Windsurf ran rm -rf node_modules and a full reinstall without asking me

Check the terminal auto-execution setting in Windsurf's settings. If it's on a permissive level, Cascade runs commands without asking. Set it to require approval, or use an allow list with only safe commands (npm run lint, npm test) and put rm on the deny list.

For the lock file: if you use git, git checkout HEAD -- package-lock.json && npm ci puts back the exact old versions.

Without git: look at the old versions in the Local History of package.json if your editor kept it, and pin those manually. It's annoying but doable for two broken packages.

Also: deleting the lock file is almost never the right fix for a conflict. Add that to your rules.

Beyond the lock file: an agent that can run any command unattended can also read your .env and send it anywhere. Keep auto-run off when you're away from the keyboard. Unattended runs belong in a container, not on your main machine.