Module watch 

Filesystem-watcher backstop.

Records FS changes even from actions that dodged the hook/shim/MCP, so the timeline and kintsugi undo stay complete — the honest guarantee is “nothing is unrecoverable”, not “nothing runs un-warned”. Observations are sent to the daemon over IPC so its single writer keeps the hash chain intact (never a second concurrent writer racing on prev_hash).

Off by default; opt in with kintsugi watch <path>.

Functions

kind_label

Map a notify event kind to a stable label, or None to ignore it (access events and metadata-only noise are not interesting for the backstop).

run

Watch roots recursively, forwarding each change to the daemon. Long-running.