paseo-agy-acp v2.0.0.0

Highlights

• Adds the durable shared Admission Controller with schema v2, cross-process policy consistency, soft drain, bounded owner recovery, and runtime lease reaping.
• Routes production prompt dispatch through durable intent and exactly-once terminal handling, including typed timeout, provider failure, cancellation, and recovery outcomes.
• Preserves interactive Antigravity permissions while enforcing enabled-mode auth gates and safe prompt fencing.
• Makes the built package entry importable and keeps provider/model discovery available before Paseo assigns the final agent identity.
• Stabilizes first-turn delivery on a fresh Antigravity PTY by waiting for authentication and model redraws to settle before the single fenced prompt write.

Verification

• 56 test files passed: 611 passed, 2 skipped.
• Architecture boundaries and secret scan passed.
• A locally built 2.0.0.0 tarball passed fresh-prefix installation, public-entry import, CLI EOF, and native PTY smoke tests.
• The exact installed tarball completed a real isolated Antigravity gemini-3.1-pro Admission canary on 127.0.0.1:6768 with response STAGE4_ADMISSION_CANARY_OK; the durable request reached completed and released its lease.
• Existing production 127.0.0.1:6767 connectivity was separately confirmed without switching or modifying the active production connector.

Known limitation

Trusted provider-capacity/503 classification remains deliberately gated until a source-verifiable Provider signal exists. Unknown or untrusted capacity errors continue to fail closed and do not create a cooldown.