cage-ai 0.1.1__tar.gz

cage_ai-0.1.1/.github/CODEOWNERS

@@ -0,0 +1,14 @@
+# CODEOWNERS for cage
+#
+# The load-bearing crypto surface. Takes effect once branch protection
+# requires code-owner review.
+
+# Pure-Rust crypto core: authority, secret and transport surface.
+/crates/cage-core/src/vault.rs       @derdelean
+/crates/cage-core/src/gate.rs        @derdelean
+/crates/cage-core/src/transport.rs   @derdelean
+/crates/cage-core/src/release.rs     @derdelean
+/crates/cage-core/src/operator.rs    @derdelean
+
+# PyO3 authority shell (RustGate, authority and secret co-located).
+/src/lib.rs                          @derdelean

cage_ai-0.1.1/.github/workflows/build.yml

@@ -0,0 +1,75 @@
+name: build
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+env:
+  CARGO_TERM_COLOR: always
+  RUSTFLAGS: "-D warnings"
+
+jobs:
+  test:
+    name: test (${{ matrix.os }} / py${{ matrix.python-version }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable @ 2026-06-15
+        with:
+          # Keep in lockstep with rust-toolchain.toml — that file is what makes a
+          # local `cargo clippy` the same check as this one. Bump both together.
+          toolchain: "1.97.0"
+          components: rustfmt, clippy
+
+      - name: Cache cargo
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ matrix.os }}-cargo-${{ hashFiles('Cargo.lock') }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3
+        with:
+          enable-cache: true
+
+      - name: Set up Python ${{ matrix.python-version }}
+        run: uv venv --python ${{ matrix.python-version }}
+
+      - name: Install dev deps
+        run: |
+          source .venv/bin/activate
+          uv pip install maturin pytest pytest-asyncio cryptography httpx
+
+      - name: Build Rust extension (release)
+        run: |
+          source .venv/bin/activate
+          maturin develop --release
+
+      - name: Cargo fmt --check
+        run: cargo fmt --all -- --check
+
+      - name: Cargo clippy
+        run: |
+          source .venv/bin/activate
+          cargo clippy --workspace --all-targets -- -D warnings
+
+      # The PyO3 binding crate has no Rust tests. pytest covers it.
+      - name: Cargo test
+        run: cargo test --workspace --exclude cage
+
+      - name: Pytest
+        run: |
+          source .venv/bin/activate
+          pytest -v

cage_ai-0.1.1/.github/workflows/release.yml

@@ -0,0 +1,212 @@
+name: release
+
+# Sigstore-signed release pipeline.
+#
+# When a tag v* is pushed:
+#   1. Build manylinux + macOS wheels via maturin (Python 3.11–3.14) and an sdist
+#   2. Sign every wheel via cosign with GitHub Actions OIDC + Fulcio
+#      (keyless: no long-lived signing key lives in this repo or in CI)
+#   3. Publish a GitHub Release with the wheels alongside their .sig + .cert files
+#   4. Each signature is recorded in the public Sigstore Rekor transparency log.
+#      Verification proves the wheel was built by THIS repository's release.yml
+#      at the tagged commit.
+#   5. Publish the wheels and the sdist to PyPI as cage-ai through trusted
+#      publishing (OIDC, no API token). PyPI attaches a Sigstore attestation.
+#
+# cage proposes credential containment through capability tokens and an audit
+# chain, and its own releases are signed with the same Sigstore, Fulcio and
+# Rekor model.
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write    # publish GitHub Releases
+  id-token: write    # OIDC token for cosign keyless signing
+
+jobs:
+  build-wheels:
+    name: build wheel (${{ matrix.os }} / py${{ matrix.python-version }})
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable @ 2026-06-15
+        with:
+          toolchain: stable
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@caf0cab7a618c569241d31dcd442f54681755d39 # v3
+
+      - name: Set up Python ${{ matrix.python-version }}
+        run: uv venv --python ${{ matrix.python-version }}
+
+      - name: Install maturin
+        run: |
+          source .venv/bin/activate
+          uv pip install maturin
+
+      # Built inside the manylinux_2_28 container: the runner's own glibc is newer
+      # than the manylinux_2_28 tag allows, so a native build fails the check.
+      - name: Build wheel (manylinux on Linux)
+        if: runner.os == 'Linux'
+        uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
+        with:
+          manylinux: 2_28
+          args: --release --strip -i python${{ matrix.python-version }}
+
+      - name: Build wheel (macOS)
+        if: runner.os == 'macOS'
+        run: |
+          source .venv/bin/activate
+          maturin build --release --strip -i python${{ matrix.python-version }}
+
+      - name: Upload wheel artifact
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: wheel-${{ matrix.os }}-py${{ matrix.python-version }}
+          path: target/wheels/*.whl
+          if-no-files-found: error
+
+  sign-and-release:
+    name: sign + release
+    needs: build-wheels
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Download all wheel artifacts
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          path: artifacts
+          pattern: wheel-*
+          merge-multiple: true
+
+      - name: List downloaded wheels
+        run: ls -la artifacts/
+
+      - name: Install cosign
+        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
+        with:
+          cosign-release: v2.4.1
+
+      - name: Sign wheels (keyless, OIDC → Fulcio → Rekor)
+        env:
+          COSIGN_EXPERIMENTAL: "1"
+        run: |
+          set -euo pipefail
+          mkdir -p signed
+          for wheel in artifacts/*.whl; do
+            base=$(basename "$wheel")
+            echo "Signing $base"
+            cosign sign-blob --yes \
+              --output-signature  "signed/${base}.sig" \
+              --output-certificate "signed/${base}.cert" \
+              "$wheel"
+            cp "$wheel" "signed/"
+          done
+          ls -la signed/
+
+      - name: Verify signatures locally (sanity check)
+        env:
+          COSIGN_EXPERIMENTAL: "1"
+        run: |
+          set -euo pipefail
+          for wheel in signed/*.whl; do
+            base=$(basename "$wheel")
+            echo "Verifying $base"
+            cosign verify-blob \
+              --certificate       "signed/${base}.cert" \
+              --signature         "signed/${base}.sig" \
+              --certificate-identity-regexp "https://github.com/${{ github.repository }}/\.github/workflows/release\.yml@.*" \
+              --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
+              "$wheel"
+          done
+
+      - name: Publish GitHub Release
+        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
+        with:
+          name: ${{ github.ref_name }}
+          body: |
+            CAGE ${{ github.ref_name }}, Sigstore-signed. Also on PyPI as `cage-ai`.
+
+            Every wheel below is signed with Sigstore (keyless OIDC and Fulcio),
+            and the signature is recorded in the public Rekor transparency log.
+
+            **Verify before installing:**
+
+            ```bash
+            cosign verify-blob \
+              --certificate cage_ai-*.whl.cert \
+              --signature   cage_ai-*.whl.sig \
+              --certificate-identity-regexp \
+                "https://github.com/${{ github.repository }}/\.github/workflows/release\.yml@.*" \
+              --certificate-oidc-issuer https://token.actions.githubusercontent.com \
+              cage_ai-*.whl
+            ```
+
+            A passing verification proves the wheel was built by this
+            repository's release workflow at the tagged commit, and the proof
+            is recorded in Rekor.
+          files: |
+            signed/*.whl
+            signed/*.sig
+            signed/*.cert
+          fail_on_unmatched_files: true
+
+  sdist:
+    name: build sdist
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Build sdist
+        uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
+        with:
+          command: sdist
+          args: --out dist
+
+      - name: Upload sdist artifact
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: sdist
+          path: dist/*.tar.gz
+          if-no-files-found: error
+
+  publish-pypi:
+    name: publish to PyPI
+    # Only files that passed signing and the GitHub release go to PyPI.
+    needs: [sign-and-release, sdist]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/cage-ai/
+    permissions:
+      id-token: write   # PyPI trusted publishing over OIDC, no API token
+
+    steps:
+      - name: Download wheels
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          path: dist
+          pattern: wheel-*
+          merge-multiple: true
+
+      - name: Download sdist
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: sdist
+          path: dist
+
+      - name: Publish (trusted publishing, PEP 740 attestations)
+        uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # v1.14.3

cage_ai-0.1.1/.gitignore

@@ -0,0 +1,48 @@
+# Python
+__pycache__/
+*.pyc
+*.pyo
+.venv/
+*.egg-info/
+build/
+dist/
+wheelhouse/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# Rust
+target/
+**/*.rs.bk
+*.pdb
+Cargo.lock.bak
+
+# Maturin
+*.so
+*.pyd
+*.dylib
+
+# Secrets — never commit
+.env
+.env.*
+*.pem
+*.key
+credentials.json
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Editor
+.vscode/
+.idea/
+*.swp
+
+# Personal notes & exported conversation history — never push
+all-notes-*.txt
+conversation-*.md
+conversation-*.txt
+release-prep/
+
+# Claude Code local state (settings, scheduler, locks) — never push
+.claude/

cage_ai-0.1.1/.python-version

@@ -0,0 +1 @@
+3.12