pactkit 3.0.1__tar.gz → 3.0.2__tar.gz

{pactkit-3.0.1 → pactkit-3.0.2}/.secrets.baseline

@@ -163,7 +163,7 @@
         "filename": "src/pactkit/secrets_gate.py",
         "hashed_secret": "c6c68ad178f71722871ba9c5d95e6fbf4f35d451",
         "is_verified": false,
-        "line_number": 18
+        "line_number": 21
       }
     ],
     "tests/e2e/test_precommit_chain_e2e.py": [
@@ -179,14 +179,14 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "11fc76cf728aee220c411e7691ad264ebd676a9c",
+        "hashed_secret": "506f67f48397b7092236283b1a7b0d590bf8e88f",
         "is_verified": false,
         "line_number": 91
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "49c28d024002761c42663e368200c192ec460f17",
+        "hashed_secret": "f7c354ae4c8ddc07a200fcdfc94a0974140c2211",
         "is_verified": false,
         "line_number": 92
       },
@@ -200,7 +200,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "d7a6615371ec4c18be084a36e7bd83d5cf7ca15b",
+        "hashed_secret": "eeb8b860f0b6e78bebbbf37717b93a8d55d417cb",
         "is_verified": false,
         "line_number": 94
       },
@@ -214,7 +214,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "361eca2d155fc00028f1106dbe848d256a55b122",
+        "hashed_secret": "a2fe90c8d6c99e56cb0212ffea11bc1dbeaeae2a",
         "is_verified": false,
         "line_number": 96
       },
@@ -235,7 +235,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "fa1f3584dbfa9948a4a6c274b056975a327887bf",
+        "hashed_secret": "b92eba3e30858b849d0801426e7b01b9cfa3a747",
         "is_verified": false,
         "line_number": 99
       },
@@ -620,7 +620,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "715cfc286a1beabe880cfe2d3e44603bb5f6b0fe",
+        "hashed_secret": "341fc5b3c89ff7f27c87c2ee192c37d7587c4fe5",
         "is_verified": false,
         "line_number": 154
       },
@@ -776,14 +776,14 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "2e6ff44db758f28c06ce2ae104a433579e39a482",
+        "hashed_secret": "6d22449b1bdf7de2c6992ca0bfd4624ebe8d7768",
         "is_verified": false,
         "line_number": 77
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "af6e7b846d56a06ed79ad840dd0d3a9b2a6dc8cc",
+        "hashed_secret": "6c46df2058f7e212e6b0b1fe7ebcc141f9242892",
         "is_verified": false,
         "line_number": 78
       },
@@ -846,7 +846,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "9b84defdf4e8bdf657c4370359740e6453cd0c42",
+        "hashed_secret": "00fd418794700120a39aed612bff9058b826560f",
         "is_verified": false,
         "line_number": 87
       },
@@ -1219,14 +1219,14 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "b0ca798b65dcc9c2a5592128770fa2799f29930b",
+        "hashed_secret": "632f52375bb666804906470c030e43b26c4e93fe",
         "is_verified": false,
         "line_number": 89
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "c86b312cfe667cd25c00ecd44fad4669ddecbef9",
+        "hashed_secret": "c0e94f7f5abac0466ef5c957a722bed6cecdf3ce",
         "is_verified": false,
         "line_number": 90
       },
@@ -1240,7 +1240,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "2980a3c2cba6a8b508a9c1fae462a3405ae50f9c",
+        "hashed_secret": "57267900c850de620dd8792d7d07b7ffd9580194",
         "is_verified": false,
         "line_number": 92
       },
@@ -1254,7 +1254,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "429ce3e7c80b9be1deb8ae97f11e16c4cdec42aa",
+        "hashed_secret": "7002535ddf4ec5cbba08a4bf81eaecf8b30b7608",
         "is_verified": false,
         "line_number": 94
       },
@@ -1275,7 +1275,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "c337e55ac7d8f1a426aa63265d3f8e39fa6c45c2",
+        "hashed_secret": "c4be1de01d9ad027b68874be451b989321997486",
         "is_verified": false,
         "line_number": 97
       },
@@ -1744,7 +1744,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "e29565b4d5fb78a1e7ee3dd911fd2bc7dcf1e7ea",
+        "hashed_secret": "ec46a806ebd7d11f480c018074f096ddea8a9931",
         "is_verified": false,
         "line_number": 164
       },

{pactkit-3.0.1 → pactkit-3.0.2}/CHANGELOG.md

@@ -1,5 +1,52 @@
 # Changelog
 
+## [3.0.2] - 2026-09-21
+
+**两条 CRITICAL 门禁修复。** 如果你用 PactKit 发过版，或者照着拦截文案
+尝试过人工旁路，这一版值得升级。
+
+### Fixed
+
+- **发布门禁可以在一个测试都没跑的情况下报 PASS。** Pre-Tag Gate 的
+  "Run tests" 那行指向的是 `pactkit regression`——它是个**分类器**，
+  在 SKIP / IMPACT 两条路径上都 exit 0。于是紧跟其后的
+  "If either fails" 永远不会因为测试而触发。现在该行指向真正的测试运行器，
+  并显式标注 `pactkit regression` 只做分类。
+
+- **人工旁路文案给出的形式做不到。** 拦截消息曾建议
+  `PACTKIT_ALLOW_SECRET=1 <command>` 这类内联前缀。实测：旁路判据读的是
+  **钩子进程自己的**环境变量，而 PreToolUse 钩子在命令执行**之前**由宿主
+  以会话环境启动——内联变量只作用于子进程，**结构性到不了**。照文案做会
+  被继续拦下，命令一次都没跑起来。
+
+  现在全部出口经由单一渲染器 `bypass_message.human_channel()` 产出，按
+  「面」分别说清：PreToolUse 面（内联做不到，请在会话外终端执行、或会话
+  启动前 export）与 git hook 面（终端里 `VAR=1 git <cmd>` **可以**，git
+  会把它传给自己的 hook）。两个面机制不同，不再一概而论。
+
+- **`pactkit doctor` 的两个表面会对同一棵树给出相反结论。** text 模式
+  exit 1、JSON 模式 exit 0。现在两处共用同一个 verdict 来源。
+
+- **`done-verify` 把通配符当成声明文件。** `_real_path` 只挡花括号是它自己
+  规则的不完整实现，现在通配符同样被拒。
+
+- **audit 的「有测试吗」判定靠猜文件名**，产生 40 个假阴性与一批垃圾任务。
+  现在改用图证据（调用边 ∪ 导入边 ∪ 命名约定）三级阶梯，40 个假阴性清零。
+
+### Added
+
+- **`pactkit evidence-measure`**：把「范围完整性」与「变异验证（negative
+  control）」从散文变成可执行的测量。negative control 同时控住三件事——
+  变异前基线必须绿、每个文件跑完必须还原、只把退出码 1 算抓到——缺任何
+  一件都会产出 false pass。
+- **R8/R9 两条 MUST 接上 `delivery_evidence`**，从散文变成 code touchpoint。
+
+### Notes
+
+- 升级无需任何动作：`pip install -U pactkit && pactkit update`。
+- `pactkit snapshot` 在有图的项目上行为不变；无图时会明确说明「没有可快照
+  的图」而不是报一个 ✅（MMD 机器图已退役，无图是正常状态）。
+
 ## [3.0.1] - 2026-09-19
 
 分发收口 + 门禁修复。plugin/marketplace 通道整体退役，分发只剩 pip；

{pactkit-3.0.1 → pactkit-3.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pactkit
-Version: 3.0.1
+Version: 3.0.2
 Summary: Spec-driven agentic DevOps toolkit for AI coding assistants
 Project-URL: Homepage, https://pactkit.dev
 Project-URL: Repository, https://github.com/pactkit/pactkit-public
@@ -65,7 +65,7 @@ Description-Content-Type: text/markdown
 
 > **PactKit** (Pact 契约 + Kit) is a lightweight dev-enablement scaffold: it gives AI coding assistants the standards, specs and methods of a disciplined engineering workflow, without getting in the way. Ordinary questions and ordinary coding never activate the workflow — you opt in per task. There is no admin plane, no central control, and nothing that cannot be uninstalled.
 >
-> Deterministic operations run as code, not prompts (CODE is the Law). Decisions are grounded in data, not memory (Data is the Truth). 56 CLI subcommands, 9 specialized agents, 12 commands, 25 skills, and a Plan-Act-Check-Done lifecycle you invoke when you want it. One `pip install` deploys to all 4 supported IDEs (adapters are opt-in extras).
+> Deterministic operations run as code, not prompts (CODE is the Law). Decisions are grounded in data, not memory (Data is the Truth). 57 CLI subcommands, 9 specialized agents, 12 commands, 25 skills, and a Plan-Act-Check-Done lifecycle you invoke when you want it. One `pip install` deploys to all 4 supported IDEs (adapters are opt-in extras).
 
 ### Supported AI Tools
 
@@ -322,7 +322,7 @@ skills, so `/project-plan` and `pactkit-visualize` deploy the same way) plus the
 
 ## CLI Subcommands
 
-PactKit ships 56 deterministic CLI subcommands — operations that were previously delegated to AI prompts are now enforced in Python code (the "C" in P.A.C.T.):
+PactKit ships 57 deterministic CLI subcommands — operations that were previously delegated to AI prompts are now enforced in Python code (the "C" in P.A.C.T.):
 
 | Command | Purpose |
 |---------|---------|
@@ -352,7 +352,8 @@ PactKit ships 56 deterministic CLI subcommands — operations that were previous
 | `pactkit lesson-append` | Append lesson with specificity check and dedup |
 | `pactkit invariants-refresh` | Update test count invariant in rules.md |
 | `pactkit sec-scope` | Detect security scope for changed files |
-| `pactkit backfill-release` | Replace Release: TBD in completed specs |
+| `pactkit backfill-release` | Replace Release: TBD/Unreleased in completed specs |
+| `pactkit evidence-measure` | Measure scope integrity (R8) and negative control (R9) — the explicit half of the ADR-0006 evidence touchpoint |
 | `pactkit issue-sync` | GitHub issue lifecycle for BUG/HOTFIX items |
 | `pactkit lint-context` | Validate context.md structure |
 | `pactkit lint-lessons` | Validate lessons.md structure |

{pactkit-3.0.1 → pactkit-3.0.2}/README.md

@@ -13,7 +13,7 @@
 
 > **PactKit** (Pact 契约 + Kit) is a lightweight dev-enablement scaffold: it gives AI coding assistants the standards, specs and methods of a disciplined engineering workflow, without getting in the way. Ordinary questions and ordinary coding never activate the workflow — you opt in per task. There is no admin plane, no central control, and nothing that cannot be uninstalled.
 >
-> Deterministic operations run as code, not prompts (CODE is the Law). Decisions are grounded in data, not memory (Data is the Truth). 56 CLI subcommands, 9 specialized agents, 12 commands, 25 skills, and a Plan-Act-Check-Done lifecycle you invoke when you want it. One `pip install` deploys to all 4 supported IDEs (adapters are opt-in extras).
+> Deterministic operations run as code, not prompts (CODE is the Law). Decisions are grounded in data, not memory (Data is the Truth). 57 CLI subcommands, 9 specialized agents, 12 commands, 25 skills, and a Plan-Act-Check-Done lifecycle you invoke when you want it. One `pip install` deploys to all 4 supported IDEs (adapters are opt-in extras).
 
 ### Supported AI Tools
 
@@ -270,7 +270,7 @@ skills, so `/project-plan` and `pactkit-visualize` deploy the same way) plus the
 
 ## CLI Subcommands
 
-PactKit ships 56 deterministic CLI subcommands — operations that were previously delegated to AI prompts are now enforced in Python code (the "C" in P.A.C.T.):
+PactKit ships 57 deterministic CLI subcommands — operations that were previously delegated to AI prompts are now enforced in Python code (the "C" in P.A.C.T.):
 
 | Command | Purpose |
 |---------|---------|
@@ -300,7 +300,8 @@ PactKit ships 56 deterministic CLI subcommands — operations that were previous
 | `pactkit lesson-append` | Append lesson with specificity check and dedup |
 | `pactkit invariants-refresh` | Update test count invariant in rules.md |
 | `pactkit sec-scope` | Detect security scope for changed files |
-| `pactkit backfill-release` | Replace Release: TBD in completed specs |
+| `pactkit backfill-release` | Replace Release: TBD/Unreleased in completed specs |
+| `pactkit evidence-measure` | Measure scope integrity (R8) and negative control (R9) — the explicit half of the ADR-0006 evidence touchpoint |
 | `pactkit issue-sync` | GitHub issue lifecycle for BUG/HOTFIX items |
 | `pactkit lint-context` | Validate context.md structure |
 | `pactkit lint-lessons` | Validate lessons.md structure |

pactkit-3.0.2/docs/architecture/governance/adr/ADR-0009-measured-evidence-and-declared-evidence-must-be.md

@@ -0,0 +1,71 @@
+# ADR-0009-measured-evidence-and-declared-evidence-must-be: Measured evidence and declared evidence must be distinguishable
+
+| Field | Value |
+|-------|-------|
+| ID | ADR-0009-measured-evidence-and-declared-evidence-must-be |
+| Status | accepted |
+| Date | 2026-09-20 |
+| Supersedes | None |
+| Superseded-by | None |
+
+## Context
+
+ADR-0006 决定「验证证据由 code touchpoint 盖章，不是剧本步骤」，理由是实测的
+执行率落差：**「希望模型记得跑」的步骤遵循率趋近于零，「不跑就过不去」的关卡 100%**。
+它把 `regression --record` 从 Act 剧本搬进了 commit gate。
+
+但那个决定只覆盖了一个案例。`STORY-slim-202608268fc379dbe6ef`（2026-08-26）的
+**R8 Scope Integrity** 与 **R9 Test Adequacy** 两条 MUST 从未得到同样处理——它们
+的执行方式只写成了散文，配套的 `delivery_evidence.py` 从引入起零调用方（实测：
+`src/` 零调用、prompts 零引用、`git log -S` 只有引入那一个 commit）。而该模块的
+docstring 写着「used by Act, Check and Done」。
+
+接线时遇到一个 ADR-0006 没回答的问题：**R9 的五个信号里只有一个是机械可导出的。**
+`negative_control_fails`（把实现中和掉，测试还过不过）可以测；`behavior_assertions`、
+`defect_reproduced`、`boundary_or_failure_paths`、`mocks_cross_core_boundary` 在原理上
+需要语义判断，只能由 agent 声明。
+
+于是出现一个诱人的捷径：**把 agent 自报的布尔值一起收进「代码盖章」的证据里。**
+这样做会让每个信号看起来都经过验证——而 ADR-0006 的整个前提就是自报不可信。
+
+## Options Considered
+
+- **只接机械信号，自报信号不进代码路径**：最保守。代价是四个信号从此没有任何
+  记录位置，判据散落在各处，且无法回答「这次检查到底做了没有」。
+- **自报与测量混在一个块里，靠字段名区分**：实现最省事。代价是消费者必须读文档
+  才知道哪个字段可信——而「读文档才知道」正是本 ADR 要消除的东西。任何只看
+  `verified: true` 的消费者都会把自报读成测量。
+- **自报与测量结构上分开，自报带显式来源标签**：多一层结构，但**不可能被误读**。
+  自报仍然是记录在案的（可审计、可追问），只是永远不产生「已验证」结论。
+
+## Decision
+
+采用第三种。证据记录分为两个结构上分离的块：
+
+- `measured` —— 只放 code touchpoint **观测到的**东西（scope integrity 的越界路径、
+  negative control 的 pass/fail/not-measured）。只有它能支撑「已验证」。
+- `declared` —— agent 声明的信号，每条带 `provenance: "declared"`，**结构上不参与**
+  `measured` 的结论。它可审计、可追问，但不被呈现为验证。
+
+配套约束：
+
+- **缺证据不等于通过**。测不了时记 `not-measured` + 原因，不得 fail-open 成「已验证」；
+  同时沿用模块既有语义——`completion_ready=False` 但 `can_continue=True`，
+  缺证据使完成声明不完整，绝不锁死阅读、诊断、修复。
+- **不制造第二套实现**。`assess_evidence_freshness` 已被 `regression._fingerprint`
+  取代（后者更具体，且带 review-5 故障注入加固），保留但标注 superseded，
+  不得两套并存。
+
+## Consequences
+
+- 消费者不需要读文档就能分辨「测到的」与「声称的」——结构本身承载这个区分。
+- 四个自报信号仍然没有被测量，这一点现在是**显式**的而不是隐含的。这是本决定的
+  主要代价，也是它的要点：**承认测不了，好过假装测了**。
+- 新增 `pactkit evidence-measure` 子命令作为 R8/R9 的 touchpoint；`record_verification`
+  增加可选的 `evidence` 字段（仅在测量真的跑过时写入，既有记录形状不变）。
+- 实现期间发现 `spec_graph._parse_touches` 只按 ASCII 逗号切分，而中文 spec 用顿号
+  `、`——88 个有 Touches 行的 spec 里 15 个因此被解析成一个畸形条目，静默使
+  `spec_linter` 的 E011 与 scope integrity 双双空转。已修（同批）。
+- **本决定不覆盖**：如何为四个自报信号建立测量层。若将来要做（例如用静态分析
+  近似 `behavior_assertions`），按同样原则——能测的进 `measured`，测不了的留在
+  `declared`，不得为了「看起来更完整」而模糊这条线。