ace-prompt-prep 0.23.6 → 0.25.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7420fdec3607ea7299d6279f1471e4dd635bb2b6d6f6ed07d609490f84291875
-  data.tar.gz: 5e5c1125609e35611555a8ca3585a6cc55c818db30d09156d048747382e2a9c1
+  metadata.gz: 9bee1d36cf1dc194defba79f0106cd45b9914cebcd8ff7df548966a3cc60c048
+  data.tar.gz: dfa6b8109ccdf9690ebdae87d155190be2c239c73dc299cb68d4937399b66341
 SHA512:
-  metadata.gz: 935c958056aaef7995f2bffa656725bd788b933416aa9f72b76f7f048a763ed10ffe9abb2088041d373634f69fd4d4eb763cff619574e186e8e816102b096178
-  data.tar.gz: 92e53e9fc03df7d01fe05c2859a3b260a42d682a233b74e6c4e163f1874fae128358c52c19f75cb90de69a515067734a8bd1d5b8db64a38932504294f3c42cea
+  metadata.gz: 89b54e6d74589f0e2131e812cea28375fd6c54a09f0189239a207c01bf506c113a9fba88f1de50a7bbf73a94937bf2e7e437292a4c837310c95bb22ba416a7dc
+  data.tar.gz: f40d948adbf19b1efbfc4726287469233f233774ce6db6c18ac3e59e30a455466618f2819e3d0ecd3e919492a02f51e25fe579476385fc116edecde85807c715

data/CHANGELOG.md

@@ -7,6 +7,77 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.25.7] - 2026-06-30
+
+### Fixed
+- Hardened prompt-file root-boundary checks by canonicalizing symlinked paths and missing descendants before rejecting files outside the project.
+
+## [0.25.6] - 2026-04-19
+
+### Technical
+- Tightened `TS-PREP-001` bundle and task-scoped runners to persist required processed-output artifacts immediately after command capture.
+
+## [0.25.5] - 2026-04-18
+
+### Technical
+- Updated retained bundle-context E2E verification to assert the current bundled-output markers instead of obsolete `bundle:` frontmatter formatting.
+
+## [0.25.4] - 2026-04-16
+
+### Technical
+- Updated `TS-PREP-001` task-scoped process evidence to persist `task-create.*`, derive the task ID from real `ace-task create` output when needed, and verify the current `task-create` / `task-setup` / `task-process` contract without relying on a brittle helper file.
+
+## [0.25.3] - 2026-04-16
+
+### Technical
+- Updated `TS-PREP-001` task-scoped process verification to assert the current `task-setup.*` and `task-process.*` artifact contract instead of stale `task-create.*` expectations.
+
+## [0.25.2] - 2026-04-16
+
+### Fixed
+- Updated `TS-PREP-001` task-scoped verification to prove task reuse from workspace, archive, and symlink evidence without requiring setup/process stdout to repeat the task ID verbatim.
+
+## [0.25.1] - 2026-04-16
+
+### Technical
+- Updated `TS-PREP-001` sandbox setup to source `mise.toml` from `${ACE_E2E_SOURCE_ROOT:-$PROJECT_ROOT_PATH}` so prompt-prep smoke runs stay aligned with the shared E2E sandbox contract.
+
+## [0.25.0] - 2026-04-15
+
+### Changed
+- Rewrote `TS-PREP-001` to strengthen bundle-mode evidence and add two public-surface journeys:
+  `ace-prompt-prep setup` workspace initialization and task-scoped `setup/process --task` execution.
+
+### Technical
+- Stabilized verifier contracts to prefer impact-first artifact evidence while tolerating deterministic harness
+  formatting variance (`content-diff` and task-id/workspace evidence sources).
+
+## [0.24.2] - 2026-04-13
+
+### Technical
+- Replaced the package version assertion with a semantic-version schema check so the fast test validates version shape instead of a loose substring match.
+## [0.24.1] - 2026-04-13
+
+### Changed
+- Completed the batch i05 migration follow-through for this package and aligned it with the restarted `fast` / `feat` / `e2e` verification model.
+
+### Technical
+- Included in the coordinated assignment-driven patch release for batch i05 package updates.
+
+
+## [0.24.0] - 2026-04-12
+
+### Changed
+- Migrated package tests to the restarted `fast` / `feat` / `e2e` model:
+  - moved deterministic coverage into `test/fast`
+  - moved legacy `test/integration` coverage into `test/feat`
+  - retained workflow-value scenario coverage in `test/e2e`
+- Simplified `TS-PREP-001` scenario assets by removing low-value help/setup goals and keeping archive + bundle context workflow checks.
+
+### Technical
+- Updated package docs (`README.md`, `docs/usage.md`) to teach the restarted testing contract:
+  `ace-test`, `ace-test feat`, `ace-test all`, and `ace-test-e2e`.
+
 ## [0.23.6] - 2026-03-31
 
 ### Changed

data/README.md

@@ -36,5 +36,14 @@
 
 **Scope prompts to tasks** - use `--task` to route prompt workspaces into [ace-task](../ace-task) directories, keeping prompts connected to delivery work alongside [ace-git](../ace-git) branch workflows.
 
+## Testing
+
+Use the restarted package testing contract:
+
+- `ace-test ace-prompt-prep` for deterministic fast tests
+- `ace-test ace-prompt-prep feat` for deterministic feature-level tests
+- `ace-test ace-prompt-prep all` for complete deterministic coverage
+- `ace-test-e2e ace-prompt-prep` for retained workflow-value scenarios
+
 ---
 [Getting Started](docs/getting-started.md) | [Usage Guide](docs/usage.md) | [Handbook - Skills, Agents, Templates](docs/handbook.md) | Part of [ACE](https://github.com/cs3b/ace)

data/lib/ace/prompt_prep/molecules/bundle_loader.rb

@@ -44,15 +44,10 @@ module Ace
             end
 
             # Resolve symlinks and validate project boundaries
-            real_path = begin
-              File.realpath(prompt_path)
-            rescue
-              prompt_path
-            end
             project_root = Ace::Support::Fs::Molecules::ProjectRootFinder.find_or_current
 
-            unless real_path.start_with?(project_root)
-              warn "Error: File path resolves outside project: #{real_path}"
+            unless path_within_root?(prompt_path, project_root)
+              warn "Error: File path resolves outside project: #{canonical_path(prompt_path)}"
               return ""
             end
 
@@ -172,6 +167,33 @@ module Ace
 
           true
         end
+
+        def self.path_within_root?(path, root)
+          canonical = canonical_path(path)
+          canonical_root = canonical_path(root)
+          canonical == canonical_root || canonical.start_with?("#{canonical_root}#{File::SEPARATOR}")
+        end
+
+        def self.canonical_path(path)
+          expanded = File.expand_path(path)
+          return File.realpath(expanded) if File.exist?(expanded)
+
+          canonical_missing_path(expanded)
+        rescue
+          File.expand_path(path)
+        end
+
+        def self.canonical_missing_path(path)
+          parent = path
+          suffix = []
+          until File.exist?(parent) || parent == File.dirname(parent)
+            suffix.unshift(File.basename(parent))
+            parent = File.dirname(parent)
+          end
+          return path unless File.exist?(parent)
+
+          File.join(File.realpath(parent), *suffix)
+        end
       end
     end
   end

data/lib/ace/prompt_prep/version.rb

@@ -2,6 +2,6 @@
 
 module Ace
   module PromptPrep
-    VERSION = '0.23.6'
+    VERSION = '0.25.7'
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ace-prompt-prep
 version: !ruby/object:Gem::Version
-  version: 0.23.6
+  version: 0.25.7
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-04-01 00:00:00.000000000 Z
+date: 2026-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ace-support-config