ace-assign 0.63.0 → 0.64.0

data/lib/ace/assign/organisms/delivery_coordinator.rb

@@ -0,0 +1,342 @@
+# frozen_string_literal: true
+require "yaml"
+require "ace/git/organisms/pull_request_lifecycle"
+require_relative "../atoms/delivery_parameters"
+
+module Ace
+  module Assign
+    module Organisms
+      # Remote delivery is a projection of the existing attempt journal.
+      # Intents precede writes; an interrupted intent permits reconciliation
+      # reads only. Privileged merge is executed by qjx, never this worker.
+      class DeliveryCoordinator
+        def initialize(repo_root:, coordinator: nil, journal: nil, lifecycle_factory: nil, exclusion: nil, identity_resolver: nil)
+          @mutex = Mutex.new
+          @identity_resolver = identity_resolver || Molecules::ExecutionIdentityResolver.new
+          @repo_root = repo_root
+          @journal = journal || Molecules::EvidenceJournal.new(repo_root: repo_root)
+          @coordinator = coordinator || AttemptCoordinator.new(repo_root: repo_root, journal: @journal)
+          @factory = lifecycle_factory || ->(selection) { Ace::Git::Organisms::PullRequestLifecycle.new(**selection) }
+          @exclusion = exclusion || Molecules::LifecycleExclusion.new(repo_root: repo_root)
+        end
+
+        def perform(**arguments)
+          @mutex.synchronize { execute_request(**arguments) }
+        end
+
+        private
+
+        def execute_request(assignment_id:, attempt_id:, operation:, parameters: nil, title: nil, body: nil,
+          tests: nil, review: nil, service_request_id: nil)
+          @identity = @identity_resolver.resolve
+          unless @identity_resolver.trusted?(@identity)
+            raise AttemptErrors::UnauthorizedIdentity, "Only a trusted coordinator or service may accept delivery evidence"
+          end
+          raise ArgumentError, "Unsupported delivery operation" unless %w[create update ready review merge status].include?(operation)
+          if operation == "create" && (!title.is_a?(String) || title.strip.empty?)
+            raise ArgumentError, "Create requires a concrete PR title"
+          end
+          if operation == "update" && title.nil? && body.nil?
+            raise ArgumentError, "Update requires title or body"
+          end
+          raise ArgumentError, "PR body must be text" unless body.nil? || body.is_a?(String)
+          params = Atoms::DeliveryParameters.validate(parameters || assignment_parameters(assignment_id))
+          binding = {"assignment_id" => assignment_id, "attempt_id" => attempt_id}
+          attempt = @coordinator.authoritative_attempt(binding)
+          raise AttemptErrors::NotFound, "Delivery attempt not found" unless attempt
+          raise AttemptErrors::ReceiptRejected, "Delivery requires a managed attempt" unless attempt.managed?
+          @exclusion.with_shared(@exclusion.task_key(attempt.binding.task_id)) do
+            @exclusion.with_exclusive(@exclusion.assignment_key(assignment_id)) do
+              raise AttemptErrors::Conflict, "Assignment was pruned" if @exclusion.removed?(@exclusion.assignment_key(assignment_id))
+              execute(binding, operation, params, title: title, body: body, tests: tests, review: review,
+                service_request_id: service_request_id)
+            end
+          end
+        end
+
+        private
+
+        def assignment_parameters(assignment_id)
+          assignment = Molecules::AssignmentManager.new.load(assignment_id)
+          raise AttemptErrors::NotFound, "Assignment not found" unless assignment
+          document = YAML.safe_load_file(assignment.source_config, permitted_classes: [Time, Date])
+          document.fetch("delivery")
+        rescue KeyError, Errno::ENOENT, Psych::Exception
+          raise ArgumentError, "Assignment needs explicit delivery parameters"
+        end
+
+        def execute(binding, operation, params, **options)
+          @binding = binding
+          @intent_context = nil
+          @attempt = @coordinator.authoritative_attempt(binding)
+          unless @attempt&.active? && @attempt.managed?
+            raise AttemptErrors::ReceiptRejected, "Delivery attempt is no longer active"
+          end
+          @head = git!("rev-parse", "HEAD").strip
+          selection = {server_name: params["forge_server"], use_default: params["forge_default"], repo_root: @repo_root}
+          historical = events.find { |event| event.dig("payload", "stage") == "identity" }&.fetch("payload")
+          selection = {server_name: historical.dig("server", "name"), use_default: false, repo_root: @repo_root} if historical
+          @lifecycle = @factory.call(selection)
+          server = @lifecycle.resolved_identity
+          @server = server
+          Atoms::DeliveryParameters.validate_url!(server.fetch("url"))
+          provenance = params.fetch("pr_provenance")
+          unless Ace::Git::Atoms::ServerUrl.match?(server["url"], provenance["base_repository_url"])
+            raise Ace::Git::ProviderIdentityMismatchError, "Selected forge does not match delivery base"
+          end
+          if historical
+            unless historical["server"] == server && historical["provenance"] == provenance &&
+                historical["selection"] == params.slice("forge_server", "forge_default")
+              raise AttemptErrors::Conflict, "Delivery identity or selection changed during attempt"
+            end
+          elsif !%w[status review].include?(operation)
+            record("stage" => "identity", "server" => server, "provenance" => provenance,
+              "selection" => params.slice("forge_server", "forge_default"))
+          end
+          @provenance = provenance
+          pinned = Ace::Git::ResolvedServer.new(name: server.fetch("name"),
+            provider: server.fetch("provider").to_sym, url: server.fetch("url"))
+          @lifecycle = @factory.call(server_name: pinned.name, use_default: false,
+            repo_root: @repo_root, resolved_server: pinned)
+          verify_pushed_head!
+          return status if operation == "status"
+          return review_snapshot if operation == "review"
+          pending = unresolved_intent
+          if pending
+            result = reconcile(pending)
+            return result if same_effect?(pending, operation, options)
+            raise AttemptErrors::CurrentEffectRequired.new(operation: operation, recovered_operation: pending["operation"])
+          end
+          require_evidence!(options[:tests], options[:review]) if %w[ready merge].include?(operation)
+          return consume_merge(options[:service_request_id]) if operation == "merge"
+          pr = current_pr
+          if operation == "create" && pr
+            requested = content_input(options)
+            metadata = @lifecycle.review_metadata_snapshot(pr.number).pull_request
+            verify_pr!(metadata)
+            unless content_matches?(requested.keys.map(&:to_s), Atoms::EvidenceDigest.digest(requested), metadata)
+              raise AttemptErrors::CurrentEffectRequired.new(operation: operation, recovered_operation: "create")
+            end
+            return reconcile({"operation" => "create", "head" => @head,
+              "fields" => requested.keys.map(&:to_s), "input_digest" => Atoms::EvidenceDigest.digest(requested)})
+          end
+          raise AttemptErrors::ReceiptRejected, "Create a draft before #{operation}" if operation != "create" && !pr
+          verify_pr!(pr) if pr
+          intent = {"stage" => "intent", "operation" => operation, "head" => @head,
+                    "input_digest" => Atoms::EvidenceDigest.digest(content_input(options)),
+                    "fields" => content_input(options).keys.map(&:to_s),
+                    "pr_number" => pr&.number, "tests" => options[:tests], "review" => options[:review]}
+          record(intent)
+          @intent_context = unresolved_intent
+          receipt = case operation
+          when "create"
+            @lifecycle.create(head_ref: provenance["head_ref"], base_ref: provenance["base_ref"],
+              head_repository_url: provenance["head_repository_url"], expected_head: @head,
+              title: options[:title], body: options[:body], draft: true)
+          when "update"
+            @lifecycle.update(pr.number, expected_head: @head, title: options[:title], body: options[:body])
+          when "ready" then @lifecycle.ready(pr.number, expected_head: @head)
+          end
+          verify_pr!(receipt.pull_request)
+          unless receipt.operation.to_s == operation && receipt.server_name == server["name"] &&
+              (operation != "create" || receipt.pull_request.draft == true) &&
+              (operation != "ready" || receipt.pull_request.draft == false)
+            raise Ace::Git::ProviderUnknownOutcomeError, "Delivery mutation lacks expected outcome"
+          end
+          record_result(operation, receipt.pull_request, "succeeded")
+          status
+        rescue Ace::Git::ProviderUnknownOutcomeError
+          # The durable intent remains unresolved; no exception text or
+          # provider payload is stored (both may contain sensitive data).
+          raise
+        end
+
+        def events
+          @journal.read_events(@binding.fetch("assignment_id")).select do |event|
+            event["type"] == "delivery"
+          end
+        end
+
+        def record(payload)
+          producer = {"actor" => @identity.actor, "role" => @identity.role, "runtime" => @identity.runtime}
+          @journal.record(**@binding.transform_keys(&:to_sym), type: "delivery", payload: payload.merge("producer" => producer),
+            guard: -> {
+              live = @coordinator.authoritative_attempt(@binding)
+              raise AttemptErrors::ReceiptRejected, "Delivery attempt is no longer active" unless live&.active?
+              raise AttemptErrors::ReceiptRejected, "Candidate changed during delivery" unless git!("rev-parse", "HEAD").strip == @head
+            })
+        end
+
+        def unresolved_intent
+          history = events
+          settled = history.filter_map do |event|
+            payload = event.fetch("payload")
+            payload["intent_digest"] if payload["stage"] == "result" && payload["outcome"] == "succeeded"
+          end
+          pending = history.select do |event|
+            event.dig("payload", "stage") == "intent" && !settled.include?(event["digest"])
+          end
+          raise AttemptErrors::Conflict, "Multiple unresolved delivery intents require reconciliation" if pending.length > 1
+          event = pending.first
+          event && event.fetch("payload").merge("intent_digest" => event.fetch("digest"),
+            "intent_attempt_id" => event.fetch("attempt_id"))
+        end
+
+        def current_pr
+          result = events.reverse.find { |event| event.dig("payload", "stage") == "result" && event.dig("payload", "pr") }
+          result && @lifecycle.show(result.dig("payload", "pr", "number"))
+        end
+
+        def reconcile(intent)
+          @intent_context = intent
+          raise AttemptErrors::ReceiptRejected, "Unresolved delivery belongs to an older candidate" unless intent["head"] == @head
+          operation = intent.fetch("operation")
+          if operation == "create"
+            matches = @lifecycle.reconcile_create(**@provenance.reject { |key, _| key == "mode" }.transform_keys(&:to_sym))
+            raise Ace::Git::ProviderUnknownOutcomeError, "No exact draft found; create remains unresolved" if matches.empty?
+            raise Ace::Git::ProviderConflictingMatchesError, "Multiple exact drafts found" unless matches.length == 1
+            pr = matches.first
+            verify_pr!(pr)
+            raise Ace::Git::ProviderUnknownOutcomeError, "Created PR draft state is unproven" unless pr.draft == true
+            pr = @lifecycle.review_metadata_snapshot(pr.number).pull_request
+            verify_pr!(pr)
+            unless content_matches?(intent.fetch("fields"), intent.fetch("input_digest"), pr)
+              raise Ace::Git::ProviderUnknownOutcomeError, "Created PR content remains unproven"
+            end
+          elsif operation == "ready"
+            require_evidence!(intent["tests"], intent["review"])
+            pr = @lifecycle.show(intent.fetch("pr_number"))
+            verify_pr!(pr)
+            raise Ace::Git::ProviderUnknownOutcomeError, "Readiness remains unresolved" unless pr.draft == false
+          elsif operation == "update"
+            pr = @lifecycle.review_metadata_snapshot(intent.fetch("pr_number")).pull_request
+            verify_pr!(pr)
+            unless content_matches?(intent.fetch("fields"), intent.fetch("input_digest"), pr)
+              raise Ace::Git::ProviderUnknownOutcomeError, "PR update remains unresolved"
+            end
+          else
+            raise Ace::Git::ProviderUnknownOutcomeError, "#{operation} requires authoritative receipt reconciliation"
+          end
+          record_result(operation, pr, "succeeded")
+          status
+        end
+
+        def content_input(options)
+          options.slice(:title, :body).compact
+        end
+
+        def content_matches?(fields, digest, pr)
+          observed = fields.to_h { |field| [field, pr.public_send(field)] }
+          Atoms::EvidenceDigest.digest(observed) == digest
+        end
+
+        def same_effect?(intent, operation, options)
+          return false unless intent["operation"] == operation
+          case operation
+          when "create", "update"
+            intent["input_digest"] == Atoms::EvidenceDigest.digest(content_input(options))
+          when "ready"
+            %i[tests review].all? { |key| options[key].nil? || options[key] == intent[key.to_s] }
+          when "merge"
+            options[:service_request_id].is_a?(String) &&
+              options[:service_request_id] == intent["service_request_id"] &&
+              %i[tests review].all? { |key| options[key].nil? || options[key] == intent[key.to_s] }
+          else false
+          end
+        end
+
+        def require_evidence!(tests, review)
+          [[tests, "check"], [review, "review-approval"]].each do |ref, kind|
+            unless ref.is_a?(Hash) && ref.keys.sort == %w[attempt_id receipt_digest]
+              raise AttemptErrors::ReceiptRejected, "Current accepted #{kind} evidence is required"
+            end
+            evidence = @coordinator.evidence(attempt_id: ref["attempt_id"], receipt_digest: ref["receipt_digest"], kind: kind)
+            unless evidence["head"] == @head && evidence["assignment_id"] == @binding["assignment_id"] &&
+                evidence["project_id"] == @attempt.binding.project_id
+              raise AttemptErrors::ReceiptRejected, "Delivery evidence does not match assignment, project and candidate"
+            end
+          end
+        end
+
+        def consume_merge(request_id)
+          unless request_id.is_a?(String) && request_id.match?(/\A[a-zA-Z0-9][a-zA-Z0-9_.-]{0,127}\z/)
+            raise AttemptErrors::ReceiptRejected, "Exact authorized merge service receipt is required"
+          end
+          request = @coordinator.service_request_status(request_id)
+          unless request && request["state"] == "succeeded" && request["operation"] == "merge" &&
+              request["assignment_id"] == @binding["assignment_id"] && request["attempt_id"] == @binding["attempt_id"] &&
+              request["project_id"] == @attempt.binding.project_id && request["candidate_head"] == @head &&
+              request["authorization"].is_a?(String) && !request["authorization"].empty?
+            raise AttemptErrors::ReceiptRejected, "Exact authorized merge service receipt is required"
+          end
+          @coordinator.validate_service_receipt!(request, "succeeded", request["receipt"])
+          pr = current_pr
+          verify_pr!(pr)
+          unless request.dig("target", "resource") == pr.url && pr.state.to_s == "merged" &&
+              pr.merge_commit_sha.to_s.match?(/\A[0-9a-f]{40}\z/)
+            raise AttemptErrors::ReceiptRejected, "Service receipt and merged PR identity do not agree"
+          end
+          record_result("merge", pr, "succeeded", "service_request_id" => request_id)
+          status
+        end
+
+        def review_snapshot
+          pr = current_pr
+          raise AttemptErrors::ReceiptRejected, "Create a draft before remote review" unless pr
+          verify_pr!(pr)
+          snapshot = @lifecycle.review_snapshot(pr.number)
+          verify_pr!(snapshot.pull_request)
+          snapshot
+        end
+
+        def verify_pr!(pr)
+          reference = pr && Ace::Git::Atoms::PrReference.parse(pr.url)
+          unless reference && reference.number == pr.number && reference.repository_url &&
+              Ace::Git::Atoms::ServerUrl.match?(reference.repository_url, @provenance["base_repository_url"])
+            raise Ace::Git::ProviderIdentityMismatchError, "PR URL does not match delivery repository and number"
+          end
+          Atoms::DeliveryParameters.validate_url!(pr.url)
+          unless pr && pr.server_name == @server["name"] && pr.number.is_a?(Integer) && pr.number.positive? &&
+              pr.head_sha == @head && pr.head_ref == @provenance["head_ref"] &&
+              pr.base_ref == @provenance["base_ref"] &&
+              Ace::Git::Atoms::ServerUrl.match?(pr.head_repository_url, @provenance["head_repository_url"]) &&
+              Ace::Git::Atoms::ServerUrl.match?(pr.base_repository_url, @provenance["base_repository_url"])
+            raise Ace::Git::ProviderExpectedHeadConflictError, "PR candidate or provenance does not match delivery"
+          end
+        end
+
+        def verify_pushed_head!
+          output = git!("ls-remote", "--heads", @provenance["head_repository_url"], "refs/heads/#{@provenance['head_ref']}")
+          expected = "#{@head}\trefs/heads/#{@provenance['head_ref']}"
+          raise AttemptErrors::ReceiptRejected, "Pushed source does not match candidate" unless output.strip == expected
+        end
+
+        def record_result(operation, pr, outcome, extra = {})
+          record({"stage" => "result", "operation" => operation, "head" => @head, "outcome" => outcome,
+            "intent_digest" => @intent_context&.fetch("intent_digest", nil),
+            "intent_attempt_id" => @intent_context&.fetch("intent_attempt_id", nil),
+            "pr" => {"number" => pr.number, "url" => pr.url, "head_sha" => pr.head_sha,
+                     "draft" => pr.draft, "state" => pr.state.to_s, "merge_commit_sha" => pr.merge_commit_sha}}.merge(extra))
+        end
+
+        def status
+          attempt = @coordinator.authoritative_attempt(@binding)
+          {"attempt_id" => attempt.attempt_id, "assignment_id" => @binding["assignment_id"],
+           "task_id" => attempt.binding.task_id, "project_id" => attempt.binding.project_id,
+           "actor" => attempt.binding.actor, "role" => attempt.binding.role, "runtime" => attempt.binding.runtime,
+           "base_head" => attempt.binding.base_head, "candidate_head" => attempt.candidate_head,
+           "evidence_git_ref" => @attempt.binding.evidence_git_ref, "journal_commit" => @journal.ref_value,
+           "delivery" => events.map do |event|
+             event.fetch("payload").merge("attempt_id" => event.fetch("attempt_id"), "event_digest" => event.fetch("digest"))
+           end}
+        end
+
+        def git!(*argv)
+          result = Ace::Git::Atoms::CommandExecutor.execute("git", "-C", @repo_root, *argv)
+          raise AttemptErrors::EvidenceUnavailable, "Git delivery proof unavailable" unless result[:success]
+          result[:output]
+        end
+      end
+    end
+  end
+end

data/lib/ace/assign/organisms/task_assignment_creator.rb

@@ -21,7 +21,7 @@ module Ace
           @executor = executor || AssignmentExecutor.new
         end
 
-        def call(task_refs:, preset_name: DEFAULT_PRESET, primary_task_ref: nil)
+        def call(task_refs:, preset_name: DEFAULT_PRESET, primary_task_ref: nil, delivery_parameters: nil)
           requested_refs = normalize_requested_refs(task_refs)
           raise Ace::Support::Cli::Error, "--task requires at least one task reference" if requested_refs.empty?
 
@@ -48,10 +48,14 @@ module Ace
           validate_parameters!(preset, params)
 
           steps = Atoms::PresetExpander.expand(preset, params)
+          delivery = delivery_parameters && Atoms::DeliveryParameters.validate(delivery_parameters)
+          if delivery && !steps.any? { |step| %w[create-pr update-pr-desc mark-pr-ready].include?(step["name"]) }
+            raise ArgumentError, "Explicit delivery inputs require a remote-capable preset"
+          end
           job_path = write_job_file(
             session_name: "#{preset_name}-#{primary_ref}",
             description: preset["description"],
-            steps: steps
+            steps: steps, delivery: delivery
           )
 
           result = @executor.start(job_path, task_id: primary_ref)
@@ -147,7 +151,7 @@ module Ace
           raise Ace::Support::Cli::Error, errors.join(", ")
         end
 
-        def write_job_file(session_name:, description:, steps:)
+        def write_job_file(session_name:, description:, steps:, delivery: nil)
           job = {
             "session" => {
               "name" => session_name,
@@ -156,6 +160,7 @@ module Ace
             "steps" => steps
           }
 
+          job["delivery"] = delivery if delivery
           dir = File.join(Ace::Assign.cache_dir, "jobs")
           FileUtils.mkdir_p(dir)
           path = File.join(dir, "#{session_name}-#{SecureRandom.hex(4)}-job.yml")

data/lib/ace/assign/version.rb

@@ -2,6 +2,6 @@
 
 module Ace
   module Assign
-    VERSION = "0.63.0"
+    VERSION = "0.64.0"
   end
 end

data/lib/ace/assign.rb

@@ -101,6 +101,16 @@ module Ace
         end
       end
 
+      # Byte framing failed before any business receipt could be admitted.
+      class MalformedTransfer < ReceiptRejected; end
+
+      # Recovery settled a prior effect, but did not perform this request.
+      class CurrentEffectRequired < ReceiptRejected
+        def initialize(operation:, recovered_operation:)
+          super("Recovered #{recovered_operation}; requested #{operation} still needs execution")
+        end
+      end
+
       # Attempt state forbids the requested effect (terminal, uncertain, blocked)
       class InvalidState < Error
         def initialize(message = "Attempt state forbids the requested operation")
@@ -197,3 +207,6 @@ module Ace
     private_class_method :load_gem_defaults_fallback
   end
 end
+
+require_relative "assign/atoms/delivery_parameters"
+require_relative "assign/organisms/delivery_coordinator"

metadata

@@ -1,14 +1,76 @@
 --- !ruby/object:Gem::Specification
 name: ace-assign
 version: !ruby/object:Gem::Version
-  version: 0.63.0
+  version: 0.64.0
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-10-04 00:00:00.000000000 Z
+date: 2026-10-05 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: ace-llm-providers-cli
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.36.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.36.1
+- !ruby/object:Gem::Dependency
+  name: ace-support-fs
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+- !ruby/object:Gem::Dependency
+  name: ace-git
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.29'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.29'
+- !ruby/object:Gem::Dependency
+  name: json
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.20'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.20'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: ace-support-cli
   requirement: !ruby/object:Gem::Requirement
@@ -113,14 +175,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.57'
+        version: '0.59'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.57'
+        version: '0.59'
 - !ruby/object:Gem::Dependency
   name: ace-task
   requirement: !ruby/object:Gem::Requirement
@@ -141,14 +203,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.1'
+        version: '0.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.1'
+        version: '0.2'
 - !ruby/object:Gem::Dependency
   name: ace-tmux
   requirement: !ruby/object:Gem::Requirement
@@ -163,6 +225,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.18'
+- !ruby/object:Gem::Dependency
+  name: ace-herdr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
 - !ruby/object:Gem::Dependency
   name: ace-support-test-helpers
   requirement: !ruby/object:Gem::Requirement
@@ -275,6 +351,7 @@ files:
 - docs/exit-codes.md
 - docs/getting-started.md
 - docs/handbook.md
+- docs/protected-authority.md
 - docs/usage.md
 - exe/ace-assign
 - handbook/guides/fork-context.g.md
@@ -309,6 +386,7 @@ files:
 - lib/ace/assign/atoms/attempt_state_machine.rb
 - lib/ace/assign/atoms/catalog_loader.rb
 - lib/ace/assign/atoms/composition_rules.rb
+- lib/ace/assign/atoms/delivery_parameters.rb
 - lib/ace/assign/atoms/evidence_digest.rb
 - lib/ace/assign/atoms/number_generator.rb
 - lib/ace/assign/atoms/preset_expander.rb
@@ -318,6 +396,29 @@ files:
 - lib/ace/assign/atoms/step_numbering.rb
 - lib/ace/assign/atoms/step_sorter.rb
 - lib/ace/assign/atoms/tree_formatter.rb
+- lib/ace/assign/authority/candidate_transfer.rb
+- lib/ace/assign/authority/client.rb
+- lib/ace/assign/authority/deployment.rb
+- lib/ace/assign/authority/endcap.rb
+- lib/ace/assign/authority/endcap_inboxes.rb
+- lib/ace/assign/authority/endcap_results.rb
+- lib/ace/assign/authority/endcap_services.rb
+- lib/ace/assign/authority/evidence_transfer.rb
+- lib/ace/assign/authority/execution_scope_observation.rb
+- lib/ace/assign/authority/launch_driver.rb
+- lib/ace/assign/authority/launch_lifecycle.rb
+- lib/ace/assign/authority/launch_scope_abort.rb
+- lib/ace/assign/authority/launch_scope_admission.rb
+- lib/ace/assign/authority/launch_scope_close.rb
+- lib/ace/assign/authority/launch_scope_parent.rb
+- lib/ace/assign/authority/launch_scope_release.rb
+- lib/ace/assign/authority/posix_acl.rb
+- lib/ace/assign/authority/private_directory.rb
+- lib/ace/assign/authority/receipt_transfer.rb
+- lib/ace/assign/authority/router.rb
+- lib/ace/assign/authority/server.rb
+- lib/ace/assign/authority/service_evidence.rb
+- lib/ace/assign/authority/transfer_codec.rb
 - lib/ace/assign/cli.rb
 - lib/ace/assign/cli/commands/add.rb
 - lib/ace/assign/cli/commands/assignment_target.rb
@@ -327,12 +428,19 @@ files:
 - lib/ace/assign/cli/commands/attempt/reconcile.rb
 - lib/ace/assign/cli/commands/attempt/start.rb
 - lib/ace/assign/cli/commands/attempt/status.rb
+- lib/ace/assign/cli/commands/authority/launch.rb
+- lib/ace/assign/cli/commands/authority/serve.rb
+- lib/ace/assign/cli/commands/authority/status.rb
+- lib/ace/assign/cli/commands/authority/terminate.rb
 - lib/ace/assign/cli/commands/create.rb
+- lib/ace/assign/cli/commands/delivery.rb
 - lib/ace/assign/cli/commands/fail.rb
 - lib/ace/assign/cli/commands/finish.rb
 - lib/ace/assign/cli/commands/fork_run.rb
 - lib/ace/assign/cli/commands/fork_session.rb
+- lib/ace/assign/cli/commands/inbox_reconcile.rb
 - lib/ace/assign/cli/commands/list.rb
+- lib/ace/assign/cli/commands/resume.rb
 - lib/ace/assign/cli/commands/retry_cmd.rb
 - lib/ace/assign/cli/commands/select.rb
 - lib/ace/assign/cli/commands/start.rb
@@ -350,12 +458,16 @@ files:
 - lib/ace/assign/molecules/assignment_manager.rb
 - lib/ace/assign/molecules/attempt_reconciler.rb
 - lib/ace/assign/molecules/attempt_store.rb
+- lib/ace/assign/molecules/canonical_evidence.rb
 - lib/ace/assign/molecules/evidence_calculator.rb
 - lib/ace/assign/molecules/evidence_journal.rb
 - lib/ace/assign/molecules/execution_identity_resolver.rb
+- lib/ace/assign/molecules/execution_scope_lineage.rb
 - lib/ace/assign/molecules/fork_session_launcher.rb
+- lib/ace/assign/molecules/journal_mutation.rb
 - lib/ace/assign/molecules/lifecycle_exclusion.rb
 - lib/ace/assign/molecules/preset_inferrer.rb
+- lib/ace/assign/molecules/proposal_journal.rb
 - lib/ace/assign/molecules/queue_scanner.rb
 - lib/ace/assign/molecules/receipt_verifier.rb
 - lib/ace/assign/molecules/runtime_control_surface_runner.rb
@@ -364,6 +476,7 @@ files:
 - lib/ace/assign/molecules/step_writer.rb
 - lib/ace/assign/organisms/assignment_executor.rb
 - lib/ace/assign/organisms/attempt_coordinator.rb
+- lib/ace/assign/organisms/delivery_coordinator.rb
 - lib/ace/assign/organisms/task_assignment_creator.rb
 - lib/ace/assign/version.rb
 homepage: https://github.com/cs3b/ace