@rewind-ai/cli 0.6.2

package/dist/src/restore.js

@@ -0,0 +1,141 @@
+import path from "node:path";
+import { rm, lstat, readdir } from "node:fs/promises";
+import { getProjectRoot, getSandboxPath, assertApprovedSandbox, isPathInside, PathSafetyError, } from "./paths.js";
+import { loadCheckpoint } from "./checkpoint.js";
+import { buildManifest, materializeFromCheckpoint, walkTree, toRelativePosix, } from "./manifest.js";
+import { verifyAgainstCheckpoint } from "./verify.js";
+import { Timer } from "./timing.js";
+/**
+ * Restore sandbox to checkpoint state.
+ *
+ * Strategy (correctness-first):
+ * 1. Validate target is approved sandbox.
+ * 2. Load checkpoint.
+ * 3. Remove all current sandbox contents.
+ * 4. Materialize files/dirs/symlinks from checkpoint object store.
+ * 5. Verify byte-for-byte against checkpoint manifest.
+ *
+ * If verification fails, throw — never report success.
+ */
+export async function restoreSandbox(checkpointId = "latest", projectRoot = getProjectRoot(), options = {}) {
+    const totalTimer = new Timer();
+    const shouldVerify = options.verify !== false;
+    const sandbox = getSandboxPath(projectRoot);
+    await assertApprovedSandbox(sandbox, projectRoot);
+    const checkpoint = await loadCheckpoint(checkpointId, projectRoot);
+    // Ensure checkpoint was taken for this sandbox path
+    if (path.resolve(checkpoint.meta.targetPath) !== path.resolve(sandbox)) {
+        throw new PathSafetyError(`Checkpoint target mismatch.\n` +
+            `  Checkpoint: ${checkpoint.meta.targetPath}\n` +
+            `  Sandbox:    ${sandbox}`);
+    }
+    // Validate every manifest path stays inside sandbox when joined
+    for (const entry of checkpoint.manifest.entries) {
+        const abs = path.join(sandbox, entry.path);
+        if (!isPathInside(sandbox, abs)) {
+            throw new PathSafetyError(`Checkpoint entry would escape sandbox: ${entry.path}`);
+        }
+    }
+    const clearTimer = new Timer();
+    await clearSandboxContents(sandbox, projectRoot);
+    const clearMs = clearTimer.elapsedMs();
+    const matTimer = new Timer();
+    try {
+        await materializeFromCheckpoint(checkpoint.directory, checkpoint.manifest, sandbox);
+    }
+    catch (err) {
+        throw new Error(`Restore failed during materialization: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    const materializeMs = matTimer.elapsedMs();
+    let verification;
+    const verifyTimer = new Timer();
+    if (shouldVerify) {
+        verification = await verifyAgainstCheckpoint(checkpoint, projectRoot);
+        if (!verification.ok) {
+            const details = verification.mismatches
+                .slice(0, 20)
+                .map((m) => `  - ${m.path}: ${m.reason}`)
+                .join("\n");
+            throw new Error(`RESTORE FAILED — verification mismatch\n` +
+                `Expected: ${verification.expectedFingerprint}\n` +
+                `Actual:   ${verification.actualFingerprint}\n` +
+                `Mismatches:\n${details}`);
+        }
+    }
+    else {
+        verification = {
+            ok: false,
+            filesChecked: 0,
+            expectedFingerprint: checkpoint.manifest.fingerprint,
+            actualFingerprint: "",
+            mismatches: [],
+            timingsMs: { manifest: 0, compare: 0, total: 0 },
+        };
+    }
+    const verifyMs = verifyTimer.elapsedMs();
+    return {
+        checkpoint,
+        verification,
+        timingsMs: {
+            clear: clearMs,
+            materialize: materializeMs,
+            verify: verifyMs,
+            total: totalTimer.elapsedMs(),
+        },
+    };
+}
+/**
+ * Delete everything inside the sandbox without deleting the sandbox root.
+ * Refuses if any entry resolves outside the sandbox.
+ */
+export async function clearSandboxContents(sandbox, projectRoot = getProjectRoot()) {
+    await assertApprovedSandbox(sandbox, projectRoot);
+    let entries;
+    try {
+        entries = await readdir(sandbox);
+    }
+    catch (err) {
+        throw new Error(`Cannot read sandbox for clear: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    for (const name of entries) {
+        const abs = path.join(sandbox, name);
+        if (!isPathInside(sandbox, abs)) {
+            throw new PathSafetyError(`Refusing to delete outside sandbox: ${abs}`);
+        }
+        // Symlink escape check: if it's a symlink pointing out, still only rm the link itself.
+        await rm(abs, { recursive: true, force: true });
+    }
+    // Confirm empty
+    const left = await readdir(sandbox);
+    if (left.length > 0) {
+        throw new Error(`Failed to clear sandbox; remaining: ${left.join(", ")}`);
+    }
+}
+/**
+ * Incremental restore alternative used for analysis — not the primary path.
+ * Kept for potential future use / tests of selective apply.
+ */
+export async function listExtraneousPaths(sandbox, checkpointPaths) {
+    const all = await walkTree(sandbox);
+    const extra = [];
+    for (const abs of all) {
+        const rel = toRelativePosix(sandbox, abs);
+        if (!checkpointPaths.has(rel)) {
+            extra.push(rel);
+        }
+    }
+    // Delete deepest paths first when applying
+    extra.sort((a, b) => b.length - a.length || b.localeCompare(a));
+    return extra;
+}
+export async function sandboxExists(projectRoot = getProjectRoot()) {
+    try {
+        const st = await lstat(getSandboxPath(projectRoot));
+        return st.isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+export { buildManifest };
+//# sourceMappingURL=restore.js.map

package/dist/src/restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.js","sourceRoot":"","sources":["../../src/restore.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,YAAY,EACZ,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,QAAQ,EACR,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAapC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,eAAkC,QAAQ,EAC1C,WAAW,GAAG,cAAc,EAAE,EAC9B,UAAgC,EAAE;IAElC,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;IAE9C,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAEnE,oDAAoD;IACpD,IACE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,+BAA+B;YAC7B,iBAAiB,UAAU,CAAC,IAAI,CAAC,UAAU,IAAI;YAC/C,iBAAiB,OAAO,EAAE,CAC7B,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,eAAe,CACvB,0CAA0C,KAAK,CAAC,IAAI,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,IAAI,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,yBAAyB,CAC7B,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,QAAQ,EACnB,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IAE3C,IAAI,YAAgC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,KAAK,EAAE,CAAC;IAChC,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,GAAG,MAAM,uBAAuB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU;iBACpC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iBACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;iBACxC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,IAAI,KAAK,CACb,0CAA0C;gBACxC,aAAa,YAAY,CAAC,mBAAmB,IAAI;gBACjD,aAAa,YAAY,CAAC,iBAAiB,IAAI;gBAC/C,gBAAgB,OAAO,EAAE,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,GAAG;YACb,EAAE,EAAE,KAAK;YACT,YAAY,EAAE,CAAC;YACf,mBAAmB,EAAE,UAAU,CAAC,QAAQ,CAAC,WAAW;YACpD,iBAAiB,EAAE,EAAE;YACrB,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;SACjD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;IAEzC,OAAO;QACL,UAAU;QACV,YAAY;QACZ,SAAS,EAAE;YACT,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,aAAa;YAC1B,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,UAAU,CAAC,SAAS,EAAE;SAC9B;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAe,EACf,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAElD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,eAAe,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,uFAAuF;QACvF,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,gBAAgB;IAChB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,eAA4B;IAE5B,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,2CAA2C;IAC3C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAW,GAAG,cAAc,EAAE;IAE9B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/src/sandbox.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Deterministic disposable sandbox generator.
+ * Same seed → same tree (paths + contents).
+ */
+export declare const SANDBOX_SEED = "rewind-v0-sandbox-v1";
+export interface SandboxCreateResult {
+    root: string;
+    fileCount: number;
+    directoryCount: number;
+    symlinkCount: number;
+    totalEntries: number;
+}
+/**
+ * Create (or recreate) the disposable sandbox deterministically.
+ */
+export declare function createSandbox(projectRoot?: string): Promise<SandboxCreateResult>;
+/**
+ * Materialize a planned sandbox tree at an absolute root.
+ * Caller must have already validated the root identity.
+ */
+export declare function materializeSandbox(root: string, seed: string): Promise<SandboxCreateResult>;
+/** Expected file count for tests (stable for current seed plan). */
+export declare function expectedSandboxFileCount(): number;

package/dist/src/sandbox.js

@@ -0,0 +1,198 @@
+import path from "node:path";
+import { mkdir, writeFile, symlink, chmod, rm } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import { getProjectRoot, getSandboxPath, assertSafeRelativePath, isPathInside, PathSafetyError, } from "./paths.js";
+/**
+ * Deterministic disposable sandbox generator.
+ * Same seed → same tree (paths + contents).
+ */
+export const SANDBOX_SEED = "rewind-v0-sandbox-v1";
+function seededBytes(seed, n) {
+    const out = Buffer.alloc(n);
+    let block = seed;
+    let offset = 0;
+    while (offset < n) {
+        const digest = createHash("sha256").update(block).digest();
+        const take = Math.min(digest.length, n - offset);
+        digest.copy(out, offset, 0, take);
+        offset += take;
+        block = digest.toString("hex");
+    }
+    return out;
+}
+function textFromSeed(seed, lines) {
+    const parts = [];
+    for (let i = 0; i < lines; i++) {
+        const h = createHash("sha256").update(`${seed}:${i}`).digest("hex");
+        parts.push(`// line ${i}: ${h.slice(0, 32)}`);
+    }
+    return parts.join("\n") + "\n";
+}
+function planSandbox(seed) {
+    const dirs = new Set();
+    const files = [];
+    const symlinks = [];
+    const addDir = (rel) => {
+        const clean = assertSafeRelativePath(rel);
+        const parts = clean.split("/");
+        let acc = "";
+        for (const p of parts) {
+            acc = acc ? `${acc}/${p}` : p;
+            dirs.add(acc);
+        }
+    };
+    const addFile = (rel, content, mode = 0o644) => {
+        const clean = assertSafeRelativePath(rel);
+        const dir = path.posix.dirname(clean);
+        if (dir !== ".") {
+            addDir(dir);
+        }
+        files.push({ rel: clean, content, mode });
+    };
+    // Base structure
+    const baseDirs = [
+        "src",
+        "src/components",
+        "src/utils",
+        "src/hooks",
+        "data",
+        "data/fixtures",
+        "public",
+        "public/assets",
+        "config",
+        "docs",
+        "nested/level1/level2/level3/level4",
+        "empty-dir",
+        "unicode",
+        "with spaces/sub folder",
+    ];
+    for (const d of baseDirs)
+        addDir(d);
+    // ~120 text/code/json/md/css files
+    for (let i = 0; i < 40; i++) {
+        addFile(`src/components/Component${String(i).padStart(3, "0")}.tsx`, Buffer.from(textFromSeed(`${seed}:component:${i}`, 8) +
+            `export const Component${i} = () => null;\n`, "utf8"));
+    }
+    for (let i = 0; i < 30; i++) {
+        addFile(`src/utils/util_${String(i).padStart(3, "0")}.ts`, Buffer.from(textFromSeed(`${seed}:util:${i}`, 5) +
+            `export function util${i}(x: number): number { return x + ${i}; }\n`, "utf8"));
+    }
+    for (let i = 0; i < 20; i++) {
+        const obj = {
+            id: i,
+            seed,
+            values: Array.from({ length: 5 }, (_, j) => createHash("sha256").update(`${seed}:json:${i}:${j}`).digest("hex").slice(0, 16)),
+        };
+        addFile(`data/fixtures/data-${String(i).padStart(3, "0")}.json`, Buffer.from(JSON.stringify(obj, null, 2) + "\n", "utf8"));
+    }
+    for (let i = 0; i < 15; i++) {
+        addFile(`docs/note-${String(i).padStart(3, "0")}.md`, Buffer.from(`# Note ${i}\n\n${textFromSeed(`${seed}:md:${i}`, 4)}\n`, "utf8"));
+    }
+    for (let i = 0; i < 10; i++) {
+        addFile(`public/assets/style-${String(i).padStart(2, "0")}.css`, Buffer.from(`/* ${seed} style ${i} */\n.block-${i} { color: #${createHash("sha256").update(`${seed}:css:${i}`).digest("hex").slice(0, 6)}; }\n`, "utf8"));
+    }
+    // Config files
+    addFile("config/app.json", Buffer.from(JSON.stringify({ name: "sandbox-test-project", seed, version: 1 }, null, 2) +
+        "\n", "utf8"));
+    addFile("config/settings.ini", Buffer.from(`[app]\nseed=${seed}\ndebug=false\n`, "utf8"));
+    addFile("README.md", Buffer.from(`# Sandbox\n\nSeed: ${seed}\n`, "utf8"));
+    addFile("src/index.ts", Buffer.from(`export const SEED = "${seed}";\n`, "utf8"));
+    // Empty files
+    for (let i = 0; i < 5; i++) {
+        addFile(`data/empty-${i}.txt`, Buffer.alloc(0));
+    }
+    // Filenames with spaces
+    addFile("with spaces/hello world.txt", Buffer.from(`hello from spaced path\n${seed}\n`, "utf8"));
+    addFile("with spaces/sub folder/nested file.ts", Buffer.from(`export const spaced = true;\n`, "utf8"));
+    // Unicode filenames (NFC normalized, safe on macOS APFS)
+    addFile("unicode/café-notes.txt", Buffer.from("café contents\n", "utf8"));
+    addFile("unicode/日本語.txt", Buffer.from("日本語テスト\n", "utf8"));
+    addFile("unicode/emoji-📁-name.txt", Buffer.from("emoji filename ok\n", "utf8"));
+    // Deeply nested
+    addFile("nested/level1/level2/level3/level4/deep.txt", Buffer.from(textFromSeed(`${seed}:deep`, 3), "utf8"));
+    // Small binary fixtures
+    for (let i = 0; i < 8; i++) {
+        addFile(`data/fixtures/bin-${String(i).padStart(2, "0")}.bin`, seededBytes(`${seed}:bin:${i}`, 256 + i * 17), 0o644);
+    }
+    // Executable-ish script (permission 755)
+    addFile("src/utils/run-tool.sh", Buffer.from(`#!/bin/sh\necho "${seed}"\n`, "utf8"), 0o755);
+    // Internal symlink (safe, stays inside sandbox)
+    addDir("links");
+    symlinks.push({
+        rel: "links/to-readme.md",
+        target: "../README.md",
+    });
+    symlinks.push({
+        rel: "links/to-config",
+        target: "../config/app.json",
+    });
+    // Ensure empty-dir exists with no files (dirs set already)
+    return {
+        dirs: [...dirs].sort((a, b) => a.localeCompare(b)),
+        files,
+        symlinks,
+    };
+}
+/**
+ * Create (or recreate) the disposable sandbox deterministically.
+ */
+export async function createSandbox(projectRoot = getProjectRoot()) {
+    const root = getSandboxPath(projectRoot);
+    // Safety: only ever wipe the exact sandbox path under project root.
+    if (path.basename(root) !== "sandbox-test-project") {
+        throw new PathSafetyError("Refusing to create sandbox with unexpected name");
+    }
+    if (path.dirname(root) !== path.resolve(projectRoot)) {
+        throw new PathSafetyError("Sandbox is not directly under project root");
+    }
+    return materializeSandbox(root, SANDBOX_SEED);
+}
+/**
+ * Materialize a planned sandbox tree at an absolute root.
+ * Caller must have already validated the root identity.
+ */
+export async function materializeSandbox(root, seed) {
+    await rm(root, { recursive: true, force: true });
+    await mkdir(root, { recursive: true });
+    const plan = planSandbox(seed);
+    for (const d of plan.dirs) {
+        const abs = path.join(root, d);
+        if (!isPathInside(root, abs)) {
+            throw new PathSafetyError(`Planned dir escapes: ${d}`);
+        }
+        await mkdir(abs, { recursive: true });
+    }
+    for (const f of plan.files) {
+        const abs = path.join(root, f.rel);
+        if (!isPathInside(root, abs)) {
+            throw new PathSafetyError(`Planned file escapes: ${f.rel}`);
+        }
+        await mkdir(path.dirname(abs), { recursive: true });
+        await writeFile(abs, f.content, { mode: f.mode });
+        await chmod(abs, f.mode);
+    }
+    for (const s of plan.symlinks) {
+        const abs = path.join(root, s.rel);
+        if (!isPathInside(root, abs)) {
+            throw new PathSafetyError(`Planned symlink escapes: ${s.rel}`);
+        }
+        const resolved = path.resolve(path.dirname(abs), s.target);
+        if (!isPathInside(root, resolved)) {
+            throw new PathSafetyError(`Symlink target escapes: ${s.rel}`);
+        }
+        await mkdir(path.dirname(abs), { recursive: true });
+        await symlink(s.target, abs);
+    }
+    return {
+        root,
+        fileCount: plan.files.length,
+        directoryCount: plan.dirs.length,
+        symlinkCount: plan.symlinks.length,
+        totalEntries: plan.files.length + plan.dirs.length + plan.symlinks.length,
+    };
+}
+/** Expected file count for tests (stable for current seed plan). */
+export function expectedSandboxFileCount() {
+    return planSandbox(SANDBOX_SEED).files.length;
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/src/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,YAAY,EACZ,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAanD,SAAS,WAAW,CAAC,IAAY,EAAE,CAAS;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,IAAI,IAAI,CAAC;QACf,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAK/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAqB,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAW,EAAE,OAAe,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;QAC7D,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,iBAAiB;IACjB,MAAM,QAAQ,GAAG;QACf,KAAK;QACL,gBAAgB;QAChB,WAAW;QACX,WAAW;QACX,MAAM;QACN,eAAe;QACf,QAAQ;QACR,eAAe;QACf,QAAQ;QACR,MAAM;QACN,oCAAoC;QACpC,WAAW;QACX,SAAS;QACT,wBAAwB;KACzB,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAEpC,mCAAmC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,OAAO,CACL,2BAA2B,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EAC3D,MAAM,CAAC,IAAI,CACT,YAAY,CAAC,GAAG,IAAI,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,yBAAyB,CAAC,kBAAkB,EAC9C,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,OAAO,CACL,kBAAkB,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,EACjD,MAAM,CAAC,IAAI,CACT,YAAY,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,uBAAuB,CAAC,oCAAoC,CAAC,OAAO,EACtE,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG;YACV,EAAE,EAAE,CAAC;YACL,IAAI;YACJ,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACzC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CACjF;SACF,CAAC;QACF,OAAO,CACL,sBAAsB,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,EACvD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CACzD,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,OAAO,CACL,aAAa,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,EAC5C,MAAM,CAAC,IAAI,CACT,UAAU,CAAC,OAAO,YAAY,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EACxD,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,OAAO,CACL,uBAAuB,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EACvD,MAAM,CAAC,IAAI,CACT,MAAM,IAAI,UAAU,CAAC,eAAe,CAAC,cAAc,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EACnI,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IAED,eAAe;IACf,OAAO,CACL,iBAAiB,EACjB,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,EACN,MAAM,CACP,CACF,CAAC;IACF,OAAO,CACL,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,iBAAiB,EAAE,MAAM,CAAC,CAC1D,CAAC;IACF,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEjF,cAAc;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,wBAAwB;IACxB,OAAO,CACL,6BAA6B,EAC7B,MAAM,CAAC,IAAI,CAAC,2BAA2B,IAAI,IAAI,EAAE,MAAM,CAAC,CACzD,CAAC;IACF,OAAO,CACL,uCAAuC,EACvC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,MAAM,CAAC,CACrD,CAAC;IAEF,yDAAyD;IACzD,OAAO,CACL,wBAAwB,EACxB,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CACvC,CAAC;IACF,OAAO,CACL,iBAAiB,EACjB,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAChC,CAAC;IACF,OAAO,CACL,2BAA2B,EAC3B,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAC3C,CAAC;IAEF,gBAAgB;IAChB,OAAO,CACL,6CAA6C,EAC7C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CACrD,CAAC;IAEF,wBAAwB;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,OAAO,CACL,qBAAqB,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EACrD,WAAW,CAAC,GAAG,IAAI,QAAQ,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,EAC7C,KAAK,CACN,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,OAAO,CACL,uBAAuB,EACvB,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,KAAK,EAAE,MAAM,CAAC,EAClD,KAAK,CACN,CAAC;IAEF,gDAAgD;IAChD,MAAM,CAAC,OAAO,CAAC,CAAC;IAChB,QAAQ,CAAC,IAAI,CAAC;QACZ,GAAG,EAAE,oBAAoB;QACzB,MAAM,EAAE,cAAc;KACvB,CAAC,CAAC;IACH,QAAQ,CAAC,IAAI,CAAC;QACZ,GAAG,EAAE,iBAAiB;QACtB,MAAM,EAAE,oBAAoB;KAC7B,CAAC,CAAC;IAEH,2DAA2D;IAE3D,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK;QACL,QAAQ;KACT,CAAC;AACJ,CAAC;AAUD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,WAAW,GAAG,cAAc,EAAE;IAE9B,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAEzC,oEAAoE;IACpE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,sBAAsB,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CAAC,iDAAiD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,IAAY;IAEZ,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CAAC,4BAA4B,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,eAAe,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;QAC5B,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;QAChC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;QAClC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;KAC1E,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,wBAAwB;IACtC,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;AAChD,CAAC"}

package/dist/src/session/ambient.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Known ambient / OS / editor noise patterns.
+ * Filename patterns are EVIDENCE of ambient likelihood — not proof of actor.
+ */
+export interface AmbientMatch {
+    ambient: boolean;
+    label: string;
+    evidence: string;
+}
+export declare function matchAmbientPath(relPath: string): AmbientMatch;

package/dist/src/session/ambient.js

@@ -0,0 +1,53 @@
+/**
+ * Known ambient / OS / editor noise patterns.
+ * Filename patterns are EVIDENCE of ambient likelihood — not proof of actor.
+ */
+const AMBIENT_BASENAMES = new Set([
+    ".ds_store",
+    "thumbs.db",
+    "desktop.ini",
+    ".localized",
+]);
+const AMBIENT_EXACT = new Set([
+    ".ds_store",
+]);
+export function matchAmbientPath(relPath) {
+    const base = relPath.split("/").pop()?.toLowerCase() ?? "";
+    const lower = relPath.toLowerCase();
+    if (AMBIENT_BASENAMES.has(base) || AMBIENT_EXACT.has(lower)) {
+        return {
+            ambient: true,
+            label: "AMBIENT",
+            evidence: `known ambient basename: ${base}`,
+        };
+    }
+    // Editor / tooling temp patterns (still only MEDIUM confidence ambient)
+    if (base.endsWith("~") ||
+        base.endsWith(".swp") ||
+        base.endsWith(".swo") ||
+        /^\.#/.test(base) ||
+        /^#.*#$/.test(base)) {
+        return {
+            ambient: true,
+            label: "AMBIENT",
+            evidence: `editor temp filename pattern: ${base}`,
+        };
+    }
+    if (base.startsWith(".tmp") || base.endsWith(".tmp") || base.includes(".tmp.")) {
+        return {
+            ambient: true,
+            label: "AMBIENT",
+            evidence: `temp filename pattern: ${base}`,
+        };
+    }
+    // Cursor / VS Code sometimes writes these inside workspaces
+    if (lower.includes("/.vscode/") || lower.startsWith(".vscode/")) {
+        return {
+            ambient: true,
+            label: "AMBIENT",
+            evidence: "editor metadata path (.vscode)",
+        };
+    }
+    return { ambient: false, label: "", evidence: "" };
+}
+//# sourceMappingURL=ambient.js.map

package/dist/src/session/ambient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ambient.js","sourceRoot":"","sources":["../../../src/session/ambient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,WAAW;IACX,WAAW;IACX,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEpC,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,2BAA2B,IAAI,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,IACE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EACnB,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,iCAAiC,IAAI,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,0BAA0B,IAAI,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,gCAAgC;SAC3C,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACrD,CAAC"}

package/dist/src/session/attribution.d.ts

@@ -0,0 +1,27 @@
+import type { Change } from "../types.js";
+import type { AttributedChange, AttributionConfidence, AttributionSummary, ObservedEvent, ProcessSnapshot } from "./types.js";
+/**
+ * Correlate authoritative manifest diffs with watcher signals + weak process hints.
+ *
+ * Honesty rules:
+ * - Do NOT label AGENT just because Cursor is running.
+ * - Ambient filename patterns → SYSTEM / MEDIUM with explicit evidence.
+ * - Watcher-only correlation → UNKNOWN / NONE or LOW if temporally near events.
+ * - lsof open-handle matches (if provided via evidence on events) can raise LOW→MEDIUM.
+ * - Without Endpoint Security / responsible-PID metadata, HIGH agent confidence is unreachable.
+ */
+export declare function attributeChanges(options: {
+    changes: Change[];
+    events: ObservedEvent[];
+    processSnapshots: ProcessSnapshot[];
+    /** Optional human-marked paths from concurrent-change test fixtures. */
+    knownHumanPaths?: string[];
+    /** Optional paths known to be written by REWIND's own chaos/tools during a controlled demo. */
+    knownSelfWritePaths?: string[];
+}): {
+    attributed: AttributedChange[];
+    summary: AttributionSummary;
+    overall: AttributionConfidence;
+    notes: string[];
+};
+export declare function printAttributionReport(summary: AttributionSummary, durationLabel: string): void;