pactkit 2.25.0__tar.gz → 2.25.1__tar.gz

{pactkit-2.25.0 → pactkit-2.25.1}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [2.25.1] - 2026-09-01
+
+### Fixed
+- **`pactkit gate authorize <scope>` parses as documented** — 2.25.0's parser accepted only the bare positional form (`pactkit gate <scope>`), so the form printed by every block message and the L1 Override Protocol failed with "unrecognized arguments"; both forms now parse (HOTFIX-slim-20260830bbb5bc219d35).
+- **Cross-repo commands are judged by the repo they operate on** — `cd <other-repo> && git push` was evaluated against the session cwd's enforcement config; `hook_entry` now resolves the last `cd` target before the git command and evaluates gates against that repository (HOTFIX-slim-20260830bbb5bc219d35).
+- **commit-gate no longer misfires on docs/meta-only commits** — three defects that blocked a zero-code design-baseline commit three times and forced test-writing before allowing it (HOTFIX-slim-20260901469666ef23a8): `.gitignore`/`.claude/**`/`.codex/**` are now doc-only (repo/agent metadata carries no runtime code and no longer disqualifies the change set from the skip path); the full-suite target falls back from `tests/unit/` to `tests/` when only a flat layout exists, and a zero-collected run reports "no tests collected" instead of implying failures (still RED — the TDD contract is unchanged); "No module named pytest" from the venv-less fallback interpreter raises `GateUnavailable` → WARN + allow, matching the missing-binary path (R3 self-lock protection).
+
 ## [2.25.0] - 2026-08-30
 
 ### Added

{pactkit-2.25.0 → pactkit-2.25.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pactkit
-Version: 2.25.0
+Version: 2.25.1
 Summary: Spec-driven agentic DevOps toolkit for AI coding assistants
 Project-URL: Homepage, https://pactkit.dev
 Project-URL: Repository, https://github.com/pactkit/pactkit-public
@@ -280,7 +280,7 @@ PactKit deploys 10 skills (3 scripted + 7 prompt-only), auto-invoked by commands
 
 ## CLI Subcommands
 
-PactKit ships 36 deterministic CLI subcommands — operations that were previously delegated to AI prompts are now enforced in Python code (the "C" in P.A.C.T.):
+PactKit ships 45 deterministic CLI subcommands — operations that were previously delegated to AI prompts are now enforced in Python code (the "C" in P.A.C.T.):
 
 | Command | Purpose |
 |---------|---------|
@@ -312,11 +312,27 @@ PactKit ships 36 deterministic CLI subcommands — operations that were previous
 | `pactkit lint-lessons` | Validate lessons.md structure |
 | `pactkit lint-testcase` | Validate test case structure |
 | `pactkit done-verify` | Archive honesty gate: requirement→test evidence chain, checkbox↔case consistency, status machine (blocks `/project-done` on FAIL) |
-| `pactkit commit-gate` | Pre-commit test gate with skip≠pass transparency; PreToolUse hook + git pre-commit channels, auto-installed per format |
+| `pactkit commit-gate` | Pre-commit test gate with skip≠pass transparency; stack-aware (pytest/npm test/go test/mvn/gradle); PreToolUse hook + git pre-commit/pre-push channels, auto-installed per format |
+| `pactkit gate` | Session context hooks (`--hook session-start/pre-compact`) + external-effect authorization (`pactkit gate <scope> [--ttl-minutes N]`) |
 | `pactkit deps` | External dependency check (`deps check`) and guided install (`deps install`) for node/codegraph/gh |
 | `pactkit schema config` | List every pactkit.yaml key with default, effective value, and source |
 | `pactkit sync` | Sync codegraph index |
 
+### Enforcement Gates (2.25.0)
+
+The hook layer enforces the rules prompt text can only state — protected branches, specs, credentials, and external effects survive a conflicting instruction instead of losing to it:
+
+| Gate | Blocks | Bypass (human/config only) |
+|------|--------|---------------------------|
+| `push_gate` | Direct push to a protected branch (default `main`/`master`) | `PACTKIT_ALLOW_DIRECT_PUSH=1` or `enforcement.allow_direct_push` |
+| `commit_gate` | Commits on protected branches (default) and RED test suites | same as push_gate; `develop` keeps the full-suite rule |
+| `spec_guard` | Editing a spec that has an active preflight receipt (Spec is Law during Act) | `PACTKIT_ALLOW_SPEC_EDIT=1` or `pactkit gate spec_edit` |
+| `auth_gate` | External-effect commands (PR/release/publish/repo) until the user confirms | `pactkit gate <scope>` TTL token or `PACTKIT_AUTHORIZED=1` |
+| `secrets_gate` | Literal credential material in commands (env-var indirection is exempt) | `PACTKIT_ALLOW_SECRET=1` |
+| `tamper_guard` | Modifying enforcement artifacts (hooks, gate registrations, audit records) | `PACTKIT_ALLOW_CONFIG_EDIT=1` |
+
+All blocks/bypasses are audited (`.pactkit/enforcement/`) and feed `pactkit stats` as gate telemetry (per-gate block counts, per-command invocation counts, authorization pairs) — the friction data that decides what to tune next.
+
 ## Deployment Architecture
 
 PactKit supports three deployment formats:

{pactkit-2.25.0 → pactkit-2.25.1}/README.md

@@ -235,7 +235,7 @@ PactKit deploys 10 skills (3 scripted + 7 prompt-only), auto-invoked by commands
 
 ## CLI Subcommands
 
-PactKit ships 36 deterministic CLI subcommands — operations that were previously delegated to AI prompts are now enforced in Python code (the "C" in P.A.C.T.):
+PactKit ships 45 deterministic CLI subcommands — operations that were previously delegated to AI prompts are now enforced in Python code (the "C" in P.A.C.T.):
 
 | Command | Purpose |
 |---------|---------|
@@ -267,11 +267,27 @@ PactKit ships 36 deterministic CLI subcommands — operations that were previous
 | `pactkit lint-lessons` | Validate lessons.md structure |
 | `pactkit lint-testcase` | Validate test case structure |
 | `pactkit done-verify` | Archive honesty gate: requirement→test evidence chain, checkbox↔case consistency, status machine (blocks `/project-done` on FAIL) |
-| `pactkit commit-gate` | Pre-commit test gate with skip≠pass transparency; PreToolUse hook + git pre-commit channels, auto-installed per format |
+| `pactkit commit-gate` | Pre-commit test gate with skip≠pass transparency; stack-aware (pytest/npm test/go test/mvn/gradle); PreToolUse hook + git pre-commit/pre-push channels, auto-installed per format |
+| `pactkit gate` | Session context hooks (`--hook session-start/pre-compact`) + external-effect authorization (`pactkit gate <scope> [--ttl-minutes N]`) |
 | `pactkit deps` | External dependency check (`deps check`) and guided install (`deps install`) for node/codegraph/gh |
 | `pactkit schema config` | List every pactkit.yaml key with default, effective value, and source |
 | `pactkit sync` | Sync codegraph index |
 
+### Enforcement Gates (2.25.0)
+
+The hook layer enforces the rules prompt text can only state — protected branches, specs, credentials, and external effects survive a conflicting instruction instead of losing to it:
+
+| Gate | Blocks | Bypass (human/config only) |
+|------|--------|---------------------------|
+| `push_gate` | Direct push to a protected branch (default `main`/`master`) | `PACTKIT_ALLOW_DIRECT_PUSH=1` or `enforcement.allow_direct_push` |
+| `commit_gate` | Commits on protected branches (default) and RED test suites | same as push_gate; `develop` keeps the full-suite rule |
+| `spec_guard` | Editing a spec that has an active preflight receipt (Spec is Law during Act) | `PACTKIT_ALLOW_SPEC_EDIT=1` or `pactkit gate spec_edit` |
+| `auth_gate` | External-effect commands (PR/release/publish/repo) until the user confirms | `pactkit gate <scope>` TTL token or `PACTKIT_AUTHORIZED=1` |
+| `secrets_gate` | Literal credential material in commands (env-var indirection is exempt) | `PACTKIT_ALLOW_SECRET=1` |
+| `tamper_guard` | Modifying enforcement artifacts (hooks, gate registrations, audit records) | `PACTKIT_ALLOW_CONFIG_EDIT=1` |
+
+All blocks/bypasses are audited (`.pactkit/enforcement/`) and feed `pactkit stats` as gate telemetry (per-gate block counts, per-command invocation counts, authorization pairs) — the friction data that decides what to tune next.
+
 ## Deployment Architecture
 
 PactKit supports three deployment formats:

pactkit-2.25.1/docs/product/stories/HOTFIX-slim-20260830bbb5bc219d35.yaml

@@ -0,0 +1,19 @@
+schema_version: 1
+id: HOTFIX-slim-20260830bbb5bc219d35
+title: gate CLI syntax + push-gate cross-repo root
+spec_path: docs/specs/HOTFIX-slim-20260830bbb5bc219d35.md
+status: archived
+tasks:
+- id: task-28c4e1d550
+  title: Accept authorize keyword in gate CLI
+  completed: true
+- id: task-f5de85695c
+  title: Resolve cd-target repo in hook_entry
+  completed: true
+- id: task-0764566491
+  title: Focused tests + golden refresh
+  completed: true
+created_at: '2026-08-30T04:48:13+00:00'
+updated_at: '2026-09-01T09:06:16+00:00'
+completed_at: '2026-08-30T04:52:32+00:00'
+archived_at: '2026-09-01T09:06:16+00:00'

pactkit-2.25.1/docs/product/stories/HOTFIX-slim-20260901469666ef23a8.yaml

@@ -0,0 +1,16 @@
+schema_version: 1
+id: HOTFIX-slim-20260901469666ef23a8
+title: commit-gate misfires on docs/meta-only commits
+spec_path: docs/specs/HOTFIX-slim-20260901469666ef23a8.md
+status: archived
+tasks:
+- id: task-b98663e6af
+  title: 'Fix three defects: doc-only patterns miss repo meta files (.gitignore/.claude/.codex);
+    full-suite target hard-codes tests/unit/ with no tests/ fallback and counts exit
+    4/5 as RED; missing pytest module (pipx fallback) reads as RED instead of GateUnavailable.
+    From harness-backend 2026-09-01 friction.'
+  completed: true
+created_at: '2026-09-01T08:29:59+00:00'
+updated_at: '2026-09-01T09:06:16+00:00'
+completed_at: '2026-09-01T08:50:16+00:00'
+archived_at: '2026-09-01T09:06:16+00:00'

pactkit-2.25.1/docs/specs/HOTFIX-slim-20260830bbb5bc219d35.md

@@ -0,0 +1,42 @@
+# HOTFIX-slim-20260830bbb5bc219d35: gate CLI syntax mismatch + push-gate cross-repo blind spot
+
+| Field | Value |
+|-------|-------|
+| ID | HOTFIX-slim-20260830bbb5bc219d35 |
+| Status | Done |
+| Priority | P1 |
+| Release | 2.25.1 |
+
+## Background
+
+Two defects surfaced during the 2.25.0 release run (post-tag, so they
+ship in 2.25.1):
+
+1. **auth-gate teaches a CLI form that does not exist.** The block
+   message (and the L1 Override Protocol prompt text, and
+   critical-rules.md on the user's machine) instructs
+   `pactkit gate authorize <scope>` — but the `gate` parser accepts only
+   the bare positional `pactkit gate <scope>`. The documented form fails
+   with "unrecognized arguments". Unit tests call `auth_gate.authorize()`
+   directly, so the CLI layer was never exercised. Every internal user
+   hits this on their first external-effect command.
+2. **push-gate evaluates the wrong repository for cross-repo commands.**
+   `cd ~/other-repo && git push` is judged against the SESSION cwd's
+   enforcement config (payload `cwd`), not the target repo's — observed
+   live when the plugin-repo push was allowed by pactkit's own
+   `allow_direct_push: true` although the plugin repo has no config.
+
+## Fix
+
+1. `cli.py`: `gate` accepts both `pactkit gate authorize <scope>` and
+   `pactkit gate <scope>` (positional `scope` becomes `nargs="*"`; an
+   `authorize` keyword is normalized away). Help text documents both.
+   All existing message/prompt text becomes correct as-is.
+2. `commit_gate.py`: `_command_root()` resolves the last `cd <dir>`
+   prefix target in the command (absolute, or relative to the payload
+   root; non-dirs ignored) and `hook_entry` evaluates gates against that
+   root — a `cd`-prefixed command is judged by the repo it operates on.
+
+Verification: focused unit tests for both behaviors + full suite +
+regenerated `gate.txt` help golden. Push to main only; no release, no
+version bump, no adapter/plugin/site sync (deferred to 2.25.1).

pactkit-2.25.1/docs/specs/HOTFIX-slim-20260901469666ef23a8.md

@@ -0,0 +1,55 @@
+# HOTFIX-slim-20260901469666ef23a8: commit-gate misfires on docs/meta-only commits
+
+| Field | Value |
+|-------|-------|
+| ID | HOTFIX-slim-20260901469666ef23a8 |
+| Status | Done |
+| Priority | P1 |
+| Release | 2.25.1 |
+
+## Background
+
+A zero-code design-baseline commit (harness-backend root commit,
+2026-09-01) was blocked three times by the commit gate with "FULL —
+impact mapping empty — full unit suite (safe default)" and finally
+forced the agent to write tests, move them to `tests/unit/`, and
+bootstrap a venv before the commit went through. Three defects
+conspired, each violating the gate's own documented intent:
+
+1. **Repo meta files break doc-only classification.** `.gitignore` and
+   `.claude/settings.json` carry no runtime code, yet they disqualify
+   the whole change set from the doc-only skip
+   (`regression.py` `_DOC_ONLY_PATTERNS`), contradicting the module's
+   own "doc-only — safe to skip tests" contract.
+2. **"Repo has no tests" is treated as "tests failed".** The full
+   strategy hard-codes `tests/unit/`; a repo whose tests live at
+   `tests/` (or that has none yet) yields exit 4/5, and `run_gate`
+   counts any nonzero returncode as RED — converting "nothing to
+   verify" into "write tests before any commit".
+3. **Missing pytest module reads as RED, not unavailable.** With no
+   project venv, `pytest_command` falls back to the pipx interpreter;
+   `python -m pytest` exits 1 with "No module named pytest", which
+   `run_gate` reports as failing tests. This violates R3 self-lock
+   protection (a gate that cannot run must WARN and allow) and is
+   inconsistent with the existing `FileNotFoundError` → WARN path for
+   a missing pytest binary.
+
+## Fix
+
+1. `regression.py`: `_DOC_ONLY_PATTERNS` gains `.gitignore`,
+   `.claude/**`, `.codex/**` — agent/repo metadata with no runtime
+   code. Tamper guard is a separate channel and is unaffected.
+2. `commit_gate.py run_pytest`: the full-suite target falls back from
+   `tests/unit/` to `tests/` when only the latter exists, so a
+   non-convention suite is still run instead of erroring. A repo with
+   no tests at all keeps the RED verdict — the TDD contract ("code
+   changes require tests") is untouched, but the verdict message now
+   says "no tests collected" instead of implying failures.
+3. `commit_gate.py run_pytest`: output containing "No module named
+   pytest" raises `GateUnavailable` → WARN + allow, matching the
+   missing-binary path (R3).
+
+Out of scope (unchanged): trunk full-suite rule, protected-branch
+block rule, tamper guard, secrets gate.
+
+Verification: focused unit tests for all three behaviors + full suite.

{pactkit-2.25.0 → pactkit-2.25.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pactkit"
-version = "2.25.0"
+version = "2.25.1"
 description = "Spec-driven agentic DevOps toolkit for AI coding assistants"
 readme = "README.md"
 license = "MIT"

{pactkit-2.25.0 → pactkit-2.25.1}/src/pactkit/__init__.py

@@ -1,3 +1,3 @@
 """PactKit - Spec-driven agentic DevOps toolkit."""
 
-__version__ = "2.25.0"
+__version__ = "2.25.1"

{pactkit-2.25.0 → pactkit-2.25.1}/src/pactkit/cli.py

@@ -597,8 +597,9 @@ def main():
         help="Hook mode: read hook JSON context from stdin (SessionStart/PreCompact)",
     )
     gate_parser.add_argument(
-        "scope", nargs="?", default=None,
-        help="Authorize a scope (pr|release|repo|publish|spec_edit) for the TTL window",
+        "scope", nargs="*", default=None,
+        help="Authorize a scope (pr|release|repo|publish|spec_edit) for the TTL window. "
+        "Both `pactkit gate authorize <scope>` and `pactkit gate <scope>` work.",
     )
     gate_parser.add_argument(
         "--ttl-minutes", type=int, default=None,
@@ -1651,7 +1652,16 @@ def main():
         if args.scope:
             from pactkit.auth_gate import authorize
 
-            print(authorize(project_root, args.scope, args.ttl_minutes))
+            # HOTFIX-slim-20260830bbb5bc219d35: the gate messages and the
+            # L1 Override Protocol document `pactkit gate authorize <scope>`;
+            # accept the keyword form alongside the bare positional form.
+            tokens = list(args.scope)
+            if tokens and tokens[0] == "authorize":
+                tokens = tokens[1:]
+            if len(tokens) != 1:
+                parser.error("gate: authorize takes exactly one scope "
+                             "(pr|release|repo|publish|spec_edit)")
+            print(authorize(project_root, tokens[0], args.ttl_minutes))
             raise SystemExit(0)
 
         parser.error("gate: --hook or a scope (authorize) is required")

{pactkit-2.25.0 → pactkit-2.25.1}/src/pactkit/commit_gate.py

@@ -142,6 +142,15 @@ def run_pytest(root: Path, test_files: list[str] | None) -> tuple[int, str]:
     selection is a Python-only capability).  An unresolvable stack raises
     GateUnavailable so run_gate degrades to WARN + allow instead of
     running a wrong-suite command.
+
+    HOTFIX-slim-20260901469666ef23a8: the full-suite target falls back
+    from ``tests/unit/`` to ``tests/`` when only the latter exists, so a
+    flat-layout suite still runs instead of erroring with exit 4; a repo
+    with no tests directory keeps the convention target.  "No module
+    named pytest" (e.g. the pipx fallback interpreter without pytest)
+    raises GateUnavailable — an unusable toolchain is an environment
+    failure (R3 WARN + allow), not a RED verdict, matching the
+    missing-binary FileNotFoundError path.
     """
     from pactkit.utils import stack_test_command
 
@@ -153,8 +162,10 @@ def run_pytest(root: Path, test_files: list[str] | None) -> tuple[int, str]:
         cmd = [*_pytest_command(root), "-rs", "-q"]
         if test_files:
             cmd.extend(test_files)
+        elif (root / "tests").is_dir() and not (root / "tests" / "unit").is_dir():
+            cmd.append("tests/")  # flat layout: run the suite that exists
         else:
-            cmd.append("tests/unit/")
+            cmd.append("tests/unit/")  # convention target
     else:
         cmd = list(base_cmd)  # full suite; test-file selection ignored
     env = os.environ.copy()
@@ -165,7 +176,16 @@ def run_pytest(root: Path, test_files: list[str] | None) -> tuple[int, str]:
             cmd, cwd=root, capture_output=True, text=True,
             timeout=PYTEST_TIMEOUT_SECONDS, env=env,
         )
-        return proc.returncode, proc.stdout + proc.stderr
+        output = proc.stdout + proc.stderr
+        # Only pytest's own absence counts: a failing test may legitimately
+        # print "No module named <something>" without the toolchain being broken.
+        if proc.returncode != 0 and re.search(
+            r"no module named ['\"]?pytest\b", output.lower()
+        ):
+            raise GateUnavailable(
+                f"pytest not importable via {cmd[0]} — create the project venv"
+            )
+        return proc.returncode, output
     except FileNotFoundError:
         raise GateUnavailable("pytest not found")
     except subprocess.TimeoutExpired:
@@ -402,14 +422,34 @@ def run_gate(root: Path) -> GateResult:
             result.lines.extend(f"  {line}" for line in summary["skip_reasons"][:20])
 
         if returncode != 0:
-            result.lines.append("[FAIL] tests are RED — commit blocked (R5: fix is yours, not the gate's)")
-            tail = [ln for ln in output.splitlines() if ln.startswith(("FAILED", "ERROR"))][:10]
-            result.lines.extend(f"  {ln}" for ln in tail)
+            collected = (
+                summary["passed"] + summary["failed"]
+                + summary["skipped"] + summary["errors"]
+            )
+            if collected == 0:
+                # HOTFIX-slim-20260901469666ef23a8: exit 4/5 means nothing
+                # ran — say so instead of implying failures. Still RED: a
+                # change that reaches the gate needs a suite to verify it
+                # (docs/meta-only changes skip via classification instead).
+                result.lines.append(
+                    "[FAIL] no tests collected — treated as RED (code changes "
+                    "require tests; docs/meta-only changes skip via classification)"
+                )
+                tail = [ln for ln in output.splitlines() if ln.startswith(("ERROR",))][:10]
+                result.lines.extend(f"  {ln}" for ln in tail)
+            else:
+                result.lines.append("[FAIL] tests are RED — commit blocked (R5: fix is yours, not the gate's)")
+                tail = [ln for ln in output.splitlines() if ln.startswith(("FAILED", "ERROR"))][:10]
+                result.lines.extend(f"  {ln}" for ln in tail)
             result.exit_code = 1
             from pactkit.run_events import record_gate_event
 
             record_gate_event(root, "gate_blocked", {
-                "gate": "commit_gate", "reason": "tests RED — commit blocked",
+                "gate": "commit_gate",
+                "reason": (
+                    "no tests collected — treated as RED"
+                    if collected == 0 else "tests RED — commit blocked"
+                ),
             })
         record_status(root, "commit_gate", FULL, "")
         return result
@@ -431,6 +471,29 @@ def run_gate(root: Path) -> GateResult:
         return result
 
 
+# HOTFIX-slim-20260830bbb5bc219d35: a `cd <dir> && git push` targets
+# <dir>'s repository, not the session cwd — gates must evaluate the
+# TARGET repo's enforcement config.  Match `cd` at command start or after
+# a shell separator; the last cd before the git command wins.
+_CD_TARGET_RE = re.compile(r"(?:^|&&|;|\|\|)\s*cd\s+([^\s;&|]+)")
+
+
+def _command_root(command: str, session_root: Path) -> Path:
+    """Directory a shell command actually operates in (last cd target).
+
+    Relative targets resolve against the session root; a target that is
+    not a directory falls back to the session root (never misroute, never
+    crash on odd cd usage like `cd -`).
+    """
+    targets = _CD_TARGET_RE.findall(command)
+    if not targets:
+        return session_root
+    target = Path(targets[-1]).expanduser()
+    if not target.is_absolute():
+        target = session_root / target
+    return target if target.is_dir() else session_root
+
+
 def hook_entry(stdin_text: str, root: Path) -> tuple[str, int]:
     """PreToolUse hook mode. Returns (stderr_message, exit_code).
 
@@ -486,6 +549,11 @@ def hook_entry(stdin_text: str, root: Path) -> tuple[str, int]:
     else:
         command = str(raw_command)
 
+    # HOTFIX-slim-20260830bbb5bc219d35: evaluate gates against the repo the
+    # command actually operates in (`cd <other-repo> && git push`), not
+    # blindly against the session cwd.
+    root = _command_root(command, root)
+
     # L1 secrets scan runs on every Bash command, whatever it is
     from pactkit.secrets_gate import check_command as check_secrets
 

{pactkit-2.25.0 → pactkit-2.25.1}/src/pactkit/regression.py

@@ -7,11 +7,17 @@ from __future__ import annotations
 import fnmatch
 
 # Files that match these patterns are considered "doc-only" — safe to skip tests.
+# HOTFIX-slim-20260901469666ef23a8: repo/agent metadata (.gitignore,
+# .claude/**, .codex/**) carries no runtime code — a design-baseline or
+# governance commit containing them must not lose the doc-only skip.
 _DOC_ONLY_PATTERNS: tuple[str, ...] = (
     "docs/**",
     "*.md",
     "README*",
     "*.txt",
+    ".gitignore",
+    ".claude/**",
+    ".codex/**",
 )
 # tests/** is deliberately NOT doc-only: a commit that modifies tests must
 # run them (STORY-slim-20260826ce35b77ce005 R5).

{pactkit-2.25.0 → pactkit-2.25.1}/tests/fixtures/cli_help_golden/gate.txt

@@ -1,10 +1,11 @@
 usage: pactkit gate [-h] [--hook {session-start,pre-compact}]
                     [--ttl-minutes TTL_MINUTES]
-                    [scope]
+                    [scope ...]
 
 positional arguments:
   scope                 Authorize a scope (pr|release|repo|publish|spec_edit)
-                        for the TTL window
+                        for the TTL window. Both `pactkit gate authorize
+                        <scope>` and `pactkit gate <scope>` work.
 
 options:
   -h, --help            show this help message and exit

pactkit-2.25.1/tests/unit/test_hotfix_20260830_gate_cli.py

@@ -0,0 +1,164 @@
+"""HOTFIX-slim-20260830bbb5bc219d35: gate CLI syntax + cross-repo push root.
+
+Two defects from the 2.25.0 release run:
+  1. auth-gate's documented `pactkit gate authorize <scope>` failed —
+     the parser only accepted the bare positional form.
+  2. push-gate judged `cd <other-repo> && git push` by the SESSION cwd's
+     enforcement config instead of the target repo's.
+"""
+
+import json
+from pathlib import Path
+
+import pytest
+
+from pactkit import commit_gate
+from pactkit.commit_gate import hook_entry
+
+
+@pytest.fixture
+def repo(tmp_path, monkeypatch):
+    (tmp_path / ".git" / "hooks").mkdir(parents=True)
+    monkeypatch.setattr(
+        commit_gate,
+        "_enforcement_settings",
+        lambda root: {
+            "protected_branches": ["main", "master"],
+            "allow_direct_push": False,
+            "tamper_guard": True,
+            "spec_guard": True,
+            "auth_gate": True,
+            "secrets_gate": True,
+            "auth_ttl_minutes": 30,
+        },
+    )
+    return tmp_path
+
+
+def _payload(command, cwd=None):
+    payload = {"tool_name": "Bash", "tool_input": {"command": command}}
+    if cwd:
+        payload["cwd"] = str(cwd)
+    return json.dumps(payload)
+
+
+# ===========================================================================
+# Fix 1: gate CLI accepts the documented `authorize <scope>` form
+# ===========================================================================
+
+
+class TestGateCliSyntax:
+    def _run_cli(self, argv, tmp_path):
+        import sys
+
+        from pactkit.cli import main
+
+        # the CLI requires an init marker before dispatching any command
+        marker = tmp_path / ".claude" / "pactkit.yaml"
+        marker.parent.mkdir(exist_ok=True)
+        marker.write_text("stack: python\n", encoding="utf-8")
+
+        old_argv = sys.argv
+        sys.argv = ["pactkit", "-C", str(tmp_path), "gate", *argv]
+        try:
+            main()
+        except SystemExit as exc:
+            return exc.code
+        finally:
+            sys.argv = old_argv
+        return 0
+
+    def test_authorize_keyword_form(self, tmp_path, capsys):
+        code = self._run_cli(["authorize", "release", "--ttl-minutes", "5"], tmp_path)
+        assert code in (0, None)
+        token = json.loads(
+            (tmp_path / ".pactkit" / "enforcement" / "authorization.json").read_text()
+        )
+        assert token["scope"] == "release"
+        assert "authorized" in capsys.readouterr().out
+
+    def test_bare_scope_form_still_works(self, tmp_path, capsys):
+        code = self._run_cli(["release", "--ttl-minutes", "5"], tmp_path)
+        assert code in (0, None)
+        token = json.loads(
+            (tmp_path / ".pactkit" / "enforcement" / "authorization.json").read_text()
+        )
+        assert token["scope"] == "release"
+
+    def test_authorize_without_scope_errors(self, tmp_path):
+        code = self._run_cli(["authorize"], tmp_path)
+        assert code not in (0, None)
+
+
+# ===========================================================================
+# Fix 2: push-gate evaluates the command's target repo
+# ===========================================================================
+
+
+class TestCrossRepoPushRoot:
+    def test_cd_to_strict_repo_blocks(self, repo, tmp_path_factory, monkeypatch):
+        """Target repo has default (protective) config; session repo allows."""
+        other = tmp_path_factory.mktemp("other-repo")
+        (other / ".git" / "hooks").mkdir(parents=True)
+        monkeypatch.setattr(
+            commit_gate,
+            "_enforcement_settings",
+            lambda root: (
+                {"protected_branches": ["main"], "allow_direct_push": True,
+                 "tamper_guard": False, "spec_guard": True, "auth_gate": True,
+                 "secrets_gate": True, "auth_ttl_minutes": 30}
+                if Path(root) == Path(repo)
+                else {"protected_branches": ["main", "master"],
+                      "allow_direct_push": False, "tamper_guard": True,
+                      "spec_guard": True, "auth_gate": True,
+                      "secrets_gate": True, "auth_ttl_minutes": 30}
+            ),
+        )
+        monkeypatch.setattr(commit_gate, "current_branch",
+                            lambda root: "main" if Path(root) == Path(other) else "feature/x")
+        monkeypatch.setattr(commit_gate, "run_pytest", lambda root, tf: (0, "1 passed"))
+
+        _, code = hook_entry(
+            _payload(f"cd {other} && git push origin main", cwd=repo), repo
+        )
+        assert code == 2  # judged by the TARGET repo's protective config
+
+    def test_cd_to_permissive_repo_allows(self, repo, tmp_path_factory, monkeypatch):
+        """Target repo allows direct push; session repo is protective."""
+        other = tmp_path_factory.mktemp("other-repo")
+        (other / ".git" / "hooks").mkdir(parents=True)
+        monkeypatch.setattr(
+            commit_gate,
+            "_enforcement_settings",
+            lambda root: (
+                {"protected_branches": ["main"], "allow_direct_push": True,
+                 "tamper_guard": False, "spec_guard": True, "auth_gate": True,
+                 "secrets_gate": True, "auth_ttl_minutes": 30}
+                if Path(root) == Path(other)
+                else {"protected_branches": ["main", "master"],
+                      "allow_direct_push": False, "tamper_guard": True,
+                      "spec_guard": True, "auth_gate": True,
+                      "secrets_gate": True, "auth_ttl_minutes": 30}
+            ),
+        )
+        monkeypatch.setattr(commit_gate, "current_branch",
+                            lambda root: "main" if Path(root) == Path(other) else "feature/x")
+
+        _, code = hook_entry(
+            _payload(f"cd {other} && git push origin main", cwd=repo), repo
+        )
+        assert code == 0
+
+    def test_relative_cd_resolved_against_session_root(self, repo, monkeypatch):
+        (repo / "sub" / ".git").mkdir(parents=True)
+        monkeypatch.setattr(commit_gate, "current_branch",
+                            lambda root: "main" if root.name == "sub" else "feature/x")
+        monkeypatch.setattr(commit_gate, "run_pytest", lambda root, tf: (0, "1 passed"))
+        _, code = hook_entry(_payload("cd sub && git push origin main", cwd=repo), repo)
+        assert code == 2
+
+    def test_cd_to_nonexistent_dir_falls_back_to_session_root(self, repo, monkeypatch):
+        """A cd that doesn't resolve must not crash or misroute."""
+        monkeypatch.setattr(commit_gate, "current_branch", lambda root: "feature/x")
+        _, code = hook_entry(_payload("cd /no/such/dir && git push origin feature/x", cwd=repo), repo)
+        assert code == 0  # feature branch in session root: allowed