ace-assign 0.64.0 → 0.66.1

data/lib/ace/assign/organisms/protected_delivery_coordinator.rb

@@ -0,0 +1,100 @@
+# frozen_string_literal: true
+require_relative "../authority/service_delivery_evidence"
+require "ace/git/atoms/service_pr_evidence"
+
+module Ace
+  module Assign
+    module Organisms
+      # Worker consumes only the original authority's canonical completion.
+      # No local journal, provider mutation, recovery write or merge retry.
+      class ProtectedDeliveryCoordinator
+        BASE_FIELDS = %w[request_id assignment_id attempt_id project_id operation service_id target candidate_head
+          candidate_generation state dispatch_ticket_id claim_binding claim_generation dispatch_phase policy_digest generation journal_commit].freeze
+        COMPLETE_FIELDS = %w[input_digest authorization executor_uid completion_digest receipt delivery_event].freeze
+
+        def initialize(client:, project_id:)
+          @client, @project_id = client, project_id
+        end
+
+        def perform(assignment_id:, attempt_id:, operation:, service_request_id:, candidate_head:, candidate_generation:,
+          input_digest:, target:, parameters: nil, title: nil, body: nil, tests: nil, review: nil)
+          unless %w[create update ready merge status].include?(operation) && [title, body, tests, review].all?(&:nil?) &&
+              [assignment_id, attempt_id, service_request_id].all? { |value| value.is_a?(String) && value.match?(Molecules::JournalMutation::ID) } &&
+              candidate_head.is_a?(String) && candidate_head.match?(/\A[0-9a-f]{40}\z/) &&
+              candidate_generation.is_a?(Integer) && candidate_generation.positive? &&
+              input_digest.is_a?(String) && input_digest.match?(/\A[0-9a-f]{64}\z/) &&
+              target.is_a?(Hash) && target.keys.sort == %w[artifact_digest resource] && target["resource"].is_a?(String) &&
+              (target["artifact_digest"].nil? || target["artifact_digest"].is_a?(String) && target["artifact_digest"].match?(/\A[0-9a-f]{64}\z/))
+            raise ArgumentError, "protected delivery requires exact canonical merge selectors; local delivery flags are unavailable"
+          end
+          binding = {"assignment_id" => assignment_id, "attempt_id" => attempt_id,
+            "candidate_generation" => candidate_generation, "head" => candidate_head, "request_id" => service_request_id}
+          data = @client.call("service_status", binding).data
+          unless data.is_a?(Hash) && (data.keys - BASE_FIELDS - COMPLETE_FIELDS).empty? &&
+              Atoms::EvidenceDigest.digest(data.slice("assignment_id", "attempt_id", "request_id", "candidate_generation")) == Atoms::EvidenceDigest.digest(binding.except("head")) &&
+              data["project_id"] == @project_id && data["candidate_head"] == candidate_head && Atoms::EvidenceDigest.digest(data["target"]) == Atoms::EvidenceDigest.digest(target) &&
+              %w[create update ready merge].include?(data["operation"]) && (operation == "status" || data["operation"] == operation) && data["generation"].is_a?(Integer) && data["generation"].positive? &&
+              data["input_digest"] == input_digest &&
+              data["journal_commit"].is_a?(String) && data["journal_commit"].match?(/\A(?:[0-9a-f]{40}|[0-9a-f]{64})\z/)
+            raise AttemptErrors::ReceiptRejected, "original canonical merge status differs"
+          end
+          if data["state"] != "succeeded"
+            return data if operation == "status"
+            raise AttemptErrors::EvidenceUnavailable, "original merge is not canonically succeeded; inspect its status without retry"
+          end
+          unless data.keys.sort == (BASE_FIELDS + COMPLETE_FIELDS).sort && data["input_digest"] == input_digest &&
+              data["executor_uid"].is_a?(Integer) && data["executor_uid"].positive? &&
+              data["completion_digest"].is_a?(String) && data["completion_digest"].match?(/\A[0-9a-f]{64}\z/)
+            raise AttemptErrors::ReceiptRejected, "original canonical completion selectors differ"
+          end
+          receipt = data.fetch("receipt")
+          unless receipt.is_a?(Hash) && receipt.keys.sort == Molecules::EvidenceJournal::TERMINAL_RECEIPT_FIELDS.sort &&
+              receipt["outcome"] == "succeeded" && receipt["operation"] == data["operation"] && receipt["transport"] == "unix" &&
+              receipt.slice("request_id", "assignment_id", "attempt_id", "project_id", "input_digest", "target", "candidate_head", "executor_uid") ==
+                data.slice("request_id", "assignment_id", "attempt_id", "project_id", "input_digest", "target", "candidate_head", "executor_uid") &&
+              receipt["evidence"].is_a?(Array) && receipt["evidence"].one?
+            raise AttemptErrors::ReceiptRejected, "original canonical merge receipt differs"
+          end
+          reference = receipt.fetch("evidence").first
+          unless reference.is_a?(Hash) && reference.keys.sort == %w[ref sha256] &&
+              reference["ref"].is_a?(String) && reference["ref"].match?(%r{\Aevidence/imports/[a-z0-9-]+\z}) &&
+              reference["sha256"].is_a?(String) && reference["sha256"].match?(/\A[0-9a-f]{64}\z/)
+            raise AttemptErrors::ReceiptRejected, "original canonical artifact reference differs"
+          end
+          fetched = @client.call("evidence_fetch", {"assignment_id" => assignment_id, "attempt_id" => attempt_id,
+            "kind" => "service", "purpose_id" => service_request_id,
+            "artifact_id" => reference.fetch("ref").delete_prefix("evidence/imports/")}, download: true, purpose: :artifacts)
+          descriptor = fetched.data.fetch("descriptor")
+          original_binding = Authority::ServiceEvidence::FIELDS.to_h { |key| [key, receipt.key?(key) ? receipt.fetch(key) : data.fetch(key)] }
+          unless Molecules::CanonicalEvidence.valid_descriptor?(descriptor) &&
+              descriptor["binding_digest"] == Atoms::EvidenceDigest.digest(original_binding) &&
+              descriptor["sha256"] == reference.fetch("sha256") && descriptor["peer_uid"] == data.fetch("executor_uid") &&
+              fetched.parts.is_a?(Array) && fetched.parts.one? && fetched.parts.first.is_a?(String) &&
+              Digest::SHA256.hexdigest(fetched.parts.first) == reference.fetch("sha256")
+            raise AttemptErrors::ReceiptRejected, "original canonical artifact descriptor differs"
+          end
+          proof_options = {request_id: service_request_id, input_digest: input_digest, target: target, head: candidate_head}
+          proof = if data.fetch("operation") == "merge"
+            Ace::Git::Atoms::ServiceMergeEvidence.validate(fetched.parts.first, **proof_options)
+          else
+            Ace::Git::Atoms::ServicePrEvidence.validate(fetched.parts.first, operation: data.fetch("operation"), **proof_options)
+          end
+          unless Atoms::EvidenceDigest.digest(proof.fetch(:input)) == input_digest &&
+              (!parameters || Atoms::EvidenceDigest.digest(Atoms::DeliveryParameters.validate(parameters)) == Atoms::EvidenceDigest.digest(proof.fetch(:input).fetch("delivery")))
+            raise AttemptErrors::ReceiptRejected, "canonical merge artifact accepted input differs"
+          end
+          event = data.fetch("delivery_event")
+          expected = Authority::ServiceDeliveryEvidence.payload(data, receipt, data.fetch("completion_digest"), proof)
+          unless event.is_a?(Hash) && event.keys.sort == %w[attempt_id digest payload previous_digest recorded_at type] &&
+              event["type"] == "delivery" && event["attempt_id"] == attempt_id && Models::EvidenceEvent.valid?(event) &&
+              Atoms::EvidenceDigest.digest(event.fetch("payload")) == Atoms::EvidenceDigest.digest(expected)
+            raise AttemptErrors::ReceiptRejected, "canonical delivery result/completion/import join differs"
+          end
+          data
+        rescue KeyError, TypeError, ArgumentError
+          raise AttemptErrors::ReceiptRejected, "protected merge evidence is malformed or unavailable"
+        end
+      end
+    end
+  end
+end

data/lib/ace/assign/organisms/task_assignment_creator.rb

@@ -21,7 +21,7 @@ module Ace
           @executor = executor || AssignmentExecutor.new
         end
 
-        def call(task_refs:, preset_name: DEFAULT_PRESET, primary_task_ref: nil, delivery_parameters: nil)
+        def call(task_refs:, preset_name: DEFAULT_PRESET, primary_task_ref: nil, delivery_parameters: nil, project_id: nil)
           requested_refs = normalize_requested_refs(task_refs)
           raise Ace::Support::Cli::Error, "--task requires at least one task reference" if requested_refs.empty?
 
@@ -58,7 +58,9 @@ module Ace
             steps: steps, delivery: delivery
           )
 
-          result = @executor.start(job_path, task_id: primary_ref)
+          start_options = {task_id: primary_ref}
+          start_options[:project_id] = project_id unless project_id.nil?
+          result = @executor.start(job_path, **start_options)
           result.merge(
             skipped_terminal: skipped_terminal,
             primary_ref: primary_ref,

data/lib/ace/assign/version.rb

@@ -2,6 +2,6 @@
 
 module Ace
   module Assign
-    VERSION = "0.64.0"
+    VERSION = "0.66.1"
   end
 end

data/lib/ace/assign.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require_relative "assign/version"
+require_relative "assign/errors"
 require "ace/support/config"
 require "ace/support/fs"
 require "ace/support/nav"
@@ -14,118 +15,6 @@ require_relative "assign/organisms/task_assignment_creator"
 
 module Ace
   module Assign
-    # Base error class for all ace-assign exceptions.
-    # Inherits from Ace::Support::Cli::Error to support exception-based
-    # exit code pattern (per ADR-023).
-    #
-    # Subclasses should call super with appropriate exit_code.
-    class Error < Ace::Support::Cli::Error
-      def initialize(message, exit_code: 1)
-        super
-      end
-    end
-
-    # Assignment-related errors
-    module AssignmentErrors
-      class NotFound < Error
-        def initialize(message = "Assignment not found")
-          super(message, exit_code: 2)
-        end
-      end
-
-      class NoActive < Error
-        def initialize(message = "No active assignment")
-          super(message, exit_code: 2)
-        end
-      end
-    end
-
-    # Config-related errors
-    module ConfigErrors
-      class NotFound < Error
-        def initialize(message = "Configuration not found")
-          super(message, exit_code: 3)
-        end
-      end
-    end
-
-    # Step-related errors
-    module StepErrors
-      class NotFound < Error
-        def initialize(message = "Step not found")
-          super(message, exit_code: 4)
-        end
-      end
-
-      class InvalidState < Error; end
-    end
-
-    # Attempt/evidence-related errors (exit code 5)
-    module AttemptErrors
-      class InvalidTransition < Error
-        def initialize(message = "Illegal attempt state transition")
-          super(message, exit_code: 5)
-        end
-      end
-
-      class InvalidScope < Error
-        def initialize(message = "Invalid attempt scope")
-          super(message, exit_code: 5)
-        end
-      end
-
-      # Duplicate start with a conflicting binding for an owned subtree
-      class Conflict < Error
-        def initialize(message = "Conflicting active attempt for scope")
-          super(message, exit_code: 5)
-        end
-      end
-
-      class NotFound < Error
-        def initialize(message = "Attempt not found")
-          super(message, exit_code: 5)
-        end
-      end
-
-      # Untrusted or unknown execution identity; authority fails closed
-      class UnauthorizedIdentity < Error
-        def initialize(message = "Unknown or unauthorized execution identity")
-          super(message, exit_code: 5)
-        end
-      end
-
-      # Receipt failed verification (binding, head, digest, artifacts, review)
-      class ReceiptRejected < Error
-        def initialize(message = "Receipt rejected")
-          super(message, exit_code: 5)
-        end
-      end
-
-      # Byte framing failed before any business receipt could be admitted.
-      class MalformedTransfer < ReceiptRejected; end
-
-      # Recovery settled a prior effect, but did not perform this request.
-      class CurrentEffectRequired < ReceiptRejected
-        def initialize(operation:, recovered_operation:)
-          super("Recovered #{recovered_operation}; requested #{operation} still needs execution")
-        end
-      end
-
-      # Attempt state forbids the requested effect (terminal, uncertain, blocked)
-      class InvalidState < Error
-        def initialize(message = "Attempt state forbids the requested operation")
-          super(message, exit_code: 5)
-        end
-      end
-
-      # Evidence storage is missing or unwritable; external effects are blocked
-      class EvidenceUnavailable < Error
-        def initialize(message = "Evidence storage unavailable")
-          super(message, exit_code: 5)
-        end
-      end
-    end
-
     # Define module namespaces
     module Commands; end
 

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ace-assign
 version: !ruby/object:Gem::Version
-  version: 0.64.0
+  version: 0.66.1
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-10-05 00:00:00.000000000 Z
+date: 2026-10-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ace-llm-providers-cli
@@ -43,14 +43,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.29'
+        version: '0.30'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.29'
+        version: '0.30'
 - !ruby/object:Gem::Dependency
   name: json
   requirement: !ruby/object:Gem::Requirement
@@ -175,14 +175,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.59'
+        version: 0.60.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.59'
+        version: 0.60.1
 - !ruby/object:Gem::Dependency
   name: ace-task
   requirement: !ruby/object:Gem::Requirement
@@ -197,20 +197,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.37'
+- !ruby/object:Gem::Dependency
+  name: ace-bundle
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.45'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.45'
 - !ruby/object:Gem::Dependency
   name: ace-runtime
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.2'
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: ace-tmux
   requirement: !ruby/object:Gem::Requirement
@@ -231,14 +245,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.4'
+        version: 0.5.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.4'
+        version: 0.5.1
 - !ruby/object:Gem::Dependency
   name: ace-support-test-helpers
   requirement: !ruby/object:Gem::Requirement
@@ -288,6 +302,7 @@ email:
 - mc@cs3b.com
 executables:
 - ace-assign
+- ace-scope-ready
 extensions: []
 extra_rdoc_files: []
 files:
@@ -299,6 +314,7 @@ files:
 - ".ace-defaults/assign/catalog/recipes/implement-with-pr.recipe.yml"
 - ".ace-defaults/assign/catalog/recipes/release-only.recipe.yml"
 - ".ace-defaults/assign/catalog/steps/apply-feedback.step.yml"
+- ".ace-defaults/assign/catalog/steps/auto-merge.step.yml"
 - ".ace-defaults/assign/catalog/steps/commit.step.yml"
 - ".ace-defaults/assign/catalog/steps/create-pr.step.yml"
 - ".ace-defaults/assign/catalog/steps/create-retro.step.yml"
@@ -354,6 +370,7 @@ files:
 - docs/protected-authority.md
 - docs/usage.md
 - exe/ace-assign
+- exe/ace-scope-ready
 - handbook/guides/fork-context.g.md
 - handbook/skills/as-assign-add-task/SKILL.md
 - handbook/skills/as-assign-compose/SKILL.md
@@ -396,28 +413,67 @@ files:
 - lib/ace/assign/atoms/step_numbering.rb
 - lib/ace/assign/atoms/step_sorter.rb
 - lib/ace/assign/atoms/tree_formatter.rb
+- lib/ace/assign/authority/assignment_inventory.rb
+- lib/ace/assign/authority/campaign_consumer_policy.rb
+- lib/ace/assign/authority/campaign_execution.rb
+- lib/ace/assign/authority/campaign_round_transfer.rb
 - lib/ace/assign/authority/candidate_transfer.rb
+- lib/ace/assign/authority/cleanup_result_protection.rb
 - lib/ace/assign/authority/client.rb
 - lib/ace/assign/authority/deployment.rb
+- lib/ace/assign/authority/deployment_history.rb
 - lib/ace/assign/authority/endcap.rb
+- lib/ace/assign/authority/endcap_attempts.rb
+- lib/ace/assign/authority/endcap_campaign_results.rb
+- lib/ace/assign/authority/endcap_campaign_rounds.rb
+- lib/ace/assign/authority/endcap_contexts.rb
 - lib/ace/assign/authority/endcap_inboxes.rb
+- lib/ace/assign/authority/endcap_prepared_work.rb
+- lib/ace/assign/authority/endcap_publication.rb
 - lib/ace/assign/authority/endcap_results.rb
+- lib/ace/assign/authority/endcap_review_requests.rb
+- lib/ace/assign/authority/endcap_reviews.rb
+- lib/ace/assign/authority/endcap_service_settlement.rb
 - lib/ace/assign/authority/endcap_services.rb
 - lib/ace/assign/authority/evidence_transfer.rb
 - lib/ace/assign/authority/execution_scope_observation.rb
+- lib/ace/assign/authority/inbox_context_original.rb
+- lib/ace/assign/authority/launch_attempt_consumers.rb
+- lib/ace/assign/authority/launch_campaign_registration.rb
+- lib/ace/assign/authority/launch_control_channel.rb
+- lib/ace/assign/authority/launch_control_exclusions.rb
 - lib/ace/assign/authority/launch_driver.rb
+- lib/ace/assign/authority/launch_input_inhibition.rb
 - lib/ace/assign/authority/launch_lifecycle.rb
+- lib/ace/assign/authority/launch_prepared_work.rb
+- lib/ace/assign/authority/launch_review.rb
 - lib/ace/assign/authority/launch_scope_abort.rb
 - lib/ace/assign/authority/launch_scope_admission.rb
 - lib/ace/assign/authority/launch_scope_close.rb
 - lib/ace/assign/authority/launch_scope_parent.rb
 - lib/ace/assign/authority/launch_scope_release.rb
+- lib/ace/assign/authority/launch_steering.rb
+- lib/ace/assign/authority/launch_stop.rb
+- lib/ace/assign/authority/maintenance_workspace_retirement.rb
+- lib/ace/assign/authority/original_inbox_selection.rb
 - lib/ace/assign/authority/posix_acl.rb
+- lib/ace/assign/authority/prepared_input.rb
+- lib/ace/assign/authority/prepared_queue.rb
+- lib/ace/assign/authority/prepared_task_context.rb
+- lib/ace/assign/authority/prepared_work.rb
+- lib/ace/assign/authority/prepared_worker.rb
 - lib/ace/assign/authority/private_directory.rb
+- lib/ace/assign/authority/protected_assignment_context.rb
+- lib/ace/assign/authority/readiness_hook.rb
 - lib/ace/assign/authority/receipt_transfer.rb
 - lib/ace/assign/authority/router.rb
 - lib/ace/assign/authority/server.rb
+- lib/ace/assign/authority/service_cleanup_dispatch.rb
+- lib/ace/assign/authority/service_cleanup_evidence.rb
+- lib/ace/assign/authority/service_delivery_evidence.rb
 - lib/ace/assign/authority/service_evidence.rb
+- lib/ace/assign/authority/service_publication_evidence.rb
+- lib/ace/assign/authority/task_context_entry.rb
 - lib/ace/assign/authority/transfer_codec.rb
 - lib/ace/assign/cli.rb
 - lib/ace/assign/cli/commands/add.rb
@@ -428,24 +484,36 @@ files:
 - lib/ace/assign/cli/commands/attempt/reconcile.rb
 - lib/ace/assign/cli/commands/attempt/start.rb
 - lib/ace/assign/cli/commands/attempt/status.rb
+- lib/ace/assign/cli/commands/authority/inbox_context_principal.rb
+- lib/ace/assign/cli/commands/authority/inbox_context_selection.rb
 - lib/ace/assign/cli/commands/authority/launch.rb
 - lib/ace/assign/cli/commands/authority/serve.rb
 - lib/ace/assign/cli/commands/authority/status.rb
+- lib/ace/assign/cli/commands/authority/task_context.rb
+- lib/ace/assign/cli/commands/authority/task_context_principal.rb
+- lib/ace/assign/cli/commands/authority/task_context_selection.rb
 - lib/ace/assign/cli/commands/authority/terminate.rb
+- lib/ace/assign/cli/commands/authority/worker.rb
+- lib/ace/assign/cli/commands/campaign_export_result.rb
+- lib/ace/assign/cli/commands/campaign_record_round.rb
 - lib/ace/assign/cli/commands/create.rb
 - lib/ace/assign/cli/commands/delivery.rb
 - lib/ace/assign/cli/commands/fail.rb
 - lib/ace/assign/cli/commands/finish.rb
 - lib/ace/assign/cli/commands/fork_run.rb
 - lib/ace/assign/cli/commands/fork_session.rb
-- lib/ace/assign/cli/commands/inbox_reconcile.rb
+- lib/ace/assign/cli/commands/inbox_bind.rb
 - lib/ace/assign/cli/commands/list.rb
+- lib/ace/assign/cli/commands/protected_submission.rb
 - lib/ace/assign/cli/commands/resume.rb
 - lib/ace/assign/cli/commands/retry_cmd.rb
 - lib/ace/assign/cli/commands/select.rb
 - lib/ace/assign/cli/commands/start.rb
 - lib/ace/assign/cli/commands/status.rb
 - lib/ace/assign/cli/commands/step.rb
+- lib/ace/assign/cli/commands/submit_candidate.rb
+- lib/ace/assign/cli/commands/submit_result.rb
+- lib/ace/assign/errors.rb
 - lib/ace/assign/models/assignment.rb
 - lib/ace/assign/models/assignment_info.rb
 - lib/ace/assign/models/attempt.rb
@@ -458,25 +526,36 @@ files:
 - lib/ace/assign/molecules/assignment_manager.rb
 - lib/ace/assign/molecules/attempt_reconciler.rb
 - lib/ace/assign/molecules/attempt_store.rb
+- lib/ace/assign/molecules/canonical_attempt_state.rb
 - lib/ace/assign/molecules/canonical_evidence.rb
+- lib/ace/assign/molecules/canonical_read_snapshot.rb
 - lib/ace/assign/molecules/evidence_calculator.rb
 - lib/ace/assign/molecules/evidence_journal.rb
 - lib/ace/assign/molecules/execution_identity_resolver.rb
 - lib/ace/assign/molecules/execution_scope_lineage.rb
 - lib/ace/assign/molecules/fork_session_launcher.rb
+- lib/ace/assign/molecules/journal_input_inhibition.rb
 - lib/ace/assign/molecules/journal_mutation.rb
+- lib/ace/assign/molecules/journal_prompt_mutation.rb
 - lib/ace/assign/molecules/lifecycle_exclusion.rb
+- lib/ace/assign/molecules/original_launch_binding.rb
 - lib/ace/assign/molecules/preset_inferrer.rb
 - lib/ace/assign/molecules/proposal_journal.rb
+- lib/ace/assign/molecules/protected_control_exclusion.rb
+- lib/ace/assign/molecules/protected_workspace_exclusion.rb
+- lib/ace/assign/molecules/protected_workspace_provisioner.rb
 - lib/ace/assign/molecules/queue_scanner.rb
 - lib/ace/assign/molecules/receipt_verifier.rb
 - lib/ace/assign/molecules/runtime_control_surface_runner.rb
 - lib/ace/assign/molecules/skill_assign_source_resolver.rb
 - lib/ace/assign/molecules/step_renumberer.rb
 - lib/ace/assign/molecules/step_writer.rb
+- lib/ace/assign/molecules/terminal_scope_receipt.rb
 - lib/ace/assign/organisms/assignment_executor.rb
 - lib/ace/assign/organisms/attempt_coordinator.rb
 - lib/ace/assign/organisms/delivery_coordinator.rb
+- lib/ace/assign/organisms/prepared_work_builder.rb
+- lib/ace/assign/organisms/protected_delivery_coordinator.rb
 - lib/ace/assign/organisms/task_assignment_creator.rb
 - lib/ace/assign/version.rb
 homepage: https://github.com/cs3b/ace

data/lib/ace/assign/cli/commands/inbox_reconcile.rb

@@ -1,36 +0,0 @@
-# frozen_string_literal: true
-
-module Ace
-  module Assign
-    module CLI
-      module Commands
-        class InboxReconcile < Ace::Support::Cli::Command
-          include Ace::Support::Cli::Base
-          desc "Verify a Herdr inbox proof and record its references in the assignment journal"
-          option :attempt, desc: "Exact attempt ID"
-          option :event, desc: "Herdr inbox event ID"
-          option :receipt, desc: "Existing native receipt JSON file with detached FILE.sig"
-
-          def initialize(coordinator: nil, inbox: nil)
-            super()
-            @coordinator = coordinator
-            @inbox = inbox
-          end
-
-          def call(**options)
-            %i[attempt event receipt].each do |key|
-              raise Ace::Support::Cli::Error, "--#{key} is required" if options[key].to_s.strip.empty?
-            end
-            result = (@coordinator || Organisms::AttemptCoordinator.new).reconcile_inbox(
-              attempt_id: options[:attempt], event_id: options[:event], receipt_path: options[:receipt],
-              inbox: @inbox || Ace::Herdr::Organisms::Inbox.from_config)
-            # Keep the public projection bounded; raw native output and the
-            # human observation text belong to the existing receipt file.
-            puts JSON.generate(result.slice("event_id", "attempt_id", "state", "claim_generation",
-              "receipt_key_sha256", "reconciliation_refusal"))
-          end
-        end
-      end
-    end
-  end
-end