freeze

Run the freeze command and provide the target directory path when prompted. The path is resolved to an absolute path, saved to a state file, and a PreToolUse hook blocks any Edit or Write outside that boundary for the rest of the session.

Run the freeze command again to set a new directory, or run the unfreeze command to remove the restriction entirely. Ending the session also clears the boundary since it is session-scoped.

No. The freeze hook only intercepts Edit and Write tool calls. Bash commands such as sed can still modify files outside the boundary, so it prevents accidental edits rather than acting as a security boundary.

Only Edit and Write operations are checked against the freeze directory. Read, Bash, Glob, and Grep remain unaffected, so you can still inspect and search files anywhere in the project.

The trailing slash ensures prefix matching is exact, so a freeze on /src does not accidentally allow edits in a sibling directory like /src-old. The setup step normalizes the path before saving it.