pactkit 2.26.0__tar.gz → 2.26.1__tar.gz

{pactkit-2.26.0 → pactkit-2.26.1}/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [2.26.1] - 2026-09-15
+
+### Fixed
+- **deploy 不再因扫描根下的不可读目录崩溃**——`Path.exists()` 只吞 ENOENT/ENOTDIR/ELOOP，EACCES 会直接抛出；GitHub Ubuntu runner 的 `/tmp` 含 root 属主 0750 的 `systemd-private-*` 目录，中性 cwd 下 `deploy → cleaners.detect_stacks` 的子目录 marker 检查抛 `PermissionError`（pactkit-opencode 2.26.0 Release Acceptance 8 项失败、publish 被拒）。`cleaners.detect_stacks` 与 `utils.stack_test_plans/_issues` 的全部 marker 检查改为 OSError 安全版（一律视为无 marker）。
+
+
 ## [2.26.0] - 2026-09-15
 
 > 产品重定位版本：PactKit 收敛为**轻量开发赋能脚手架**——无管理员、无集中控制、

{pactkit-2.26.0 → pactkit-2.26.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pactkit
-Version: 2.26.0
+Version: 2.26.1
 Summary: Spec-driven agentic DevOps toolkit for AI coding assistants
 Project-URL: Homepage, https://pactkit.dev
 Project-URL: Repository, https://github.com/pactkit/pactkit-public

{pactkit-2.26.0 → pactkit-2.26.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pactkit"
-version = "2.26.0"
+version = "2.26.1"
 description = "Spec-driven agentic DevOps toolkit for AI coding assistants"
 readme = "README.md"
 license = "MIT"

{pactkit-2.26.0 → pactkit-2.26.1}/src/pactkit/__init__.py

@@ -1,3 +1,3 @@
 """PactKit - Spec-driven agentic DevOps toolkit."""
 
-__version__ = "2.26.0"
+__version__ = "2.26.1"

{pactkit-2.26.0 → pactkit-2.26.1}/src/pactkit/cleaners.py

@@ -36,6 +36,18 @@ def _inside_protected(path: Path, project_root: Path) -> bool:
     return bool(_PROTECTED_PARENTS & set(rel.parts[:-1]))
 
 
+def _marker_exists(path: Path) -> bool:
+    """Path.exists() that treats every OSError as "not there".
+
+    exists() only swallows ENOENT/ENOTDIR/ELOOP; EACCES from an unreadable
+    parent directory propagates and crashed deploy on GitHub runners whose
+    /tmp holds root-owned systemd-private-* directories."""
+    try:
+        return path.exists()
+    except OSError:
+        return False
+
+
 def detect_stacks(project_root: Path) -> list[str]:
     """Detect all project stacks from marker files.
 
@@ -45,19 +57,23 @@ def detect_stacks(project_root: Path) -> list[str]:
     """
     seen: set[str] = set()
     stacks: list[str] = []
-    # 1. Root-level scan
+    # Root-level scan.  _marker_exists treats EACCES/ENOTDIR like ENOENT:
+    # Path.exists() PROPAGATES PermissionError (only ENOENT/ENOTDIR/ELOOP
+    # are swallowed), and a root-owned 0750 directory under the scan root
+    # (GitHub runner /tmp/systemd-private-*) must read as "no marker", not
+    # crash the deploy (opencode v2.26.0 acceptance incident, 2026-09-15).
     for marker_file, stack in _STACK_MARKERS:
-        if (project_root / marker_file).exists() and stack not in seen:
+        if _marker_exists(project_root / marker_file) and stack not in seen:
             seen.add(stack)
             stacks.append(stack)
-    # 2. Depth-1 subdirectory scan (STORY-slim-077: monorepo support)
+    # Depth-1 subdirectory scan (STORY-slim-077: monorepo support)
     try:
         subdirs = [p for p in project_root.iterdir() if p.is_dir() and not p.name.startswith(".")]
     except OSError:
         subdirs = []
     for subdir in subdirs:
         for marker_file, stack in _STACK_MARKERS:
-            if (subdir / marker_file).exists() and stack not in seen:
+            if _marker_exists(subdir / marker_file) and stack not in seen:
                 seen.add(stack)
                 stacks.append(stack)
     return stacks if stacks else ["python"]

{pactkit-2.26.0 → pactkit-2.26.1}/src/pactkit/utils.py

@@ -64,6 +64,14 @@ def stack_test_command(root) -> tuple[str, list[str]] | None:
     return stack, argv
 
 
+def _marker_exists(path) -> bool:
+    """exists() that treats EACCES (unreadable parent) as "not there"."""
+    try:
+        return Path(path).exists()
+    except OSError:
+        return False
+
+
 def stack_test_plans(root) -> list[tuple[str, Path, list[str]]]:
     """Return every runnable test workspace in a polyglot repository.
 
@@ -91,11 +99,11 @@ def stack_test_plans(root) -> list[tuple[str, Path, list[str]]]:
             plans.append((stack, cwd, argv))
 
     for cwd in locations:
-        if any((cwd / marker).exists() for marker in ("pyproject.toml", "setup.py", "setup.cfg")):
+        if any(_marker_exists(cwd / marker) for marker in ("pyproject.toml", "setup.py", "setup.cfg")):
             add("python", cwd, pytest_command(cwd))
 
         package = cwd / "package.json"
-        if package.is_file():
+        if _marker_exists(package):
             try:
                 data = json.loads(package.read_text(encoding="utf-8"))
             except (OSError, json.JSONDecodeError):
@@ -112,20 +120,20 @@ def stack_test_plans(root) -> list[tuple[str, Path, list[str]]]:
                     argv = ["npm", "test", "--silent"]
                 add("node", cwd, argv)
 
-        if (cwd / "go.mod").exists():
+        if _marker_exists(cwd / "go.mod"):
             add("go", cwd, ["go", "test", "./..."])
 
-        if (cwd / "mvnw").exists():
+        if _marker_exists(cwd / "mvnw"):
             add("java", cwd, ["./mvnw", "-q", "test"])
-        elif (cwd / "pom.xml").exists():
+        elif _marker_exists(cwd / "pom.xml"):
             add("java", cwd, ["mvn", "-q", "test"])
-        elif (cwd / "gradlew").exists():
+        elif _marker_exists(cwd / "gradlew"):
             add("java", cwd, ["./gradlew", "-q", "test"])
-        elif (cwd / "build.gradle").exists() or (cwd / "build.gradle.kts").exists():
+        elif _marker_exists(cwd / "build.gradle") or _marker_exists(cwd / "build.gradle.kts"):
             add("java", cwd, ["gradle", "-q", "test"])
 
     if not plans and not any(
-        (cwd / marker).exists()
+        _marker_exists(cwd / marker)
         for cwd in locations
         for marker in ("package.json", "go.mod", "pom.xml", "build.gradle", "build.gradle.kts")
     ):
@@ -146,7 +154,7 @@ def stack_test_plan_issues(root) -> list[str]:
     issues: list[str] = []
     for cwd in locations:
         package = cwd / "package.json"
-        if not package.is_file():
+        if not _marker_exists(package):
             continue
         label = "." if cwd == root else str(cwd.relative_to(root))
         try:

{pactkit-2.26.0 → pactkit-2.26.1}/tests/fixtures/host_prompt_snapshots/classic.json

@@ -88,8 +88,8 @@
     "project/.claude/settings.json"
   ],
   "body_digests": {
-    "home/.claude/.pactkit-deployed.json": "12a4ec59eb63dab5e7e09da9737e0f7250b5693919823fcd6b555b53cc12864f",
-    "home/.claude/CLAUDE.md": "c6eda74a58cde5afe364e0e122db98b9b3fd82a1a51e6ba317a8871736541287",
+    "home/.claude/.pactkit-deployed.json": "4f153fbd076764cb5c4d4c9b47597a0a154dff30fa60667f1729bccb3f3666ae",
+    "home/.claude/CLAUDE.md": "ef797d4ee7bc7d173b4ba7f2e208e0032dcd15ca3064fc0435d2ee82894f5f07",
     "home/.claude/agents/code-explorer.md": "c2e7f592fda4c272a45608c511225e99d6bbde13e6fd0be11a6d03238aecb360",
     "home/.claude/agents/product-designer.md": "1f8050146eb8892947b4780db680fe9fe95896f07bb3e17ac5960743cb8d8fda",
     "home/.claude/agents/qa-engineer.md": "487a69e0a2331209bdbe9cc8eb39c83919a2aa189c9f50df898dad3ad6bc5d68",

{pactkit-2.26.0 → pactkit-2.26.1}/tests/fixtures/host_prompt_snapshots/codex.json

@@ -74,8 +74,8 @@
     "project/AGENTS.md"
   ],
   "body_digests": {
-    "home/.codex/.pactkit-deployed.json": "b44efe7445e2b37c5e9c76dd71da3b08920d986dae370ee08d13eefaa7d2cf21",
-    "home/.codex/AGENTS.md": "7609ad0b8b9c23dc5c1edce357db17d703c55b3f153bf33af297a8820d2e6167",
+    "home/.codex/.pactkit-deployed.json": "9e11ff9635f2c56044dc8286a13ccae3ff47c97e40548a81e87edd367e7a1285",
+    "home/.codex/AGENTS.md": "2b87741f788e14f502869f1b10932ca442b242fd7b8e597cf9845706c396c8d9",
     "home/.codex/rules/pactkit-runtime.md": "fd8a852e8b6d8dc71ee980fdce731bffbcd189bc2507b0813c26f4114d44f64b",
     "home/.codex/skills/.pactkit-command-manifest.json": "1b07525a6a8bde485c852409e9d5b197aafd97edf64e161ea339725d2c33bede",
     "home/.codex/skills/pactkit-analyze/SKILL.md": "61e170f41ac108606adc180e15007eaae84db5369a12e49b4ba0bed119b7e059",

{pactkit-2.26.0 → pactkit-2.26.1}/tests/fixtures/host_prompt_snapshots/opencode.json

@@ -86,8 +86,8 @@
     "project/AGENTS.md"
   ],
   "body_digests": {
-    "home/.config/opencode/.pactkit-deployed.json": "8adef6e6a6ccd560bdaf64c6f25e5fe7ac3e2c62253697ab4b8c9a8320200586",
-    "home/.config/opencode/AGENTS.md": "b22def52f9ad5fa5229890953ce62c4af01298fc48489db75b30d4d7da286fb5",
+    "home/.config/opencode/.pactkit-deployed.json": "68c6645863eb490706147e587ee623b728f414cddc628b6480db429111d0f6bd",
+    "home/.config/opencode/AGENTS.md": "0516a31222f73343b774815dd4be7e865b684d8a353cfbd67d0736176a85fad0",
     "home/.config/opencode/agents/code-explorer.md": "37f70e6591298036f4f9a31e7c32800afc75989929415a545c4219d3e9618a4c",
     "home/.config/opencode/agents/product-designer.md": "f26fdbae9346b6b0b8c60c271f95e5f7d4ddc60580e8a76886d958f2e735e21d",
     "home/.config/opencode/agents/qa-engineer.md": "a762da03d68820e99607e3b23270a9f831cd5ea65966de983b19842a17bfc1b2",

{pactkit-2.26.0 → pactkit-2.26.1}/tests/unit/test_story_slim20260915eaf18678ce23_commit_path.py

@@ -356,3 +356,43 @@ class TestStreamingTimeout:
 
         with pytest.raises(GateUnavailable):
             _run_streaming(["pytest"], Path("."), {})
+
+
+# ---------------------------------------------------------------------------
+# Hotfix 2026-09-15 (opencode v2.26.0 acceptance incident): Path.exists()
+# propagates EACCES — a root-owned 0750 dir under the scan root (GitHub
+# runner /tmp/systemd-private-*) crashed deploy via cleaners.detect_stacks.
+# ---------------------------------------------------------------------------
+class TestPermissionSafeScans:
+    def test_detect_stacks_tolerates_unreadable_subdir(self, tmp_path):
+        import os
+
+        from pactkit.cleaners import detect_stacks
+
+        locked = tmp_path / "systemd-private-x"
+        locked.mkdir()
+        (locked / "pyproject.toml").write_text("", encoding="utf-8")
+        locked.chmod(0)
+        try:
+            if os.geteuid() == 0:
+                pytest.skip("root reads mode-0 dirs — no EACCES to reproduce")
+            assert detect_stacks(tmp_path) == ["python"]
+        finally:
+            locked.chmod(0o755)
+
+    def test_stack_test_plans_tolerate_unreadable_subdir(self, tmp_path):
+        import os
+
+        from pactkit.utils import stack_test_plans
+
+        locked = tmp_path / "systemd-private-y"
+        locked.mkdir()
+        (locked / "package.json").write_text("{}", encoding="utf-8")
+        locked.chmod(0)
+        try:
+            if os.geteuid() == 0:
+                pytest.skip("root reads mode-0 dirs — no EACCES to reproduce")
+            plans = stack_test_plans(tmp_path)
+            assert all("systemd-private" not in str(cwd) for _, cwd, _ in plans)
+        finally:
+            locked.chmod(0o755)