@rewind-ai/cli 0.6.2

package/dist/src/protect/root-paths.js

@@ -0,0 +1,140 @@
+/**
+ * Path safety for V4 protected project roots.
+ * The protected root IS the mutation boundary (unlike V2 named sandboxes).
+ */
+import path from "node:path";
+import { lstat, realpath, access } from "node:fs/promises";
+import { constants as fsConstants } from "node:fs";
+import os from "node:os";
+import { PathSafetyError, assertSafeRelativePath, getForbiddenRoots, isPathInside, isPathInsideAsync, normalizeAbsolute, } from "../paths.js";
+import { toRelativePosix } from "../manifest.js";
+export function getProtectDir(projectRoot) {
+    return path.join(projectRoot, ".rewind", "protect");
+}
+export function getProtectSessionsDir(projectRoot) {
+    return path.join(projectRoot, ".rewind", "sessions");
+}
+export function getProtectAuditDir(projectRoot) {
+    return path.join(projectRoot, ".rewind", "audit");
+}
+export function getProtectActionsDir(projectRoot) {
+    return path.join(projectRoot, ".rewind", "actions");
+}
+export function getProtectObjectsDir(projectRoot) {
+    return path.join(projectRoot, ".rewind", "objects");
+}
+/** Refuse protecting home, Desktop, system roots, or the REWIND package itself by accident. */
+export async function assertSafeProtectRoot(target, rewindPackageRoot) {
+    const abs = normalizeAbsolute(target);
+    for (const forbidden of getForbiddenRoots()) {
+        if (abs === forbidden) {
+            throw new PathSafetyError(`Refusing to protect forbidden root: ${abs}`);
+        }
+    }
+    // Refuse protecting the entire home directory or obvious system trees.
+    const home = path.resolve(os.homedir());
+    if (abs === home || abs === "/" || abs === "/Users" || abs === "/home") {
+        throw new PathSafetyError(`Refusing unsafe protect root: ${abs}`);
+    }
+    // Require the path to exist and be a directory.
+    try {
+        await access(abs, fsConstants.F_OK);
+    }
+    catch {
+        throw new PathSafetyError(`Protect path does not exist: ${abs}`);
+    }
+    const st = await lstat(abs);
+    if (!st.isDirectory()) {
+        throw new PathSafetyError(`Protect path is not a directory: ${abs}`);
+    }
+    let real;
+    try {
+        real = await realpath(abs);
+    }
+    catch {
+        throw new PathSafetyError(`Cannot realpath protect root: ${abs}`);
+    }
+    // Prefer disposable demo trees and explicit project dirs — refuse if equal to rewind package
+    // when the user clearly meant a subfolder (optional soft check: allow protecting package
+    // only if basename suggests a sandbox). For V4 we ALLOW protecting any non-forbidden dir
+    // except we warn against protecting the monorepo via explicit disposable names preference.
+    void rewindPackageRoot;
+    return real;
+}
+/**
+ * Resolve a tool-supplied path to a POSIX relative path inside the protected root.
+ */
+export function resolveProtectedRelative(input, projectRoot) {
+    if (!input || input.includes("\0")) {
+        throw new PathSafetyError("Invalid path");
+    }
+    let cleaned = input.replace(/\\/g, "/");
+    if (path.isAbsolute(cleaned) || cleaned.startsWith("/")) {
+        const abs = path.resolve(cleaned);
+        if (!isPathInside(projectRoot, abs)) {
+            throw new PathSafetyError(`Absolute path outside protected root: ${input}`);
+        }
+        cleaned = toRelativePosix(projectRoot, abs);
+    }
+    // Strip protected-root basename prefix if agent passed "sandbox-v4-project/src/..."
+    const base = path.basename(projectRoot);
+    if (cleaned === base)
+        cleaned = "";
+    else if (cleaned.startsWith(base + "/"))
+        cleaned = cleaned.slice(base.length + 1);
+    if (cleaned === "" || cleaned === ".") {
+        throw new PathSafetyError("Refusing to mutate protected root directory itself");
+    }
+    const safe = assertSafeRelativePath(cleaned);
+    if (safe === ".rewind" ||
+        safe.startsWith(".rewind/") ||
+        safe === ".cursor" ||
+        safe.startsWith(".cursor/")) {
+        throw new PathSafetyError("Refusing to mutate .rewind / .cursor via agent tools");
+    }
+    const abs = path.resolve(projectRoot, safe);
+    if (!isPathInside(projectRoot, abs)) {
+        throw new PathSafetyError(`Path escapes protected root: ${input}`);
+    }
+    return safe;
+}
+export function protectedAbs(rel, projectRoot) {
+    const safe = assertSafeRelativePath(rel);
+    const abs = path.resolve(projectRoot, safe);
+    if (!isPathInside(projectRoot, abs)) {
+        throw new PathSafetyError(`Path escapes protected root: ${rel}`);
+    }
+    return abs;
+}
+export async function assertProtectedNoSymlinkEscape(absolutePath, projectRoot) {
+    if (!(await isPathInsideAsync(projectRoot, absolutePath))) {
+        throw new PathSafetyError(`Path outside protected root: ${absolutePath}`);
+    }
+    let st;
+    try {
+        st = await lstat(absolutePath);
+    }
+    catch (err) {
+        const code = err && typeof err === "object" && "code" in err
+            ? String(err.code)
+            : "";
+        if (code === "ENOENT")
+            return;
+        throw err;
+    }
+    if (st.isSymbolicLink()) {
+        let real;
+        try {
+            real = await realpath(absolutePath);
+        }
+        catch {
+            const { readlink } = await import("node:fs/promises");
+            const target = await readlink(absolutePath);
+            real = path.resolve(path.dirname(absolutePath), target);
+        }
+        if (!(await isPathInsideAsync(projectRoot, real))) {
+            throw new PathSafetyError(`Symlink escape blocked: ${absolutePath} -> ${real}`);
+        }
+    }
+}
+//# sourceMappingURL=root-paths.js.map

package/dist/src/protect/root-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-paths.js","sourceRoot":"","sources":["../../../src/protect/root-paths.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,iBAAyB;IAEzB,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAEtC,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,EAAE,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,eAAe,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACvE,MAAM,IAAI,eAAe,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,gDAAgD;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,eAAe,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,6FAA6F;IAC7F,yFAAyF;IACzF,yFAAyF;IACzF,2FAA2F;IAC3F,KAAK,iBAAiB,CAAC;IAEvB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,WAAmB;IAEnB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAExC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,eAAe,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,GAAG,eAAe,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,oFAAoF;IACpF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,GAAG,EAAE,CAAC;SAC9B,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAElF,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CAAC,oDAAoD,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC7C,IACE,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC3B,IAAI,KAAK,SAAS;QAClB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAC3B,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,sDAAsD,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,WAAmB;IAC3D,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,YAAoB,EACpB,WAAmB;IAEnB,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,eAAe,CAAC,gCAAgC,YAAY,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GACR,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG;YAC7C,CAAC,CAAC,MAAM,CAAE,GAAyB,CAAC,IAAI,CAAC;YACzC,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9B,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,eAAe,CACvB,2BAA2B,YAAY,OAAO,IAAI,EAAE,CACrD,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/protect/shell-policy.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Conservative shell policy for protected Cursor sessions.
+ *
+ * Prefer false-positive blocks over silent mutation.
+ * Opaque interpreters (node/python/…) are DENIED even without obvious redirects —
+ * a one-liner can write files without matching mutation regexes.
+ */
+export type ShellVerdict = "allow" | "deny";
+export interface ShellDecision {
+    permission: ShellVerdict;
+    reason: string;
+    category: "readonly" | "mutating" | "opaque" | "empty";
+}
+/**
+ * Decide whether a shell command may run during a protected agent session.
+ */
+export declare function decideProtectedShell(command: string): ShellDecision;

package/dist/src/protect/shell-policy.js

@@ -0,0 +1,269 @@
+/**
+ * Conservative shell policy for protected Cursor sessions.
+ *
+ * Prefer false-positive blocks over silent mutation.
+ * Opaque interpreters (node/python/…) are DENIED even without obvious redirects —
+ * a one-liner can write files without matching mutation regexes.
+ */
+/** Known-safe read-only command prefixes (first token after env assignments). */
+const READONLY_COMMANDS = new Set([
+    "pwd",
+    "ls",
+    "ll",
+    "dir",
+    "cat",
+    "head",
+    "tail",
+    "less",
+    "more",
+    "wc",
+    "grep",
+    "egrep",
+    "fgrep",
+    "rg",
+    "ag",
+    "find",
+    "which",
+    "type",
+    "command",
+    "echo",
+    "printf",
+    "true",
+    "false",
+    "test",
+    "[",
+    "basename",
+    "dirname",
+    "realpath",
+    "readlink",
+    "stat",
+    "file",
+    "diff",
+    "cmp",
+    "md5",
+    "md5sum",
+    "sha256sum",
+    "shasum",
+    "env",
+    "printenv",
+    "date",
+    "whoami",
+    "id",
+    "uname",
+    "hostname",
+    "sleep",
+    "clear",
+    "jq",
+    "yq",
+]);
+/** git subcommands that are read-only. */
+const GIT_READONLY = new Set([
+    "status",
+    "diff",
+    "log",
+    "show",
+    "blame",
+    "describe",
+    "rev-parse",
+    "rev-list",
+    "ls-files",
+    "ls-tree",
+    "branch",
+    "tag",
+    "remote",
+    "config", // reading; writing config is rare in agent flows — still allow list/get style
+    "shortlog",
+    "whatchanged",
+    "name-rev",
+    "cat-file",
+]);
+/** First-token commands that are always considered mutating or too dangerous. */
+const ALWAYS_DENY = new Set([
+    "rm",
+    "rmdir",
+    "mv",
+    "cp",
+    "install",
+    "ln",
+    "mkdir",
+    "touch",
+    "chmod",
+    "chown",
+    "chgrp",
+    "tee",
+    "dd",
+    "truncate",
+    "shred",
+    "python",
+    "python3",
+    "python2",
+    "perl",
+    "ruby",
+    "php",
+    "lua",
+    "bash",
+    "sh",
+    "zsh",
+    "fish",
+    "dash",
+    "ksh",
+    "csh",
+    "tcsh",
+    "node",
+    "nodejs",
+    "deno",
+    "bun",
+    "tsx",
+    "ts-node",
+    "npm",
+    "npx",
+    "pnpm",
+    "yarn",
+    "pip",
+    "pip3",
+    "cargo",
+    "make",
+    "cmake",
+    "docker",
+    "podman",
+    "kubectl",
+    "osascript",
+    "sudo",
+    "su",
+    "doas",
+    "xargs",
+    "parallel",
+    "nohup",
+    "eval",
+    "source",
+    "exec",
+    "builtin",
+    "command", // can invoke anything
+]);
+const MUTATION_TOKEN_RE = /(^|[\s;|&])(rm|mv|cp|mkdir|rmdir|touch|chmod|chown|ln|tee|install|dd|truncate|sed\s+-i|perl\s+-i|ruby\s+-i)\b|>|>>|>\(|<\(/i;
+const FIND_DELETE_RE = /\b-delete\b|\b-exec\b|\b-ok\b/i;
+function stripEnvAssignments(cmd) {
+    // Remove leading VAR=value prefixes
+    let s = cmd.trim();
+    while (/^[A-Za-z_][A-Za-z0-9_]*=[^\s]*\s+/.test(s)) {
+        s = s.replace(/^[A-Za-z_][A-Za-z0-9_]*=[^\s]*\s+/, "");
+    }
+    return s.trim();
+}
+function firstToken(cmd) {
+    const s = stripEnvAssignments(cmd);
+    if (!s)
+        return "";
+    // Handle `git status` etc.
+    const m = s.match(/^([^\s;|&]+)/);
+    if (!m?.[1])
+        return "";
+    let tok = m[1];
+    // strip path prefixes: /usr/bin/rm → rm
+    tok = tok.replace(/^.*\//, "");
+    return tok.toLowerCase();
+}
+function gitSubcommand(cmd) {
+    const s = stripEnvAssignments(cmd);
+    const m = s.match(/^git(?:\s+-C\s+\S+)?\s+([a-z][a-z0-9-]+)/i);
+    return m?.[1]?.toLowerCase() ?? null;
+}
+/**
+ * Decide whether a shell command may run during a protected agent session.
+ */
+export function decideProtectedShell(command) {
+    const cmd = (command ?? "").trim();
+    if (!cmd) {
+        return {
+            permission: "allow",
+            reason: "empty command",
+            category: "empty",
+        };
+    }
+    // Compound commands: if any segment looks mutating/opaque, deny the whole thing.
+    const segments = cmd.split(/(?:&&|\|\||;|\n|`|\$\()/);
+    if (segments.length > 1) {
+        for (const seg of segments) {
+            const d = decideProtectedShell(seg.trim());
+            if (d.permission === "deny" && seg.trim()) {
+                return {
+                    permission: "deny",
+                    reason: `compound command blocked: ${d.reason}`,
+                    category: d.category,
+                };
+            }
+        }
+        // Pipes: still check for redirects / mutation tokens on full string
+    }
+    if (MUTATION_TOKEN_RE.test(cmd)) {
+        return {
+            permission: "deny",
+            reason: "mutating shell token or redirection detected",
+            category: "mutating",
+        };
+    }
+    if (FIND_DELETE_RE.test(cmd) && /\bfind\b/i.test(cmd)) {
+        return {
+            permission: "deny",
+            reason: "find with -delete/-exec blocked",
+            category: "mutating",
+        };
+    }
+    const tok = firstToken(cmd);
+    // git special-case before ALWAYS_DENY
+    if (tok === "git") {
+        const sub = gitSubcommand(cmd);
+        if (sub && GIT_READONLY.has(sub)) {
+            // deny git checkout/reset/clean/add/commit/push that rewrite worktree
+            return {
+                permission: "allow",
+                reason: `read-only git ${sub}`,
+                category: "readonly",
+            };
+        }
+        return {
+            permission: "deny",
+            reason: `git subcommand blocked: ${sub ?? "(unknown)"}`,
+            category: "mutating",
+        };
+    }
+    if (ALWAYS_DENY.has(tok)) {
+        // echo without redirect already allowed via mutation check failure —
+        // but echo is in READONLY and not ALWAYS_DENY. node/python are ALWAYS_DENY.
+        return {
+            permission: "deny",
+            reason: `opaque or dangerous command blocked: ${tok}`,
+            category: tok === "echo" ? "readonly" : "opaque",
+        };
+    }
+    // echo is safe only without redirects (already checked)
+    if (tok === "echo" || tok === "printf") {
+        return {
+            permission: "allow",
+            reason: "read-only echo/printf",
+            category: "readonly",
+        };
+    }
+    if (READONLY_COMMANDS.has(tok)) {
+        // `command` was in READONLY set earlier — removed via ALWAYS_DENY
+        if (tok === "find" && FIND_DELETE_RE.test(cmd)) {
+            return {
+                permission: "deny",
+                reason: "find mutation flags",
+                category: "mutating",
+            };
+        }
+        return {
+            permission: "allow",
+            reason: `allowlisted read-only: ${tok}`,
+            category: "readonly",
+        };
+    }
+    // Unknown first token → deny (fail closed for shell)
+    return {
+        permission: "deny",
+        reason: `unknown shell command blocked: ${tok || "(unparsed)"}`,
+        category: "opaque",
+    };
+}
+//# sourceMappingURL=shell-policy.js.map

package/dist/src/protect/shell-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-policy.js","sourceRoot":"","sources":["../../../src/protect/shell-policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,GAAG;IACH,UAAU;IACV,SAAS;IACT,UAAU;IACV,UAAU;IACV,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,KAAK;IACL,UAAU;IACV,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,OAAO;IACP,UAAU;IACV,OAAO;IACP,OAAO;IACP,IAAI;IACJ,IAAI;CACL,CAAC,CAAC;AACH,0CAA0C;AAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,QAAQ;IACR,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,UAAU;IACV,WAAW;IACX,UAAU;IACV,UAAU;IACV,SAAS;IACT,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,QAAQ,EAAE,8EAA8E;IACxF,UAAU;IACV,aAAa;IACb,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,KAAK;IACL,IAAI;IACJ,UAAU;IACV,OAAO;IACP,QAAQ;IACR,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,KAAK;IACL,KAAK;IACL,SAAS;IACT,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,WAAW;IACX,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,UAAU;IACV,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS,EAAE,sBAAsB;CAClC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GACrB,6HAA6H,CAAC;AAEhI,MAAM,cAAc,GAAG,gCAAgC,CAAC;AAExD,SAAS,mBAAmB,CAAC,GAAW;IACtC,oCAAoC;IACpC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnB,OAAO,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,2BAA2B;IAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACf,wCAAwC;IACxC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,OAAO;SAClB,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1C,OAAO;oBACL,UAAU,EAAE,MAAM;oBAClB,MAAM,EAAE,6BAA6B,CAAC,CAAC,MAAM,EAAE;oBAC/C,QAAQ,EAAE,CAAC,CAAC,QAAQ;iBACrB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,oEAAoE;IACtE,CAAC;IAED,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,8CAA8C;YACtD,QAAQ,EAAE,UAAU;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,iCAAiC;YACzC,QAAQ,EAAE,UAAU;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAE5B,sCAAsC;IACtC,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,sEAAsE;YACtE,OAAO;gBACL,UAAU,EAAE,OAAO;gBACnB,MAAM,EAAE,iBAAiB,GAAG,EAAE;gBAC9B,QAAQ,EAAE,UAAU;aACrB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,2BAA2B,GAAG,IAAI,WAAW,EAAE;YACvD,QAAQ,EAAE,UAAU;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,qEAAqE;QACrE,4EAA4E;QAC5E,OAAO;YACL,UAAU,EAAE,MAAM;YAClB,MAAM,EAAE,wCAAwC,GAAG,EAAE;YACrD,QAAQ,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;SACjD,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO;YACL,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,uBAAuB;YAC/B,QAAQ,EAAE,UAAU;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,kEAAkE;QAClE,IAAI,GAAG,KAAK,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO;gBACL,UAAU,EAAE,MAAM;gBAClB,MAAM,EAAE,qBAAqB;gBAC7B,QAAQ,EAAE,UAAU;aACrB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,0BAA0B,GAAG,EAAE;YACvC,QAAQ,EAAE,UAAU;SACrB,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,OAAO;QACL,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,kCAAkC,GAAG,IAAI,YAAY,EAAE;QAC/D,QAAQ,EAAE,QAAQ;KACnB,CAAC;AACJ,CAAC"}

package/dist/src/protect/status.d.ts

@@ -0,0 +1,11 @@
+export declare function formatProtectStatus(projectRoot: string): Promise<string>;
+export declare function formatSessionsList(projectRoot: string): Promise<string>;
+export declare function formatActionsList(projectRoot: string, sessionId?: string): Promise<string>;
+/**
+ * Classify a path mutation with no CURSOR_HOOK COMPLETED after-match as UNKNOWN_MUTATION.
+ * Does NOT attribute to Cursor.
+ */
+export declare function classifyProtectUnknownMutation(relPath: string, projectRoot: string): Promise<{
+    trusted: boolean;
+    message: string;
+}>;

package/dist/src/protect/status.js

@@ -0,0 +1,165 @@
+import path from "node:path";
+import { loadActiveSession, loadProtectState, listProtectActions, listSessions, saveSession, } from "./store.js";
+import { appendAuditEvent } from "./audit.js";
+import { recordPolicyEvent } from "../enforcement/policy.js";
+function ago(iso) {
+    const ms = Date.now() - new Date(iso).getTime();
+    if (ms < 1000)
+        return "just now";
+    if (ms < 60_000)
+        return `${Math.floor(ms / 1000)} seconds ago`;
+    if (ms < 3600_000)
+        return `${Math.floor(ms / 60_000)} minutes ago`;
+    return `${Math.floor(ms / 3600_000)} hours ago`;
+}
+export async function formatProtectStatus(projectRoot) {
+    const state = await loadProtectState(projectRoot);
+    const session = await loadActiveSession(projectRoot);
+    const actions = await listProtectActions(projectRoot);
+    if (!state?.protected) {
+        return [
+            "REWIND",
+            "",
+            "NOT PROTECTED",
+            `Project: ${projectRoot}`,
+            "",
+            "Run: npm run rewind -- protect <path>",
+        ].join("\n");
+    }
+    const sessionActions = session
+        ? actions.filter((a) => a.protectedSessionId === session.id)
+        : [];
+    const completed = sessionActions.filter((a) => a.status === "COMPLETED");
+    const created = completed.filter((a) => !a.before.exists && a.after.exists);
+    const deleted = completed.filter((a) => a.before.exists && !a.after.exists);
+    const modified = completed.filter((a) => a.before.exists && a.after.exists);
+    const failed = sessionActions.filter((a) => a.status === "FAILED");
+    const prepared = sessionActions.filter((a) => a.status === "PREPARED" || a.status === "EXECUTING");
+    // Drift check vs expected mediated state (lightweight)
+    let trust = session?.trust ?? "AUTHORITATIVE";
+    if (session && session.status === "ACTIVE") {
+        const drift = await detectSessionDrift(projectRoot, session.id);
+        if (drift.untrusted) {
+            trust = "UNTRUSTED";
+            if (session.trust !== "UNTRUSTED") {
+                session.trust = "UNTRUSTED";
+                await saveSession(session, projectRoot);
+            }
+        }
+    }
+    const last = completed.length
+        ? completed.reduce((a, b) => (a.completedAt ?? "") > (b.completedAt ?? "") ? a : b)
+        : null;
+    const lines = [
+        "REWIND",
+        "",
+        "PROTECTED",
+        `Project: ${path.basename(projectRoot)}`,
+        `Root: ${projectRoot}`,
+        `Session: ${session?.id ?? "—"}`,
+        `Client: Cursor`,
+        `Trust: ${trust}`,
+        "",
+        "Actions",
+        `  ${completed.length} completed`,
+        `  ${created.length} created files`,
+        `  ${modified.length} modified files`,
+        `  ${deleted.length} deleted files`,
+        `  ${session?.blockedShellCount ?? 0} shell attempts blocked`,
+        failed.length ? `  ${failed.length} failed` : null,
+        prepared.length
+            ? `  ${prepared.length} incomplete (PREPARED/EXECUTING)`
+            : null,
+        "",
+        "Last action",
+        last
+            ? `  ${last.target}\n  ${ago(last.completedAt ?? last.requestedAt)}`
+            : "  (none)",
+    ];
+    return lines.filter((l) => l !== null).join("\n");
+}
+async function detectSessionDrift(projectRoot, sessionId) {
+    // Compare current hashes of ledgered targets — if a path was never ledgered
+    // but we can't scan whole tree cheaply here, we only flag when an incomplete
+    // action exists OR when a completed after no longer matches AND no newer action.
+    // Full unexplained mutation scan is in classifyProtectDrift.
+    const actions = (await listProtectActions(projectRoot)).filter((a) => a.protectedSessionId === sessionId);
+    const incomplete = actions.filter((a) => a.status === "PREPARED" || a.status === "EXECUTING");
+    if (incomplete.length > 0) {
+        return { untrusted: true, paths: incomplete.map((a) => a.target) };
+    }
+    return { untrusted: false, paths: [] };
+}
+export async function formatSessionsList(projectRoot) {
+    const sessions = await listSessions(projectRoot);
+    const lines = ["REWIND SESSIONS", ""];
+    if (sessions.length === 0) {
+        lines.push("(none)");
+        return lines.join("\n");
+    }
+    for (const s of sessions) {
+        lines.push(`${s.id}  ${s.status.padEnd(18)}  actions=${s.actionIds.length}  trust=${s.trust}  ${s.startedAt}`);
+    }
+    return lines.join("\n");
+}
+export async function formatActionsList(projectRoot, sessionId) {
+    let actions = await listProtectActions(projectRoot);
+    if (sessionId) {
+        actions = actions.filter((a) => a.protectedSessionId === sessionId);
+    }
+    const lines = ["REWIND ACTIONS", ""];
+    if (actions.length === 0) {
+        lines.push("(none)");
+        return lines.join("\n");
+    }
+    for (const a of actions) {
+        lines.push(`${a.id}  ${a.status.padEnd(12)}  ${a.tool.padEnd(18)}  ${a.target}`);
+    }
+    lines.push("");
+    lines.push(`Total: ${actions.length}`);
+    return lines.join("\n");
+}
+/**
+ * Classify a path mutation with no CURSOR_HOOK COMPLETED after-match as UNKNOWN_MUTATION.
+ * Does NOT attribute to Cursor.
+ */
+export async function classifyProtectUnknownMutation(relPath, projectRoot) {
+    const { captureProtectedEntry, snapshotIdentityHash } = await import("./capture.js");
+    const actions = await listProtectActions(projectRoot);
+    const live = await captureProtectedEntry(relPath, projectRoot, {
+        storeContent: false,
+    });
+    const liveHash = snapshotIdentityHash(live);
+    for (const a of [...actions].reverse()) {
+        if (a.status !== "COMPLETED" && a.status !== "UNDONE")
+            continue;
+        if (a.target !== relPath)
+            continue;
+        if (snapshotIdentityHash(a.after) === liveHash) {
+            return { trusted: true, message: `Matches action ${a.id}` };
+        }
+    }
+    const event = await recordPolicyEvent({
+        type: "UNKNOWN_MUTATION",
+        path: relPath,
+        mechanism: "protect-drift",
+        evidence: `No CURSOR_HOOK action explains ${relPath} (live=${liveHash})`,
+        status: "UNTRUSTED",
+    }, projectRoot);
+    await appendAuditEvent({
+        type: "UNKNOWN_MUTATION",
+        path: relPath,
+        detail: event.id,
+    }, projectRoot);
+    const session = await loadActiveSession(projectRoot);
+    if (session) {
+        session.trust = "UNTRUSTED";
+        session.policyEventIds.push(event.id);
+        await saveSession(session, projectRoot);
+    }
+    return {
+        trusted: false,
+        message: `UNKNOWN_MUTATION ${relPath} — not attributed to Cursor`,
+    };
+}
+//# sourceMappingURL=status.js.map

package/dist/src/protect/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/protect/status.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,SAAS,GAAG,CAAC,GAAW;IACtB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,UAAU,CAAC;IACjC,IAAI,EAAE,GAAG,MAAM;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;IAC/D,IAAI,EAAE,GAAG,QAAQ;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC;IACnE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,YAAY,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,WAAmB;IAC3D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAEtD,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;QACtB,OAAO;YACL,QAAQ;YACR,EAAE;YACF,eAAe;YACf,YAAY,WAAW,EAAE;YACzB,EAAE;YACF,uCAAuC;SACxC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,MAAM,cAAc,GAAG,OAAO;QAC5B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,OAAO,CAAC,EAAE,CAAC;QAC5D,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAC3D,CAAC;IAEF,uDAAuD;IACvD,IAAI,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,eAAe,CAAC;IAC9C,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,KAAK,GAAG,WAAW,CAAC;YACpB,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC;gBAC5B,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM;QAC3B,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACxB,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACtD;QACH,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,KAAK,GAAG;QACZ,QAAQ;QACR,EAAE;QACF,WAAW;QACX,YAAY,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QACxC,SAAS,WAAW,EAAE;QACtB,YAAY,OAAO,EAAE,EAAE,IAAI,GAAG,EAAE;QAChC,gBAAgB;QAChB,UAAU,KAAK,EAAE;QACjB,EAAE;QACF,SAAS;QACT,KAAK,SAAS,CAAC,MAAM,YAAY;QACjC,KAAK,OAAO,CAAC,MAAM,gBAAgB;QACnC,KAAK,QAAQ,CAAC,MAAM,iBAAiB;QACrC,KAAK,OAAO,CAAC,MAAM,gBAAgB;QACnC,KAAK,OAAO,EAAE,iBAAiB,IAAI,CAAC,yBAAyB;QAC7D,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI;QAClD,QAAQ,CAAC,MAAM;YACb,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,kCAAkC;YACxD,CAAC,CAAC,IAAI;QACR,EAAE;QACF,aAAa;QACb,IAAI;YACF,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE;YACpE,CAAC,CAAC,UAAU;KACf,CAAC;IAEF,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,WAAmB,EACnB,SAAiB;IAEjB,4EAA4E;IAC5E,6EAA6E;IAC7E,iFAAiF;IACjF,6DAA6D;IAC7D,MAAM,OAAO,GAAG,CAAC,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAC5D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,SAAS,CAC1C,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAC3D,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IAC1D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,MAAM,WAAW,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,SAAS,EAAE,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,SAAkB;IAElB,IAAI,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CACrE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAe,EACf,WAAmB;IAEnB,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAClE,cAAc,CACf,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,WAAW,EAAE;QAC7D,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAE5C,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QAChE,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;YAAE,SAAS;QACnC,IAAI,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,eAAe;QAC1B,QAAQ,EAAE,kCAAkC,OAAO,UAAU,QAAQ,GAAG;QACxE,MAAM,EAAE,WAAW;KACpB,EACD,WAAW,CACZ,CAAC;IACF,MAAM,gBAAgB,CACpB;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK,CAAC,EAAE;KACjB,EACD,WAAW,CACZ,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC;QAC5B,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,oBAAoB,OAAO,6BAA6B;KAClE,CAAC;AACJ,CAAC"}

package/dist/src/protect/store.d.ts

@@ -0,0 +1,20 @@
+import type { ProtectActionRecord, ProtectConfig, ProtectState, ProtectedSession } from "./types.js";
+export declare function newProtectedSessionId(): string;
+export declare function newProtectActionId(): string;
+export declare function protectStatePath(projectRoot: string): string;
+export declare function protectConfigPath(projectRoot: string): string;
+export declare function loadProtectState(projectRoot: string): Promise<ProtectState | null>;
+export declare function saveProtectState(state: ProtectState, projectRoot: string): Promise<void>;
+export declare function loadProtectConfig(projectRoot: string): Promise<ProtectConfig | null>;
+export declare function saveProtectConfig(config: ProtectConfig, projectRoot: string): Promise<void>;
+export declare function sessionPath(id: string, projectRoot: string): string;
+export declare function saveSession(session: ProtectedSession, projectRoot: string): Promise<void>;
+export declare function loadSession(id: string, projectRoot: string): Promise<ProtectedSession>;
+export declare function loadActiveSession(projectRoot: string): Promise<ProtectedSession | null>;
+export declare function listSessions(projectRoot: string): Promise<ProtectedSession[]>;
+export declare function protectActionPath(id: string, projectRoot: string): string;
+export declare function saveProtectAction(action: ProtectActionRecord, projectRoot: string): Promise<void>;
+export declare function loadProtectAction(id: string, projectRoot: string): Promise<ProtectActionRecord>;
+export declare function listProtectActions(projectRoot: string): Promise<ProtectActionRecord[]>;
+export declare function listIncompleteProtectActions(projectRoot: string): Promise<ProtectActionRecord[]>;
+export declare function markIncompleteProtectFailed(projectRoot: string): Promise<number>;