ace-test-runner-e2e 0.42.0 → 0.43.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f8c03365266949f68dd3364885060b9c27b4087d3ff84b0b42ac5c231ab092ed
-  data.tar.gz: ea5b5009323c90d85ec27e417ae012ea09c2af8838b248bf8057caf2fd9174cd
+  metadata.gz: a10bfe582cd05ba82acd9de7b3cde9164748ae79f10197839d30ce1be1d5aa08
+  data.tar.gz: 92cb523accd05c05fbe2e7c76c1778204fb048b9e1794b8956d225bc257f2779
 SHA512:
-  metadata.gz: e3a65486f96beb2288ca5648d16305da412e1d90f69afc6586818db90f029e8d3dbb3037ca3a780619cf0b067d18d2c96b739dcdf724c7a4dd6ad0a090b00dce
-  data.tar.gz: 34c8755617d888e23307c21c53b21fd0de777195c6c6ac77d7eaf79cc3cc0efe8ba9fd5b8e1741e5ddb29ccaea7d9c181eb10c80b541d026d24d2713edadda9d
+  metadata.gz: 2bf18a436f8f4148db5acc308df5f2071803c173539a1f6b60c5b6dd631ed176fb3c9dce8ce265af0cc493b07160b59b9373e81af877331cddd21571721694ed
+  data.tar.gz: 7c0024804c817351a3dc980b71496ac2d010f28c626206c2def6dd32cce48f35e01d73a9fbf8fd805c4691a3fcf3f2054c56dec51dd877026b0f65594c5a1986

data/CHANGELOG.md

@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.43.0] - 2026-10-05
+
+### Added
+- Frozen release manifests accept validated `runtime_dependencies` declarations for exact source-bound consumer edge verification. Missing required consumer declarations remain a proof failure.
+
 ## [0.42.0] - 2026-10-04
 
 ### Added

data/lib/ace/test/end_to_end_runner/molecules/release_manifest.rb

@@ -4,6 +4,7 @@ require "digest"
 require "fileutils"
 require "json"
 require "rubygems/version"
+require "rubygems/requirement"
 
 module Ace
   module Test
@@ -124,7 +125,7 @@ module Ace
               label = "packages[#{index}]"
               raise Invalid, "#{label} must be an object" unless entry.is_a?(Hash)
 
-              reject_unknown_keys!(entry, %w[name artifact_version source_sha supersedes], label)
+              reject_unknown_keys!(entry, %w[name artifact_version source_sha supersedes runtime_dependencies], label)
 
               name = entry["name"]
               unless name.is_a?(String) && name.match?(GEM_NAME_PATTERN)
@@ -134,9 +135,34 @@ module Ace
               validate_exact_version!(entry["artifact_version"], "#{label}(#{name}) artifact_version")
               validate_source_sha!(entry["source_sha"], "#{label}(#{name}) source_sha")
               validate_supersedes!(entry["supersedes"], entry["artifact_version"], "#{label}(#{name})")
+              validate_runtime_dependencies!(entry["runtime_dependencies"], label) if entry.key?("runtime_dependencies")
               name
             end
 
+            # These are frozen source declarations, not requirements inferred
+            # from whatever a registry happened to return during the proof.
+            def validate_runtime_dependencies!(raw, label)
+              unless raw.is_a?(Hash)
+                raise Invalid, "#{label} runtime_dependencies must be an object"
+              end
+              raw.each do |name, requirements|
+                unless name.is_a?(String) && name.match?(GEM_NAME_PATTERN) &&
+                    requirements.is_a?(Array) && !requirements.empty? &&
+                    requirements.uniq.length == requirements.length
+                  raise Invalid, "#{label} has invalid runtime dependency declaration"
+                end
+                requirements.each do |requirement|
+                  parsed = requirement.is_a?(String) ? Gem::Requirement.new(requirement) : nil
+                  canonical = parsed&.requirements&.map { |operator, version| "#{operator} #{version}" }
+                  unless canonical == [requirement]
+                    raise Invalid, "#{label} runtime dependency requirements must be canonical strings"
+                  end
+                rescue ArgumentError
+                  raise Invalid, "#{label} has invalid runtime dependency requirement"
+                end
+              end
+            end
+
             def validate_exact_version!(raw, label)
               unless raw.is_a?(String) && !raw.strip.empty?
                 raise Invalid, "#{label} must be an exact version string, got #{raw.inspect}"

data/lib/ace/test/end_to_end_runner/version.rb

@@ -3,7 +3,7 @@
 module Ace
   module Test
     module EndToEndRunner
-      VERSION = "0.42.0"
+      VERSION = "0.43.0"
     end
   end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: ace-test-runner-e2e
 version: !ruby/object:Gem::Version
-  version: 0.42.0
+  version: 0.43.0
 platform: ruby
 authors:
 - Michal Czyz
 bindir: exe
 cert_chain: []
-date: 2026-10-04 00:00:00.000000000 Z
+date: 2026-10-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ace-support-cli