pactkit-codex 3.0.4__tar.gz → 3.1.0__tar.gz

{pactkit_codex-3.0.4/src/pactkit_codex.egg-info → pactkit_codex-3.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pactkit-codex
-Version: 3.0.4
+Version: 3.1.0
 Summary: PactKit adapter for OpenAI Codex CLI
 Author: Slim
 License: MIT
@@ -21,7 +21,7 @@ Classifier: Topic :: Software Development :: Quality Assurance
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: pactkit<3.1.0,>=3.0.1
+Requires-Dist: pactkit<3.2.0,>=3.0.1
 Requires-Dist: tomli>=1.1.0; python_version < "3.11"
 Dynamic: license-file
 

{pactkit_codex-3.0.4 → pactkit_codex-3.1.0}/pyproject.toml

@@ -4,13 +4,13 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "pactkit-codex"
-version = "3.0.4"
+version = "3.1.0"
 description = "PactKit adapter for OpenAI Codex CLI"
 readme = "README.md"
 license = {text = "MIT"}
 requires-python = ">=3.10"
 dependencies = [
-    "pactkit>=3.0.1,<3.1.0",
+    "pactkit>=3.0.1,<3.2.0",
     "tomli>=1.1.0; python_version < '3.11'",
 ]
 

pactkit_codex-3.1.0/src/pactkit_codex/declarations.py

@@ -0,0 +1,141 @@
+"""Codex's own declarations (SPEC-4.0-22 Step 6).
+
+These lived in Core's transitional seed (`_CORE_CAPABILITIES`, `_CORE_SECURITY`,
+`_CORE_PRETOOL_SURFACES`, `_CORE_DEPLOYMENT_CLAIMS`) until Step 6. While they
+did, this adapter could not answer for itself: `import pactkit_codex` read Core's table
+for its own identity, so removing the seed broke the import rather than the
+deployment.
+
+Core still owns the **vocabulary** (`capability.CAPABILITY_VOCABULARY`), the
+four levels, and the hole-filling rule in `resolve_capabilities`. What a given
+Host scores on them is the Host's own declaration — that is the split
+SPEC-4.0-22 R1 draws, and this module is the Codex side of it.
+
+Every value here was materialised from the seed Core was carrying, so this is a
+move, not a re-measurement. The `Capability.evidence` strings are preserved
+verbatim for the same reason: they are what the seed said, and re-wording them
+here would quietly change what the registry reports.
+"""
+
+from __future__ import annotations
+
+from pactkit.capability import Capability, CapabilityLevel
+from pactkit.profiles import (
+    CLIPolicy,
+    DeploymentClaim,
+    FormatProfile,
+    InputTranslation,
+    SecurityDeclaration,
+    SecurityFacts,
+)
+
+__all__ = [
+    "CAPABILITIES",
+    "DEPLOYMENT_CLAIM",
+    "INPUT_TRANSLATION",
+    "PRETOOL_SURFACE",
+    "PROFILE",
+    "SECURITY",
+]
+
+
+def _cap(name: str, level: CapabilityLevel, implemented: bool, evidence: str) -> Capability:
+    return Capability(name=name, level=level, implemented=implemented, evidence=evidence)
+
+
+#: The Host's profile. Core no longer owns it; this module is the source.
+PROFILE = FormatProfile(
+    name='codex',
+    display_name='Codex CLI',
+    global_config_dir='~/.codex',
+    project_config_dir='.codex',
+    skills_dir='~/.codex/skills',
+    agents_dir='~/.codex/agents',
+    commands_dir='~/.codex/prompts',
+    rules_dir='~/.codex/rules',
+    project_instructions_file='AGENTS.md',
+    global_instructions_file='AGENTS.md',
+    pactkit_yaml_path='.codex/pactkit.yaml',
+    agent_format='md',
+    rules_import_style='inline',
+    excluded_agent_fields=frozenset({'memory', 'permissionMode', 'skills', 'hooks'}),
+    excluded_commands=frozenset(),
+    supports_model_routing=False,
+    skills_path_var='~/.codex/skills',
+    command_deploy_form='skill',
+    agent_dialect=None,
+    command_dialect=None,
+    core_bundled=False,
+    cli_policy=CLIPolicy.PREFERRED,
+)
+
+#: What this Host scores on the capability vocabulary.
+CAPABILITIES: dict[str, Capability] = {
+    'completion_hook': _cap('completion_hook', CapabilityLevel.DEGRADED, False,
+        "unverified — not measured on this Host; absence of the capability is NOT established (SPEC-4.0-04 R2: "
+        "unverified is not unavailable)",
+    ),
+    'git_hook': _cap('git_hook', CapabilityLevel.NATIVE, True, 'shipped (commit_gate pre-commit chain)',
+    ),
+    'global_instruction': _cap('global_instruction', CapabilityLevel.EQUIVALENT, True, 'shipped (~/.codex/AGENTS.md)',
+    ),
+    'native_command': _cap('native_command', CapabilityLevel.DEGRADED, False,
+        "unverified — not measured on this Host; absence of the capability is NOT established (SPEC-4.0-04 R2: "
+        "unverified is not unavailable)",
+    ),
+    'native_skill': _cap('native_skill', CapabilityLevel.DEGRADED, False,
+        "unverified — not measured on this Host; absence of the capability is NOT established (SPEC-4.0-04 R2: "
+        "unverified is not unavailable)",
+    ),
+    'persistent_session': _cap('persistent_session', CapabilityLevel.DEGRADED, False,
+        "unverified — not measured on this Host; absence of the capability is NOT established (SPEC-4.0-04 R2: "
+        "unverified is not unavailable)",
+    ),
+    'post_tool_hook': _cap('post_tool_hook', CapabilityLevel.DEGRADED, False,
+        "unverified — not measured on this Host; absence of the capability is NOT established (SPEC-4.0-04 R2: "
+        "unverified is not unavailable)",
+    ),
+    'pre_tool_hook': _cap('pre_tool_hook', CapabilityLevel.NATIVE, True,
+        'shipped (doctor.check_codex_hook_capability; native hooks engine)',
+    ),
+    'project_instruction': _cap('project_instruction', CapabilityLevel.EQUIVALENT, True,
+        'shipped (AGENTS.md at project root)',
+    ),
+    'rule_import': _cap('rule_import', CapabilityLevel.EQUIVALENT, True, 'shipped as AGENTS.md (generators.deployer)',
+    ),
+    'session_resume': _cap('session_resume', CapabilityLevel.DEGRADED, False,
+        "unverified — not measured on this Host; absence of the capability is NOT established (SPEC-4.0-04 R2: "
+        "unverified is not unavailable)",
+    ),
+    'shell_execution': _cap('shell_execution', CapabilityLevel.NATIVE, True, 'shipped (native shell tool)',
+    ),
+    'structured_tool_result': _cap('structured_tool_result', CapabilityLevel.DEGRADED, False,
+        "unverified — not measured on this Host; absence of the capability is NOT established (SPEC-4.0-04 R2: "
+        "unverified is not unavailable)",
+    ),
+    'subagent': _cap('subagent', CapabilityLevel.DEGRADED, False,
+        "unverified — not measured on this Host; absence of the capability is NOT established (SPEC-4.0-04 R2: "
+        "unverified is not unavailable)",
+    ),
+}
+
+#: Files a gate must treat specially on this Host (SPEC-4.0-22 R8).
+SECURITY = SecurityDeclaration(
+    env_capable=SecurityFacts.declared(['.codex/config.toml']),
+    protected=SecurityFacts.declared(['.codex/hooks.json']),
+    conditional=SecurityFacts.empty(),
+)
+
+#: Which mechanism this Host offers for pre-tool interception, when one
+#: has been measured. `None` means unverified — not "cannot".
+PRETOOL_SURFACE = 'native hooks engine'
+
+#: How this Host executes and where its verification comes from.
+DEPLOYMENT_CLAIM = DeploymentClaim(
+    execution_mode='portable',
+    verification_source='native_codex_session',
+)
+
+#: Read-side wire-format data, when the Host has one. `None` means it
+#: declares none — the ladder then never asks it to recognise a payload.
+INPUT_TRANSLATION: InputTranslation | None = None

{pactkit_codex-3.0.4 → pactkit_codex-3.1.0}/src/pactkit_codex/deployer.py

@@ -46,7 +46,6 @@ from pactkit.generators.deployer import (
     _enforce_deploy_integrity,
 )
 from pactkit.generators.spi import render_prompt, render_skill_md
-from pactkit.profiles import get_profile
 from pactkit.prompts.guides import GUIDES_FILES
 from pactkit.prompts.rules import (
     COMMAND_CONDITIONAL_RULES_MAP,
@@ -57,6 +56,8 @@ from pactkit.prompts.rules import (
 )
 from pactkit.utils import atomic_write
 
+from pactkit_codex import declarations
+
 # All canonical commands deploy. Sprint degrades to sequential execution when
 # Codex does not expose team orchestration primitives.
 CODEX_EXCLUDED_COMMANDS: frozenset[str] = frozenset()
@@ -111,7 +112,13 @@ class CodexDeployer(DeployerBase):
     - config.toml (not JSON/YAML)
     """
 
-    profile = get_profile("codex")
+    # SPEC-4.0-22 Step 6 — the Host's own declarations (see declarations.py).
+    profile = declarations.PROFILE
+    capabilities = declarations.CAPABILITIES
+    security = declarations.SECURITY
+    pretool_surface = declarations.PRETOOL_SURFACE
+    deployment_claim = declarations.DEPLOYMENT_CLAIM
+    input_translation = declarations.INPUT_TRANSLATION
 
     @staticmethod
     def continuation_capabilities(codex_root=None):

{pactkit_codex-3.0.4 → pactkit_codex-3.1.0/src/pactkit_codex.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pactkit-codex
-Version: 3.0.4
+Version: 3.1.0
 Summary: PactKit adapter for OpenAI Codex CLI
 Author: Slim
 License: MIT
@@ -21,7 +21,7 @@ Classifier: Topic :: Software Development :: Quality Assurance
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: pactkit<3.1.0,>=3.0.1
+Requires-Dist: pactkit<3.2.0,>=3.0.1
 Requires-Dist: tomli>=1.1.0; python_version < "3.11"
 Dynamic: license-file
 

{pactkit_codex-3.0.4 → pactkit_codex-3.1.0}/src/pactkit_codex.egg-info/SOURCES.txt

@@ -2,6 +2,7 @@ LICENSE
 README.md
 pyproject.toml
 src/pactkit_codex/__init__.py
+src/pactkit_codex/declarations.py
 src/pactkit_codex/deployer.py
 src/pactkit_codex/enforcement.py
 src/pactkit_codex.egg-info/PKG-INFO
@@ -10,4 +11,6 @@ src/pactkit_codex.egg-info/dependency_links.txt
 src/pactkit_codex.egg-info/entry_points.txt
 src/pactkit_codex.egg-info/requires.txt
 src/pactkit_codex.egg-info/top_level.txt
-tests/test_host_body_snapshot.py
+tests/test_capability_contract.py
+tests/test_host_body_snapshot.py
+tests/test_profile_contract.py

{pactkit_codex-3.0.4 → pactkit_codex-3.1.0}/src/pactkit_codex.egg-info/requires.txt

@@ -1,4 +1,4 @@
-pactkit<3.1.0,>=3.0.1
+pactkit<3.2.0,>=3.0.1
 
 [:python_version < "3.11"]
 tomli>=1.1.0

pactkit_codex-3.1.0/tests/test_capability_contract.py

@@ -0,0 +1,112 @@
+"""SPEC-4.0-22 Step 7 — 本宿主的 capability / deployment claim / pretool 契约。
+
+**为什么这份测试在本仓。** 这三张表（能力声明、部署声明、pre-tool 机制名）
+自 Step 6/7 起由本 adapter 自带并经 entry-point 注册。core 侧只保留它随包发布
+的 `classic`。所以「本宿主能做什么、怎么执行、pre-tool 机制叫什么」的断言属于
+**本仓**——生产里的事实归谁，断言就归谁。
+
+core 侧对应断言（`test_spec40_22_capability_registry.py` 的宿主值行）已随之删除。
+**是搬迁，不是复制**：两处各留一份就是给同一个事实造两个真相源。
+"""
+
+from __future__ import annotations
+
+from pactkit.capability import resolve_capabilities
+from pactkit.generators.deploy_base import _ensure_entry_point_deployers
+from pactkit.profiles import registered_adapters
+
+HOST = "codex"
+PRETOOL = 'native hooks engine'
+CLAIM = ('portable', 'native_codex_session')
+ENV_CAPABLE = {'.codex/config.toml'}
+PROTECTED = {'.codex/hooks.json'}
+CONDITIONAL = set()
+PRESENT = ['git_hook', 'global_instruction', 'pre_tool_hook', 'project_instruction', 'rule_import', 'shell_execution']
+
+
+def _registration():
+    _ensure_entry_point_deployers()
+    return registered_adapters()[HOST]
+
+
+class TestTheDeclarationReachesTheRegistry:
+    def test_the_registry_carries_this_hosts_claim(self):
+        claim = _registration().deployment_claim
+        assert (claim.execution_mode, claim.verification_source) == CLAIM
+
+    def test_the_registry_carries_this_hosts_pretool_mechanism(self):
+        assert _registration().pretool_surface == PRETOOL
+
+
+class TestTheCapabilityDeclaration:
+    def test_the_present_set_is_exactly_this(self):
+        """**逐项**钉住，不是只钉个数——多一项少一项都要红。
+
+        迁移前基线是 6 项；这条断言的是同一批名字，所以它既防漏声明，
+        也防「为了让表看起来完整」而虚报一项。
+        """
+        resolved = resolve_capabilities(HOST)
+        assert resolved.known
+        present = sorted(n for n, e in resolved.entries.items() if e.present)
+        assert present == PRESENT
+
+    def test_every_declared_entry_carries_evidence(self):
+        for name, entry in resolve_capabilities(HOST).entries.items():
+            assert entry.evidence, f"{name} 没有证据来源——那就是一个断言，不是声明"
+
+    def test_the_declaration_is_not_empty(self):
+        assert _registration().capabilities, (
+            "本宿主没有声明任何能力——registry 会把每一项都填成 Degraded"
+        )
+
+
+class TestTheContractHasTeeth:
+    """反证：改坏本仓的声明，上面必须有测试变红。"""
+
+    def test_mutating_the_claim_moves_the_answer(self):
+        import dataclasses
+
+        from pactkit.profiles import register_adapter
+        import pactkit_codex.declarations as decl
+
+        entry = _registration()
+        broken = dataclasses.replace(
+            entry.deployment_claim, verification_source="mutated"
+        )
+        register_adapter(HOST, deployer=entry.deployer, profile=entry.profile,
+                         deployment_claim=broken)
+        try:
+            assert _registration().deployment_claim.verification_source == "mutated", (
+                "改掉本仓的声明后 registry 没变——core 侧还有第二份真相源"
+            )
+        finally:
+            register_adapter(HOST, deployer=entry.deployer, profile=entry.profile,
+                             deployment_claim=decl.DEPLOYMENT_CLAIM)
+
+
+# ---------------------------------------------------------------------------
+# 安全事实（SPEC-4.0-22 R8 / Step 7）
+# ---------------------------------------------------------------------------
+
+
+class TestTheSecurityFacts:
+    """这三类的定义域是 **PactKit gate-relative**：`env` 能到达 gate 进程的文件、
+    gate 不许任何人编辑的文件、移除 gate 条目算篡改的文件。
+
+    所以它们是**本宿主的声明**——core 侧那张跨宿主表已随 Step 7 删除，这里的
+    断言跟事实走。
+    """
+
+    def test_the_declared_files_are_exactly_these(self):
+        s = _registration().security
+        assert set(s.env_capable.files) == ENV_CAPABLE
+        assert set(s.protected.files) == PROTECTED
+        assert set(s.conditional.files) == CONDITIONAL
+
+    def test_the_declaration_is_complete(self):
+        """`missing`（宿主没说话）与 `empty`（宿主说了它没有）是两件事。
+
+        声明不完整时，需要 tamper_guard 授权的写操作会 fail closed——那是
+        R8 的设计，不是缺陷。所以「完整」本身是要被钉住的事实。
+        """
+        assert _registration().security.complete

pactkit_codex-3.1.0/tests/test_profile_contract.py

@@ -0,0 +1,186 @@
+"""SPEC-4.0-22 Step 7 — 本宿主的 profile 契约。
+
+**为什么这份测试在本仓。** codex 的 `FormatProfile` 自 Step 6/7 起由本 adapter
+自带并经 entry-point 注册；core 侧只保留它随包发布的 `classic`。所以「codex 的
+全局配置目录是什么」「它的命令以什么形态落盘」这类断言属于**本仓**——生产里的
+事实在谁那里，断言就在谁那里。
+
+core 侧对应的 `test_story_slim060_codex_profile.py` / `test_story059_codex_removal.py`
+已随之删除。**是搬迁，不是复制**：两处各留一份，就是给同一个事实造两个真相源，
+而漂移的那天两边都会绿。
+"""
+
+from __future__ import annotations
+
+from typing import cast
+
+import pytest
+
+from pactkit.profiles import (
+    CLIPolicy,
+    FormatProfile,
+    get_profile,
+)
+from pactkit_codex.declarations import PROFILE
+
+SPEC = cast(FormatProfile, PROFILE)
+
+
+class TestTheProfileIsReachable:
+    """注册真的发生，且生产读路径（registry）能拿到它。"""
+
+    def test_it_is_registered(self):
+        from pactkit.generators.deploy_base import _ensure_entry_point_deployers
+
+        _ensure_entry_point_deployers()
+        assert get_profile("codex").name == "codex"
+
+    def test_get_profile_returns_the_same_object(self):
+        from pactkit.generators.deploy_base import _ensure_entry_point_deployers
+        from pactkit.profiles import get_registration
+
+        _ensure_entry_point_deployers()
+        assert get_registration("codex").profile is SPEC, (
+            "registry 里那份不是本仓声明的这个对象——说明还有第二个真相源"
+        )
+
+    def test_it_is_a_format_profile(self):
+        assert isinstance(SPEC, FormatProfile)
+
+    def test_it_is_frozen(self):
+        with pytest.raises(AttributeError):
+            SPEC.name = "modified"
+
+
+class TestThePathFacts:
+    """本宿主的目录布局——**实测值**，不是从 core 抄来的默认值。"""
+
+    @pytest.mark.parametrize(
+        "field,expected",
+        [
+            ("name", "codex"),
+            ("display_name", "Codex CLI"),
+            ("global_config_dir", "~/.codex"),
+            ("project_config_dir", ".codex"),
+            ("skills_dir", "~/.codex/skills"),
+            ("agents_dir", "~/.codex/agents"),
+            ("rules_dir", "~/.codex/rules"),
+            ("project_instructions_file", "AGENTS.md"),
+            ("pactkit_yaml_path", ".codex/pactkit.yaml"),
+            ("agent_format", "md"),
+            ("rules_import_style", "inline"),
+            ("skills_path_var", "~/.codex/skills"),
+        ],
+    )
+    def test_field(self, field, expected):
+        assert getattr(SPEC, field) == expected
+
+
+class TestTheMeasuredLayoutFact:
+    def test_commands_deploy_as_skills(self):
+        """**实测**（2026-09-22）：codex 的命令落在 `skills/{name}/SKILL.md`，
+        不是 `commands_dir` 指的 `~/.codex/prompts`（那个目录根本不存在）。
+
+        这一条是本仓最该守的布局事实之一：`commands_dir` 是一个**没人写的路径**，
+        把它当布局用会得到一份永远不会被发现的产物。
+        """
+        assert SPEC.command_deploy_form == "skill", (
+            "codex 的命令以 skill 形态落盘（adapter 自己的 docstring 与实测一致）；"
+            "改成 `flat`/`prompt` 会让产物落到一个没人读的目录"
+        )
+
+    def test_commands_dir_is_not_the_layout_fact(self):
+        """`commands_dir` 仍在（字段合法性），但它**不是**布局事实。"""
+        assert SPEC.commands_dir == "~/.codex/prompts"
+        assert SPEC.command_deploy_form != "flat", (
+            "若两者相等，说明有人把 `commands_dir` 当成了落盘位置"
+        )
+
+
+class TestTheCLIPolicy:
+    def test_codex_prefers_the_pactkit_cli(self):
+        assert SPEC.cli_policy is CLIPolicy.PREFERRED
+
+    def test_has_pactkit_cli_is_derived_from_the_policy(self):
+        assert SPEC.has_pactkit_cli is True
+
+
+class TestTheDeclaredDialects:
+    """codex 自带 writer、不调共享 API，所以方言字段**没有消费者**。
+
+    为了让表看起来完整而填 `"claude"`，就是造一条死通道。
+    """
+
+    @pytest.mark.parametrize("field", ["agent_dialect", "command_dialect"])
+    def test_it_declares_nothing(self, field):
+        assert getattr(SPEC, field) is None, (
+            f"{field} 被填了值——codex 不调共享 writer，这个值没有消费者"
+        )
+
+
+class TestTheLiveViewsSeeIt:
+    """core 的活视图（`VALID_FORMATS` / `PACTKIT_YAML_CANDIDATES`）在注册后
+    必须包含本宿主——**这是 core 的机制**，但只有本仓能把它端到端证明。"""
+
+    def test_it_is_in_valid_formats(self):
+        from pactkit.generators.deploy_base import _ensure_entry_point_deployers
+        from pactkit.profiles import VALID_FORMATS
+
+        _ensure_entry_point_deployers()
+        assert "codex" in VALID_FORMATS
+
+    def test_its_config_path_is_a_discovery_candidate(self):
+        from pactkit.generators.deploy_base import _ensure_entry_point_deployers
+        from pactkit.profiles import PACTKIT_YAML_CANDIDATES
+
+        _ensure_entry_point_deployers()
+        assert SPEC.pactkit_yaml_path in PACTKIT_YAML_CANDIDATES
+
+
+class TestTheContractHasTeeth:
+    """反证：改坏声明，上面必须有测试变红。
+
+    没有这一条，「搬过来了」只是两个仓各自为绿的巧合。
+    """
+
+    def test_the_profile_is_what_get_profile_answers(self):
+        """把本仓的声明换掉，`get_profile` 必须跟着变。
+
+        若它不变，说明 core 还留着一份——那正是「复制一份、core 还留一份」的形态。
+        """
+        import dataclasses
+
+        import pactkit_codex.declarations as decl
+        from pactkit.generators.deploy_base import _ensure_entry_point_deployers
+        from pactkit.profiles import get_registration, register_adapter
+
+        _ensure_entry_point_deployers()
+        broken = dataclasses.replace(SPEC, display_name="Not Codex")
+        register_adapter(
+            "codex",
+            deployer=get_registration("codex").deployer,
+            profile=broken,
+        )
+        try:
+            assert get_profile("codex").display_name == "Not Codex", (
+                "改掉本仓的声明后 get_profile 没变——core 侧还有第二份真相源"
+            )
+        finally:
+            register_adapter(
+                "codex",
+                deployer=get_registration("codex").deployer,
+                profile=decl.PROFILE,
+            )
+
+
+class TestTheCLIPolicyIsDeclaredHere:
+    """`cli_policy` 是**本宿主的**声明：它决定部署产物要不要依赖 PactKit CLI。
+
+    core 侧对应断言（`test_story_slim084.py::TestHasPactkitCli`）已随之删除。
+    """
+
+    def test_the_policy(self):
+        assert SPEC.cli_policy is CLIPolicy.PREFERRED
+
+    def test_has_pactkit_cli_is_derived(self):
+        assert SPEC.has_pactkit_cli is True