ace-herdr 0.5.1 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 00422d9f6820e48b0ea45698e4663f7ecaeb9b5b01ddf1626ab86aed50adcbfd
-  data.tar.gz: 2632e4056271d3c022056a70fa5f3b95e2f69ae08544bf70f2577bc11fbac4f7
+  metadata.gz: 5e3b1b413921a28b8ebd2437c424f885d11ec65bcf886fdb173101b8ce5ca8de
+  data.tar.gz: a4ebad7d9470e1f7f1e74e6b7a66d3ced20605f13bb323c67f5abc51993978ee
 SHA512:
-  metadata.gz: c6626094540195dadf06116add8bd27708934b809347c12cb0bc355cb6c03d5ff32e30e3e63870e158316cf9c80de7e2bdd5cad5f731cea4fef11303c1c9bd8a
-  data.tar.gz: 7b4e02b683be089a602d10c7fafcb09abc134a9f5b60e5a58a8d0ef42b35bb0ec18555700e0c316ec5de12aae7e5c01a4f0ffede12e26597f1a881fcbb5d50af
+  metadata.gz: b53397db1e608164a19390d073ae7420b602ec1a8152b975f11d6dd3443dda4da4ff5208644aecf7f2bb7bfc269034c6813eac283683eed4ea916b1b01c52795
+  data.tar.gz: e716fc0fe8329fffda5b2c18c81395432b3257b4fee3118207f21e016f69185454f4ea2661fda6f8ba3aa42eebaf0aaca773fed7e20d7899ff08e6c139f2cb18

data/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.6.0] - 2026-10-16
+
+### Added
+
+- Expose bounded native observations and hold ordinary Inbox delivery settlement through canonical Assign acceptance. Preserve exact targets and unresolved outcomes without repeat sends or alternate execution records.
+
 ## [0.5.1] - 2026-10-10
 
 ### Fixed

data/lib/ace/herdr/models/delivery_record.rb

@@ -79,6 +79,15 @@ module Ace
           state == "delivered"
         end
 
+        # Exact native submission receipt, not a business completion verdict.
+        def inbox_delivered?
+          return false unless delivered? && inbox.is_a?(Hash)
+          receipt = inbox["receipt"]
+          inbox["claim_generation"].is_a?(Integer) && inbox["claim_generation"].positive? &&
+            receipt.is_a?(Hash) && receipt.values_at("event_id", "attempt_id", "claim_generation", "payload_sha256", "binding") ==
+              [event_id, inbox["attempt_id"], inbox["claim_generation"], answer_digest, inbox["binding"]]
+        end
+
         # A "submitting" history entry without a matching outcome means the
         # previous run crashed between prompt submission and persistence;
         # resending could duplicate the answer, so the outcome is ambiguous.

data/lib/ace/herdr/molecules/bounded_observation.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+require_relative "herdr_executor"
+
+module Ace
+  module Herdr
+    module Molecules
+      # Read-only native attribution under one absolute deadline, including all
+      # ancestry probes. Never renew the budget for another process in the chain.
+      class BoundedObservation < HerdrExecutor
+        def initialize(deadline:, binary: DEFAULT_BINARY, process: BoundedProcess)
+          super(binary: binary, process: process)
+          @deadline = deadline
+        end
+
+        def pane_get(pane) = observe!([@binary, "pane", "get", pane])
+        def pane_process_info(pane) = observe!([@binary, "pane", "process-info", "--pane", pane])
+
+        # ProcessIdentity's existing executor seam. Do not let PATH select ps.
+        def capture2(command, *args, stdin_data: "")
+          raise ArgumentError, "observation only permits ps" unless command == "ps" && stdin_data.empty?
+          result = bounded(["/bin/ps", *args])
+          [result.stdout, result.status]
+        end
+
+        private
+
+        def observe!(argv)
+          result = bounded(argv)
+          execution = ExecutionResult.new(stdout: result.stdout.strip, stderr: result.stderr.strip,
+            success: result.status.success?, exit_code: result.status.exitstatus || -1)
+          raise classify(execution, argv) unless execution.success?
+          execution
+        end
+
+        def bounded(argv)
+          remaining = @deadline - Process.clock_gettime(Process::CLOCK_MONOTONIC)
+          raise AgentNotReadyError, "native observation deadline elapsed" unless remaining.positive?
+          result = @process.call(argv, stdin_data: "", timeout_s: remaining,
+            output_limit: WAKE_OUTPUT_LIMIT, cleanup_group: true)
+          raise AgentNotReadyError, "native observation output exceeded limit" if result.oversized
+          result
+        rescue Timeout::Error, BoundedProcess::PostLaunchError
+          raise AgentNotReadyError, "native observation did not complete within its bound"
+        rescue SystemCallError
+          raise ExecutorUnavailableError, "native observation executable unavailable"
+        end
+      end
+    end
+  end
+end

data/lib/ace/herdr/organisms/inbox.rb

@@ -172,6 +172,39 @@ module Ace
 
         def context_root = @deliveries_dir.dup.freeze
 
+        # The installed consumer supplies canonical references and native
+        # owner, while this owner holds every existing record lock through the
+        # consumer's acceptance CAS. No delivery/retry/wake is performed here.
+        def with_delivery_settlement(deadline: nil)
+          self.class.with_retained_records(deliveries_dir: @deliveries_dir, deadline: deadline) do |records|
+            verify = lambda do |references:, attempt_id:, owner:|
+              unless references.is_a?(Array) && references.all? { |reference|
+                reference.is_a?(Hash) && reference.keys.sort == %w[attempt_id event_id payload_sha256] &&
+                  reference["attempt_id"] == attempt_id }
+                raise ValidationError, "canonical Inbox references differ"
+              end
+              selected = records.select { |record| record.inbox.fetch("attempt_id") == attempt_id }
+              ids = references.map { |reference| reference.fetch("event_id") }
+              unless ids.uniq == ids && selected.map(&:event_id).sort == ids.sort
+                raise ValidationError, "canonical Inbox reference inventory differs"
+              end
+              next [] if selected.empty?
+              target = target_from_owner(owner)
+              selected.map do |record|
+                reference = references.find { |item| item.fetch("event_id") == record.event_id }
+                binding = record.inbox.fetch("binding", {})
+                unless !record.inbox["original_context"] && record.inbox_delivered? && record.answer_digest == reference.fetch("payload_sha256") &&
+                    record.inbox["origin_target"] == target && binding.slice(*target.keys) == target &&
+                    binding["payload_sha256"] == record.answer_digest && %w[none sent].include?(record.inbox.dig("wake", "status"))
+                  raise ValidationError, "original Inbox delivery or wake remains unsettled"
+                end
+                reference.merge("claim_generation" => record.inbox.fetch("claim_generation"))
+              end
+            end
+            yield verify
+          end
+        end
+
 
         def enqueue(event:, attempt:, ref:, payload:, managed_envelope: nil, expected_target: nil, original_context: nil, original_binding_digest: nil)
           validate_id!(event, "event")

data/lib/ace/herdr/organisms/inbox_context_owner.rb

@@ -378,12 +378,7 @@ module Ace
         end
 
         def completed_record?(record)
-          return false unless record.state == "delivered" && record.inbox.is_a?(Hash)
-          inbox = record.inbox
-          receipt = inbox["receipt"]
-          inbox["claim_generation"].is_a?(Integer) && inbox["claim_generation"].positive? &&
-            receipt.is_a?(Hash) && receipt.values_at("event_id", "attempt_id", "claim_generation", "payload_sha256", "binding") ==
-              [record.event_id, inbox["attempt_id"], inbox["claim_generation"], record.answer_digest, inbox["binding"]]
+          record.inbox_delivered?
         end
 
         def expected!(state, expected)

data/lib/ace/herdr/version.rb

@@ -2,6 +2,6 @@
 
 module Ace
   module Herdr
-    VERSION = "0.5.1"
+    VERSION = "0.6.0"
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ace-herdr
 version: !ruby/object:Gem::Version
-  version: 0.5.1
+  version: 0.6.0
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-10-10 00:00:00.000000000 Z
+date: 2026-10-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: websocket-driver
@@ -237,6 +237,7 @@ files:
 - lib/ace/herdr/errors.rb
 - lib/ace/herdr/models/delivery_record.rb
 - lib/ace/herdr/models/dispatch_outcome.rb
+- lib/ace/herdr/molecules/bounded_observation.rb
 - lib/ace/herdr/molecules/bounded_process.rb
 - lib/ace/herdr/molecules/delivery_record_store.rb
 - lib/ace/herdr/molecules/guarded_native_origin.rb