@jeger-ai/opengantry 3.6.0 → 3.7.0

package/README.md

@@ -139,6 +139,35 @@ See [`docs/DOMAINS.md`](docs/DOMAINS.md) for adapter details and [`docs/AGENT-GR
 
 ---
 
+## Try it in 60 seconds: `gantry cage`
+
+No setup. Wrap any agent command:
+
+```bash
+npx -p @jeger-ai/opengantry opengantry-cage -- <agent command>
+# installed: gantry cage -- <agent command>
+```
+
+Cage checks once, after the command exits, so use it for one-shot, headless agent runs rather than interactive sessions (install once; `npx` re-resolves the package on each launch):
+
+```bash
+npm install -g @jeger-ai/opengantry
+gantry cage -- claude -p "Fix the failing test in auth.spec.ts"
+gantry cage -- aider --message "Refactor DB queries" --no-auto-commits --yes-always
+
+# single-task shell functions
+c-run() { gantry cage -- claude -p "$*"; }
+a-run() { gantry cage -- aider --message "$*" --no-auto-commits --yes-always; }
+```
+
+Don't alias `claude` or `aider` themselves: both open an interactive REPL, and a protected-file edit early in a long session stays in place (and can be pushed) until you quit. Keep Aider's auto-commits off: cage restores the working tree, not git history or a remote, so a committed or pushed change needs a manual fix.
+
+After the command exits, cage restores changes to CI configs, `.env` / `.env.*`, `.git/config`, `.git/hooks/` (and `core.hooksPath`), and your manifest `forbidden_zones`. Lockfile changes are listed but kept. Exit `3` means something was reverted; otherwise the command's own exit code passes through.
+
+Cage detects and reverts **after** the command exits. It does not see reads, network calls, or writes outside the protected set. For scope enforcement during a run, use missions (below). Details: [`docs/FEATURES.md`](docs/FEATURES.md#zero-config-cage-gantry-cage).
+
+---
+
 ## Feature tour: what to try first
 
 ### 1. Bootstrap a repo
@@ -214,6 +243,8 @@ On failure, external agents ingest `findings[]`:
 }
 ```
 
+**v3.7.0:** zero-config `gantry cage -- <cmd>` (and `npx -p @jeger-ai/opengantry opengantry-cage -- <cmd>`) restores CI configs, `.env*`, git hooks/config and manifest forbidden zones after a one-shot agent run, reports lockfile changes, and exits 3 on tampering. See [Try it in 60 seconds](#try-it-in-60-seconds-gantry-cage).
+
 **v3.6.0:** `gate_adapter: tsc|eslint` fails closed on chained `gate_command`s (`GXT_GATE_ADAPTER_MISCONFIG`). `gantry hooks install` arms the tracked pre-commit hook so `gantry tmvc guard --strict` blocks commits outside the pinned mission. Optional local sqlite-vec contract drift index (`gantry contract embed`, `legislate --from-intent --embedding-file`). See [`docs/CHANGELOG.md`](docs/CHANGELOG.md) upgrade notes.
 
 **v3.5.0:** Cursor MCP uses a byte-identical `./scripts/mcp-launcher.sh` (no mcp.json parity exemption). `gantry verify --format sarif|junit` writes the document only on stdout and diagnostics on stderr ([`docs/CI.md`](docs/CI.md)). `gantry contract preflight` is advisory and fail-open ([ADR-0046](.gitagent/out-of-scope/ADR-0046-experimental-contract-preflight.md)).

package/dist/cli/cage-bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cage-bin.d.ts.map

package/dist/cli/cage-bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-bin.d.ts","sourceRoot":"","sources":["../../src/cli/cage-bin.ts"],"names":[],"mappings":""}

package/dist/cli/cage-bin.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { CLI_VERSION } from "./lib/constants.js";
+import { reportUserFacingError } from "./lib/errors.js";
+import { resetOutputContext } from "./lib/output-context.js";
+import { configureCageCommand } from "./program-cage.js";
+/** Standalone `opengantry-cage [options] -- <command...>`, equivalent to `gantry cage`. */
+resetOutputContext();
+const program = configureCageCommand(new Command("opengantry-cage")).version(CLI_VERSION);
+program.parseAsync(process.argv).catch(reportUserFacingError);
+//# sourceMappingURL=cage-bin.js.map

package/dist/cli/cage-bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-bin.js","sourceRoot":"","sources":["../../src/cli/cage-bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,2FAA2F;AAC3F,kBAAkB,EAAE,CAAC;AACrB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAC1F,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/cli/commands/cage.d.ts

@@ -0,0 +1,8 @@
+export interface CageCliOptions {
+    command: string[];
+    json?: boolean;
+    reportOnly?: boolean;
+    maxFileBytes?: string;
+}
+export declare function runCageCommand(options: CageCliOptions): Promise<void>;
+//# sourceMappingURL=cage.d.ts.map

package/dist/cli/commands/cage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/cage.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AASD,wBAAsB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB3E"}

package/dist/cli/commands/cage.js

@@ -0,0 +1,39 @@
+import { logError, setExitCode } from "../lib/cli-io.js";
+import { emitCliJson, runUserCommandAsync } from "../lib/command-boundary.js";
+import { formatCageReport } from "../lib/cage/cage-report.js";
+import { runCage } from "../lib/cage/cage-run.js";
+function parseMaxFileBytes(raw) {
+    if (raw === undefined)
+        return { ok: true, value: undefined };
+    const t = raw.trim();
+    if (!/^\d+$/.test(t))
+        return { ok: false };
+    return { ok: true, value: Number.parseInt(t, 10) };
+}
+export async function runCageCommand(options) {
+    const command = options.command[0] === "--" ? options.command.slice(1) : options.command;
+    if (command.length === 0) {
+        logError("cage: missing command. Use: gantry cage -- <command...>");
+        setExitCode(2);
+        return;
+    }
+    const max = parseMaxFileBytes(options.maxFileBytes);
+    if (!max.ok) {
+        logError("cage: --max-file-bytes must be a non-negative integer");
+        setExitCode(2);
+        return;
+    }
+    await runUserCommandAsync({ json: options.json }, async () => {
+        const report = await runCage({ command, reportOnly: options.reportOnly, maxFileBytes: max.value });
+        if (options.json) {
+            emitCliJson(report);
+        }
+        else {
+            for (const line of formatCageReport(report))
+                console.error(line);
+        }
+        if (report.exit_code !== 0)
+            setExitCode(report.exit_code);
+    });
+}
+//# sourceMappingURL=cage.js.map

package/dist/cli/commands/cage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage.js","sourceRoot":"","sources":["../../../src/cli/commands/cage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AASlD,SAAS,iBAAiB,CAAC,GAAuB;IAChD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC7D,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QACpE,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,QAAQ,CAAC,uDAAuD,CAAC,CAAC;QAClE,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,WAAW,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC;YAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/lib/cage/cage-process.d.ts

@@ -0,0 +1,18 @@
+export interface CageProcessResult {
+    code: number | null;
+    signal: NodeJS.Signals | null;
+    /** Spawn failure (e.g. ENOENT); the command never ran. */
+    spawnError: string | null;
+}
+/** Shell convention: a child killed by signal N exits 128 + N. */
+export declare function signalExitCode(signal: NodeJS.Signals): number;
+/**
+ * Run the caged command with inherited stdio so interactive agents keep their TTY.
+ *
+ * The cage must outlive the child to diff and revert, so while it runs:
+ * - SIGINT is swallowed here; a terminal Ctrl-C already reaches the child through the
+ *   shared process group, and forwarding it again would double-interrupt.
+ * - SIGTERM / SIGHUP are forwarded to the child instead of killing the cage.
+ */
+export declare function spawnCaged(argv: readonly string[], cwd: string): Promise<CageProcessResult>;
+//# sourceMappingURL=cage-process.d.ts.map

package/dist/cli/lib/cage/cage-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-process.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-process.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,0DAA0D;IAC1D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,kEAAkE;AAClE,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAG7D;AAID;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAkBjG"}

package/dist/cli/lib/cage/cage-process.js

@@ -0,0 +1,39 @@
+import { spawn } from "node:child_process";
+import os from "node:os";
+/** Shell convention: a child killed by signal N exits 128 + N. */
+export function signalExitCode(signal) {
+    const n = os.constants.signals[signal];
+    return typeof n === "number" ? 128 + n : 1;
+}
+const FORWARDED_SIGNALS = ["SIGTERM", "SIGHUP"];
+/**
+ * Run the caged command with inherited stdio so interactive agents keep their TTY.
+ *
+ * The cage must outlive the child to diff and revert, so while it runs:
+ * - SIGINT is swallowed here; a terminal Ctrl-C already reaches the child through the
+ *   shared process group, and forwarding it again would double-interrupt.
+ * - SIGTERM / SIGHUP are forwarded to the child instead of killing the cage.
+ */
+export async function spawnCaged(argv, cwd) {
+    const [command, ...args] = argv;
+    const child = spawn(command, args, { cwd, stdio: "inherit", env: process.env });
+    const ignoreInt = () => { };
+    const forward = (sig) => {
+        child.kill(sig);
+    };
+    process.on("SIGINT", ignoreInt);
+    for (const sig of FORWARDED_SIGNALS)
+        process.on(sig, forward);
+    try {
+        return await new Promise((resolve) => {
+            child.on("error", (err) => resolve({ code: null, signal: null, spawnError: err.message }));
+            child.on("exit", (code, signal) => resolve({ code, signal, spawnError: null }));
+        });
+    }
+    finally {
+        process.off("SIGINT", ignoreInt);
+        for (const sig of FORWARDED_SIGNALS)
+            process.off(sig, forward);
+    }
+}
+//# sourceMappingURL=cage-process.js.map

package/dist/cli/lib/cage/cage-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-process.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AASzB,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,iBAAiB,GAA8B,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB,EAAE,GAAW;IACnE,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAQ,EAAE;QAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,iBAAiB;QAAE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;YACtD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3F,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,iBAAiB;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/cli/lib/cage/cage-report.d.ts

@@ -0,0 +1,54 @@
+import type { CageRuleId } from "./cage-rules.js";
+import type { CageOutcome, CageResolvedChange } from "./cage-revert.js";
+export declare const CAGE_REPORT_SCHEMA: "gantry.cage-report.v1";
+/** Detect-after-the-fact limits, stated in every cage report. */
+export declare const CAGE_LIMITS: readonly string[];
+/** One-line stderr form of {@link CAGE_LIMITS}; `--json` keeps the full list. */
+export declare const CAGE_LIMITS_SUMMARY = "after-exit check only; reads, network calls and writes outside the protected set are not detected";
+/** Printed once under a violation report: the path from cage to project-specific missions. */
+export declare const CAGE_UPGRADE_FOOTER = "Need project-specific boundaries or task contracts? Run: npx -p @jeger-ai/opengantry gantry init";
+export type CageStatus = "ok" | "violations_reverted" | "violations_unresolved" | "runtime_error";
+/** One changed protected path. Digests and outcomes only; never file bodies (ADR-0034). */
+export interface CageReportChange {
+    path: string;
+    kind: "added" | "modified" | "deleted";
+    rule: CageRuleId;
+    sha256_before: string | null;
+    sha256_after: string | null;
+    outcome: CageOutcome;
+    error_code: string | null;
+}
+export interface CageReport {
+    report_schema: typeof CAGE_REPORT_SCHEMA;
+    status: CageStatus;
+    exit_code: number;
+    /** argv[0] only: arguments can carry tokens. */
+    command: string;
+    command_exit_code: number | null;
+    command_signal: string | null;
+    runtime_error: string | null;
+    root: string;
+    revert_mode: "revert" | "report_only";
+    max_file_bytes: number;
+    protected_files: number;
+    manifest_zones: number;
+    changes: CageReportChange[];
+    limits: readonly string[];
+}
+export interface CageReportInput {
+    command: string;
+    commandExitCode: number | null;
+    commandSignal: NodeJS.Signals | null;
+    runtimeError: string | null;
+    root: string;
+    reportOnly: boolean;
+    maxFileBytes: number;
+    protectedFiles: number;
+    manifestZones: number;
+    changes: readonly CageResolvedChange[];
+    signalExitCode: (signal: NodeJS.Signals) => number;
+}
+export declare function buildCageReport(input: CageReportInput): CageReport;
+/** Human summary (stderr), so it never mixes into the wrapped command's stdout. */
+export declare function formatCageReport(report: CageReport): string[];
+//# sourceMappingURL=cage-report.d.ts.map

package/dist/cli/lib/cage/cage-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-report.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAExE,eAAO,MAAM,kBAAkB,EAAG,uBAAgC,CAAC;AAEnE,iEAAiE;AACjE,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAMxC,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,sGACqE,CAAC;AAEtG,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,qGACoE,CAAC;AAErG,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,qBAAqB,GAAG,uBAAuB,GAAG,eAAe,CAAC;AAElG,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IACvC,IAAI,EAAE,UAAU,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,kBAAkB,CAAC;IACzC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,GAAG,aAAa,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACrC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC;CACpD;AAqBD,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,CA0BlE;AAOD,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAoB7D"}

package/dist/cli/lib/cage/cage-report.js

@@ -0,0 +1,87 @@
+export const CAGE_REPORT_SCHEMA = "gantry.cage-report.v1";
+/** Detect-after-the-fact limits, stated in every cage report. */
+export const CAGE_LIMITS = [
+    "detects protected-path writes after the command exits; it does not block them while it runs",
+    "reads are not detected: the command can still read .env and other secrets",
+    "network and API side effects are not detected",
+    "writes outside the protected set, and outside the repository, are not checked",
+    "background processes that outlive the command can still write after the check",
+];
+/** One-line stderr form of {@link CAGE_LIMITS}; `--json` keeps the full list. */
+export const CAGE_LIMITS_SUMMARY = "after-exit check only; reads, network calls and writes outside the protected set are not detected";
+/** Printed once under a violation report: the path from cage to project-specific missions. */
+export const CAGE_UPGRADE_FOOTER = "Need project-specific boundaries or task contracts? Run: npx -p @jeger-ai/opengantry gantry init";
+const VIOLATION_EXIT_CODE = 3;
+const RUNTIME_ERROR_EXIT_CODE = 2;
+const RESOLVED_OUTCOMES = new Set(["reverted", "removed"]);
+function cageStatus(input) {
+    const violations = input.changes.filter((c) => c.mode === "revert");
+    if (violations.length > 0) {
+        return violations.every((c) => RESOLVED_OUTCOMES.has(c.outcome)) ? "violations_reverted" : "violations_unresolved";
+    }
+    return input.runtimeError ? "runtime_error" : "ok";
+}
+function cageExitCode(status, input) {
+    if (status === "violations_reverted" || status === "violations_unresolved")
+        return VIOLATION_EXIT_CODE;
+    if (status === "runtime_error")
+        return RUNTIME_ERROR_EXIT_CODE;
+    if (input.commandSignal)
+        return input.signalExitCode(input.commandSignal);
+    return input.commandExitCode ?? RUNTIME_ERROR_EXIT_CODE;
+}
+export function buildCageReport(input) {
+    const status = cageStatus(input);
+    return {
+        report_schema: CAGE_REPORT_SCHEMA,
+        status,
+        exit_code: cageExitCode(status, input),
+        command: input.command,
+        command_exit_code: input.commandExitCode,
+        command_signal: input.commandSignal,
+        runtime_error: input.runtimeError,
+        root: input.root,
+        revert_mode: input.reportOnly ? "report_only" : "revert",
+        max_file_bytes: input.maxFileBytes,
+        protected_files: input.protectedFiles,
+        manifest_zones: input.manifestZones,
+        changes: input.changes.map((c) => ({
+            path: c.rel,
+            kind: c.kind,
+            rule: c.rule,
+            sha256_before: c.before?.sha256 ?? null,
+            sha256_after: c.after?.sha256 ?? null,
+            outcome: c.outcome,
+            error_code: c.errorCode,
+        })),
+        limits: CAGE_LIMITS,
+    };
+}
+function changeLine(c) {
+    const err = c.error_code ? ` ${c.error_code}` : "";
+    return `  ${c.outcome.padEnd(13)} ${c.kind.padEnd(8)} ${c.path} (${c.rule})${err}`;
+}
+/** Human summary (stderr), so it never mixes into the wrapped command's stdout. */
+export function formatCageReport(report) {
+    const lines = [];
+    const n = report.changes.length;
+    if (report.runtime_error)
+        lines.push(`cage: command did not run: ${report.runtime_error}`);
+    if (n === 0) {
+        lines.push(`cage: ${report.status} — ${String(report.protected_files)} protected file(s) unchanged`);
+    }
+    else {
+        lines.push(`cage: ${report.status} — ${String(n)} protected change(s)`);
+        for (const c of report.changes)
+            lines.push(changeLine(c));
+    }
+    if (report.changes.some((c) => c.outcome === "detect_only")) {
+        lines.push(`cage: detect_only files exceeded the ${String(report.max_file_bytes)}-byte per-file cap or the total snapshot budget and were not restored`);
+    }
+    lines.push(`cage: exit ${String(report.exit_code)}; limits: ${CAGE_LIMITS_SUMMARY}`);
+    if (report.status === "violations_reverted" || report.status === "violations_unresolved") {
+        lines.push(`cage: ${CAGE_UPGRADE_FOOTER}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=cage-report.js.map

package/dist/cli/lib/cage/cage-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-report.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-report.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAgC,CAAC;AAEnE,iEAAiE;AACjE,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,6FAA6F;IAC7F,2EAA2E;IAC3E,+CAA+C;IAC/C,+EAA+E;IAC/E,+EAA+E;CAChF,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAC9B,mGAAmG,CAAC;AAEtG,8FAA8F;AAC9F,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kGAAkG,CAAC;AA+CrG,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,iBAAiB,GAA6B,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAErF,SAAS,UAAU,CAAC,KAAsB;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IACrH,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB,EAAE,KAAsB;IAC9D,IAAI,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,uBAAuB;QAAE,OAAO,mBAAmB,CAAC;IACvG,IAAI,MAAM,KAAK,eAAe;QAAE,OAAO,uBAAuB,CAAC;IAC/D,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC,eAAe,IAAI,uBAAuB,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO;QACL,aAAa,EAAE,kBAAkB;QACjC,MAAM;QACN,SAAS,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,iBAAiB,EAAE,KAAK,CAAC,eAAe;QACxC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;QACxD,cAAc,EAAE,KAAK,CAAC,YAAY;QAClC,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,IAAI,EAAE,CAAC,CAAC,GAAG;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI;YACvC,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI;YACrC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,UAAU,EAAE,CAAC,CAAC,SAAS;SACxB,CAAC,CAAC;QACH,MAAM,EAAE,WAAW;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAmB;IACrC,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;AACrF,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IAChC,IAAI,MAAM,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAC;IACvG,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,EAAE,CAAC;QAC5D,KAAK,CAAC,IAAI,CACR,wCAAwC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,uEAAuE,CAC7I,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,mBAAmB,EAAE,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,qBAAqB,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/lib/cage/cage-revert.d.ts

@@ -0,0 +1,18 @@
+import type { CageChange } from "./cage-snapshot.js";
+/**
+ * - `reverted`: baseline bytes (or symlink) restored
+ * - `removed`: an added file was deleted
+ * - `kept`: report-only rule (lockfiles); change left in place
+ * - `reported`: `--report-only` run; change left in place
+ * - `detect_only`: no baseline bytes (over size cap or budget); change left in place
+ * - `revert_failed`: restore attempted and failed (`error_code` says why)
+ */
+export type CageOutcome = "reverted" | "removed" | "kept" | "reported" | "detect_only" | "revert_failed";
+export interface CageResolvedChange extends CageChange {
+    outcome: CageOutcome;
+    errorCode: string | null;
+}
+export declare function resolveCageChanges(changes: readonly CageChange[], opts: {
+    reportOnly: boolean;
+}): CageResolvedChange[];
+//# sourceMappingURL=cage-revert.d.ts.map

package/dist/cli/lib/cage/cage-revert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-revert.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-revert.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,oBAAoB,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,CAAC;AAEzG,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AA0CD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,IAAI,EAAE;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,GAC5B,kBAAkB,EAAE,CAUtB"}

package/dist/cli/lib/cage/cage-revert.js

@@ -0,0 +1,56 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+function errnoCode(err) {
+    const code = err?.code;
+    return typeof code === "string" ? code : "ERROR";
+}
+/** Write to a sibling temp file and rename over the target so a failed restore never truncates it. */
+function restoreFile(abs, entry, bytes) {
+    fs.mkdirSync(path.dirname(abs), { recursive: true });
+    const tmp = `${abs}.gantry-cage-${String(process.pid)}-${crypto.randomBytes(4).toString("hex")}`;
+    try {
+        fs.writeFileSync(tmp, bytes, { mode: entry.fileMode });
+        fs.chmodSync(tmp, entry.fileMode);
+        fs.renameSync(tmp, abs);
+    }
+    catch (err) {
+        fs.rmSync(tmp, { force: true });
+        throw err;
+    }
+}
+function restoreSymlink(abs, target) {
+    fs.mkdirSync(path.dirname(abs), { recursive: true });
+    fs.rmSync(abs, { force: true });
+    fs.symlinkSync(target, abs);
+}
+function revertChange(change) {
+    if (change.kind === "added") {
+        fs.rmSync(change.abs, { force: true });
+        return "removed";
+    }
+    const before = change.before;
+    if (before.type === "symlink") {
+        restoreSymlink(change.abs, before.linkTarget);
+        return "reverted";
+    }
+    if (!before.bytes)
+        return "detect_only";
+    restoreFile(change.abs, before, before.bytes);
+    return "reverted";
+}
+export function resolveCageChanges(changes, opts) {
+    return changes.map((change) => {
+        if (change.mode === "report")
+            return { ...change, outcome: "kept", errorCode: null };
+        if (opts.reportOnly)
+            return { ...change, outcome: "reported", errorCode: null };
+        try {
+            return { ...change, outcome: revertChange(change), errorCode: null };
+        }
+        catch (err) {
+            return { ...change, outcome: "revert_failed", errorCode: errnoCode(err) };
+        }
+    });
+}
+//# sourceMappingURL=cage-revert.js.map

package/dist/cli/lib/cage/cage-revert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-revert.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-revert.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAkB7B,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,IAAI,GAAI,GAAoC,EAAE,IAAI,CAAC;IACzD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACnD,CAAC;AAED,sGAAsG;AACtG,SAAS,WAAW,CAAC,GAAW,EAAE,KAAgB,EAAE,KAAa;IAC/D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,GAAG,gBAAgB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACjG,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,MAAc;IACjD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB;IACtC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAO,CAAC;IAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,UAAW,CAAC,CAAC;QAC/C,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,aAAa,CAAC;IACxC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA8B,EAC9B,IAA6B;IAE7B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACrF,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAChF,IAAI,CAAC;YACH,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/lib/cage/cage-rules.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Zero-config protected set for `gantry cage`. Paths are matched without any
+ * manifest; manifest `forbidden_zones` are unioned in when the repo has one.
+ */
+export type CageRuleId = "ci_config" | "secrets" | "git_control" | "lockfile" | "manifest_forbidden_zone";
+/** `revert`: restore baseline bytes and fail. `report`: list the change but keep it. */
+export type CageRuleMode = "revert" | "report";
+export declare const CAGE_RULE_MODES: Readonly<Record<CageRuleId, CageRuleMode>>;
+/** Directory names skipped by the whole-tree basename scan (dependency and VCS bulk). */
+export declare const CAGE_SCAN_SKIP_DIRS: ReadonlySet<string>;
+/** A file or directory tree protected by absolute path. */
+export interface CageTarget {
+    abs: string;
+    rule: CageRuleId;
+}
+export interface CagePlan {
+    root: string;
+    targets: CageTarget[];
+    manifestZoneCount: number;
+}
+/** Rule for a file found by the whole-tree scan, keyed on its basename. */
+export declare function cageBasenameRule(name: string): CageRuleId | null;
+export declare function buildCagePlan(root: string): CagePlan;
+//# sourceMappingURL=cage-rules.d.ts.map

package/dist/cli/lib/cage/cage-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-rules.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-rules.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,yBAAyB,CAAC;AAE1G,wFAAwF;AACxF,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE/C,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAOtE,CAAC;AAqBF,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAMlD,CAAC;AAEH,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAIhE;AAwCD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAQpD"}

package/dist/cli/lib/cage/cage-rules.js

@@ -0,0 +1,94 @@
+import fs from "node:fs";
+import path from "node:path";
+import { REL_MANIFEST } from "../constants.js";
+import { gitRun } from "../git/git.js";
+import { loadManifest } from "../manifest.js";
+export const CAGE_RULE_MODES = {
+    ci_config: "revert",
+    secrets: "revert",
+    git_control: "revert",
+    // Package managers legitimately rewrite lockfiles; surface the change, never undo it.
+    lockfile: "report",
+    manifest_forbidden_zone: "revert",
+};
+/** Root-anchored CI paths (files or directory trees). */
+const CI_CONFIG_PATHS = [".github/workflows", ".gitlab-ci.yml", ".circleci", "azure-pipelines.yml"];
+const LOCKFILE_NAMES = new Set([
+    "package-lock.json",
+    "npm-shrinkwrap.json",
+    "pnpm-lock.yaml",
+    "yarn.lock",
+    "bun.lock",
+    "bun.lockb",
+    "Cargo.lock",
+    "poetry.lock",
+    "Pipfile.lock",
+    "uv.lock",
+    "go.sum",
+    "Gemfile.lock",
+    "composer.lock",
+]);
+/** Directory names skipped by the whole-tree basename scan (dependency and VCS bulk). */
+export const CAGE_SCAN_SKIP_DIRS = new Set([
+    "node_modules",
+    ".git",
+    ".venv",
+    "venv",
+    "__pycache__",
+]);
+/** Rule for a file found by the whole-tree scan, keyed on its basename. */
+export function cageBasenameRule(name) {
+    if (name === ".env" || (name.startsWith(".env.") && name !== ".env.example"))
+        return "secrets";
+    if (LOCKFILE_NAMES.has(name))
+        return "lockfile";
+    return null;
+}
+function rootJoin(root, posixRel) {
+    return path.join(root, ...posixRel.split("/"));
+}
+function gitPathAbs(root, args) {
+    const r = gitRun(root, ["rev-parse", "--path-format=absolute", ...args]);
+    const out = r.stdout.trim();
+    return r.ok && out ? out : null;
+}
+/** `.git/config`, `.git/hooks/`, and the active `core.hooksPath` when it differs. */
+function gitControlTargets(root) {
+    const common = gitPathAbs(root, ["--git-common-dir"]);
+    if (!common)
+        return [];
+    const out = [path.join(common, "config"), path.join(common, "hooks")];
+    const activeHooks = gitPathAbs(root, ["--git-path", "hooks"]);
+    if (activeHooks)
+        out.push(activeHooks);
+    return [...new Set(out.map((p) => path.resolve(p)))];
+}
+/**
+ * Union of every skill's `forbidden_zones` when a manifest exists. An unreadable or
+ * invalid manifest throws so cage fails closed before the wrapped command runs.
+ */
+function manifestZoneTargets(root) {
+    if (!fs.existsSync(rootJoin(root, REL_MANIFEST)))
+        return [];
+    const manifest = loadManifest(root);
+    const zones = new Set();
+    for (const skill of Object.values(manifest.skills)) {
+        for (const raw of skill.forbidden_zones ?? []) {
+            const norm = raw.trim().replace(/\\/g, "/").replace(/\/+$/, "");
+            if (!norm || norm.startsWith("/") || norm.split("/").includes(".."))
+                continue;
+            zones.add(norm);
+        }
+    }
+    return [...zones].sort().map((z) => rootJoin(root, z));
+}
+export function buildCagePlan(root) {
+    const zones = manifestZoneTargets(root);
+    const targets = [
+        ...CI_CONFIG_PATHS.map((rel) => ({ abs: rootJoin(root, rel), rule: "ci_config" })),
+        ...gitControlTargets(root).map((abs) => ({ abs, rule: "git_control" })),
+        ...zones.map((abs) => ({ abs, rule: "manifest_forbidden_zone" })),
+    ];
+    return { root, targets, manifestZoneCount: zones.length };
+}
+//# sourceMappingURL=cage-rules.js.map

package/dist/cli/lib/cage/cage-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-rules.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAW9C,MAAM,CAAC,MAAM,eAAe,GAA+C;IACzE,SAAS,EAAE,QAAQ;IACnB,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,QAAQ;IACrB,sFAAsF;IACtF,QAAQ,EAAE,QAAQ;IAClB,uBAAuB,EAAE,QAAQ;CAClC,CAAC;AAEF,yDAAyD;AACzD,MAAM,eAAe,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,WAAW,EAAE,qBAAqB,CAAU,CAAC;AAE7G,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,mBAAmB;IACnB,qBAAqB;IACrB,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,WAAW;IACX,YAAY;IACZ,aAAa;IACb,cAAc;IACd,SAAS;IACT,QAAQ;IACR,cAAc;IACd,eAAe;CAChB,CAAC,CAAC;AAEH,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IAC9D,cAAc;IACd,MAAM;IACN,OAAO;IACP,MAAM;IACN,aAAa;CACd,CAAC,CAAC;AAcH,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,KAAK,cAAc,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAc;IAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,qFAAqF;AACrF,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,IAAI,WAAW;QAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC9E,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAiB;QAC5B,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,CAAC,CAAC;QAC3F,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,aAAsB,EAAE,CAAC,CAAC;QAChF,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAkC,EAAE,CAAC,CAAC;KAC3E,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC5D,CAAC"}

package/dist/cli/lib/cage/cage-run.d.ts

@@ -0,0 +1,21 @@
+import { type CageReport } from "./cage-report.js";
+/** Per-file in-memory snapshot cap; larger revert-mode files are detect-only. */
+export declare const CAGE_DEFAULT_MAX_FILE_BYTES: number;
+/** Total in-memory snapshot budget across all protected files. */
+export declare const CAGE_DEFAULT_MAX_TOTAL_BYTES: number;
+export interface CageRunOptions {
+    command: readonly string[];
+    /** Working directory for the command; the cage root is its git top-level, else this dir. */
+    cwd?: string;
+    reportOnly?: boolean;
+    maxFileBytes?: number;
+    maxTotalBytes?: number;
+}
+/** Zero-config root: the enclosing git work tree when there is one, otherwise the directory itself. */
+export declare function resolveCageRoot(cwd: string): string;
+/**
+ * Snapshot the protected set, run the command, diff, and revert protected changes.
+ * Bytes stay in memory only; nothing is written outside the restored paths.
+ */
+export declare function runCage(opts: CageRunOptions): Promise<CageReport>;
+//# sourceMappingURL=cage-run.d.ts.map

package/dist/cli/lib/cage/cage-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-run.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-run.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAMpE,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,QAAkB,CAAC;AAC3D,kEAAkE;AAClE,eAAO,MAAM,4BAA4B,QAAmB,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,4FAA4F;IAC5F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CA2BvE"}

package/dist/cli/lib/cage/cage-run.js

@@ -0,0 +1,51 @@
+import path from "node:path";
+import { getRepoRoot } from "../git/git.js";
+import { buildCageReport } from "./cage-report.js";
+import { resolveCageChanges } from "./cage-revert.js";
+import { buildCagePlan } from "./cage-rules.js";
+import { diffCageSnapshots, takeCageSnapshot } from "./cage-snapshot.js";
+import { signalExitCode, spawnCaged } from "./cage-process.js";
+/** Per-file in-memory snapshot cap; larger revert-mode files are detect-only. */
+export const CAGE_DEFAULT_MAX_FILE_BYTES = 5 * 1024 * 1024;
+/** Total in-memory snapshot budget across all protected files. */
+export const CAGE_DEFAULT_MAX_TOTAL_BYTES = 64 * 1024 * 1024;
+/** Zero-config root: the enclosing git work tree when there is one, otherwise the directory itself. */
+export function resolveCageRoot(cwd) {
+    try {
+        return getRepoRoot(cwd);
+    }
+    catch {
+        return path.resolve(cwd);
+    }
+}
+/**
+ * Snapshot the protected set, run the command, diff, and revert protected changes.
+ * Bytes stay in memory only; nothing is written outside the restored paths.
+ */
+export async function runCage(opts) {
+    const cwd = path.resolve(opts.cwd ?? process.cwd());
+    const root = resolveCageRoot(cwd);
+    const maxFileBytes = opts.maxFileBytes ?? CAGE_DEFAULT_MAX_FILE_BYTES;
+    const maxTotalBytes = opts.maxTotalBytes ?? CAGE_DEFAULT_MAX_TOTAL_BYTES;
+    const reportOnly = opts.reportOnly === true;
+    // Plan before spawning: an invalid manifest fails closed and the command never runs.
+    const plan = buildCagePlan(root);
+    const before = takeCageSnapshot(plan, { keepBytes: !reportOnly, maxFileBytes, maxTotalBytes });
+    const proc = await spawnCaged(opts.command, cwd);
+    const after = takeCageSnapshot(plan, { keepBytes: false, maxFileBytes, maxTotalBytes });
+    const changes = resolveCageChanges(diffCageSnapshots(before, after), { reportOnly });
+    return buildCageReport({
+        command: opts.command[0] ?? "",
+        commandExitCode: proc.code,
+        commandSignal: proc.signal,
+        runtimeError: proc.spawnError,
+        root,
+        reportOnly,
+        maxFileBytes,
+        protectedFiles: before.entries.size,
+        manifestZones: plan.manifestZoneCount,
+        changes,
+        signalExitCode,
+    });
+}
+//# sourceMappingURL=cage-run.js.map

package/dist/cli/lib/cage/cage-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-run.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-run.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/D,iFAAiF;AACjF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3D,kEAAkE;AAClE,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAW7D,uGAAuG;AACvG,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAoB;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,2BAA2B,CAAC;IACtE,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,4BAA4B,CAAC;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IAE5C,qFAAqF;IACrF,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAErF,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE;QAC9B,eAAe,EAAE,IAAI,CAAC,IAAI;QAC1B,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,IAAI;QACJ,UAAU;QACV,YAAY;QACZ,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACnC,aAAa,EAAE,IAAI,CAAC,iBAAiB;QACrC,OAAO;QACP,cAAc;KACf,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/lib/cage/cage-snapshot.d.ts

@@ -0,0 +1,36 @@
+import { type CagePlan, type CageRuleId, type CageRuleMode } from "./cage-rules.js";
+export interface CageEntry {
+    abs: string;
+    /** POSIX path relative to the cage root (may start with `../` for a linked worktree git dir). */
+    rel: string;
+    rule: CageRuleId;
+    mode: CageRuleMode;
+    type: "file" | "symlink";
+    sha256: string;
+    size: number;
+    fileMode: number;
+    /** Baseline bytes for revert; null when over the size cap, budget, or report-only. */
+    bytes: Buffer | null;
+    linkTarget: string | null;
+}
+export interface CageSnapshot {
+    entries: Map<string, CageEntry>;
+}
+export interface CageSnapshotOptions {
+    /** Keep file bytes in memory so the snapshot can restore them. */
+    keepBytes: boolean;
+    maxFileBytes: number;
+    maxTotalBytes: number;
+}
+export interface CageChange {
+    abs: string;
+    rel: string;
+    kind: "added" | "modified" | "deleted";
+    rule: CageRuleId;
+    mode: CageRuleMode;
+    before: CageEntry | null;
+    after: CageEntry | null;
+}
+export declare function takeCageSnapshot(plan: CagePlan, opts: CageSnapshotOptions): CageSnapshot;
+export declare function diffCageSnapshots(before: CageSnapshot, after: CageSnapshot): CageChange[];
+//# sourceMappingURL=cage-snapshot.d.ts.map

package/dist/cli/lib/cage/cage-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-snapshot.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-snapshot.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IACvC,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;CACzB;AA+FD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,GAAG,YAAY,CAQxF;AAOD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,UAAU,EAAE,CAezF"}

package/dist/cli/lib/cage/cage-snapshot.js

@@ -0,0 +1,128 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { toPosixRel } from "../cli-io.js";
+import { CAGE_RULE_MODES, CAGE_SCAN_SKIP_DIRS, cageBasenameRule, } from "./cage-rules.js";
+const HASH_CHUNK_BYTES = 1024 * 1024;
+function sha256Hex(data) {
+    return crypto.createHash("sha256").update(data).digest("hex");
+}
+/** Streamed hash so files over the in-memory cap are still change-detected. */
+function hashFileChunked(abs) {
+    const hash = crypto.createHash("sha256");
+    const fd = fs.openSync(abs, "r");
+    try {
+        const buf = Buffer.alloc(HASH_CHUNK_BYTES);
+        let n;
+        while ((n = fs.readSync(fd, buf, 0, buf.length, null)) > 0) {
+            hash.update(buf.subarray(0, n));
+        }
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    return hash.digest("hex");
+}
+function readEntry(abs, rule, ctx) {
+    const st = fs.lstatSync(abs);
+    const mode = CAGE_RULE_MODES[rule];
+    const base = { abs, rel: toPosixRel(ctx.root, abs), rule, mode, fileMode: st.mode & 0o7777 };
+    if (st.isSymbolicLink()) {
+        const target = fs.readlinkSync(abs);
+        return { ...base, type: "symlink", sha256: sha256Hex(`symlink\0${target}`), size: 0, bytes: null, linkTarget: target };
+    }
+    if (!st.isFile())
+        return null;
+    const keep = ctx.opts.keepBytes && mode === "revert" && st.size <= ctx.opts.maxFileBytes && st.size <= ctx.budget;
+    if (!keep) {
+        return { ...base, type: "file", sha256: hashFileChunked(abs), size: st.size, bytes: null, linkTarget: null };
+    }
+    // One read for hash and bytes, so the restored content is exactly what was hashed.
+    const bytes = fs.readFileSync(abs);
+    ctx.budget -= bytes.length;
+    return { ...base, type: "file", sha256: sha256Hex(bytes), size: bytes.length, bytes, linkTarget: null };
+}
+function captureEntry(abs, rule, ctx) {
+    const existing = ctx.entries.get(abs);
+    // A path matched by several rules keeps the strictest one (revert beats report).
+    if (existing && (existing.mode === "revert" || CAGE_RULE_MODES[rule] === "report"))
+        return;
+    try {
+        const entry = readEntry(abs, rule, ctx);
+        if (entry)
+            ctx.entries.set(abs, entry);
+    }
+    catch {
+        // Vanished or unreadable between listing and reading: not part of this snapshot.
+    }
+}
+/** Visit files and symlinks under `absDir` without following directory symlinks. */
+function walkTree(absDir, skipDirs, visit) {
+    let dirents;
+    try {
+        dirents = fs.readdirSync(absDir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const d of dirents) {
+        const child = path.join(absDir, d.name);
+        if (d.isDirectory()) {
+            if (!skipDirs?.has(d.name))
+                walkTree(child, skipDirs, visit);
+            continue;
+        }
+        if (d.isFile() || d.isSymbolicLink())
+            visit(child);
+    }
+}
+function captureTarget(abs, rule, ctx) {
+    let st;
+    try {
+        st = fs.lstatSync(abs);
+    }
+    catch {
+        return;
+    }
+    if (st.isDirectory()) {
+        walkTree(abs, null, (child) => captureEntry(child, rule, ctx));
+        return;
+    }
+    captureEntry(abs, rule, ctx);
+}
+export function takeCageSnapshot(plan, opts) {
+    const ctx = { root: plan.root, opts, budget: opts.maxTotalBytes, entries: new Map() };
+    for (const target of plan.targets)
+        captureTarget(target.abs, target.rule, ctx);
+    walkTree(plan.root, CAGE_SCAN_SKIP_DIRS, (abs) => {
+        const rule = cageBasenameRule(path.basename(abs));
+        if (rule)
+            captureEntry(abs, rule, ctx);
+    });
+    return { entries: ctx.entries };
+}
+function entryChanged(a, b) {
+    // mtime is ignored on purpose: a bare `touch` is not a mutation.
+    return a.sha256 !== b.sha256 || a.type !== b.type || a.fileMode !== b.fileMode;
+}
+export function diffCageSnapshots(before, after) {
+    const keys = new Set([...before.entries.keys(), ...after.entries.keys()]);
+    const changes = [];
+    for (const abs of keys) {
+        const b = before.entries.get(abs) ?? null;
+        const a = after.entries.get(abs) ?? null;
+        let kind = null;
+        if (b && !a)
+            kind = "deleted";
+        else if (!b && a)
+            kind = "added";
+        else if (b && a && entryChanged(b, a))
+            kind = "modified";
+        if (!kind)
+            continue;
+        const ref = (b ?? a);
+        changes.push({ abs, rel: ref.rel, kind, rule: ref.rule, mode: ref.mode, before: b, after: a });
+    }
+    return changes.sort((x, y) => x.rel.localeCompare(y.rel));
+}
+//# sourceMappingURL=cage-snapshot.js.map

package/dist/cli/lib/cage/cage-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-snapshot.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GAIjB,MAAM,iBAAiB,CAAC;AA6CzB,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,SAAS,CAAC,IAAqB;IACtC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,+EAA+E;AAC/E,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC3C,IAAI,CAAS,CAAC;QACd,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,IAAgB,EAAE,GAAmB;IACnE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;IAC7F,IAAI,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,YAAY,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACzH,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;IACvG,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC/G,CAAC;IACD,mFAAmF;IACnF,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,IAAgB,EAAE,GAAmB;IACtE,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,iFAAiF;IACjF,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC;QAAE,OAAO;IAC3F,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK;YAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;IACnF,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAC,MAAc,EAAE,QAAoC,EAAE,KAA4B;IAClG,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,IAAgB,EAAE,GAAmB;IACvE,IAAI,EAAY,CAAC;IACjB,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAc,EAAE,IAAyB;IACxE,MAAM,GAAG,GAAmB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACtG,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;QAAE,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/E,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,IAAI,IAAI;YAAE,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,CAAY,EAAE,CAAY;IAC9C,iEAAiE;IACjE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,KAAmB;IACzE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAC1C,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QACzC,IAAI,IAAI,GAA8B,IAAI,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,GAAG,SAAS,CAAC;aACzB,IAAI,CAAC,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,OAAO,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,IAAI,GAAG,UAAU,CAAC;QACzD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/cli/lib/version.gen.d.ts

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export declare const CLI_VERSION = "3.6.0";
+export declare const CLI_VERSION = "3.7.0";
 export declare const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.d.ts.map

package/dist/cli/lib/version.gen.js

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export const CLI_VERSION = "3.6.0";
+export const CLI_VERSION = "3.7.0";
 export const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.js.map

package/dist/cli/program-cage.d.ts

@@ -0,0 +1,5 @@
+import type { Command } from "commander";
+/** Shared by `gantry cage` and the standalone `opengantry-cage` bin so the two never drift. */
+export declare function configureCageCommand(cmd: Command): Command;
+export declare function registerCageCommands(program: Command): void;
+//# sourceMappingURL=program-cage.d.ts.map

package/dist/cli/program-cage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"program-cage.d.ts","sourceRoot":"","sources":["../../src/cli/program-cage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAc1D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE3D"}

package/dist/cli/program-cage.js

@@ -0,0 +1,19 @@
+import { runCageCommand } from "./commands/cage.js";
+/** Shared by `gantry cage` and the standalone `opengantry-cage` bin so the two never drift. */
+export function configureCageCommand(cmd) {
+    return cmd
+        .description("Zero-config: run a command, then revert changes to CI configs, .env secrets, git hooks/config and manifest forbidden zones (lockfiles reported)")
+        .option("--json", "Emit the digest-only cage report as JSON on stdout")
+        .option("--report-only", "Detect and report protected changes without reverting them")
+        .option("--max-file-bytes <n>", "Per-file in-memory snapshot cap; larger files are detect-only")
+        .allowUnknownOption(true)
+        .passThroughOptions()
+        .argument("<command...>", "Command to run after --")
+        .action(async (command, opts) => {
+        await runCageCommand({ command, ...opts });
+    });
+}
+export function registerCageCommands(program) {
+    configureCageCommand(program.command("cage"));
+}
+//# sourceMappingURL=program-cage.js.map

package/dist/cli/program-cage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"program-cage.js","sourceRoot":"","sources":["../../src/cli/program-cage.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,OAAO,GAAG;SACP,WAAW,CACV,iJAAiJ,CAClJ;SACA,MAAM,CAAC,QAAQ,EAAE,oDAAoD,CAAC;SACtE,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,sBAAsB,EAAE,+DAA+D,CAAC;SAC/F,kBAAkB,CAAC,IAAI,CAAC;SACxB,kBAAkB,EAAE;SACpB,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,OAAiB,EAAE,IAAqE,EAAE,EAAE;QACzG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/cli/program.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,wBAAgB,YAAY,IAAI,OAAO,CA4BtC"}
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,wBAAgB,YAAY,IAAI,OAAO,CA6BtC"}

package/dist/cli/program.js

@@ -7,6 +7,7 @@ import { registerMissionCommands } from "./program-mission.js";
 import { registerWorkflowCommands } from "./program-workflow.js";
 import { registerOrgControlPlaneCommands } from "./program-org.js";
 import { registerMcpCommands } from "./program-mcp.js";
+import { registerCageCommands } from "./program-cage.js";
 import { registerBuiltinDomains } from "./lib/domains/index.js";
 export { CLI_VERSION } from "./lib/constants.js";
 export function buildProgram() {
@@ -31,6 +32,7 @@ export function buildProgram() {
     registerWorkflowCommands(program);
     registerOrgControlPlaneCommands(program);
     registerMcpCommands(program);
+    registerCageCommands(program);
     return program;
 }
 //# sourceMappingURL=program.js.map

package/dist/cli/program.js.map

@@ -1 +1 @@
-{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,UAAU,YAAY;IAC1B,sBAAsB,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9E,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,yBAAyB,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC/E,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CACZ,mBAAmB,EACnB,kFAAkF,CACnF,CAAC;IACF,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAEvC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,+BAA+B,CAAC,OAAO,CAAC,CAAC;IACzC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE7B,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,UAAU,YAAY;IAC1B,sBAAsB,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9E,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,yBAAyB,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC/E,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CACZ,mBAAmB,EACnB,kFAAkF,CACnF,CAAC;IACF,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAEvC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,+BAA+B,CAAC,OAAO,CAAC,CAAC;IACzC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@jeger-ai/opengantry",
-  "version": "3.6.0",
+  "version": "3.7.0",
   "description": "Open Source Gantry — vendor-neutral GXT substrate and Gantry CLI for local git-native agent governance",
   "type": "module",
   "bin": {
     "gantry": "dist/cli/index.js",
-    "gapman": "dist/cli/index.js"
+    "gapman": "dist/cli/index.js",
+    "opengantry-cage": "dist/cli/cage-bin.js"
   },
   "exports": {
     ".": "./dist/cli/index.js",

package/templates/.gitagent/foreman/SUBSTRATE.version.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "0.1.0",
-  "opengantry_version": "3.6.0",
+  "opengantry_version": "3.7.0",
   "installed_at": "2026-01-01T00:00:00.000Z",
   "installed_by": "gantry init"
 }

package/templates/integrations/compatibility.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "1",
-  "opengantry_version": "3.6.0",
+  "opengantry_version": "3.7.0",
   "asset_catalog": "integrations/asset-catalog.json",
   "integrations": {
     "cursor": {