@jeger-ai/opengantry 3.7.0 → 3.8.0

package/dist/cli/lib/cage/cage-watch.js

@@ -0,0 +1,92 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { resolveCageChanges } from "./cage-revert.js";
+import { diffCageSnapshots, takeCageSnapshot } from "./cage-snapshot.js";
+/** Default live-check interval while the caged command runs. */
+export const CAGE_DEFAULT_WATCH_INTERVAL_MS = 1000;
+/** Live restores of one path before cage stops fighting the command and restores it only at exit. */
+export const CAGE_CONTEST_LIMIT = 3;
+const BELL = "\x07";
+export function openCageSessionLog(dir = os.tmpdir()) {
+    const file = path.join(dir, `gantry-cage-${String(process.pid)}-${crypto.randomBytes(4).toString("hex")}.log`);
+    fs.writeFileSync(file, "", { mode: 0o600 });
+    return {
+        path: file,
+        append(event) {
+            fs.appendFileSync(file, `${JSON.stringify({ at: new Date().toISOString(), ...event })}\n`);
+        },
+    };
+}
+function noteEvent(log, bell, event) {
+    log.append(event);
+    bell();
+}
+function handleLiveChange(change, state, log, bell) {
+    const base = { path: change.rel, kind: change.kind, rule: change.rule };
+    if (change.outcome === "reverted" || change.outcome === "removed") {
+        state.liveRestores += 1;
+        state.restored.set(change.abs, change);
+        noteEvent(log, bell, { event: "restored", ...base, outcome: change.outcome });
+        return;
+    }
+    if (!state.unrestorable.has(change.abs)) {
+        state.unrestorable.add(change.abs);
+        noteEvent(log, bell, { event: change.outcome, ...base, error_code: change.errorCode });
+    }
+}
+function tick(plan, baseline, opts, state, log, bell) {
+    const current = takeCageSnapshot(plan, { ...opts, keepBytes: false });
+    const pending = diffCageSnapshots(baseline, current).filter((c) => {
+        if (c.mode !== "revert" || state.contested.has(c.abs))
+            return false;
+        const count = state.restoresByPath.get(c.abs) ?? 0;
+        if (count < CAGE_CONTEST_LIMIT)
+            return true;
+        state.contested.add(c.abs);
+        noteEvent(log, bell, { event: "contested", path: c.rel, rule: c.rule, live_restores: count });
+        return false;
+    });
+    for (const change of resolveCageChanges(pending, { reportOnly: false })) {
+        if (change.outcome === "reverted" || change.outcome === "removed") {
+            state.restoresByPath.set(change.abs, (state.restoresByPath.get(change.abs) ?? 0) + 1);
+        }
+        handleLiveChange(change, state, log, bell);
+    }
+}
+/**
+ * Re-snapshot the protected set on an interval while the command runs and restore revert-rule changes
+ * from the baseline bytes. Lockfiles stay report-only and are left for the exit report. A path restored
+ * {@link CAGE_CONTEST_LIMIT} times is marked contested and restored only at exit.
+ */
+export function startCageWatch(input) {
+    const bell = input.bell ?? (() => process.stderr.write(BELL));
+    const state = {
+        restoresByPath: new Map(),
+        contested: new Set(),
+        unrestorable: new Set(),
+        restored: new Map(),
+        liveRestores: 0,
+    };
+    const timer = setInterval(() => {
+        try {
+            tick(input.plan, input.baseline, input.snapshotOptions, state, input.log, bell);
+        }
+        catch (err) {
+            input.log.append({ event: "watch_error", message: err instanceof Error ? err.message : String(err) });
+        }
+    }, input.intervalMs);
+    return {
+        stop() {
+            clearInterval(timer);
+            const rel = (abs) => state.restored.get(abs)?.rel ?? path.relative(input.plan.root, abs).split(path.sep).join("/");
+            return {
+                liveRestores: state.liveRestores,
+                contested: [...state.contested].map(rel).sort(),
+                restored: state.restored,
+            };
+        },
+    };
+}
+//# sourceMappingURL=cage-watch.js.map

package/dist/cli/lib/cage/cage-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cage-watch.js","sourceRoot":"","sources":["../../../../src/cli/lib/cage/cage-watch.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAA2B,MAAM,kBAAkB,CAAC;AAE/E,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAA+C,MAAM,oBAAoB,CAAC;AAEtH,gEAAgE;AAChE,MAAM,CAAC,MAAM,8BAA8B,GAAG,IAAI,CAAC;AACnD,qGAAqG;AACrG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,MAAM,IAAI,GAAG,MAAM,CAAC;AAQpB,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/G,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,EAAE,IAAI;QACV,MAAM,CAAC,KAAK;YACV,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7F,CAAC;KACF,CAAC;AACJ,CAAC;AAqBD,SAAS,SAAS,CAAC,GAAmB,EAAE,IAAgB,EAAE,KAA8B;IACtF,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClB,IAAI,EAAE,CAAC;AACT,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA0B,EAAE,KAAiB,EAAE,GAAmB,EAAE,IAAgB;IAC5G,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClE,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;QACxB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAc,EAAE,QAAsB,EAAE,IAAyB,EAAE,KAAiB,EAAE,GAAmB,EAAE,IAAgB;IACvI,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAChE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACpE,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,KAAK,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC5C,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3B,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACxE,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,CAAC;QACD,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAO9B;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAe;QACxB,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,YAAY,EAAE,IAAI,GAAG,EAAE;QACvB,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,YAAY,EAAE,CAAC;KAChB,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACrB,OAAO;QACL,IAAI;YACF,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,GAAG,GAAG,CAAC,GAAW,EAAU,EAAE,CAClC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChG,OAAO;gBACL,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;gBAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/lib/version.gen.d.ts

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export declare const CLI_VERSION = "3.7.0";
+export declare const CLI_VERSION = "3.8.0";
 export declare const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.d.ts.map

package/dist/cli/lib/version.gen.js

@@ -1,4 +1,4 @@
 /** Generated by scripts/gen-version.mjs — do not edit */
-export const CLI_VERSION = "3.7.0";
+export const CLI_VERSION = "3.8.0";
 export const NPM_PACKAGE_NAME = "@jeger-ai/opengantry";
 //# sourceMappingURL=version.gen.js.map

package/dist/cli/program-cage.d.ts

@@ -1,5 +1,12 @@
-import type { Command } from "commander";
+import { Command } from "commander";
+/**
+ * `gantry cage suggest` was typed: `suggest` is the first operand and no `--` came before it.
+ * Commander drops `--` from operands, so read the raw argv; `gantry cage -- suggest` runs a command.
+ */
+export declare function isSuggestInvocation(operands: readonly string[], argv?: readonly string[]): boolean;
 /** Shared by `gantry cage` and the standalone `opengantry-cage` bin so the two never drift. */
-export declare function configureCageCommand(cmd: Command): Command;
+export declare function configureCageCommand(cmd: Command, opts?: {
+    suggest?: boolean;
+}): Command;
 export declare function registerCageCommands(program: Command): void;
 //# sourceMappingURL=program-cage.d.ts.map

package/dist/cli/program-cage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program-cage.d.ts","sourceRoot":"","sources":["../../src/cli/program-cage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAc1D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAE3D"}
+{"version":3,"file":"program-cage.d.ts","sourceRoot":"","sources":["../../src/cli/program-cage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,GAAE,SAAS,MAAM,EAAiB,GAAG,OAAO,CAMhH;AAYD,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CA4C5F;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAW3D"}

package/dist/cli/program-cage.js

@@ -1,19 +1,63 @@
-import { runCageCommand } from "./commands/cage.js";
+import { Command } from "commander";
+import { runCageCommand, runCageGuardPrePush, runCageSuggestCommand } from "./commands/cage.js";
+function collect(value, previous) {
+    return [...previous, value];
+}
+/**
+ * `gantry cage suggest` was typed: `suggest` is the first operand and no `--` came before it.
+ * Commander drops `--` from operands, so read the raw argv; `gantry cage -- suggest` runs a command.
+ */
+export function isSuggestInvocation(operands, argv = process.argv) {
+    if (operands[0] !== "suggest")
+        return false;
+    const raw = argv.slice(2);
+    const after = raw.slice(raw.indexOf("cage") + 1);
+    const dashes = after.indexOf("--");
+    return dashes === -1 || after.indexOf("suggest") < dashes;
+}
+async function runSuggestArgs(args, inherited) {
+    const sub = new Command("gantry cage suggest")
+        .description("Propose .cage.yaml protect entries for review (setup step; refused inside a cage session)")
+        .option("--write", "Write .cage.yaml.suggested instead of printing (never writes .cage.yaml)")
+        .option("--force", "Replace an existing .cage.yaml.suggested")
+        .option("--json", "Emit suggestions as JSON on stdout");
+    sub.parse(args, { from: "user" });
+    await runCageSuggestCommand({ json: inherited.json, ...sub.opts() });
+}
 /** Shared by `gantry cage` and the standalone `opengantry-cage` bin so the two never drift. */
-export function configureCageCommand(cmd) {
+export function configureCageCommand(cmd, opts = {}) {
+    if (opts.suggest) {
+        cmd.addHelpText("after", "\nSetup (run it yourself, outside a cage session):\n  gantry cage suggest [--write] [--force] [--json]  propose .cage.yaml rules for review\n");
+    }
     return cmd
-        .description("Zero-config: run a command, then revert changes to CI configs, .env secrets, git hooks/config and manifest forbidden zones (lockfiles reported)")
+        .description("Zero-config: run a command and restore changes to CI configs, .env secrets, git hooks/config, manifest forbidden zones and .cage.yaml protect entries while it runs and at exit (lockfiles reported); refuses git pushes of protected paths from inside the session")
         .option("--json", "Emit the digest-only cage report as JSON on stdout")
         .option("--report-only", "Detect and report protected changes without reverting them")
+        .option("--no-watch", "Check only once, after the command exits (no live restore)")
+        .option("--watch-interval-ms <n>", "Live check interval while the command runs (default 1000)")
         .option("--max-file-bytes <n>", "Per-file in-memory snapshot cap; larger files are detect-only")
+        .option("--allow-override <path>", "Report instead of restore changes under <path> for this run (repeatable; never git hooks/config or .cage.yaml)", collect, [])
         .allowUnknownOption(true)
         .passThroughOptions()
         .argument("<command...>", "Command to run after --")
-        .action(async (command, opts) => {
-        await runCageCommand({ command, ...opts });
+        .action(async (command, cliOpts) => {
+        if (opts.suggest && isSuggestInvocation(command)) {
+            await runSuggestArgs(command.slice(1), { json: cliOpts.json });
+            return;
+        }
+        await runCageCommand({ command, ...cliOpts });
     });
 }
 export function registerCageCommands(program) {
-    configureCageCommand(program.command("cage"));
+    configureCageCommand(program.command("cage"), { suggest: true });
+    program
+        .command("cage-guard", { hidden: true })
+        .description("Internal: checks run by the cage session git hooks")
+        .command("pre-push")
+        .requiredOption("--root <dir>", "Cage root (git work tree)")
+        .option("--plan <file>", "Session plan written by gantry cage")
+        .action(async (opts) => {
+        await runCageGuardPrePush(opts);
+    });
 }
 //# sourceMappingURL=program-cage.js.map

package/dist/cli/program-cage.js.map

@@ -1 +1 @@
-{"version":3,"file":"program-cage.js","sourceRoot":"","sources":["../../src/cli/program-cage.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,OAAO,GAAG;SACP,WAAW,CACV,iJAAiJ,CAClJ;SACA,MAAM,CAAC,QAAQ,EAAE,oDAAoD,CAAC;SACtE,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,sBAAsB,EAAE,+DAA+D,CAAC;SAC/F,kBAAkB,CAAC,IAAI,CAAC;SACxB,kBAAkB,EAAE;SACpB,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,OAAiB,EAAE,IAAqE,EAAE,EAAE;QACzG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"program-cage.js","sourceRoot":"","sources":["../../src/cli/program-cage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhG,SAAS,OAAO,CAAC,KAAa,EAAE,QAAkB;IAChD,OAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA2B,EAAE,OAA0B,OAAO,CAAC,IAAI;IACrG,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,MAAM,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAc,EAAE,SAA6B;IACzE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,qBAAqB,CAAC;SAC3C,WAAW,CAAC,2FAA2F,CAAC;SACxG,MAAM,CAAC,SAAS,EAAE,0EAA0E,CAAC;SAC7F,MAAM,CAAC,SAAS,EAAE,0CAA0C,CAAC;SAC7D,MAAM,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC1D,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,MAAM,qBAAqB,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,OAA8B,EAAE;IACjF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,GAAG,CAAC,WAAW,CACb,OAAO,EACP,+IAA+I,CAChJ,CAAC;IACJ,CAAC;IACD,OAAO,GAAG;SACP,WAAW,CACV,qQAAqQ,CACtQ;SACA,MAAM,CAAC,QAAQ,EAAE,oDAAoD,CAAC;SACtE,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;SACrF,MAAM,CAAC,YAAY,EAAE,4DAA4D,CAAC;SAClF,MAAM,CAAC,yBAAyB,EAAE,2DAA2D,CAAC;SAC9F,MAAM,CAAC,sBAAsB,EAAE,+DAA+D,CAAC;SAC/F,MAAM,CACL,yBAAyB,EACzB,gHAAgH,EAChH,OAAO,EACP,EAAE,CACH;SACA,kBAAkB,CAAC,IAAI,CAAC;SACxB,kBAAkB,EAAE;SACpB,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC;SACnD,MAAM,CACL,KAAK,EACH,OAAiB,EACjB,OAOC,EACD,EAAE;QACF,IAAI,IAAI,CAAC,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CACF,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,OAAO;SACJ,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SACvC,WAAW,CAAC,oDAAoD,CAAC;SACjE,OAAO,CAAC,UAAU,CAAC;SACnB,cAAc,CAAC,cAAc,EAAE,2BAA2B,CAAC;SAC3D,MAAM,CAAC,eAAe,EAAE,qCAAqC,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,IAAqC,EAAE,EAAE;QACtD,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jeger-ai/opengantry",
-  "version": "3.7.0",
+  "version": "3.8.0",
   "description": "Open Source Gantry — vendor-neutral GXT substrate and Gantry CLI for local git-native agent governance",
   "type": "module",
   "bin": {

package/templates/.gitagent/foreman/SUBSTRATE.version.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "0.1.0",
-  "opengantry_version": "3.7.0",
+  "opengantry_version": "3.8.0",
   "installed_at": "2026-01-01T00:00:00.000Z",
   "installed_by": "gantry init"
 }

package/templates/integrations/compatibility.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "1",
-  "opengantry_version": "3.7.0",
+  "opengantry_version": "3.8.0",
   "asset_catalog": "integrations/asset-catalog.json",
   "integrations": {
     "cursor": {