@jeger-ai/opengantry 3.6.0 → 3.7.1

package/README.md

@@ -139,6 +139,23 @@ See [`docs/DOMAINS.md`](docs/DOMAINS.md) for adapter details and [`docs/AGENT-GR
 
 ---
 
+## Try it in 60 seconds: `gantry cage`
+
+No setup. Start your agent inside the cage, exactly as you normally would:
+
+```bash
+npx -p @jeger-ai/opengantry opengantry-cage -- claude
+# installed (npm install -g @jeger-ai/opengantry): gantry cage -- claude, gantry cage -- aider
+```
+
+While the session runs, cage checks about once a second and restores changes to CI configs, `.env` / `.env.*`, `.git/config`, `.git/hooks/` (and `core.hooksPath`) and your manifest `forbidden_zones` from an in-memory snapshot. Lockfile changes are listed but kept. A `git push` from inside the session is refused when the outgoing commits touch those paths, and the agent sees why. When you quit, cage prints one report: everything it restored, any refused pushes, exit `3` if anything was touched (otherwise the agent's own exit code).
+
+Nothing is printed into the agent's screen while it runs: events go to a session log in your temp dir (path shown at start), with a terminal bell per restore. If the agent keeps rewriting the same file, cage stops restoring it after 3 tries, marks it contested and restores it once at exit.
+
+Cage restores; it does not block. A change can be committed in the second before the next check, `git push --no-verify` skips the push guard, and a committed change stays in local history (cage restores the working tree only). Reads, network calls and writes outside the protected set are not seen. `--no-watch` checks once at exit instead. For scope enforced on every write, use missions (below). Details: [`docs/FEATURES.md`](docs/FEATURES.md#zero-config-cage-gantry-cage).
+
+---
+
 ## Feature tour: what to try first
 
 ### 1. Bootstrap a repo
@@ -214,6 +231,10 @@ On failure, external agents ingest `findings[]`:
 }
 ```
 
+**v3.7.1:** `gantry cage` restores protected files live during interactive agent sessions (default; `--no-watch` for exit-only) and refuses `git push` of protected paths from inside the session. See [Try it in 60 seconds](#try-it-in-60-seconds-gantry-cage).
+
+**v3.7.0:** zero-config `gantry cage -- <cmd>` (and `npx -p @jeger-ai/opengantry opengantry-cage -- <cmd>`) restores CI configs, `.env*`, git hooks/config and manifest forbidden zones after a one-shot agent run, reports lockfile changes, and exits 3 on tampering. See [Try it in 60 seconds](#try-it-in-60-seconds-gantry-cage).
+
 **v3.6.0:** `gate_adapter: tsc|eslint` fails closed on chained `gate_command`s (`GXT_GATE_ADAPTER_MISCONFIG`). `gantry hooks install` arms the tracked pre-commit hook so `gantry tmvc guard --strict` blocks commits outside the pinned mission. Optional local sqlite-vec contract drift index (`gantry contract embed`, `legislate --from-intent --embedding-file`). See [`docs/CHANGELOG.md`](docs/CHANGELOG.md) upgrade notes.
 
 **v3.5.0:** Cursor MCP uses a byte-identical `./scripts/mcp-launcher.sh` (no mcp.json parity exemption). `gantry verify --format sarif|junit` writes the document only on stdout and diagnostics on stderr ([`docs/CI.md`](docs/CI.md)). `gantry contract preflight` is advisory and fail-open ([ADR-0046](.gitagent/out-of-scope/ADR-0046-experimental-contract-preflight.md)).

package/dist/cli/cage-bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cage-bin.d.ts.map

package/dist/cli/cage-bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-bin.d.ts","sourceRoot":"","sources":["../../src/cli/cage-bin.ts"],"names":[],"mappings":""}

package/dist/cli/cage-bin.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+import { CLI_VERSION } from "./lib/constants.js";
+import { reportUserFacingError } from "./lib/errors.js";
+import { resetOutputContext } from "./lib/output-context.js";
+import { configureCageCommand } from "./program-cage.js";
+/** Standalone `opengantry-cage [options] -- <command...>`, equivalent to `gantry cage`. */
+resetOutputContext();
+const program = configureCageCommand(new Command("opengantry-cage")).version(CLI_VERSION);
+program.parseAsync(process.argv).catch(reportUserFacingError);
+//# sourceMappingURL=cage-bin.js.map

package/dist/cli/cage-bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-bin.js","sourceRoot":"","sources":["../../src/cli/cage-bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,2FAA2F;AAC3F,kBAAkB,EAAE,CAAC;AACrB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAC1F,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/cli/commands/cage.d.ts

@@ -0,0 +1,15 @@
+export interface CageCliOptions {
+    command: string[];
+    json?: boolean;
+    reportOnly?: boolean;
+    maxFileBytes?: string;
+    /** Commander sets false for `--no-watch`. */
+    watch?: boolean;
+    watchIntervalMs?: string;
+}
+export declare function runCageCommand(options: CageCliOptions): Promise<void>;
+/** `gantry cage-guard pre-push --root <dir>`: called by the cage session pre-push hook. */
+export declare function runCageGuardPrePush(options: {
+    root: string;
+}): Promise<void>;
+//# sourceMappingURL=cage.d.ts.map

package/dist/cli/commands/cage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/cage.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AASD,wBAAsB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC3E;AAED,2FAA2F;AAC3F,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAalF"}

package/dist/cli/commands/cage.js

@@ -0,0 +1,71 @@
+import fs from "node:fs";
+import { logError, readStdinIfEmpty, setExitCode } from "../lib/cli-io.js";
+import { emitCliJson, runUserCommandAsync } from "../lib/command-boundary.js";
+import { CAGE_SESSION_LOG_ENV, findPushViolations } from "../lib/cage/cage-push-guard.js";
+import { formatCageReport } from "../lib/cage/cage-report.js";
+import { buildCagePlan } from "../lib/cage/cage-rules.js";
+import { runCage } from "../lib/cage/cage-run.js";
+function parseNonNegativeInt(raw) {
+    if (raw === undefined)
+        return { ok: true, value: undefined };
+    const t = raw.trim();
+    if (!/^\d+$/.test(t))
+        return { ok: false };
+    return { ok: true, value: Number.parseInt(t, 10) };
+}
+export async function runCageCommand(options) {
+    const command = options.command[0] === "--" ? options.command.slice(1) : options.command;
+    if (command.length === 0) {
+        logError("cage: missing command. Use: gantry cage -- <command...>");
+        setExitCode(2);
+        return;
+    }
+    const max = parseNonNegativeInt(options.maxFileBytes);
+    const interval = parseNonNegativeInt(options.watchIntervalMs);
+    if (!max.ok || !interval.ok || interval.value === 0) {
+        logError("cage: --max-file-bytes must be a non-negative integer and --watch-interval-ms a positive integer");
+        setExitCode(2);
+        return;
+    }
+    await runUserCommandAsync({ json: options.json }, async () => {
+        const report = await runCage({
+            command,
+            reportOnly: options.reportOnly,
+            maxFileBytes: max.value,
+            watch: options.watch !== false,
+            watchIntervalMs: interval.value,
+            // The only line printed before the command starts; nothing is written while it runs except a bell.
+            onStart: ({ sessionLog, protectedFiles, watch }) => {
+                const mode = watch ? "watching" : "checking at exit";
+                const logPart = sessionLog ? `; live events: ${sessionLog}` : "";
+                console.error(`cage: ${mode} ${String(protectedFiles)} protected file(s)${logPart}`);
+            },
+        });
+        if (options.json) {
+            emitCliJson(report);
+        }
+        else {
+            for (const line of formatCageReport(report))
+                console.error(line);
+        }
+        if (report.exit_code !== 0)
+            setExitCode(report.exit_code);
+    });
+}
+/** `gantry cage-guard pre-push --root <dir>`: called by the cage session pre-push hook. */
+export async function runCageGuardPrePush(options) {
+    const stdin = await readStdinIfEmpty("");
+    const violations = findPushViolations(buildCagePlan(options.root), stdin);
+    if (violations.length === 0)
+        return;
+    const list = violations.map((v) => `${v.path} (${v.rule})`).join(", ");
+    console.error(`gantry cage: push refused: outgoing commits change protected paths: ${list}`);
+    console.error("gantry cage: revert those commits, or push outside the cage session.");
+    const logPath = process.env[CAGE_SESSION_LOG_ENV];
+    if (logPath && fs.existsSync(logPath)) {
+        const event = { at: new Date().toISOString(), event: "push_refused", paths: violations };
+        fs.appendFileSync(logPath, `${JSON.stringify(event)}\n`);
+    }
+    setExitCode(1);
+}
+//# sourceMappingURL=cage.js.map

package/dist/cli/commands/cage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage.js","sourceRoot":"","sources":["../../../src/cli/commands/cage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAYlD,SAAS,mBAAmB,CAAC,GAAuB;IAClD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC7D,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,yDAAyD,CAAC,CAAC;QACpE,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACpD,QAAQ,CAAC,kGAAkG,CAAC,CAAC;QAC7G,WAAW,CAAC,CAAC,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;YAC3B,OAAO;YACP,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,GAAG,CAAC,KAAK;YACvB,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,KAAK;YAC9B,eAAe,EAAE,QAAQ,CAAC,KAAK;YAC/B,mGAAmG;YACnG,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBACrD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;YACvF,CAAC;SACF,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,WAAW,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC;YAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAyB;IACjE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,kBAAkB,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,uEAAuE,IAAI,EAAE,CAAC,CAAC;IAC7F,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClD,IAAI,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACzF,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,WAAW,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC"}

package/dist/cli/lib/cage/cage-process.d.ts

@@ -0,0 +1,18 @@
+export interface CageProcessResult {
+    code: number | null;
+    signal: NodeJS.Signals | null;
+    /** Spawn failure (e.g. ENOENT); the command never ran. */
+    spawnError: string | null;
+}
+/** Shell convention: a child killed by signal N exits 128 + N. */
+export declare function signalExitCode(signal: NodeJS.Signals): number;
+/**
+ * Run the caged command with inherited stdio so interactive agents keep their TTY.
+ *
+ * The cage must outlive the child to diff and revert, so while it runs:
+ * - SIGINT is swallowed here; a terminal Ctrl-C already reaches the child through the
+ *   shared process group, and forwarding it again would double-interrupt.
+ * - SIGTERM / SIGHUP are forwarded to the child instead of killing the cage.
+ */
+export declare function spawnCaged(argv: readonly string[], cwd: string, extraEnv?: NodeJS.ProcessEnv): Promise<CageProcessResult>;
+//# sourceMappingURL=cage-process.d.ts.map

package/dist/cli/lib/cage/cage-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-process.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-process.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,0DAA0D;IAC1D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,kEAAkE;AAClE,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAG7D;AAID;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,MAAM,CAAC,UAAe,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAkB5B"}

package/dist/cli/lib/cage/cage-process.js

@@ -0,0 +1,39 @@
+import { spawn } from "node:child_process";
+import os from "node:os";
+/** Shell convention: a child killed by signal N exits 128 + N. */
+export function signalExitCode(signal) {
+    const n = os.constants.signals[signal];
+    return typeof n === "number" ? 128 + n : 1;
+}
+const FORWARDED_SIGNALS = ["SIGTERM", "SIGHUP"];
+/**
+ * Run the caged command with inherited stdio so interactive agents keep their TTY.
+ *
+ * The cage must outlive the child to diff and revert, so while it runs:
+ * - SIGINT is swallowed here; a terminal Ctrl-C already reaches the child through the
+ *   shared process group, and forwarding it again would double-interrupt.
+ * - SIGTERM / SIGHUP are forwarded to the child instead of killing the cage.
+ */
+export async function spawnCaged(argv, cwd, extraEnv = {}) {
+    const [command, ...args] = argv;
+    const child = spawn(command, args, { cwd, stdio: "inherit", env: { ...process.env, ...extraEnv } });
+    const ignoreInt = () => { };
+    const forward = (sig) => {
+        child.kill(sig);
+    };
+    process.on("SIGINT", ignoreInt);
+    for (const sig of FORWARDED_SIGNALS)
+        process.on(sig, forward);
+    try {
+        return await new Promise((resolve) => {
+            child.on("error", (err) => resolve({ code: null, signal: null, spawnError: err.message }));
+            child.on("exit", (code, signal) => resolve({ code, signal, spawnError: null }));
+        });
+    }
+    finally {
+        process.off("SIGINT", ignoreInt);
+        for (const sig of FORWARDED_SIGNALS)
+            process.off(sig, forward);
+    }
+}
+//# sourceMappingURL=cage-process.js.map

package/dist/cli/lib/cage/cage-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-process.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AASzB,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,iBAAiB,GAA8B,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB,EACvB,GAAW,EACX,WAA8B,EAAE;IAEhC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,GAAmB,EAAQ,EAAE;QAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,iBAAiB;QAAE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;YACtD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3F,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,iBAAiB;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/cli/lib/cage/cage-push-guard.d.ts

@@ -0,0 +1,23 @@
+import { type CagePlan, type CageRuleId } from "./cage-rules.js";
+/** Env var the session hook reads to find the cage session log. */
+export declare const CAGE_SESSION_LOG_ENV = "GANTRY_CAGE_SESSION_LOG";
+export interface CagePushGuard {
+    hooksDir: string;
+    /** Env additions for the caged process tree (GIT_CONFIG_* appends, never replaces, existing entries). */
+    env: NodeJS.ProcessEnv;
+    dispose(): void;
+}
+/**
+ * Create a temporary hooks dir outside the repo and the env that points the caged process tree at it.
+ * Returns null outside a git work tree. Nothing is written into the repository.
+ */
+export declare function createCagePushGuard(root: string, sessionLogPath: string | null): CagePushGuard | null;
+/** Rule for a repo-relative path in an outgoing commit; lockfiles (report-only) never block a push. */
+export declare function pushGuardRule(plan: CagePlan, rel: string): CageRuleId | null;
+export interface PushGuardViolation {
+    path: string;
+    rule: CageRuleId;
+}
+/** Parse pre-push stdin (`<local ref> <local sha> <remote ref> <remote sha>` per line) and list protected paths. */
+export declare function findPushViolations(plan: CagePlan, prePushStdin: string): PushGuardViolation[];
+//# sourceMappingURL=cage-push-guard.d.ts.map

package/dist/cli/lib/cage/cage-push-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-push-guard.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-push-guard.ts"],"names":[],"mappings":"AAMA,OAAO,EAAqC,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA2BpG,mEAAmE;AACnE,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,OAAO,IAAI,IAAI,CAAC;CACjB;AAwCD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,GAAG,IAAI,CAUrG;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAS5E;AAMD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;CAClB;AAED,oHAAoH;AACpH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAa7F"}

package/dist/cli/lib/cage/cage-push-guard.js

@@ -0,0 +1,116 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { toPosixRel } from "../cli-io.js";
+import { gitRun } from "../git/git.js";
+import { CAGE_RULE_MODES, cageBasenameRule } from "./cage-rules.js";
+/** Standard client-side git hooks; each session wrapper chains to the repo's real hook of the same name. */
+const GIT_HOOK_NAMES = [
+    "applypatch-msg",
+    "pre-applypatch",
+    "post-applypatch",
+    "pre-commit",
+    "pre-merge-commit",
+    "prepare-commit-msg",
+    "commit-msg",
+    "post-commit",
+    "pre-rebase",
+    "post-checkout",
+    "post-merge",
+    "pre-push",
+    "pre-auto-gc",
+    "post-rewrite",
+    "sendemail-validate",
+    "fsmonitor-watchman",
+    "post-index-change",
+    "reference-transaction",
+    "push-to-checkout",
+];
+const ZERO_SHA = /^0+$/;
+/** Env var the session hook reads to find the cage session log. */
+export const CAGE_SESSION_LOG_ENV = "GANTRY_CAGE_SESSION_LOG";
+function shellQuote(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+function activeHooksDir(root) {
+    const r = gitRun(root, ["rev-parse", "--path-format=absolute", "--git-path", "hooks"]);
+    const out = r.stdout.trim();
+    return r.ok && out ? path.resolve(out) : null;
+}
+/** The CLI entry the session pre-push hook calls (`dist/cli/index.js`, next to this module's `lib/`). */
+function cliEntry() {
+    return fileURLToPath(new URL("../../index.js", import.meta.url));
+}
+function hookScript(name, realHooks, root) {
+    const real = shellQuote(path.join(realHooks, name));
+    const guard = name === "pre-push"
+        ? `stdin_copy="$(cat)"\nprintf '%s\\n' "$stdin_copy" | ${shellQuote(process.execPath)} ${shellQuote(cliEntry())} cage-guard pre-push --root ${shellQuote(root)} || exit 1\n`
+        : "";
+    const chain = name === "pre-push"
+        ? `if [ -x ${real} ]; then printf '%s\\n' "$stdin_copy" | ${real} "$@"; exit $?; fi\n`
+        : `if [ -x ${real} ]; then exec ${real} "$@"; fi\n`;
+    return `#!/bin/sh\n# gantry cage session hook (temporary; removed when the cage session ends)\n${guard}${chain}exit 0\n`;
+}
+function gitConfigEnv(hooksDir) {
+    const raw = process.env.GIT_CONFIG_COUNT;
+    const n = raw && /^\d+$/.test(raw) ? Number.parseInt(raw, 10) : 0;
+    return {
+        GIT_CONFIG_COUNT: String(n + 1),
+        [`GIT_CONFIG_KEY_${String(n)}`]: "core.hooksPath",
+        [`GIT_CONFIG_VALUE_${String(n)}`]: hooksDir,
+    };
+}
+/**
+ * Create a temporary hooks dir outside the repo and the env that points the caged process tree at it.
+ * Returns null outside a git work tree. Nothing is written into the repository.
+ */
+export function createCagePushGuard(root, sessionLogPath) {
+    const realHooks = activeHooksDir(root);
+    if (!realHooks)
+        return null;
+    const hooksDir = fs.mkdtempSync(path.join(os.tmpdir(), "gantry-cage-hooks-"));
+    for (const name of GIT_HOOK_NAMES) {
+        fs.writeFileSync(path.join(hooksDir, name), hookScript(name, realHooks, root), { mode: 0o755 });
+    }
+    const env = { ...gitConfigEnv(hooksDir) };
+    if (sessionLogPath)
+        env[CAGE_SESSION_LOG_ENV] = sessionLogPath;
+    return { hooksDir, env, dispose: () => fs.rmSync(hooksDir, { recursive: true, force: true }) };
+}
+/** Rule for a repo-relative path in an outgoing commit; lockfiles (report-only) never block a push. */
+export function pushGuardRule(plan, rel) {
+    for (const t of plan.targets) {
+        if (t.rule !== "ci_config" && t.rule !== "manifest_forbidden_zone")
+            continue;
+        const base = toPosixRel(plan.root, t.abs);
+        if (base.startsWith(".."))
+            continue;
+        if (rel === base || rel.startsWith(`${base}/`))
+            return t.rule;
+    }
+    const rule = cageBasenameRule(path.posix.basename(rel));
+    return rule && CAGE_RULE_MODES[rule] === "revert" ? rule : null;
+}
+function outgoingRange(localSha, remoteSha) {
+    return ZERO_SHA.test(remoteSha) ? [localSha, "--not", "--remotes"] : [`${remoteSha}..${localSha}`];
+}
+/** Parse pre-push stdin (`<local ref> <local sha> <remote ref> <remote sha>` per line) and list protected paths. */
+export function findPushViolations(plan, prePushStdin) {
+    const hits = new Map();
+    for (const line of prePushStdin.split(/\r?\n/)) {
+        const [, localSha, , remoteSha] = line.trim().split(/\s+/);
+        if (!localSha || !remoteSha || ZERO_SHA.test(localSha))
+            continue;
+        const r = gitRun(plan.root, ["log", "--format=", "--name-only", ...outgoingRange(localSha, remoteSha)]);
+        if (!r.ok)
+            continue;
+        for (const rel of r.stdout.split(/\r?\n/).map((s) => s.trim()).filter(Boolean)) {
+            const rule = pushGuardRule(plan, rel);
+            if (rule)
+                hits.set(rel, rule);
+        }
+    }
+    return [...hits].map(([p, rule]) => ({ path: p, rule })).sort((a, b) => a.path.localeCompare(b.path));
+}
+//# sourceMappingURL=cage-push-guard.js.map

package/dist/cli/lib/cage/cage-push-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-push-guard.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-push-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAkC,MAAM,iBAAiB,CAAC;AAEpG,4GAA4G;AAC5G,MAAM,cAAc,GAAG;IACrB,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;IACZ,kBAAkB;IAClB,oBAAoB;IACpB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,eAAe;IACf,YAAY;IACZ,UAAU;IACV,aAAa;IACb,cAAc;IACd,oBAAoB;IACpB,oBAAoB;IACpB,mBAAmB;IACnB,uBAAuB;IACvB,kBAAkB;CACV,CAAC;AAEX,MAAM,QAAQ,GAAG,MAAM,CAAC;AAExB,mEAAmE;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAS9D,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,wBAAwB,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,yGAAyG;AACzG,SAAS,QAAQ;IACf,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,SAAiB,EAAE,IAAY;IAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GACT,IAAI,KAAK,UAAU;QACjB,CAAC,CAAC,uDAAuD,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC,+BAA+B,UAAU,CAAC,IAAI,CAAC,cAAc;QAC5K,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,KAAK,GACT,IAAI,KAAK,UAAU;QACjB,CAAC,CAAC,WAAW,IAAI,2CAA2C,IAAI,sBAAsB;QACtF,CAAC,CAAC,WAAW,IAAI,iBAAiB,IAAI,aAAa,CAAC;IACxD,OAAO,0FAA0F,KAAK,GAAG,KAAK,UAAU,CAAC;AAC3H,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACzC,MAAM,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,kBAAkB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,gBAAgB;QACjD,CAAC,oBAAoB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ;KAC5C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,cAA6B;IAC7E,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,GAAG,GAAsB,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7D,IAAI,cAAc;QAAE,GAAG,CAAC,oBAAoB,CAAC,GAAG,cAAc,CAAC;IAC/D,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,GAAW;IACvD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,yBAAyB;YAAE,SAAS;QAC7E,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,OAAO,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,SAAiB;IACxD,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,QAAQ,EAAE,CAAC,CAAC;AACrG,CAAC;AAOD,oHAAoH;AACpH,MAAM,UAAU,kBAAkB,CAAC,IAAc,EAAE,YAAoB;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,EAAE,QAAQ,EAAE,AAAD,EAAG,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,SAAS;QACjE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACxG,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,SAAS;QACpB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtC,IAAI,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACxG,CAAC"}

package/dist/cli/lib/cage/cage-report.d.ts

@@ -0,0 +1,71 @@
+import type { CageRuleId } from "./cage-rules.js";
+import type { CageOutcome, CageResolvedChange } from "./cage-revert.js";
+export declare const CAGE_REPORT_SCHEMA: "gantry.cage-report.v1";
+/** Limits with `--no-watch` (after-exit check only), stated in every such report. */
+export declare const CAGE_LIMITS: readonly string[];
+/** One-line stderr form of {@link CAGE_LIMITS}; `--json` keeps the full list. */
+export declare const CAGE_LIMITS_SUMMARY = "after-exit check only; reads, network calls and writes outside the protected set are not detected";
+/** Limits in watch mode (the default): live restore, not prevention. */
+export declare const CAGE_WATCH_LIMITS: readonly string[];
+/** One-line stderr form of {@link CAGE_WATCH_LIMITS}. */
+export declare const CAGE_WATCH_LIMITS_SUMMARY = "live restore, not blocking; reads, network calls and writes outside the protected set are not detected";
+/** Printed once under a violation report: the path from cage to project-specific missions. */
+export declare const CAGE_UPGRADE_FOOTER = "Need project-specific boundaries or task contracts? Run: npx -p @jeger-ai/opengantry gantry init";
+export type CageStatus = "ok" | "violations_reverted" | "violations_unresolved" | "runtime_error";
+/** One changed protected path. Digests and outcomes only; never file bodies (ADR-0034). */
+export interface CageReportChange {
+    path: string;
+    kind: "added" | "modified" | "deleted";
+    rule: CageRuleId;
+    sha256_before: string | null;
+    sha256_after: string | null;
+    outcome: CageOutcome;
+    error_code: string | null;
+}
+export interface CageReport {
+    report_schema: typeof CAGE_REPORT_SCHEMA;
+    status: CageStatus;
+    exit_code: number;
+    /** argv[0] only: arguments can carry tokens. */
+    command: string;
+    command_exit_code: number | null;
+    command_signal: string | null;
+    runtime_error: string | null;
+    root: string;
+    revert_mode: "revert" | "report_only";
+    max_file_bytes: number;
+    protected_files: number;
+    manifest_zones: number;
+    changes: CageReportChange[];
+    watch: {
+        enabled: boolean;
+        interval_ms: number | null;
+        live_restores: number;
+        contested: string[];
+        session_log: string | null;
+    };
+    push_guard: {
+        enabled: boolean;
+        refused_pushes: number;
+    };
+    limits: readonly string[];
+}
+export interface CageReportInput {
+    command: string;
+    commandExitCode: number | null;
+    commandSignal: NodeJS.Signals | null;
+    runtimeError: string | null;
+    root: string;
+    reportOnly: boolean;
+    maxFileBytes: number;
+    protectedFiles: number;
+    manifestZones: number;
+    changes: readonly CageResolvedChange[];
+    watch: CageReport["watch"];
+    pushGuard: CageReport["push_guard"];
+    signalExitCode: (signal: NodeJS.Signals) => number;
+}
+export declare function buildCageReport(input: CageReportInput): CageReport;
+/** Human summary (stderr), so it never mixes into the wrapped command's stdout. */
+export declare function formatCageReport(report: CageReport): string[];
+//# sourceMappingURL=cage-report.d.ts.map

package/dist/cli/lib/cage/cage-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-report.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAExE,eAAO,MAAM,kBAAkB,EAAG,uBAAgC,CAAC;AAEnE,qFAAqF;AACrF,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAMxC,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,sGACqE,CAAC;AAEtG,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAM9C,CAAC;AAEF,yDAAyD;AACzD,eAAO,MAAM,yBAAyB,2GACoE,CAAC;AAE3G,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,qGACoE,CAAC;AAErG,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,qBAAqB,GAAG,uBAAuB,GAAG,eAAe,CAAC;AAElG,2FAA2F;AAC3F,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IACvC,IAAI,EAAE,UAAU,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,kBAAkB,CAAC;IACzC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,QAAQ,GAAG,aAAa,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,KAAK,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,UAAU,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACrC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3B,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IACpC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC;CACpD;AAqBD,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,CA4BlE;AAyBD,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAsB7D"}

package/dist/cli/lib/cage/cage-report.js

@@ -0,0 +1,118 @@
+export const CAGE_REPORT_SCHEMA = "gantry.cage-report.v1";
+/** Limits with `--no-watch` (after-exit check only), stated in every such report. */
+export const CAGE_LIMITS = [
+    "detects protected-path writes after the command exits; it does not block them while it runs",
+    "reads are not detected: the command can still read .env and other secrets",
+    "network and API side effects are not detected",
+    "writes outside the protected set, and outside the repository, are not checked",
+    "background processes that outlive the command can still write after the check",
+];
+/** One-line stderr form of {@link CAGE_LIMITS}; `--json` keeps the full list. */
+export const CAGE_LIMITS_SUMMARY = "after-exit check only; reads, network calls and writes outside the protected set are not detected";
+/** Limits in watch mode (the default): live restore, not prevention. */
+export const CAGE_WATCH_LIMITS = [
+    "restores protected-path writes about once per watch interval while the command runs; it does not block them",
+    "a change can be committed or used before the next check; the push guard covers git push from inside the session only",
+    "reads are not detected: the command can still read .env and other secrets",
+    "network and API side effects are not detected",
+    "writes outside the protected set, and outside the repository, are not checked",
+];
+/** One-line stderr form of {@link CAGE_WATCH_LIMITS}. */
+export const CAGE_WATCH_LIMITS_SUMMARY = "live restore, not blocking; reads, network calls and writes outside the protected set are not detected";
+/** Printed once under a violation report: the path from cage to project-specific missions. */
+export const CAGE_UPGRADE_FOOTER = "Need project-specific boundaries or task contracts? Run: npx -p @jeger-ai/opengantry gantry init";
+const VIOLATION_EXIT_CODE = 3;
+const RUNTIME_ERROR_EXIT_CODE = 2;
+const RESOLVED_OUTCOMES = new Set(["reverted", "removed"]);
+function cageStatus(input) {
+    const violations = input.changes.filter((c) => c.mode === "revert");
+    if (violations.length > 0) {
+        return violations.every((c) => RESOLVED_OUTCOMES.has(c.outcome)) ? "violations_reverted" : "violations_unresolved";
+    }
+    return input.runtimeError ? "runtime_error" : "ok";
+}
+function cageExitCode(status, input) {
+    if (status === "violations_reverted" || status === "violations_unresolved")
+        return VIOLATION_EXIT_CODE;
+    if (status === "runtime_error")
+        return RUNTIME_ERROR_EXIT_CODE;
+    if (input.commandSignal)
+        return input.signalExitCode(input.commandSignal);
+    return input.commandExitCode ?? RUNTIME_ERROR_EXIT_CODE;
+}
+export function buildCageReport(input) {
+    const status = cageStatus(input);
+    return {
+        report_schema: CAGE_REPORT_SCHEMA,
+        status,
+        exit_code: cageExitCode(status, input),
+        command: input.command,
+        command_exit_code: input.commandExitCode,
+        command_signal: input.commandSignal,
+        runtime_error: input.runtimeError,
+        root: input.root,
+        revert_mode: input.reportOnly ? "report_only" : "revert",
+        max_file_bytes: input.maxFileBytes,
+        protected_files: input.protectedFiles,
+        manifest_zones: input.manifestZones,
+        changes: input.changes.map((c) => ({
+            path: c.rel,
+            kind: c.kind,
+            rule: c.rule,
+            sha256_before: c.before?.sha256 ?? null,
+            sha256_after: c.after?.sha256 ?? null,
+            outcome: c.outcome,
+            error_code: c.errorCode,
+        })),
+        watch: input.watch,
+        push_guard: input.pushGuard,
+        limits: input.watch.enabled ? CAGE_WATCH_LIMITS : CAGE_LIMITS,
+    };
+}
+function changeLine(c) {
+    const err = c.error_code ? ` ${c.error_code}` : "";
+    return `  ${c.outcome.padEnd(13)} ${c.kind.padEnd(8)} ${c.path} (${c.rule})${err}`;
+}
+function sessionLines(report) {
+    const out = [];
+    const w = report.watch;
+    if (w.live_restores > 0) {
+        out.push(`cage: restored ${String(w.live_restores)} protected change(s) during the session`);
+    }
+    if (w.contested.length > 0) {
+        out.push(`cage: contested (kept being rewritten; restored once at exit): ${w.contested.join(", ")}`);
+    }
+    if (report.push_guard.refused_pushes > 0) {
+        out.push(`cage: refused ${String(report.push_guard.refused_pushes)} push(es) touching protected paths`);
+    }
+    if (w.session_log && (w.live_restores > 0 || report.push_guard.refused_pushes > 0)) {
+        out.push(`cage: session log: ${w.session_log}`);
+    }
+    return out;
+}
+/** Human summary (stderr), so it never mixes into the wrapped command's stdout. */
+export function formatCageReport(report) {
+    const lines = [];
+    const n = report.changes.length;
+    if (report.runtime_error)
+        lines.push(`cage: command did not run: ${report.runtime_error}`);
+    if (n === 0) {
+        lines.push(`cage: ${report.status} — ${String(report.protected_files)} protected file(s) unchanged`);
+    }
+    else {
+        lines.push(`cage: ${report.status} — ${String(n)} protected change(s)`);
+        for (const c of report.changes)
+            lines.push(changeLine(c));
+    }
+    if (report.changes.some((c) => c.outcome === "detect_only")) {
+        lines.push(`cage: detect_only files exceeded the ${String(report.max_file_bytes)}-byte per-file cap or the total snapshot budget and were not restored`);
+    }
+    lines.push(...sessionLines(report));
+    const summary = report.watch.enabled ? CAGE_WATCH_LIMITS_SUMMARY : CAGE_LIMITS_SUMMARY;
+    lines.push(`cage: exit ${String(report.exit_code)}; limits: ${summary}`);
+    if (report.status === "violations_reverted" || report.status === "violations_unresolved") {
+        lines.push(`cage: ${CAGE_UPGRADE_FOOTER}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=cage-report.js.map

package/dist/cli/lib/cage/cage-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-report.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-report.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAgC,CAAC;AAEnE,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,6FAA6F;IAC7F,2EAA2E;IAC3E,+CAA+C;IAC/C,+EAA+E;IAC/E,+EAA+E;CAChF,CAAC;AAEF,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAC9B,mGAAmG,CAAC;AAEtG,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,6GAA6G;IAC7G,sHAAsH;IACtH,2EAA2E;IAC3E,+CAA+C;IAC/C,+EAA+E;CAChF,CAAC;AAEF,yDAAyD;AACzD,MAAM,CAAC,MAAM,yBAAyB,GACpC,wGAAwG,CAAC;AAE3G,8FAA8F;AAC9F,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kGAAkG,CAAC;AAyDrG,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,iBAAiB,GAA6B,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAErF,SAAS,UAAU,CAAC,KAAsB;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IACrH,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB,EAAE,KAAsB;IAC9D,IAAI,MAAM,KAAK,qBAAqB,IAAI,MAAM,KAAK,uBAAuB;QAAE,OAAO,mBAAmB,CAAC;IACvG,IAAI,MAAM,KAAK,eAAe;QAAE,OAAO,uBAAuB,CAAC;IAC/D,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC,eAAe,IAAI,uBAAuB,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO;QACL,aAAa,EAAE,kBAAkB;QACjC,MAAM;QACN,SAAS,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,iBAAiB,EAAE,KAAK,CAAC,eAAe;QACxC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;QACxD,cAAc,EAAE,KAAK,CAAC,YAAY;QAClC,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjC,IAAI,EAAE,CAAC,CAAC,GAAG;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI;YACvC,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,IAAI,IAAI;YACrC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,UAAU,EAAE,CAAC,CAAC,SAAS;SACxB,CAAC,CAAC;QACH,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAmB;IACrC,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB;IACtC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,yCAAyC,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,oCAAoC,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,GAAG,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IAChC,IAAI,MAAM,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,8BAA8B,CAAC,CAAC;IACvG,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,EAAE,CAAC;QAC5D,KAAK,CAAC,IAAI,CACR,wCAAwC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,uEAAuE,CAC7I,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,MAAM,KAAK,qBAAqB,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACzF,KAAK,CAAC,IAAI,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/lib/cage/cage-revert.d.ts

@@ -0,0 +1,18 @@
+import type { CageChange } from "./cage-snapshot.js";
+/**
+ * - `reverted`: baseline bytes (or symlink) restored
+ * - `removed`: an added file was deleted
+ * - `kept`: report-only rule (lockfiles); change left in place
+ * - `reported`: `--report-only` run; change left in place
+ * - `detect_only`: no baseline bytes (over size cap or budget); change left in place
+ * - `revert_failed`: restore attempted and failed (`error_code` says why)
+ */
+export type CageOutcome = "reverted" | "removed" | "kept" | "reported" | "detect_only" | "revert_failed";
+export interface CageResolvedChange extends CageChange {
+    outcome: CageOutcome;
+    errorCode: string | null;
+}
+export declare function resolveCageChanges(changes: readonly CageChange[], opts: {
+    reportOnly: boolean;
+}): CageResolvedChange[];
+//# sourceMappingURL=cage-revert.d.ts.map

package/dist/cli/lib/cage/cage-revert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-revert.d.ts","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-revert.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,oBAAoB,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,GAAG,eAAe,CAAC;AAEzG,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AA0CD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,IAAI,EAAE;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,GAC5B,kBAAkB,EAAE,CAUtB"}