@rewind-ai/cli 0.6.2

package/dist/src/protect/store.js

@@ -0,0 +1,170 @@
+import path from "node:path";
+import { mkdir, writeFile, readFile, readdir, rename, } from "node:fs/promises";
+import { randomBytes } from "node:crypto";
+import { getProtectDir, getProtectSessionsDir, getProtectActionsDir, } from "./root-paths.js";
+import { PathSafetyError } from "../paths.js";
+async function writeJsonAtomic(file, data) {
+    await mkdir(path.dirname(file), { recursive: true });
+    const tmp = `${file}.tmp-${process.pid}`;
+    await writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
+    await rename(tmp, file);
+}
+export function newProtectedSessionId() {
+    return `rw_${randomBytes(8).toString("hex")}`;
+}
+export function newProtectActionId() {
+    return `act_${randomBytes(8).toString("hex")}`;
+}
+export function protectStatePath(projectRoot) {
+    return path.join(getProtectDir(projectRoot), "state.json");
+}
+export function protectConfigPath(projectRoot) {
+    return path.join(getProtectDir(projectRoot), "config.json");
+}
+export async function loadProtectState(projectRoot) {
+    try {
+        const raw = await readFile(protectStatePath(projectRoot), "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export async function saveProtectState(state, projectRoot) {
+    await writeJsonAtomic(protectStatePath(projectRoot), state);
+}
+export async function loadProtectConfig(projectRoot) {
+    try {
+        const raw = await readFile(protectConfigPath(projectRoot), "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export async function saveProtectConfig(config, projectRoot) {
+    await writeJsonAtomic(protectConfigPath(projectRoot), config);
+}
+export function sessionPath(id, projectRoot) {
+    if (!/^rw_[A-Za-z0-9]+$/.test(id)) {
+        throw new PathSafetyError(`Invalid session id: ${id}`);
+    }
+    return path.join(getProtectSessionsDir(projectRoot), `${id}.json`);
+}
+export async function saveSession(session, projectRoot) {
+    await mkdir(getProtectSessionsDir(projectRoot), { recursive: true });
+    await writeJsonAtomic(sessionPath(session.id, projectRoot), session);
+    await writeJsonAtomic(path.join(getProtectSessionsDir(projectRoot), "active.json"), { id: session.id });
+    await writeJsonAtomic(path.join(getProtectSessionsDir(projectRoot), "latest.json"), { id: session.id });
+}
+export async function loadSession(id, projectRoot) {
+    try {
+        const raw = await readFile(sessionPath(id, projectRoot), "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new PathSafetyError(`Session not found: ${id}`);
+    }
+}
+export async function loadActiveSession(projectRoot) {
+    try {
+        const raw = await readFile(path.join(getProtectSessionsDir(projectRoot), "active.json"), "utf8");
+        const { id } = JSON.parse(raw);
+        return loadSession(id, projectRoot);
+    }
+    catch {
+        return null;
+    }
+}
+export async function listSessions(projectRoot) {
+    const dir = getProtectSessionsDir(projectRoot);
+    let names;
+    try {
+        names = await readdir(dir);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const n of names) {
+        if (!n.startsWith("rw_") || !n.endsWith(".json"))
+            continue;
+        try {
+            out.push(await loadSession(n.replace(/\.json$/, ""), projectRoot));
+        }
+        catch {
+            /* skip */
+        }
+    }
+    out.sort((a, b) => a.startedAt.localeCompare(b.startedAt));
+    return out;
+}
+export function protectActionPath(id, projectRoot) {
+    if (!/^act_[A-Za-z0-9]+$/.test(id)) {
+        throw new PathSafetyError(`Invalid action id: ${id}`);
+    }
+    return path.join(getProtectActionsDir(projectRoot), `${id}.json`);
+}
+export async function saveProtectAction(action, projectRoot) {
+    await mkdir(getProtectActionsDir(projectRoot), { recursive: true });
+    await writeJsonAtomic(protectActionPath(action.id, projectRoot), action);
+    const { appendFile } = await import("node:fs/promises");
+    await appendFile(path.join(getProtectActionsDir(projectRoot), "index.jsonl"), JSON.stringify({
+        id: action.id,
+        protectedSessionId: action.protectedSessionId,
+        sequence: action.sequence,
+        tool: action.tool,
+        target: action.target,
+        status: action.status,
+        at: action.completedAt ?? action.requestedAt,
+    }) + "\n", "utf8").catch(() => undefined);
+    await writeJsonAtomic(path.join(getProtectActionsDir(projectRoot), "latest.json"), { id: action.id });
+}
+export async function loadProtectAction(id, projectRoot) {
+    try {
+        const raw = await readFile(protectActionPath(id, projectRoot), "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new PathSafetyError(`Action not found: ${id}`);
+    }
+}
+export async function listProtectActions(projectRoot) {
+    const dir = getProtectActionsDir(projectRoot);
+    let names;
+    try {
+        names = await readdir(dir);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const n of names) {
+        if (!n.startsWith("act_") || !n.endsWith(".json"))
+            continue;
+        try {
+            out.push(await loadProtectAction(n.replace(/\.json$/, ""), projectRoot));
+        }
+        catch {
+            /* skip corrupt */
+        }
+    }
+    out.sort((a, b) => a.sequence - b.sequence || a.requestedAt.localeCompare(b.requestedAt));
+    return out;
+}
+export async function listIncompleteProtectActions(projectRoot) {
+    const all = await listProtectActions(projectRoot);
+    return all.filter((a) => a.status === "PREPARED" || a.status === "EXECUTING");
+}
+export async function markIncompleteProtectFailed(projectRoot) {
+    const incomplete = await listIncompleteProtectActions(projectRoot);
+    for (const a of incomplete) {
+        a.status = "FAILED";
+        a.error =
+            a.error ?? "Incomplete action recovered (crash / missing post-hook)";
+        a.completedAt = new Date().toISOString();
+        await writeJsonAtomic(protectActionPath(a.id, projectRoot), a);
+    }
+    return incomplete.length;
+}
+//# sourceMappingURL=store.js.map

package/dist/src/protect/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/protect/store.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,KAAK,EACL,SAAS,EACT,QAAQ,EACR,OAAO,EACP,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAOzB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa;IACxD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAmB,EACnB,WAAmB;IAEnB,MAAM,eAAe,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAqB,EACrB,WAAmB;IAEnB,MAAM,eAAe,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAU,EAAE,WAAmB;IACzD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAyB,EACzB,WAAmB;IAEnB,MAAM,KAAK,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;IACrE,MAAM,eAAe,CACnB,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,EAC5D,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CACnB,CAAC;IACF,MAAM,eAAe,CACnB,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,EAC5D,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CACnB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAU,EACV,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,EAC5D,MAAM,CACP,CAAC;QACF,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QACjD,OAAO,WAAW,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,WAAmB;IAEnB,MAAM,GAAG,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC3D,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,UAAU;QACZ,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAU,EAAE,WAAmB;IAC/D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA2B,EAC3B,WAAmB;IAEnB,MAAM,KAAK,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,MAAM,eAAe,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACxD,MAAM,UAAU,CACd,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,EAC3D,IAAI,CAAC,SAAS,CAAC;QACb,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,EAAE,EAAE,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;KAC7C,CAAC,GAAG,IAAI,EACT,MAAM,CACP,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzB,MAAM,eAAe,CACnB,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,EAC3D,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAU,EACV,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB;IAEnB,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC5D,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CACN,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CACxE,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,WAAmB;IAEnB,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC,MAAM,CACf,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;IACnE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC,CAAC,KAAK;YACL,CAAC,CAAC,KAAK,IAAI,yDAAyD,CAAC;QACvE,CAAC,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC"}

package/dist/src/protect/types.d.ts

@@ -0,0 +1,116 @@
+/** V4 protected Cursor session types. */
+import type { EntrySnapshot } from "../action/types.js";
+export type ProtectedSessionStatus = "ACTIVE" | "COMPLETED" | "PARTIALLY_UNDONE" | "UNDONE" | "CONFLICTED" | "ABORTED";
+export type TrustState = "AUTHORITATIVE" | "UNTRUSTED";
+export interface CursorBinding {
+    conversationId?: string;
+    sessionId?: string;
+    generationId?: string;
+    cursorVersion?: string;
+    model?: string;
+}
+export interface ProtectedSession {
+    id: string;
+    version: 4;
+    projectRoot: string;
+    startedAt: string;
+    endedAt: string | null;
+    status: ProtectedSessionStatus;
+    client: "Cursor";
+    cursor: CursorBinding;
+    actionIds: string[];
+    policyEventIds: string[];
+    blockedShellCount: number;
+    baselineFingerprint: string;
+    finalFingerprint: string | null;
+    trust: TrustState;
+    architecture: "MODEL_A_INTERCEPT";
+}
+export interface ProtectState {
+    version: 4;
+    protected: boolean;
+    projectRoot: string;
+    activeSessionId: string | null;
+    rewindPackageRoot: string;
+    hooksInstalled: boolean;
+    failClosed: boolean;
+    installedAt: string;
+    updatedAt: string;
+    /** Marker entries we added to hooks.json / mcp.json (for safe unprotect). */
+    managedHookEvents: string[];
+    managedMcpServerName: string;
+}
+export interface ProtectConfig {
+    version: 4;
+    projectRoot: string;
+    rewindPackageRoot: string;
+    hookModule: string;
+    architecture: "MODEL_A_INTERCEPT";
+}
+export type AuditEventType = "PROTECTED_SESSION_STARTED" | "PROTECTED_SESSION_ENDED" | "CURSOR_SESSION_STARTED" | "TOOL_REQUESTED" | "ACTION_PREPARED" | "ACTION_COMPLETED" | "ACTION_FAILED" | "SHELL_BLOCKED" | "SHELL_ALLOWED" | "POLICY_VIOLATION" | "UNKNOWN_MUTATION" | "ACTION_UNDONE" | "UNDO_CONFLICT" | "SESSION_UNDO_STARTED" | "SESSION_UNDO_FINISHED" | "CRASH_RECOVERY" | "HOOK_DENY" | "PROTECT_ENABLED" | "PROTECT_DISABLED";
+export interface AuditEvent {
+    type: AuditEventType;
+    time: string;
+    sessionId?: string;
+    actionId?: string;
+    tool?: string;
+    path?: string;
+    detail?: string;
+    [key: string]: unknown;
+}
+export type CursorNativeTool = "Write" | "Delete" | "StrReplace" | "EditNotebook" | "DeleteNotebookCell";
+export type ProtectActionTool = "cursor_Write" | "cursor_Delete" | "cursor_StrReplace" | "cursor_EditNotebook";
+export interface ProtectActionRecord {
+    id: string;
+    version: 4;
+    protectedSessionId: string;
+    sequence: number;
+    source: "CURSOR_HOOK";
+    tool: ProtectActionTool;
+    /** Provenance: Cursor Agent requested this tool during protected session. */
+    provenance: "cursor_agent_tool_request";
+    requestedAt: string;
+    completedAt: string | null;
+    target: string;
+    targets: string[];
+    targetSecondary: string | null;
+    before: EntrySnapshot;
+    after: EntrySnapshot;
+    beforeSecondary: EntrySnapshot | null;
+    afterSecondary: EntrySnapshot | null;
+    reversibility: "REVERSIBLE" | "IRREVERSIBLE";
+    status: "PREPARED" | "EXECUTING" | "COMPLETED" | "FAILED" | "UNDONE" | "CONFLICTED";
+    client: {
+        name: "Cursor";
+        version: string;
+    };
+    cursor: CursorBinding;
+    toolCallId: string | null;
+    error: string | null;
+    undoneAt: string | null;
+    undoVerification: {
+        expectedAfterHash: string | null;
+        actualBeforeUndoHash: string | null;
+        restoredHash: string | null;
+        ok: boolean;
+    } | null;
+    conflict: {
+        expectedHash: string | null;
+        actualHash: string | null;
+        message: string;
+    } | null;
+}
+export interface SessionUndoResult {
+    sessionId: string;
+    undone: number;
+    conflicts: string[];
+    failed: number;
+    status: ProtectedSessionStatus;
+    message: string;
+}
+export interface HookDecision {
+    permission: "allow" | "deny" | "ask";
+    user_message?: string;
+    agent_message?: string;
+    additional_context?: string;
+}

package/dist/src/protect/types.js

@@ -0,0 +1,3 @@
+/** V4 protected Cursor session types. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/protect/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/protect/types.ts"],"names":[],"mappings":"AAAA,yCAAyC"}

package/dist/src/protect/undo-session.d.ts

@@ -0,0 +1,14 @@
+import type { ProtectActionRecord, SessionUndoResult } from "./types.js";
+/**
+ * Undo a single COMPLETED protect action iff current == after.
+ */
+export declare function undoProtectAction(actionId: string, projectRoot: string): Promise<{
+    ok: boolean;
+    conflict: boolean;
+    action: ProtectActionRecord;
+    message: string;
+}>;
+/**
+ * Session undo: newest → oldest. Preserve conflicts; continue independent actions.
+ */
+export declare function undoProtectedSession(sessionId: string, projectRoot: string): Promise<SessionUndoResult>;

package/dist/src/protect/undo-session.js

@@ -0,0 +1,182 @@
+import { captureProtectedEntry, restoreProtectedSnapshot, snapshotIdentityHash, } from "./capture.js";
+import { appendAuditEvent } from "./audit.js";
+import { loadProtectAction, loadSession, listProtectActions, saveProtectAction, saveSession, } from "./store.js";
+import { fingerprintProject } from "./fingerprint.js";
+async function currentMatchesAfter(action, projectRoot) {
+    const now = await captureProtectedEntry(action.target, projectRoot, {
+        storeContent: true,
+    });
+    const expected = snapshotIdentityHash(action.after);
+    const actual = snapshotIdentityHash(now);
+    return { ok: expected === actual, expected, actual };
+}
+/**
+ * Undo a single COMPLETED protect action iff current == after.
+ */
+export async function undoProtectAction(actionId, projectRoot) {
+    const action = await loadProtectAction(actionId, projectRoot);
+    if (action.status === "UNDONE") {
+        return {
+            ok: false,
+            conflict: false,
+            action,
+            message: `Action ${actionId} already UNDONE`,
+        };
+    }
+    if (action.status !== "COMPLETED") {
+        return {
+            ok: false,
+            conflict: false,
+            action,
+            message: `Action ${actionId} status is ${action.status}`,
+        };
+    }
+    const match = await currentMatchesAfter(action, projectRoot);
+    if (!match.ok) {
+        action.status = "CONFLICTED";
+        action.conflict = {
+            expectedHash: match.expected,
+            actualHash: match.actual,
+            message: `UNDO CONFLICT\n\nAction: ${action.id}\nTarget: ${action.target}\n\n` +
+                `Expected after-hash: ${match.expected}\nActual: ${match.actual}\n\n` +
+                `Human/newer work was not overwritten.`,
+        };
+        await saveProtectAction(action, projectRoot);
+        await appendAuditEvent({
+            type: "UNDO_CONFLICT",
+            sessionId: action.protectedSessionId,
+            actionId: action.id,
+            path: action.target,
+        }, projectRoot);
+        return {
+            ok: false,
+            conflict: true,
+            action,
+            message: action.conflict.message,
+        };
+    }
+    await restoreProtectedSnapshot(action.target, action.before, projectRoot);
+    const restored = await captureProtectedEntry(action.target, projectRoot, {
+        storeContent: true,
+    });
+    let ok;
+    let restoredHash;
+    if (!action.before.exists) {
+        ok = !restored.exists;
+        restoredHash = restored.exists ? snapshotIdentityHash(restored) : "ABSENT";
+    }
+    else {
+        restoredHash = snapshotIdentityHash(restored);
+        ok = restoredHash === snapshotIdentityHash(action.before);
+    }
+    action.status = ok ? "UNDONE" : "FAILED";
+    action.undoneAt = new Date().toISOString();
+    action.undoVerification = {
+        expectedAfterHash: match.expected,
+        actualBeforeUndoHash: match.actual,
+        restoredHash,
+        ok,
+    };
+    if (!ok)
+        action.error = "Undo verification failed";
+    await saveProtectAction(action, projectRoot);
+    await appendAuditEvent({
+        type: ok ? "ACTION_UNDONE" : "ACTION_FAILED",
+        sessionId: action.protectedSessionId,
+        actionId: action.id,
+        path: action.target,
+    }, projectRoot);
+    return {
+        ok,
+        conflict: false,
+        action,
+        message: ok
+            ? `Undone ${action.id}: ${action.target}`
+            : `Undo verification failed for ${action.id}`,
+    };
+}
+/**
+ * Session undo: newest → oldest. Preserve conflicts; continue independent actions.
+ */
+export async function undoProtectedSession(sessionId, projectRoot) {
+    const session = await loadSession(sessionId, projectRoot);
+    await appendAuditEvent({
+        type: "SESSION_UNDO_STARTED",
+        sessionId,
+    }, projectRoot);
+    const actions = (await listProtectActions(projectRoot))
+        .filter((a) => a.protectedSessionId === sessionId && a.status === "COMPLETED")
+        .sort((a, b) => b.sequence - a.sequence);
+    let undone = 0;
+    let failed = 0;
+    const conflicts = [];
+    for (const a of actions) {
+        const result = await undoProtectAction(a.id, projectRoot);
+        if (result.conflict) {
+            conflicts.push(a.target);
+        }
+        else if (result.ok) {
+            undone += 1;
+        }
+        else {
+            failed += 1;
+        }
+    }
+    let status;
+    if (conflicts.length > 0 && undone > 0) {
+        status = "PARTIALLY_UNDONE";
+    }
+    else if (conflicts.length > 0 && undone === 0) {
+        status = "CONFLICTED";
+    }
+    else if (failed > 0 && undone > 0) {
+        status = "PARTIALLY_UNDONE";
+    }
+    else if (undone > 0 && conflicts.length === 0 && failed === 0) {
+        status = "UNDONE";
+    }
+    else if (actions.length === 0) {
+        status = "UNDONE";
+    }
+    else {
+        status = "CONFLICTED";
+    }
+    session.status = status;
+    session.endedAt = session.endedAt ?? new Date().toISOString();
+    session.finalFingerprint = await fingerprintProject(projectRoot);
+    await saveSession(session, projectRoot);
+    const message = [
+        "REWIND SESSION UNDO",
+        "",
+        `Session: ${sessionId}`,
+        "",
+        `✓ ${undone} actions undone`,
+        conflicts.length
+            ? `! ${conflicts.length} conflicts preserved`
+            : "✓ no conflicts",
+        failed ? `✗ ${failed} failed` : null,
+        "",
+        conflicts.length ? "Conflicts:" : null,
+        ...conflicts.map((c) => `  ${c}`),
+        conflicts.length ? "" : null,
+        conflicts.length
+            ? "Human/newer work was not overwritten."
+            : null,
+    ]
+        .filter((l) => l !== null)
+        .join("\n");
+    await appendAuditEvent({
+        type: "SESSION_UNDO_FINISHED",
+        sessionId,
+        detail: `undone=${undone} conflicts=${conflicts.length} failed=${failed}`,
+    }, projectRoot);
+    return {
+        sessionId,
+        undone,
+        conflicts,
+        failed,
+        status,
+        message,
+    };
+}
+//# sourceMappingURL=undo-session.js.map

package/dist/src/protect/undo-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"undo-session.js","sourceRoot":"","sources":["../../../src/protect/undo-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC;AAMpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,KAAK,UAAU,mBAAmB,CAChC,MAA2B,EAC3B,WAAmB;IAMnB,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE;QAClE,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,EAAE,EAAE,EAAE,QAAQ,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,WAAmB;IAOnB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE9D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,KAAK;YACf,MAAM;YACN,OAAO,EAAE,UAAU,QAAQ,iBAAiB;SAC7C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,KAAK;YACf,MAAM;YACN,OAAO,EAAE,UAAU,QAAQ,cAAc,MAAM,CAAC,MAAM,EAAE;SACzD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;QAC7B,MAAM,CAAC,QAAQ,GAAG;YAChB,YAAY,EAAE,KAAK,CAAC,QAAQ;YAC5B,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,OAAO,EACL,4BAA4B,MAAM,CAAC,EAAE,aAAa,MAAM,CAAC,MAAM,MAAM;gBACrE,wBAAwB,KAAK,CAAC,QAAQ,aAAa,KAAK,CAAC,MAAM,MAAM;gBACrE,uCAAuC;SAC1C,CAAC;QACF,MAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,gBAAgB,CACpB;YACE,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,MAAM,CAAC,kBAAkB;YACpC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,IAAI,EAAE,MAAM,CAAC,MAAM;SACpB,EACD,WAAW,CACZ,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,IAAI;YACd,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;SACjC,CAAC;IACJ,CAAC;IAED,MAAM,wBAAwB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAE1E,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE;QACvE,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,IAAI,EAAW,CAAC;IAChB,IAAI,YAA2B,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtB,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC9C,EAAE,GAAG,YAAY,KAAK,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzC,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,CAAC,gBAAgB,GAAG;QACxB,iBAAiB,EAAE,KAAK,CAAC,QAAQ;QACjC,oBAAoB,EAAE,KAAK,CAAC,MAAM;QAClC,YAAY;QACZ,EAAE;KACH,CAAC;IACF,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,KAAK,GAAG,0BAA0B,CAAC;IACnD,MAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,MAAM,gBAAgB,CACpB;QACE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;QAC5C,SAAS,EAAE,MAAM,CAAC,kBAAkB;QACpC,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,IAAI,EAAE,MAAM,CAAC,MAAM;KACpB,EACD,WAAW,CACZ,CAAC;IAEF,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,OAAO,EAAE,EAAE;YACT,CAAC,CAAC,UAAU,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE;YACzC,CAAC,CAAC,gCAAgC,MAAM,CAAC,EAAE,EAAE;KAChD,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,WAAmB;IAEnB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,gBAAgB,CACpB;QACE,IAAI,EAAE,sBAAsB;QAC5B,SAAS;KACV,EACD,WAAW,CACZ,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;SACpD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CACjE;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,MAA8B,CAAC;IACnC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,kBAAkB,CAAC;IAC9B,CAAC;SAAM,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,YAAY,CAAC;IACxB,CAAC;SAAM,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,kBAAkB,CAAC;IAC9B,CAAC;SAAM,IAAI,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,YAAY,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IACxB,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,OAAO,CAAC,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG;QACd,qBAAqB;QACrB,EAAE;QACF,YAAY,SAAS,EAAE;QACvB,EAAE;QACF,KAAK,MAAM,iBAAiB;QAC5B,SAAS,CAAC,MAAM;YACd,CAAC,CAAC,KAAK,SAAS,CAAC,MAAM,sBAAsB;YAC7C,CAAC,CAAC,gBAAgB;QACpB,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,SAAS,CAAC,CAAC,CAAC,IAAI;QACpC,EAAE;QACF,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;QACtC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QAC5B,SAAS,CAAC,MAAM;YACd,CAAC,CAAC,uCAAuC;YACzC,CAAC,CAAC,IAAI;KACT;SACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SACzB,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,gBAAgB,CACpB;QACE,IAAI,EAAE,uBAAuB;QAC7B,SAAS;QACT,MAAM,EAAE,UAAU,MAAM,cAAc,SAAS,CAAC,MAAM,WAAW,MAAM,EAAE;KAC1E,EACD,WAAW,CACZ,CAAC;IAEF,OAAO;QACL,SAAS;QACT,MAAM;QACN,SAAS;QACT,MAAM;QACN,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/src/restore.d.ts

@@ -0,0 +1,39 @@
+import { buildManifest } from "./manifest.js";
+import type { Checkpoint, VerificationResult } from "./types.js";
+export interface RestoreResult {
+    checkpoint: Checkpoint;
+    verification: VerificationResult;
+    timingsMs: {
+        clear: number;
+        materialize: number;
+        verify: number;
+        total: number;
+    };
+}
+/**
+ * Restore sandbox to checkpoint state.
+ *
+ * Strategy (correctness-first):
+ * 1. Validate target is approved sandbox.
+ * 2. Load checkpoint.
+ * 3. Remove all current sandbox contents.
+ * 4. Materialize files/dirs/symlinks from checkpoint object store.
+ * 5. Verify byte-for-byte against checkpoint manifest.
+ *
+ * If verification fails, throw — never report success.
+ */
+export declare function restoreSandbox(checkpointId?: string | "latest", projectRoot?: string, options?: {
+    verify?: boolean;
+}): Promise<RestoreResult>;
+/**
+ * Delete everything inside the sandbox without deleting the sandbox root.
+ * Refuses if any entry resolves outside the sandbox.
+ */
+export declare function clearSandboxContents(sandbox: string, projectRoot?: string): Promise<void>;
+/**
+ * Incremental restore alternative used for analysis — not the primary path.
+ * Kept for potential future use / tests of selective apply.
+ */
+export declare function listExtraneousPaths(sandbox: string, checkpointPaths: Set<string>): Promise<string[]>;
+export declare function sandboxExists(projectRoot?: string): Promise<boolean>;
+export { buildManifest };