ace-assign 0.71.0 → 0.73.0

data/lib/ace/assign/authority/prepared_work.rb

@@ -1,309 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "../atoms/candidate_limits"
-
-require "json"
-require "digest"
-require "yaml"
-require "date"
-require_relative "../atoms/step_file_parser"
-require_relative "candidate_transfer"
-
-module Ace
-  module Assign
-    module Authority
-      # Closed prepared-input tree. Git transport and canonical publication are
-      # owned by CandidateTransfer/LaunchLifecycle; this object owns their shared
-      # byte contract, never a registration, attempt or progress ledger.
-      class PreparedWork
-        MAX_TEXT = 1024 * 1024
-        MAX_TOTAL = Atoms::CandidateLimits::PREPARED_BYTES
-        MAX_MANIFEST = 32_768
-        TOKEN = /\A[a-zA-Z0-9][a-zA-Z0-9._-]{0,199}\z/
-        SCOPE = /\A[0-9]+(?:\.[0-9]+)*\z/
-        SHA = /\A[0-9a-f]{64}\z/
-        TOP = %w[version assignment_id project_id task_id scope job steps context].freeze
-        RECORD = %w[bytes filename sha256].freeze
-        PROGRESS = %w[status started_at completed_at error stall_reason fork_launch_pid fork_tracked_pids fork_pid_updated_at fork_pid_file].freeze
-        attr_reader :manifest, :files, :definition, :selection_sha256, :manifest_sha256
-
-        def initialize(files:)
-          invalid!("file inventory") unless files.is_a?(Hash) && files.size.between?(4, 4096)
-          @files = files.to_h do |path, bytes|
-            invalid!("file path") unless path.is_a?(String) && !path.start_with?("/") &&
-              path.bytesize <= Atoms::CandidateLimits::PATH_BYTES &&
-              path.split("/", -1).all? { |part| !part.empty? && part.bytesize <= Atoms::CandidateLimits::PATH_COMPONENT_BYTES &&
-                !%w[. .. .git].include?(part.downcase) }
-            invalid!("text size") unless bytes.is_a?(String) && bytes.bytesize.between?(1, MAX_TEXT)
-            text = bytes.dup.force_encoding(Encoding::UTF_8)
-            invalid!("UTF-8") unless text.valid_encoding? && !text.include?("\0")
-            [path.dup.freeze, text.freeze]
-          end.freeze
-          invalid!("expanded size") if @files.values.sum(&:bytesize) > MAX_TOTAL
-          manifest_bytes = @files.fetch("manifest.json")
-          invalid!("manifest size") if manifest_bytes.bytesize > MAX_MANIFEST
-          @manifest = parse_json(manifest_bytes)
-          closed!(@manifest, TOP)
-          invalid!("version") unless @manifest["version"].is_a?(Integer) && @manifest["version"] == 1
-          %w[assignment_id project_id task_id].each { |key| token!(@manifest[key]) }
-          scope!(@manifest["scope"])
-          canonical = self.class.canonical_manifest(@manifest)
-          invalid!("manifest serialization") unless manifest_bytes == canonical + "\n"
-          @selection_sha256 = Digest::SHA256.hexdigest(canonical).freeze
-          @manifest_sha256 = Digest::SHA256.hexdigest(manifest_bytes).freeze
-          @used = %w[manifest.json definition.json]
-          record!(@manifest["job"], "job.yaml")
-          @job = yaml!(@files.fetch("job.yaml"))
-          steps!
-          context!
-          task_closure!
-          selected_root!
-          invalid!("undeclared file") unless @used.sort == @files.keys.sort
-          definition_bytes = @files.fetch("definition.json")
-          invalid!("definition size") if definition_bytes.bytesize > MAX_MANIFEST
-          @definition = parse_json(definition_bytes)
-          invalid!("base definition") unless @definition.is_a?(Hash) && !@definition.key?("prepared_work") &&
-            @definition["session_id"] == @manifest["assignment_id"] && @definition["project_id"] == @manifest["project_id"] && @definition["task_id"] == @manifest["task_id"]
-          deep_freeze(@definition)
-          deep_freeze(@manifest)
-          freeze
-        rescue KeyError, JSON::ParserError, Psych::Exception => error
-          invalid!(error.message)
-        end
-
-        # The existing transport verifies complete Git objects before this
-        # shared byte contract parses anything. Preserve the original input for
-        # the eventual registration journal; CandidateTransfer may reexport it.
-        def self.admit(bytes:, head:, tree:, sha256:, size:, root:, deadline: nil)
-          transfer = CandidateTransfer.new(root: root)
-          transfer.admit(bytes: bytes, head: head, sha256: sha256, size: size, deadline: deadline) do |repository, deadline, result|
-            raise ArgumentError, "prepared_input_invalid: Git tree differs" unless result.fetch("tree") == tree
-            new(files: transfer.prepared_files(repository: repository, deadline: deadline, head: head))
-          end
-        end
-
-        def reference(head:, tree:)
-          invalid!("Git identity") unless [head, tree].all? { |id| id.is_a?(String) && id.match?(/\A[0-9a-f]{40}\z/) }
-          {"version" => 1, "task_id" => manifest.fetch("task_id"), "scope" => manifest.fetch("scope"),
-            "prepared_head" => head, "prepared_tree" => tree, "manifest_bytes" => files.fetch("manifest.json").bytesize,
-            "manifest_sha256" => manifest_sha256, "selection_sha256" => selection_sha256}.freeze
-        end
-
-        def definition_bytes(head:, tree:)
-          bytes = JSON.generate(definition.merge("prepared_work" => reference(head: head, tree: tree)))
-          invalid!("final definition size") if bytes.bytesize > MAX_MANIFEST
-          bytes.freeze
-        end
-
-        # Mutable queue progress still uses the accepted YAML grammar/bounds.
-        # Return the same parsed bytes that the queue decision will consume.
-        def parse_queue_step!(bytes)
-          invalid!("queue step size") unless bytes.is_a?(String) && bytes.bytesize.between?(1, MAX_TEXT)
-          match = Atoms::StepFileParser::FRONTMATTER_REGEX.match(bytes)
-          invalid!("queue step frontmatter") unless match
-          frontmatter = yaml!(match[1])
-          invalid!("queue step frontmatter") unless frontmatter.is_a?(Hash)
-          {frontmatter: frontmatter, body: bytes[match.end(0)..].strip}
-        rescue Psych::Exception => error
-          invalid!(error.message)
-        end
-
-        def parse_queue_metadata!(bytes)
-          invalid!("queue metadata size") unless bytes.is_a?(String) && bytes.bytesize.between?(1, MAX_MANIFEST)
-          yaml!(bytes)
-        rescue Psych::Exception => error
-          invalid!(error.message)
-        end
-
-        # StepFileParser owns body/frontmatter semantics; only these progress
-        # fields differ from accepted work. Reports are separate mutable output.
-        def self.work_projection(bytes)
-          parsed = Atoms::StepFileParser.parse(bytes)
-          {"frontmatter" => parsed.fetch(:frontmatter).reject { |key, _| PROGRESS.include?(key) }, "body" => parsed.fetch(:body)}
-        end
-
-        def self.canonical_manifest(value)
-          sorted = lambda do |item|
-            case item
-            when Hash then item.keys.sort.to_h { |key| [key, sorted.call(item.fetch(key))] }
-            when Array then item.map { |entry| sorted.call(entry) }
-            else item
-            end
-          end
-          JSON.generate(TOP.to_h { |key| [key, sorted.call(value.fetch(key))] })
-        end
-
-        private
-
-        def steps!
-          steps = @manifest["steps"]
-          invalid!("steps") unless steps.is_a?(Array) && steps.size.between?(1, 256)
-          @step_frontmatter = {}
-          numbers = steps.map do |step|
-            closed!(step, %w[number filename bytes sha256])
-            number = step.fetch("number"); scope!(number)
-            invalid!("step scope") unless number == @manifest["scope"] || number.start_with?(@manifest["scope"] + ".")
-            filename = step.fetch("filename")
-            record!(step.reject { |key, _| key == "number" }, "steps/" + filename)
-            # Step record filenames are basenames; inventory paths add steps/.
-            content = @files.fetch("steps/" + filename)
-            match = Atoms::StepFileParser::FRONTMATTER_REGEX.match(content)
-            invalid!("step frontmatter") unless match
-            fm = yaml!(match[1])
-            invalid!("initial status") unless fm.is_a?(Hash) && fm.fetch("status", "pending") == "pending"
-            @step_frontmatter[number] = fm
-            invalid!("step name") unless fm["name"].is_a?(String) && !fm["name"].empty?
-            invalid!("step filename") unless filename == Atoms::StepFileParser.generate_filename(number, fm["name"])
-            number
-          end
-          invalid!("step ordering/root") unless numbers.uniq == numbers && numbers == numbers.sort_by { |n| n.split(".").map(&:to_i) } && numbers.first == @manifest["scope"]
-        end
-
-        def context!
-          context = @manifest["context"]
-          invalid!("context") unless context.is_a?(Array) && context.size.between?(1, 256)
-          uris = context.map do |entry|
-            closed!(entry, %w[uri task_id spec text reports]); token!(entry["task_id"])
-            uri = "task://" + entry.fetch("task_id")
-            invalid!("context URI") unless entry["uri"] == uri
-            prefix = "context/" + entry.fetch("task_id")
-            record!(entry["spec"], prefix + "/spec.md")
-            record!(entry["text"], prefix + "/bundle.txt")
-            reports = entry["reports"]
-            invalid!("reports") unless reports.is_a?(Array)
-            identities = reports.map do |report|
-              closed!(report, %w[assignment_id number file]); token!(report["assignment_id"]); scope!(report["number"])
-              record!(report["file"], prefix + "/reports/" + report.fetch("assignment_id") + "/" + report.fetch("number") + ".r.md")
-              [report["assignment_id"], report["number"].split(".").map(&:to_i)]
-            end
-            invalid!("report ordering") unless identities.uniq == identities && identities == identities.sort
-            uri
-          end
-          invalid!("context ordering/selected task") unless uris.uniq == uris && uris == uris.sort && uris.include?("task://" + @manifest["task_id"])
-        end
-
-        def selected_root!
-          scope = @manifest.fetch("scope"); task = @manifest.fetch("task_id")
-          root = @step_frontmatter.fetch(scope)
-          invalid!("selected fork root") unless root["context"] == "fork" && root["taskref"] == task
-          @step_frontmatter.each do |number, fm|
-            invalid!("selected taskref") if fm.key?("taskref") && fm["taskref"] != task
-            next if number == scope
-            parent = number.split(".")[0...-1].join(".")
-            invalid!("selected parent association") unless fm["parent"] == parent && @step_frontmatter.key?(parent)
-          end
-          invalid!("job steps") unless @job.is_a?(Hash) && @job["steps"].is_a?(Array)
-          roots = @job.fetch("steps").select { |step| step.is_a?(Hash) && step["context"] == "fork" && step["taskref"] == task }
-          invalid!("job selected root") unless roots.one? && roots.first.values_at("number", "taskref") == [scope, task]
-        end
-
-        def task_closure!
-          specs = @manifest.fetch("context").to_h do |entry|
-            content = @files.fetch(entry.fetch("spec").fetch("filename"))
-            match = Atoms::StepFileParser::FRONTMATTER_REGEX.match(content)
-            invalid!("task frontmatter") unless match
-            task = yaml!(match[1])
-            invalid!("task association") unless task.is_a?(Hash) && task["id"] == entry["task_id"] && task.fetch("needs_review", false) == false
-            dependencies = task.fetch("dependencies", [])
-            invalid!("task dependencies") unless dependencies.is_a?(Array) && dependencies.uniq == dependencies
-            dependencies.each { |dependency| token!(dependency) }
-            [entry.fetch("task_id"), task]
-          end
-          selected = specs.fetch(@manifest.fetch("task_id"))
-          invalid!("selected reviewed status") unless %w[pending in-progress].include?(selected["status"])
-          visiting = []; visited = []
-          walk = lambda do |id|
-            invalid!("dependency cycle: " + (visiting + [id]).join(" -> ")) if visiting.include?(id)
-            return if visited.include?(id)
-            visiting << id
-            specs.fetch(id).fetch("dependencies", []).each { |dependency| walk.call(dependency) }
-            visiting.pop; visited << id
-          end
-          walk.call(@manifest.fetch("task_id"))
-          invalid!("undeclared context") unless visited.sort == specs.keys.sort
-        end
-
-        def record!(record, path)
-          closed!(record, RECORD)
-          # Selected step record uses an exact basename; other records use the
-          # exact canonical relative artifact path.
-          expected = path.start_with?("steps/") ? path.delete_prefix("steps/") : path
-          invalid!("content reference") unless record["filename"] == expected && record["bytes"].is_a?(Integer) && record["bytes"].positive? && record["sha256"].is_a?(String) && record["sha256"].match?(SHA)
-          bytes = @files.fetch(path)
-          invalid!("content digest") unless record["bytes"] == bytes.bytesize && record["sha256"] == Digest::SHA256.hexdigest(bytes)
-          invalid!("duplicate file") if @used.include?(path)
-          @used << path
-        end
-
-        def yaml!(bytes)
-          ast = Psych.parse_stream(bytes)
-          invalid!("YAML requires one document") unless ast.children.size == 1
-          scanner = Psych::ScalarScanner.new(Psych::ClassLoader::Restricted.new([], []))
-          pending = [[ast, 0]]
-          until pending.empty?
-            node, depth = pending.pop
-            invalid!("YAML nesting exceeds 32") if depth > 32
-            invalid!("YAML alias") if node.is_a?(Psych::Nodes::Alias)
-            if node.is_a?(Psych::Nodes::Mapping)
-              keys = node.children.each_slice(2).map(&:first)
-              decoded = keys.map do |key|
-                invalid!("YAML mapping keys") unless key.is_a?(Psych::Nodes::Scalar) && [nil, "tag:yaml.org,2002:str"].include?(key.tag)
-                value = key.plain && key.tag.nil? ? scanner.tokenize(key.value) : key.value
-                invalid!("YAML mapping keys must be strings") unless value.is_a?(String)
-                value
-              end
-              invalid!("duplicate YAML key") unless decoded.uniq.size == decoded.size
-            end
-            (node.children || []).each { |child| pending << [child, depth + 1] }
-          end
-          value = YAML.safe_load(bytes, permitted_classes: [Time, Date], aliases: false)
-          values = [value]
-          until values.empty?
-            item = values.pop
-            case item
-            when Hash
-              invalid!("YAML mapping keys must be strings") unless item.keys.all? { |key| key.is_a?(String) }
-              values.concat(item.values)
-            when Array then values.concat(item)
-            when String
-              invalid!("YAML string encoding") unless item.valid_encoding? && !item.include?("\0")
-            when Float then invalid!("YAML nonfinite number") unless item.finite?
-            when Integer, TrueClass, FalseClass, NilClass, Time, Date
-              # Managed files retain StepFileParser's standard timestamp types.
-            else invalid!("unsupported YAML value")
-            end
-          end
-          value
-        end
-
-        def parse_json(bytes)
-          JSON.parse(bytes, create_additions: false, max_nesting: 32, allow_duplicate_key: false, allow_comments: false)
-        end
-
-        def closed!(value, keys)
-          invalid!("closed fields") unless value.is_a?(Hash) && value.keys.sort == keys.sort
-        end
-
-        def token!(value)
-          invalid!("identity") unless value.is_a?(String) && value.match?(TOKEN)
-        end
-
-        def scope!(value)
-          invalid!("scope") unless value.is_a?(String) && value.match?(SCOPE)
-        end
-
-        def deep_freeze(value)
-          case value
-          when Hash then value.each { |key, item| deep_freeze(key); deep_freeze(item) }
-          when Array then value.each { |item| deep_freeze(item) }
-          end
-          value.freeze
-        end
-
-        def invalid!(reason)
-          raise ArgumentError, "prepared_input_invalid: #{reason}"
-        end
-      end
-    end
-  end
-end

data/lib/ace/assign/authority/prepared_worker.rb

@@ -1,69 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "prepared_input"
-require_relative "prepared_queue"
-require_relative "../molecules/fork_session_launcher"
-
-module Ace
-  module Assign
-    module Authority
-      # Fixed gate target. Environment identifiers are untrusted lookup hints;
-      # the original issued capability and actual kernel birth decide admission.
-      class PreparedWorker
-        def initialize(kernel: Ace::Runtime::Molecules::ProtectedLinux.new, client_factory: nil, launcher: nil, env: ENV,
-          workspace_reader_factory: nil)
-          @kernel, @launcher, @env = kernel, launcher, env
-          @client_factory = client_factory || ->(mapping) { Client.new(mapping_id: mapping, kernel: @kernel) }
-          @workspace_reader_factory = workspace_reader_factory || ->(projection) {
-            Molecules::LifecycleExclusion.workspace_reader(projection: projection)
-          }
-          @started = false
-        end
-
-        def run
-          raise AttemptErrors::EvidenceUnavailable, "original adapter invocation already activated" if @started
-          mapping, assignment, attempt = %w[ACE_ASSIGN_LAUNCH_MAPPING ACE_ASSIGN_ASSIGNMENT_ID ACE_ASSIGN_ATTEMPT_ID].map do |key|
-            value = @env[key]
-            unless value.is_a?(String) && value.match?(PreparedWork::TOKEN)
-              raise AttemptErrors::EvidenceUnavailable, "prepared_input_unavailable: original worker selector"
-            end
-            value
-          end
-          input = PreparedInput.fetch(client: @client_factory.call(mapping), assignment_id: assignment, attempt_id: attempt)
-          self_identity = @kernel.capture(Process.pid)
-          @kernel.live!(self_identity)
-          original = input.descriptor.fetch("original_worker_identity")
-          unless @kernel.same?(self_identity, original)
-            raise AttemptErrors::UnauthorizedIdentity, "prepared adapter requires exact original worker self"
-          end
-          input.drive_prompt
-          @workspace_lease = @workspace_reader_factory.call(input.descriptor.fetch("workspace_exclusion"))
-          @workspace_lease.acquire!
-          @started = true
-          queue = PreparedQueue.new(work: input.work, descriptor: input.descriptor)
-          root = queue.activate_original!
-          unless root
-            @workspace_lease.verify_unchanged!
-            @workspace_lease.close!
-            return {"state" => "completed"}
-          end
-          launcher = @launcher || Molecules::ForkSessionLauncher.new(config: {})
-          result = launcher.launch_provider_session(assignment_id: assignment, fork_root: input.descriptor.fetch("scope"),
-            provider: root.fork_provider || Molecules::ForkSessionLauncher::DEFAULT_PROVIDER, cache_dir: queue.directory,
-            prepared_input: input)
-          queue.with_executor do |executor|
-            state = executor.status.fetch(:state)
-            unless state.failed.empty? && state.subtree_complete?(input.descriptor.fetch("scope"))
-              raise AttemptErrors::EvidenceUnavailable, "prepared provider exited before selected queue completed"
-            end
-          end
-          @workspace_lease.verify_unchanged!
-          @workspace_lease.close!
-          result
-        rescue SystemCallError, IOError
-          raise AttemptErrors::EvidenceUnavailable, "prepared_input_unavailable: published worker queue or provider output is unavailable"
-        end
-      end
-    end
-  end
-end

data/lib/ace/assign/authority/private_directory.rb

@@ -1,33 +0,0 @@
-# frozen_string_literal: true
-
-module Ace
-  module Assign
-    module Authority
-      module PrivateDirectory
-        module_function
-
-        # Source configuration chooses this path. Each ancestor must prevent
-        # another principal from replacing the private leaf or its contents.
-        def verify!(root)
-          path = File.expand_path(root)
-          cursor = path
-          loop do
-            stat = File.lstat(cursor)
-            unless stat.directory? && !stat.symlink? && [0, Process.uid].include?(stat.uid) && (stat.mode & 0022).zero?
-              raise AttemptErrors::ReceiptRejected, "Private directory ancestry is not protected"
-            end
-            break if cursor == "/"
-            cursor = File.dirname(cursor)
-          end
-          stat = File.stat(path)
-          unless stat.uid == Process.uid && (stat.mode & 0077).zero?
-            raise AttemptErrors::ReceiptRejected, "Private directory must be owned by this peer and private"
-          end
-          path
-        rescue SystemCallError, TypeError
-          raise AttemptErrors::ReceiptRejected, "Private directory is unavailable"
-        end
-      end
-    end
-  end
-end

data/lib/ace/assign/authority/protected_assignment_context.rb

@@ -1,226 +0,0 @@
-# frozen_string_literal: true
-
-require_relative "deployment_history"
-require_relative "prepared_input"
-require_relative "prepared_queue"
-
-module Ace
-  module Assign
-    module Authority
-      # Installed and retained deployment owners determine protected principals.
-      # A removed original mapping never silently restores ordinary local mode.
-      class ProtectedAssignmentContext
-        attr_reader :uid
-
-        def self.load(uid: Process.uid)
-          paths = [Deployment::PATH, DeploymentHistory::PATH]
-          installed = paths.any? do |path|
-            begin
-              File.lstat(path)
-              true
-            rescue Errno::ENOENT
-              false
-            end
-          end
-          return new(deployment: nil, history: nil, uid: uid) unless installed
-          deployment = Deployment.load
-          history = DeploymentHistory.load
-          unless history.selects?(deployment)
-            raise AttemptErrors::EvidenceUnavailable, "installed protected descriptor is not retained"
-          end
-          new(deployment: deployment, history: history, uid: uid)
-        end
-
-        def initialize(deployment:, history:, uid: Process.uid, kernel: nil, env: ENV,
-          artifacts_factory: -> { Ace::Runtime::Molecules::ProtectedArtifactSet.new })
-          @deployment, @history, @uid, @kernel, @env = deployment, history, uid, kernel, env
-          @artifacts_factory = artifacts_factory
-        end
-
-        # A declared installed account never falls through to local authority.
-        # This is classification only; each wire operation still authenticates
-        # the current kernel peer and its exact permitted role.
-        def protected_participant?
-          return false unless @deployment
-          raise AttemptErrors::EvidenceUnavailable, "protected retained owners are unavailable" unless @history
-          [@deployment, *@history.descriptors].any? do |owner|
-            data = owner.data
-            principals = data.fetch("authorities").values.map { |authority| authority.fetch("uid") }
-            principals.concat(data.fetch("launch_mappings").values.flat_map { |map| map.values_at("launcher_uid", "worker_uid") })
-            data.fetch("projects").each_value do |project|
-              %w[launcher_uids reviewer_uids worker_uids service_executor_uids supervisor_uids].each do |key|
-                principals.concat(project.fetch(key, []))
-              end
-              principals.concat(project.fetch("service_receivers", {}).values.map { |receiver| receiver.fetch("executor_uid") })
-              principals.concat(project.fetch("inbox_contexts", {}).values.map { |context| context.fetch("owner_credentials").fetch("uid") })
-            end
-            principals.include?(@uid)
-          end
-        rescue KeyError, TypeError, NoMethodError
-          raise AttemptErrors::EvidenceUnavailable, "protected installed principal inventory is malformed"
-        end
-
-        # Read-only current selection; no role grant or private Inbox access.
-        def inbox_context_selection(project:, mapping:, inbox_context:)
-          unless installed? && [project, mapping, inbox_context].all? { |id| id.is_a?(String) && Deployment::TOKEN.match?(id) }
-            raise AttemptErrors::EvidenceUnavailable, "installed inbox selectors differ"
-          end
-          descriptor = @deployment.artifact_reference
-          history = @history.artifact_reference
-          unless descriptor && history && @history.selects?(@deployment)
-            raise AttemptErrors::EvidenceUnavailable, "installed inbox references are unavailable"
-          end
-          @artifacts_factory.call.with do |held|
-            held.read!(descriptor)
-            held.read!(history)
-            map = @deployment.mapping(mapping)
-            unless map.fetch("project_id") == project
-              raise AttemptErrors::EvidenceUnavailable, "installed inbox project differs"
-            end
-            selected = @deployment.inbox_context(mapping, inbox_context)
-            authority = @deployment.authority(map.fetch("authority_id"))
-            result = {"uid" => @uid, "project_id" => project, "mapping_id" => mapping,
-              "inbox_context_id" => inbox_context, "descriptor" => descriptor, "history" => history,
-              "context" => selected.slice("control_socket_path", "owner_credentials", "native_mapping_id"),
-              "authority" => authority.slice("socket_path", "uid", "gid", "groups")
-                .merge("authority_id" => map.fetch("authority_id"))}
-            held.verify_unchanged!
-            value = yield result
-            held.verify_unchanged!
-            value
-          end
-        rescue ArgumentError, KeyError, TypeError, Ace::Runtime::Error
-          raise AttemptErrors::EvidenceUnavailable, "installed inbox selection is unavailable"
-        end
-
-        def protected_worker?
-          return false unless @deployment
-          [@deployment, *@history.descriptors].any? do |owner|
-            owner.data.fetch("projects").values.any? { |project| project.fetch("worker_uids").include?(@uid) }
-          end
-        end
-
-        def installed?
-          !@deployment.nil? && !@history.nil?
-        end
-
-        def refuse_graph_mutation!(options:)
-          selected = options.values_at(:mapping, :attempt).any? { |value| value && !value.to_s.empty? } ||
-            %w[ACE_ASSIGN_LAUNCH_MAPPING ACE_ASSIGN_ATTEMPT_ID].any? { |key| !@env[key].to_s.empty? }
-          if protected_worker? || selected
-            raise AttemptErrors::EvidenceUnavailable, "protected queue graph changes require a reviewed new prepared version and attempt"
-          end
-        end
-
-        def resolve(options:, assignment_id:, scope:)
-          selected = options.values_at(:mapping, :attempt).any? { |value| value && !value.to_s.empty? } ||
-            %w[ACE_ASSIGN_LAUNCH_MAPPING ACE_ASSIGN_ATTEMPT_ID].any? { |key| !@env[key].to_s.empty? }
-          return nil unless protected_worker? || selected
-          unless @deployment && assignment_id && scope && scope.match?(PreparedWork::SCOPE)
-            raise AttemptErrors::EvidenceUnavailable, "prepared_input_unavailable: explicit scoped assignment required"
-          end
-          attempt = selected_hint(options[:attempt], "ACE_ASSIGN_ATTEMPT_ID")
-          hint = @env["ACE_ASSIGN_ASSIGNMENT_ID"].to_s
-          unless hint.empty? || hint == assignment_id
-            raise AttemptErrors::EvidenceUnavailable, "prepared assignment hint differs"
-          end
-          @kernel ||= Ace::Runtime::Molecules::ProtectedLinux.new
-          input = PreparedInput.fetch(client: client(options: options),
-            assignment_id: assignment_id, attempt_id: attempt)
-          unless input.descriptor.fetch("scope") == scope
-            raise AttemptErrors::EvidenceUnavailable, "prepared_input_mismatch: scoped CLI selection"
-          end
-          input
-        rescue KeyError
-          raise AttemptErrors::EvidenceUnavailable, "prepared_input_unavailable: original installed mapping is unavailable"
-        end
-
-        def verify_attempt_hints!(assignment_id:, attempt_id:)
-          selected_hint(assignment_id, "ACE_ASSIGN_ASSIGNMENT_ID")
-          selected_hint(attempt_id, "ACE_ASSIGN_ATTEMPT_ID")
-          true
-        end
-
-        def client(options:)
-          raise AttemptErrors::EvidenceUnavailable, "protected installed authority is unavailable" unless @deployment
-          mapping = selected_hint(options[:mapping], "ACE_ASSIGN_LAUNCH_MAPPING")
-          @kernel ||= Ace::Runtime::Molecules::ProtectedLinux.new
-          Client.new(mapping_id: mapping, deployment: @deployment, kernel: @kernel)
-        end
-
-        def mapping_hint?
-          !@env["ACE_ASSIGN_LAUNCH_MAPPING"].to_s.empty?
-        end
-
-        # Observer/signer commands reuse the installed selection and held
-        # descriptor pair. This grants no effect; endpoints authorize the peer.
-        def with_inbox_workflow(options:)
-          mapping = selected_hint(options[:mapping], "ACE_ASSIGN_LAUNCH_MAPPING")
-          project, inbox_context = options.values_at(:project, :inbox_context)
-          inbox_context_selection(project: project, mapping: mapping, inbox_context: inbox_context) do |_selection|
-            @kernel ||= Ace::Runtime::Molecules::ProtectedLinux.new
-            yield @deployment, @kernel, @deployment.mapping(mapping)
-          end
-        end
-
-        # Consumers call only after original PreparedInput admission. These
-        # existing owners select transport; they do not confer a new grant.
-        def with_installed_selection(options:, input:)
-          raise AttemptErrors::EvidenceUnavailable, "protected installed authority is unavailable" unless @deployment
-          mapping = selected_hint(options[:mapping], "ACE_ASSIGN_LAUNCH_MAPPING")
-          begin
-            map = @deployment.mapping(mapping)
-            unless input && input.descriptor.fetch("mapping_id") == mapping &&
-                input.descriptor.fetch("project_id") == map.fetch("project_id")
-              raise AttemptErrors::EvidenceUnavailable, "original prepared installed selection differs"
-            end
-          rescue KeyError
-            raise AttemptErrors::EvidenceUnavailable, "original installed mapping is unavailable"
-          end
-          @kernel ||= Ace::Runtime::Molecules::ProtectedLinux.new
-          yield @deployment, @kernel, mapping
-        end
-
-        private
-
-        def selected_hint(explicit, key)
-          hint = @env[key].to_s
-          value = explicit || hint
-          unless value.is_a?(String) && value.match?(PreparedWork::TOKEN) && (hint.empty? || hint == value)
-            raise AttemptErrors::EvidenceUnavailable, "prepared selector hint differs"
-          end
-          value
-        end
-      end
-
-      # Each supported operation holds the existing private queue exclusion and
-      # consumes its authenticated held snapshot. No graph-changing API exists.
-      class PreparedExecutor
-        def initialize(input)
-          @queue = PreparedQueue.new(work: input.work, descriptor: input.descriptor)
-          @scope = input.descriptor.fetch("scope")
-        end
-
-        def status
-          @queue.with_executor(&:status)
-        end
-
-        %i[start_step finish_step fail].each do |operation|
-          define_method(operation) do |*args, **options|
-            unless options[:fork_root] == @scope && (!options[:step_number] ||
-                options[:step_number] == @scope || options[:step_number].start_with?(@scope + "."))
-              raise AttemptErrors::EvidenceUnavailable, "prepared operation scope differs"
-            end
-            @queue.with_executor { |executor| executor.public_send(operation, *args, **options) }
-          end
-        end
-
-        def method_missing(*)
-          raise AttemptErrors::EvidenceUnavailable, "prepared queue graph changes require a reviewed new prepared version and attempt"
-        end
-
-        def respond_to_missing?(*); false; end
-      end
-    end
-  end
-end