ace-coworker 0.7.0 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.ace-defaults/coworker/roles/bootstrap-verifier.yml +12 -0
- data/.ace-defaults/coworker/roles/bootstrap-worker.yml +12 -0
- data/.ace-defaults/coworker/sequences/bootstrap-verifier.yml +11 -0
- data/.ace-defaults/coworker/sequences/bootstrap-worker.yml +11 -0
- data/CHANGELOG.md +10 -0
- data/docs/usage.md +15 -0
- data/handbook/workflow-instructions/coworker/bootstrap-verifier.wf.md +52 -0
- data/handbook/workflow-instructions/coworker/bootstrap-worker.wf.md +53 -0
- data/lib/ace/coworker/version.rb +1 -1
- metadata +8 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: b33e4050f914bca417193b67ba22d076a9a7866a89d1d3465fe6fb344f7bca7d
|
|
4
|
+
data.tar.gz: 1cba8a3b7b85957083d95da14d5cf2fb44988ebc2b7efdc8537b24eda096612b
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 9c4cb31c35e64be7767cf08f12fc9609c788d9d174c7dec0e72077e16721a17670028f57ed0641d422402d70af8f8f2c32bb3304e5b455cf1b8fb20aef340965
|
|
7
|
+
data.tar.gz: 8f66afb6f9f8c9d8ceb877ff369b920860a509705356a9b6eca0f1a42aada2b2879dba2e4c028a23956dc528515f7fc48768e56a7b50e5b9d181df211f4027ff
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: bootstrap-verifier
|
|
3
|
+
description: Independently verify the prepared canonical project without repairing it
|
|
4
|
+
instructions: wfi://coworker/bootstrap-verifier
|
|
5
|
+
start_prompt: >-
|
|
6
|
+
Work as {{role}} on task {{task}} and pinned assignment {{assignment}}.
|
|
7
|
+
Read the explicit canonical target and allowed operations from the commission.
|
|
8
|
+
Report verified evidence to {{overseer}}; never update its private task tree.
|
|
9
|
+
reporting:
|
|
10
|
+
channel: hitl
|
|
11
|
+
errors:
|
|
12
|
+
on_failure: report
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: bootstrap-worker
|
|
3
|
+
description: Prepare the explicitly commissioned canonical project configuration
|
|
4
|
+
instructions: wfi://coworker/bootstrap-worker
|
|
5
|
+
start_prompt: >-
|
|
6
|
+
Work as {{role}} on task {{task}} and pinned assignment {{assignment}}.
|
|
7
|
+
Read the explicit canonical target and allowed operations from the commission.
|
|
8
|
+
Report verified evidence to {{overseer}}; never update its private task tree.
|
|
9
|
+
reporting:
|
|
10
|
+
channel: hitl
|
|
11
|
+
errors:
|
|
12
|
+
on_failure: report
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
---
|
|
2
|
+
role: bootstrap-verifier
|
|
3
|
+
description: "Independently verify the prepared canonical project without repairing it for task {{task}}"
|
|
4
|
+
outcome: "Task {{task}} has an evidence-backed bootstrap-verifier result for its exact canonical target."
|
|
5
|
+
steps:
|
|
6
|
+
- name: bootstrap-verifier
|
|
7
|
+
workflow: wfi://coworker/bootstrap-verifier
|
|
8
|
+
instructions:
|
|
9
|
+
- "Independently verify the prepared canonical project without repairing it for task {{task}} under the scoped bootstrap role workflow."
|
|
10
|
+
- "Record actual checks, canonical target, operational runtime paths/versions and failures in the task evidence."
|
|
11
|
+
- "Fail the assignment on missing scope, missing required access or failed acceptance; never force success."
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
---
|
|
2
|
+
role: bootstrap-worker
|
|
3
|
+
description: "Prepare the explicitly commissioned canonical project configuration for task {{task}}"
|
|
4
|
+
outcome: "Task {{task}} has an evidence-backed bootstrap-worker result for its exact canonical target."
|
|
5
|
+
steps:
|
|
6
|
+
- name: bootstrap-worker
|
|
7
|
+
workflow: wfi://coworker/bootstrap-worker
|
|
8
|
+
instructions:
|
|
9
|
+
- "Prepare the explicitly commissioned canonical project configuration for task {{task}} under the scoped bootstrap role workflow."
|
|
10
|
+
- "Record actual checks, canonical target, operational runtime paths/versions and failures in the task evidence."
|
|
11
|
+
- "Fail the assignment on missing scope, missing required access or failed acceptance; never force success."
|
data/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
|
6
6
|
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
|
|
7
7
|
|
|
8
|
+
## [Unreleased]
|
|
9
|
+
|
|
10
|
+
## [0.8.0] - 2026-10-31
|
|
11
|
+
|
|
12
|
+
### Added
|
|
13
|
+
|
|
14
|
+
- Scoped bootstrap-worker and independent bootstrap-verifier roles use existing
|
|
15
|
+
assignments to prepare an explicitly commissioned canonical project outside
|
|
16
|
+
the lab task worktree, without relaxing ordinary product worker boundaries.
|
|
17
|
+
|
|
8
18
|
## [0.7.0] - 2026-10-30
|
|
9
19
|
|
|
10
20
|
### Fixed (review rounds 3/3b)
|
data/docs/usage.md
CHANGED
|
@@ -587,3 +587,18 @@ does not substitute for provider approval. Accounts and credentials come from
|
|
|
587
587
|
deployment, independently of the role preset; no identity switching or token
|
|
588
588
|
borrowing is performed by coworker. Missing permission or uncertain publication
|
|
589
589
|
blocks successful integration handoff.
|
|
590
|
+
|
|
591
|
+
## Operational bootstrap roles
|
|
592
|
+
|
|
593
|
+
`bootstrap-worker` and `bootstrap-verifier` prepare and independently verify
|
|
594
|
+
a canonical project named explicitly in a lab task. Their evidence and
|
|
595
|
+
assignments remain in the lab task worktree; only the commissioned target
|
|
596
|
+
configuration may be accessed outside it. They preserve installed runtime
|
|
597
|
+
selection and session-scoped access. They never edit the overseer private
|
|
598
|
+
tree or start the project's overseer. Ordinary worker/reviewer roles retain
|
|
599
|
+
their product-worktree boundaries.
|
|
600
|
+
|
|
601
|
+
Prepare with `ace-coworker prepare --task <ref> --roles
|
|
602
|
+
bootstrap-worker,bootstrap-verifier --to <configured-owner>`. Preparation and
|
|
603
|
+
`ace-coworker start` do not launch a model process; the coordinator must launch
|
|
604
|
+
a separate agent with the returned brief and confirm its first turn.
|
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: coworker-bootstrap-verifier
|
|
3
|
+
description: Scoped operational bootstrap-verifier for a canonical project bootstrap
|
|
4
|
+
allowed-tools: Bash, Read
|
|
5
|
+
doc-type: workflow
|
|
6
|
+
title: bootstrap-verifier
|
|
7
|
+
purpose: Execute one lab-owned bootstrap assignment with explicit target scope.
|
|
8
|
+
---
|
|
9
|
+
# bootstrap-verifier
|
|
10
|
+
|
|
11
|
+
## Commission and scope
|
|
12
|
+
|
|
13
|
+
Read the prepared start config with `ace-coworker start --config <returned path>`.
|
|
14
|
+
Use its pinned assignment ID for every ace-assign operation. Read the executable
|
|
15
|
+
lab task and its explicit canonical target path, allowed configuration paths,
|
|
16
|
+
operations, runtime selection and acceptance criteria. Missing or ambiguous
|
|
17
|
+
scope is an error report, never a guessed directory or permission.
|
|
18
|
+
|
|
19
|
+
The assignment and evidence belong to the prepared lab task worktree. This
|
|
20
|
+
operational role may act on the explicitly commissioned canonical target
|
|
21
|
+
outside that worktree; this exception does not authorize other projects or
|
|
22
|
+
product implementation. Resolve target paths before effects and reject symlink
|
|
23
|
+
escapes outside the commissioned root. Preserve unrelated changes and secrets.
|
|
24
|
+
Never write `.ace-tasks/_overseer`; the coordinator alone owns its private tree.
|
|
25
|
+
|
|
26
|
+
Operational tools use the selected installed ACE closure, not target binstubs
|
|
27
|
+
or its development Gemfile. Record actual executable/gem/instruction paths.
|
|
28
|
+
Additional credentials or privileges are session-scoped through the existing
|
|
29
|
+
auth handoff; do not make permanent group grants or copy credentials into
|
|
30
|
+
project config, task evidence or prompts. Missing access is a report to the
|
|
31
|
+
coordinator, not permission to borrow an account or change ownership.
|
|
32
|
+
|
|
33
|
+
## Assignment and report
|
|
34
|
+
|
|
35
|
+
Drive the pinned ace-assign step through start/finish/fail. Store evidence in
|
|
36
|
+
the executable task's docs. Failed or unavailable required checks block success.
|
|
37
|
+
Use `ace-coworker report --config <returned path>` for the truthful assignment
|
|
38
|
+
outcome. A process exit, prepared config or printed CLI brief is not completion.
|
|
39
|
+
After interruption, read current state before repeating any external effect;
|
|
40
|
+
resume the same assignment, never silently create a replacement.
|
|
41
|
+
|
|
42
|
+
## Independent verification
|
|
43
|
+
|
|
44
|
+
Run as a separate agent from the worker. Read the worker evidence, then check
|
|
45
|
+
the actual target files and installed runtime independently. Verify requested
|
|
46
|
+
configuration, allowed-change boundaries, executable resolution and dependency
|
|
47
|
+
readiness with the task's explicit checks; compare actual results with the
|
|
48
|
+
worker's claims. Do not repair the target or accept your own preparation.
|
|
49
|
+
Report discrepancies as failure for the coordinator to return to the worker.
|
|
50
|
+
|
|
51
|
+
Do not start the project overseer: the coordinator owns the final reconcile,
|
|
52
|
+
first-turn and eyes acceptance. Your success accepts preparation only.
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: coworker-bootstrap-worker
|
|
3
|
+
description: Scoped operational bootstrap-worker for a canonical project bootstrap
|
|
4
|
+
allowed-tools: Bash, Read
|
|
5
|
+
doc-type: workflow
|
|
6
|
+
title: bootstrap-worker
|
|
7
|
+
purpose: Execute one lab-owned bootstrap assignment with explicit target scope.
|
|
8
|
+
---
|
|
9
|
+
# bootstrap-worker
|
|
10
|
+
|
|
11
|
+
## Commission and scope
|
|
12
|
+
|
|
13
|
+
Read the prepared start config with `ace-coworker start --config <returned path>`.
|
|
14
|
+
Use its pinned assignment ID for every ace-assign operation. Read the executable
|
|
15
|
+
lab task and its explicit canonical target path, allowed configuration paths,
|
|
16
|
+
operations, runtime selection and acceptance criteria. Missing or ambiguous
|
|
17
|
+
scope is an error report, never a guessed directory or permission.
|
|
18
|
+
|
|
19
|
+
The assignment and evidence belong to the prepared lab task worktree. This
|
|
20
|
+
operational role may act on the explicitly commissioned canonical target
|
|
21
|
+
outside that worktree; this exception does not authorize other projects or
|
|
22
|
+
product implementation. Resolve target paths before effects and reject symlink
|
|
23
|
+
escapes outside the commissioned root. Preserve unrelated changes and secrets.
|
|
24
|
+
Never write `.ace-tasks/_overseer`; the coordinator alone owns its private tree.
|
|
25
|
+
|
|
26
|
+
Operational tools use the selected installed ACE closure, not target binstubs
|
|
27
|
+
or its development Gemfile. Record actual executable/gem/instruction paths.
|
|
28
|
+
Additional credentials or privileges are session-scoped through the existing
|
|
29
|
+
auth handoff; do not make permanent group grants or copy credentials into
|
|
30
|
+
project config, task evidence or prompts. Missing access is a report to the
|
|
31
|
+
coordinator, not permission to borrow an account or change ownership.
|
|
32
|
+
|
|
33
|
+
## Assignment and report
|
|
34
|
+
|
|
35
|
+
Drive the pinned ace-assign step through start/finish/fail. Store evidence in
|
|
36
|
+
the executable task's docs. Failed or unavailable required checks block success.
|
|
37
|
+
Use `ace-coworker report --config <returned path>` for the truthful assignment
|
|
38
|
+
outcome. A process exit, prepared config or printed CLI brief is not completion.
|
|
39
|
+
After interruption, read current state before repeating any external effect;
|
|
40
|
+
resume the same assignment, never silently create a replacement.
|
|
41
|
+
|
|
42
|
+
## Prepare the target
|
|
43
|
+
|
|
44
|
+
Change only commissioned configuration and dependency installation paths.
|
|
45
|
+
Do not edit product code, replace tracked binstubs to bypass installed mode,
|
|
46
|
+
or rewrite existing project dependency declarations. A product/tool defect
|
|
47
|
+
requires a separate code-change commission. Use the existing configuration
|
|
48
|
+
and installation tools; do not invent a second configuration owner.
|
|
49
|
+
|
|
50
|
+
Verify the requested configuration and installed dependency readiness. Record
|
|
51
|
+
before/after state and exact checks without secrets. Do not start another
|
|
52
|
+
project overseer yourself: after independent verification the lab coordinator
|
|
53
|
+
owns reconcile/start. Leave unrelated work and live services untouched.
|
data/lib/ace/coworker/version.rb
CHANGED
metadata
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: ace-coworker
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.8.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Michal Czyz
|
|
8
8
|
bindir: exe
|
|
9
9
|
cert_chain: []
|
|
10
|
-
date: 2026-10-
|
|
10
|
+
date: 2026-10-31 00:00:00.000000000 Z
|
|
11
11
|
dependencies:
|
|
12
12
|
- !ruby/object:Gem::Dependency
|
|
13
13
|
name: ace-support-cli
|
|
@@ -234,11 +234,15 @@ extensions: []
|
|
|
234
234
|
extra_rdoc_files: []
|
|
235
235
|
files:
|
|
236
236
|
- ".ace-defaults/coworker/config.yml"
|
|
237
|
+
- ".ace-defaults/coworker/roles/bootstrap-verifier.yml"
|
|
238
|
+
- ".ace-defaults/coworker/roles/bootstrap-worker.yml"
|
|
237
239
|
- ".ace-defaults/coworker/roles/integrator.yml"
|
|
238
240
|
- ".ace-defaults/coworker/roles/reviewer.yml"
|
|
239
241
|
- ".ace-defaults/coworker/roles/second-captain.yml"
|
|
240
242
|
- ".ace-defaults/coworker/roles/spec.yml"
|
|
241
243
|
- ".ace-defaults/coworker/roles/worker.yml"
|
|
244
|
+
- ".ace-defaults/coworker/sequences/bootstrap-verifier.yml"
|
|
245
|
+
- ".ace-defaults/coworker/sequences/bootstrap-worker.yml"
|
|
242
246
|
- ".ace-defaults/coworker/sequences/integrator.yml"
|
|
243
247
|
- ".ace-defaults/coworker/sequences/reviewer.yml"
|
|
244
248
|
- ".ace-defaults/coworker/sequences/spec.yml"
|
|
@@ -249,6 +253,8 @@ files:
|
|
|
249
253
|
- Rakefile
|
|
250
254
|
- docs/usage.md
|
|
251
255
|
- exe/ace-coworker
|
|
256
|
+
- handbook/workflow-instructions/coworker/bootstrap-verifier.wf.md
|
|
257
|
+
- handbook/workflow-instructions/coworker/bootstrap-worker.wf.md
|
|
252
258
|
- handbook/workflow-instructions/coworker/integrator.wf.md
|
|
253
259
|
- handbook/workflow-instructions/coworker/reviewer.wf.md
|
|
254
260
|
- handbook/workflow-instructions/coworker/second-captain.wf.md
|