{
+    state: ProtectState;
+    session: ProtectedSession;
+    summary: string;
+}>;
+/**
+ * Remove REWIND-managed hooks/MCP entries. Keeps .rewind history.
+ */
+export declare function unprotectProject(pathArg: string | undefined): Promise<string>;

package/dist/src/protect/protect.js

@@ -0,0 +1,194 @@
+import path from "node:path";
+import { mkdir } from "node:fs/promises";
+import { getPackageRoot, PathSafetyError, normalizeAbsolute } from "../paths.js";
+import { appendAuditEvent } from "./audit.js";
+import { fingerprintProject } from "./fingerprint.js";
+import { installProtectArtifacts, uninstallProtectArtifacts, } from "./install.js";
+import { recoverCrashState } from "./intercept.js";
+import { assertSafeProtectRoot, getProtectDir } from "./root-paths.js";
+import { loadActiveSession, loadProtectState, newProtectedSessionId, saveProtectConfig, saveProtectState, saveSession, } from "./store.js";
+export function resolveProtectTarget(pathArg) {
+    if (pathArg)
+        return normalizeAbsolute(pathArg);
+    return normalizeAbsolute(process.cwd());
+}
+/**
+ * Enable protected Cursor session for a project directory.
+ * Idempotent: re-running refreshes hooks and ensures an ACTIVE session.
+ */
+export async function protectProject(pathArg, options = {}) {
+    const rewindPackageRoot = options.rewindPackageRoot ?? getPackageRoot();
+    const projectRoot = await assertSafeProtectRoot(resolveProtectTarget(pathArg), rewindPackageRoot);
+    // Refuse protecting the REWIND monorepo root itself for destructive demos —
+    // allow only if basename looks like a sandbox/demo project OR is not the package root.
+    if (projectRoot === path.resolve(rewindPackageRoot)) {
+        throw new PathSafetyError("Refusing to protect the REWIND package root. Protect a project subdirectory (e.g. sandbox-v4-project).");
+    }
+    await mkdir(getProtectDir(projectRoot), { recursive: true });
+    await mkdir(path.join(projectRoot, ".rewind", "actions"), { recursive: true });
+    await mkdir(path.join(projectRoot, ".rewind", "sessions"), { recursive: true });
+    await mkdir(path.join(projectRoot, ".rewind", "objects"), { recursive: true });
+    await mkdir(path.join(projectRoot, ".rewind", "audit"), { recursive: true });
+    const recovered = await recoverCrashState(projectRoot);
+    const installed = await installProtectArtifacts(projectRoot, {
+        rewindPackageRoot,
+    });
+    await saveProtectConfig({
+        version: 4,
+        projectRoot,
+        rewindPackageRoot,
+        hookModule: installed.hookModule,
+        architecture: "MODEL_A_INTERCEPT",
+    }, projectRoot);
+    const baselineFingerprint = await fingerprintProject(projectRoot);
+    const now = new Date().toISOString();
+    let session = await loadActiveSession(projectRoot);
+    if (!session || session.status !== "ACTIVE") {
+        session = {
+            id: newProtectedSessionId(),
+            version: 4,
+            projectRoot,
+            startedAt: now,
+            endedAt: null,
+            status: "ACTIVE",
+            client: "Cursor",
+            cursor: {},
+            actionIds: [],
+            policyEventIds: [],
+            blockedShellCount: 0,
+            baselineFingerprint,
+            finalFingerprint: null,
+            trust: "AUTHORITATIVE",
+            architecture: "MODEL_A_INTERCEPT",
+        };
+        await saveSession(session, projectRoot);
+        await appendAuditEvent({
+            type: "PROTECTED_SESSION_STARTED",
+            sessionId: session.id,
+            detail: `baseline=${baselineFingerprint}`,
+        }, projectRoot);
+    }
+    const prev = await loadProtectState(projectRoot);
+    const state = {
+        version: 4,
+        protected: true,
+        projectRoot,
+        activeSessionId: session.id,
+        rewindPackageRoot,
+        hooksInstalled: true,
+        failClosed: true,
+        installedAt: prev?.installedAt ?? now,
+        updatedAt: now,
+        managedHookEvents: installed.managedEvents,
+        managedMcpServerName: installed.mcpServerName,
+    };
+    await saveProtectState(state, projectRoot);
+    await appendAuditEvent({
+        type: "PROTECT_ENABLED",
+        sessionId: session.id,
+        detail: recovered ? `recoveredIncomplete=${recovered}` : "ok",
+    }, projectRoot);
+    // Self-test: in-process policy + real wrapper spawn for pwd allow
+    await selfTestHook(projectRoot);
+    const summary = [
+        "REWIND PROTECTED SESSION",
+        "",
+        `Project: ${projectRoot}`,
+        `Agent: Cursor`,
+        `Session: ${session.id}`,
+        "",
+        "✓ agent filesystem mutations protected",
+        "✓ shell mutations guarded",
+        "✓ action ledger active",
+        "✓ undo available",
+        "✓ hooks fail closed",
+        "",
+        "Architecture: Model A (intercept + transactionalise)",
+        "Open this project in Cursor and use the agent normally.",
+        "You do NOT need to mention REWIND MCP in prompts.",
+    ].join("\n");
+    return { state, session, summary };
+}
+async function selfTestHook(projectRoot) {
+    // Prefer compiled hook module for speed; fall back to direct in-process check
+    // plus a lightweight wrapper spawn when the module is TypeScript (tsx).
+    const { decideProtectedShell } = await import("./shell-policy.js");
+    if (decideProtectedShell("pwd").permission !== "allow") {
+        throw new PathSafetyError("Protect self-test: pwd should be allow");
+    }
+    if (decideProtectedShell("echo x > f").permission !== "deny") {
+        throw new PathSafetyError("Protect self-test: redirect should be deny");
+    }
+    const cfg = await import("./store.js").then((m) => m.loadProtectConfig(projectRoot));
+    if (!cfg?.hookModule) {
+        throw new PathSafetyError("Protect self-test: missing hook module");
+    }
+    // When hook module is .js, exercise the real wrapper end-to-end.
+    if (cfg.hookModule.endsWith(".js")) {
+        const { spawnSync } = await import("node:child_process");
+        const result = spawnSync("node", [".cursor/hooks/rewind-protect.mjs"], {
+            cwd: projectRoot,
+            input: JSON.stringify({
+                hook_event_name: "beforeShellExecution",
+                command: "pwd",
+            }),
+            encoding: "utf8",
+            timeout: 10000,
+            env: { ...process.env, REWIND_PROTECT_ROOT: projectRoot },
+        });
+        if (result.status !== 0) {
+            throw new PathSafetyError(`Protect self-test failed (hook exit ${result.status}): ${result.stderr || result.stdout}`);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(result.stdout || "{}");
+        }
+        catch {
+            throw new PathSafetyError("Protect self-test: invalid hook JSON");
+        }
+        if (parsed.permission !== "allow") {
+            throw new PathSafetyError(`Protect self-test: expected allow for pwd, got ${parsed.permission}`);
+        }
+    }
+}
+/**
+ * Remove REWIND-managed hooks/MCP entries. Keeps .rewind history.
+ */
+export async function unprotectProject(pathArg) {
+    const projectRoot = resolveProtectTarget(pathArg);
+    const state = await loadProtectState(projectRoot);
+    if (!state?.protected) {
+        return "REWIND: project is not protected (nothing to remove).";
+    }
+    const session = await loadActiveSession(projectRoot);
+    if (session && session.status === "ACTIVE") {
+        session.status = "COMPLETED";
+        session.endedAt = new Date().toISOString();
+        session.finalFingerprint = await fingerprintProject(projectRoot);
+        await saveSession(session, projectRoot);
+        await appendAuditEvent({
+            type: "PROTECTED_SESSION_ENDED",
+            sessionId: session.id,
+            detail: "unprotect",
+        }, projectRoot);
+    }
+    await uninstallProtectArtifacts(projectRoot, state.managedMcpServerName ?? "rewind");
+    const now = new Date().toISOString();
+    await saveProtectState({
+        ...state,
+        protected: false,
+        hooksInstalled: false,
+        activeSessionId: null,
+        updatedAt: now,
+    }, projectRoot);
+    await appendAuditEvent({ type: "PROTECT_DISABLED" }, projectRoot);
+    return [
+        "REWIND UNPROTECTED",
+        "",
+        `Project: ${projectRoot}`,
+        "REWIND-managed hooks/MCP entries removed.",
+        "History under .rewind/ preserved.",
+        "Unrelated Cursor config preserved.",
+    ].join("\n");
+}
+//# sourceMappingURL=protect.js.map

package/dist/src/protect/protect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protect.js","sourceRoot":"","sources":["../../../src/protect/protect.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,GACZ,MAAM,YAAY,CAAC;AAGpB,MAAM,UAAU,oBAAoB,CAAC,OAA2B;IAC9D,IAAI,OAAO;QAAE,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA2B,EAC3B,UAA0C,EAAE;IAM5C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,cAAc,EAAE,CAAC;IACxE,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAC7C,oBAAoB,CAAC,OAAO,CAAC,EAC7B,iBAAiB,CAClB,CAAC;IAEF,4EAA4E;IAC5E,uFAAuF;IACvF,IAAI,WAAW,KAAK,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACvB,wGAAwG,CACzG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChF,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7E,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,WAAW,EAAE;QAC3D,iBAAiB;KAClB,CAAC,CAAC;IAEH,MAAM,iBAAiB,CACrB;QACE,OAAO,EAAE,CAAC;QACV,WAAW;QACX,iBAAiB;QACjB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,YAAY,EAAE,mBAAmB;KAClC,EACD,WAAW,CACZ,CAAC;IAEF,MAAM,mBAAmB,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,IAAI,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,GAAG;YACR,EAAE,EAAE,qBAAqB,EAAE;YAC3B,OAAO,EAAE,CAAC;YACV,WAAW;YACX,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,EAAE;YAClB,iBAAiB,EAAE,CAAC;YACpB,mBAAmB;YACnB,gBAAgB,EAAE,IAAI;YACtB,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,mBAAmB;SAClC,CAAC;QACF,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM,EAAE,YAAY,mBAAmB,EAAE;SAC1C,EACD,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAiB;QAC1B,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,IAAI;QACf,WAAW;QACX,eAAe,EAAE,OAAO,CAAC,EAAE;QAC3B,iBAAiB;QACjB,cAAc,EAAE,IAAI;QACpB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,GAAG;QACrC,SAAS,EAAE,GAAG;QACd,iBAAiB,EAAE,SAAS,CAAC,aAAa;QAC1C,oBAAoB,EAAE,SAAS,CAAC,aAAa;KAC9C,CAAC;IACF,MAAM,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3C,MAAM,gBAAgB,CACpB;QACE,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI;KAC9D,EACD,WAAW,CACZ,CAAC;IAEF,kEAAkE;IAClE,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAEhC,MAAM,OAAO,GAAG;QACd,0BAA0B;QAC1B,EAAE;QACF,YAAY,WAAW,EAAE;QACzB,eAAe;QACf,YAAY,OAAO,CAAC,EAAE,EAAE;QACxB,EAAE;QACF,wCAAwC;QACxC,2BAA2B;QAC3B,wBAAwB;QACxB,kBAAkB;QAClB,qBAAqB;QACrB,EAAE;QACF,sDAAsD;QACtD,yDAAyD;QACzD,mDAAmD;KACpD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,WAAmB;IAC7C,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnE,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;QACvD,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,oBAAoB,CAAC,YAAY,CAAC,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAChD,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,CACjC,CAAC;IACF,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;IACtE,CAAC;IAED,iEAAiE;IACjE,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,SAAS,CACtB,MAAM,EACN,CAAC,kCAAkC,CAAC,EACpC;YACE,GAAG,EAAE,WAAW;YAChB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,eAAe,EAAE,sBAAsB;gBACvC,OAAO,EAAE,KAAK;aACf,CAAC;YACF,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,KAAK;YACd,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,WAAW,EAAE;SAC1D,CACF,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CACvB,uCAAuC,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAC3F,CAAC;QACJ,CAAC;QACD,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAA4B,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,sCAAsC,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,eAAe,CACvB,kDAAkD,MAAM,CAAC,UAAU,EAAE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAA2B;IAE3B,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;QACtB,OAAO,uDAAuD,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;QAC7B,OAAO,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO,CAAC,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxC,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,yBAAyB;YAC/B,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,MAAM,EAAE,WAAW;SACpB,EACD,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,MAAM,yBAAyB,CAC7B,WAAW,EACX,KAAK,CAAC,oBAAoB,IAAI,QAAQ,CACvC,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,gBAAgB,CACpB;QACE,GAAG,KAAK;QACR,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,KAAK;QACrB,eAAe,EAAE,IAAI;QACrB,SAAS,EAAE,GAAG;KACf,EACD,WAAW,CACZ,CAAC;IACF,MAAM,gBAAgB,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,WAAW,CAAC,CAAC;IAElE,OAAO;QACL,oBAAoB;QACpB,EAAE;QACF,YAAY,WAAW,EAAE;QACzB,2CAA2C;QAC3C,mCAAmC;QACnC,oCAAoC;KACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/src/protect/root-paths.d.ts

@@ -0,0 +1,13 @@
+export declare function getProtectDir(projectRoot: string): string;
+export declare function getProtectSessionsDir(projectRoot: string): string;
+export declare function getProtectAuditDir(projectRoot: string): string;
+export declare function getProtectActionsDir(projectRoot: string): string;
+export declare function getProtectObjectsDir(projectRoot: string): string;
+/** Refuse protecting home, Desktop, system roots, or the REWIND package itself by accident. */
+export declare function assertSafeProtectRoot(target: string, rewindPackageRoot: string): Promise<string>;
+/**
+ * Resolve a tool-supplied path to a POSIX relative path inside the protected root.
+ */
+export declare function resolveProtectedRelative(input: string, projectRoot: string): string;
+export declare function protectedAbs(rel: string, projectRoot: string): string;
+export declare function assertProtectedNoSymlinkEscape(absolutePath: string, projectRoot: string): Promise<void>;