undo

type Entry struct {
	// Action mirrors the bundle import action ("import", "import-copy",
	// "replace", "update"); it is informational for display.
	Action string `json:"action"`
	// Dest is the absolute path of the file the import wrote.
	Dest string `json:"dest"`
	// WroteSHA is the SHA-256 of the bytes the import wrote to Dest. Reversal only
	// proceeds when Dest still hashes to this, so later edits are never clobbered.
	WroteSHA string `json:"wrote_sha256"`
	// Backup, when set, is the absolute path to a copy of the file that existed at
	// Dest before the import overwrote it (replace and merge-update). Reversal
	// restores it. Empty for a newly created file, which reversal deletes.
	Backup string `json:"backup,omitempty"`
	// BackupSHA is the SHA-256 of the backup's contents, recorded at import time.
	// Reversal refuses to restore a backup whose bytes no longer match, so a
	// swapped or tampered backup can never be written over a session.
	BackupSHA string `json:"backup_sha256,omitempty"`
	// Created is true when the import created a new file (no prior file at Dest),
	// so reversal deletes it rather than restoring a backup.
	Created bool `json:"created"`
	// ThreadID and Preview are carried for a readable undo listing.
	ThreadID string `json:"thread_id,omitempty"`
	Preview  string `json:"preview,omitempty"`
}

type Journal struct {
	Version int     `json:"version"`
	Time    string  `json:"time"` // RFC3339, when the import ran
	Tool    string  `json:"tool"`
	Home    string  `json:"home"`   // agent home root the import wrote into
	Bundle  string  `json:"bundle"` // source bundle path (for display)
	Entries []Entry `json:"entries"`
	// contains filtered or unexported fields
}

type Outcome struct {
	Entry  Entry
	Status string // removed | restored | already-gone | changed | not-regular |
	// backup-missing | backup-changed | error
	Message string
}

type Result struct {
	DryRun   bool
	Removed  int
	Restored int
	Skipped  int
	Outcomes []Outcome
}