pactkit 3.0.4__tar.gz → 3.1.0__tar.gz

{pactkit-3.0.4 → pactkit-3.1.0}/.github/workflows/pactkit.yml

@@ -20,6 +20,17 @@ jobs:
         with:
           python-version: "3.11"
 
+      - name: Isolated environment
+        run: |
+          python -m venv "$RUNNER_TEMP/pactkit-venv"
+          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Verify the environment is isolated
+        run: |
+          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"
+          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"
+          python -c "import sys; print('isolated venv:', sys.prefix)"
+
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
@@ -31,4 +42,6 @@ jobs:
         run: ruff check src/ tests/
 
       - name: Test
+        env:
+          TMPDIR: ${{ runner.temp }}
         run: pytest tests/ -v

{pactkit-3.0.4 → pactkit-3.1.0}/.github/workflows/publish.yml

@@ -31,6 +31,17 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
+      - name: Isolated environment
+        run: |
+          python -m venv "$RUNNER_TEMP/pactkit-venv"
+          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Verify the environment is isolated
+        run: |
+          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"
+          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"
+          python -c "import sys; print('isolated venv:', sys.prefix)"
+
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
@@ -41,6 +52,8 @@ jobs:
         run: ruff check src/ tests/
 
       - name: Test
+        env:
+          TMPDIR: ${{ runner.temp }}
         run: pytest tests/ -q
 
   publish:
@@ -123,6 +136,17 @@ jobs:
         with:
           python-version: "3.12"
 
+      - name: Isolated environment
+        run: |
+          python -m venv "$RUNNER_TEMP/pactkit-venv"
+          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Verify the environment is isolated
+        run: |
+          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"
+          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"
+          python -c "import sys; print('isolated venv:', sys.prefix)"
+
       - name: Install build tools
         run: python -m pip install --upgrade pip build
 

{pactkit-3.0.4 → pactkit-3.1.0}/.github/workflows/release-acceptance.yml

@@ -96,6 +96,17 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
+      - name: Isolated environment
+        run: |
+          python -m venv "$RUNNER_TEMP/pactkit-venv"
+          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Verify the environment is isolated
+        run: |
+          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"
+          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"
+          python -c "import sys; print('isolated venv:', sys.prefix)"
+
       - name: Build the core wheel
         run: |
           python -m pip install --upgrade pip build
@@ -161,6 +172,12 @@ jobs:
       - name: Prompt-body snapshots from the wheel (AC10/R7)
         env:
           PACTKIT_SNAPSHOT_FROM_WHEEL: "1"
+          # The runner is persistent, so /tmp is shared across jobs: a pytest
+          # tmp_path under it can walk up into host markers an earlier job left
+          # behind. runner.temp is created and cleaned per job. Step-level, not
+          # workflow-level — the `runner` context is not available there and
+          # GitHub rejects the whole file for it.
+          TMPDIR: ${{ runner.temp }}
         run: |
           # Wheel mode: the deploy subprocesses must import the WHEEL — no
           # checkout PYTHONPATH, provenance asserted (site-packages origin),

{pactkit-3.0.4 → pactkit-3.1.0}/.secrets.baseline

@@ -190,10 +190,17 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "f434175bb54ac196cf0cabd4524e52dc0f237640",
+        "hashed_secret": "9977ec0af474652a0718f59cda74ebd52dabf867",
         "is_verified": false,
         "line_number": 7
       },
+      {
+        "type": "Hex High Entropy String",
+        "filename": "tests/fixtures/host_artifact_paths.json",
+        "hashed_secret": "0de79e48b3f9c3eee896340dc93579c8967365ed",
+        "is_verified": false,
+        "line_number": 8
+      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -743,7 +750,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "a35c3fe793c1079190440bbb8176a2a100e9dba1",
+        "hashed_secret": "c8db1cd10e7154d247dcccccff9bd5f663ae0850",
         "is_verified": false,
         "line_number": 380
       },
@@ -974,7 +981,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "63220164c8da47c31d823d689bd4614f9d4fe05b",
+        "hashed_secret": "08c72ddf82a1b305944879f9c85a26156b7d0752",
         "is_verified": false,
         "line_number": 552
       },
@@ -1090,13 +1097,6 @@
         "is_verified": false,
         "line_number": 583
       },
-      {
-        "type": "Hex High Entropy String",
-        "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "903a1eaf73466426692aea183cd095720567161d",
-        "is_verified": false,
-        "line_number": 635
-      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -1270,14 +1270,14 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "08145b119265b804229e8bbeb58eb31d5edaa5ca",
+        "hashed_secret": "c510a961f03bd3a362b5778aaac4871f9205ac9e",
         "is_verified": false,
         "line_number": 91
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "c36f1c3069789b9aafbf4767cdc107fcf686ca34",
+        "hashed_secret": "abafaa9fc05b3c1f88bbfdb63adce8bf932bd23a",
         "is_verified": false,
         "line_number": 92
       },
@@ -1867,14 +1867,14 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "7ebf38e7f76d350000bce0a0f95fc05515e7fc1f",
+        "hashed_secret": "d4f538dca3b066dd8e62810515e213bb0bab48fe",
         "is_verified": false,
         "line_number": 77
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "7168da3ffbbfd5ce0ca8a66b6deb759b87fe1fa3",
+        "hashed_secret": "1cb2b3d87efc40f51ae2548a6133c26870f724ce",
         "is_verified": false,
         "line_number": 78
       },
@@ -2310,14 +2310,14 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "4b0e4a8111be83bca59e6fe9071cd63c57c62379",
+        "hashed_secret": "f0df417a2b434474c55161005ccd65d1ac1f4b56",
         "is_verified": false,
         "line_number": 89
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "b35e97e6c3c2c3213e662a3fb35ede4f022f5612",
+        "hashed_secret": "a1d77e54caeeac3055373aab307bd02736d97952",
         "is_verified": false,
         "line_number": 90
       },
@@ -2943,14 +2943,14 @@
         "filename": "tests/unit/test_hotfix_slim20260916c4f2a9e6b013_gate_review.py",
         "hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b",
         "is_verified": false,
-        "line_number": 63
+        "line_number": 64
       },
       {
         "type": "Basic Auth Credentials",
         "filename": "tests/unit/test_hotfix_slim20260916c4f2a9e6b013_gate_review.py",
         "hashed_secret": "f3bbbd66a63d4bf1747940578ec3d0103530e21d",
         "is_verified": false,
-        "line_number": 184
+        "line_number": 234
       }
     ],
     "tests/unit/test_rule_diagnostics.py": [
@@ -3005,16 +3005,16 @@
         "filename": "tests/unit/test_story_slim146.py",
         "hashed_secret": "ec09a041656818107eb855453ffbf7327d3bbc9d",
         "is_verified": false,
-        "line_number": 141
+        "line_number": 149
       },
       {
         "type": "Secret Keyword",
         "filename": "tests/unit/test_story_slim146.py",
         "hashed_secret": "7e8c0470241a76be5c7ae9394a4d3d331fe1b04e",
         "is_verified": false,
-        "line_number": 143
+        "line_number": 151
       }
     ]
   },
-  "generated_at": "2026-09-23T16:02:34Z"
+  "generated_at": "2026-09-26T07:14:50Z"
 }

{pactkit-3.0.4 → pactkit-3.1.0}/CHANGELOG.md

@@ -1,5 +1,74 @@
 # Changelog
 
+## [3.1.0] - 2026-09-25
+
+**外部宿主的归属从 core 移到 adapter。** SPEC-4.0-22 Step 7：core 不再为
+opencode / codex / copilot 声明任何东西——profile、能力、pre-tool 面、部署
+声明、安全事实、线格式，全部由各自 adapter 自带并经 entry-point discovery
+注册。core 只保留它自己随包发布的 `classic`。
+
+**这是契约边界变更，不是内部重构**，所以是 minor 而不是 patch：宿主从
+「core 预置」变成「adapter 装上才出现」，过渡期的 API 与状态整体删除。
+
+**这不是 PactKit 4.0 的最终发布**——4.0 的 lifecycle closure 还在后面。
+
+### 升级编排（MUST 读）
+
+**adapter 与 core 必须共享 major.minor，四包在稳定态 lockstep 发布。**
+
+两条独立的锁表达同一件事：
+
+- 每个 adapter 钉 `pactkit>=X,<Y`；
+- `doctor.check_adapter_compat` 要求
+  `_major_minor(adapter) == _major_minor(core)`。
+
+所以**必须先升 adapter 到 3.1.0，再升 core 到 3.1.0**。反过来（core 先升）
+的实测后果是 pip 把 core **静默降级**回 3.0.4：
+
+    Attempting uninstall: pactkit
+      Uninstalling pactkit-3.1.0
+    Successfully installed pactkit-3.0.4
+
+而旧的 adapter 3.0.x 装到 core 3.1.0 上会在 import 期就失败——它们仍在类体里
+读 core 的 profile 表，而那张表已经不存在了。
+
+**兼容前提：adapter >= 3.1.0。** 过渡窗口里（adapter 3.1.0 + core 3.0.4）
+import 正常、注册正常，部署由 skew guard 明确拒绝，可用
+`--allow-adapter-skew` 显式放行——这是刻意选择的更轻的失败模式。
+
+### Removed
+
+- **core 侧的外部宿主声明** —— `FORMAT_PROFILES` 的三条外部宿主条目，
+  以及 `_CORE_CAPABILITIES` / `_CORE_PRETOOL_SURFACES` /
+  `_CORE_DEPLOYMENT_CLAIMS` / `_CORE_SECURITY` 的外部宿主行。四张表收窄为
+  `_BUILTIN_*`，只承载 core 自带宿主。
+- **`SOURCE_CORE_TRANSITIONAL`** 与 **`transitional_hosts()`** —— 过渡集合
+  已空，读数与来源标签一并删除。宿主现在只有一条到达路径：adapter 注册。
+- **`host_payloads.OPENCODE_INPUT`** 及其 import 时注册。它让 core 持有宿主
+  专属线格式；删除 seed 后，这一行在**没跑过 discovery 的进程里**抛
+  `UnknownAdapterError`，而门禁按 R3 自锁保护**放行**——即静默 fail-open。
+  线格式现在属于 `pactkit_opencode.declarations.INPUT_TRANSLATION`。
+
+### Changed
+
+- **`_seed_from_core` → `_seed_builtin`，且拒绝非 `core_bundled` 行。**
+  `FORMAT_PROFILES` 里出现一个没有 `core_bundled` 标记的宿主会在 import 期
+  报错，而不是悄悄成为第二处宿主声明。
+- **CLI 在构建 `argparse` 的 `choices` 之前先触发 discovery。**
+  `VALID_FORMATS` 是活视图，但 `choices` 只快照一次；没有这一步，
+  `pactkit init --format codex` 会被拒（实测）。
+- **配置发现顺序改为显式策略。** `_LiveYamlCandidates._CORE_ORDER` →
+  `_PREFERRED_ORDER`，并写明它是 core 对「宿主无法被识别时读哪份配置」的
+  优先级策略，不是对宿主的声明——所以它随 Step 7 保留，而宿主数据全部离开。
+- **`host_dispatch_ratchet` 改为 site-driven。** 旧判据问「这个字符串是不是
+  宿主名」，宿主名集来自 `FORMAT_PROFILES`；Step 7 把那张表收窄后，集合悄悄
+  塌成 `{classic}`，计数从 5 假降到 2——**代码一行没改**。新判据问「这个比较
+  的主语是不是 host identity」，不需要任何宿主名单。detector 只发现，
+  classification 层负责裁定；未裁定的点 fail-closed 计入主指标。
+  分类由两档增至三档：`host-dispatch` / `domain-value` /
+  `not-host-knowledge`。**主指标仍为 5，domain-value 仍为 2**——Step 7 没有
+  减少任何真实分派点。
+
 ## [3.0.4] - 2026-09-24
 
 **为 adapter 解锁的 core 依赖发布。** 本版把宿主描述数据从 core 的硬编码表

{pactkit-3.0.4 → pactkit-3.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pactkit
-Version: 3.0.4
+Version: 3.1.0
 Summary: Spec-driven agentic DevOps toolkit for AI coding assistants
 Project-URL: Homepage, https://pactkit.dev
 Project-URL: Repository, https://github.com/pactkit/pactkit-public
@@ -25,19 +25,19 @@ Requires-Dist: detect-secrets>=1.5.0
 Requires-Dist: pre-commit>=4.6.1
 Requires-Dist: pyyaml>=6.0
 Provides-Extra: all
-Requires-Dist: pactkit-codex<3.1.0,>=3.0.0; extra == 'all'
-Requires-Dist: pactkit-opencode<3.1.0,>=3.0.0; extra == 'all'
+Requires-Dist: pactkit-codex<3.2.0,>=3.1.0; extra == 'all'
+Requires-Dist: pactkit-opencode<3.2.0,>=3.1.0; extra == 'all'
 Requires-Dist: ruff>=0.4; extra == 'all'
 Requires-Dist: tree-sitter-go>=0.25; extra == 'all'
 Requires-Dist: tree-sitter-java>=0.23; extra == 'all'
 Requires-Dist: tree-sitter-typescript>=0.23; extra == 'all'
 Requires-Dist: tree-sitter>=0.25; extra == 'all'
 Provides-Extra: codex
-Requires-Dist: pactkit-codex<3.1.0,>=3.0.0; extra == 'codex'
+Requires-Dist: pactkit-codex<3.2.0,>=3.1.0; extra == 'codex'
 Provides-Extra: lint
 Requires-Dist: ruff>=0.4; extra == 'lint'
 Provides-Extra: opencode
-Requires-Dist: pactkit-opencode<3.1.0,>=3.0.0; extra == 'opencode'
+Requires-Dist: pactkit-opencode<3.2.0,>=3.1.0; extra == 'opencode'
 Provides-Extra: test
 Requires-Dist: pytest>=7; extra == 'test'
 Requires-Dist: tomli>=1.1.0; (python_version < '3.11') and extra == 'test'

{pactkit-3.0.4 → pactkit-3.1.0}/SECURITY.md

@@ -4,6 +4,7 @@
 
 | Version | Supported          |
 |---------|--------------------|
+| 3.1.x   | :white_check_mark: |
 | 3.0.x   | :white_check_mark: |
 | 2.27.x  | :white_check_mark: |
 | < 2.27  | :x:                |

{pactkit-3.0.4 → pactkit-3.1.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pactkit"
-version = "3.0.4"
+version = "3.1.0"
 description = "Spec-driven agentic DevOps toolkit for AI coding assistants"
 readme = "README.md"
 license = "MIT"
@@ -75,8 +75,8 @@ Issues = "https://github.com/pactkit/pactkit-public/issues"
 pactkit = "pactkit.cli:main"
 
 [project.optional-dependencies]
-opencode = ["pactkit-opencode>=3.0.0,<3.1.0"]
-codex = ["pactkit-codex>=3.0.0,<3.1.0"]
+opencode = ["pactkit-opencode>=3.1.0,<3.2.0"]
+codex = ["pactkit-codex>=3.1.0,<3.2.0"]
 visualize = [
     "tree-sitter>=0.25",
     "tree-sitter-go>=0.25",

{pactkit-3.0.4 → pactkit-3.1.0}/scripts/provision-self-hosted-runner.sh

@@ -54,6 +54,31 @@ sudo apt-get install -y -qq \
   gh jq graphviz zip unzip xz-utils \
   nodejs npm python3-venv python3-pip
 
+# ---------------------------------------------------------------------------
+# 1b. QEMU binfmt — the publish action is amd64-only
+# ---------------------------------------------------------------------------
+# `pypa/gh-action-pypi-publish` ships an amd64-only image, so the release job
+# runs it under emulation, which needs `qemu-x86_64` in binfmt_misc.
+#
+# The registration is NOT durable by itself. `systemd-binfmt` removes every
+# existing entry and re-registers only what is in /usr/lib/binfmt.d and
+# /etc/binfmt.d when it restarts — and any apt operation can trigger that.
+# Measured 2026-09-24: an `apt-get install python3-venv` wiped colima's
+# registration, and the release then died with
+#   exec /app/twine-upload.sh: exec format error
+# on a runner that had done nothing wrong. It looked like an arch problem and
+# was really a "someone ran apt" problem.
+#
+# qemu-user-static ships those /usr/lib/binfmt.d entries, so installing it makes
+# the registration survive the next systemd-binfmt restart. Install it *before*
+# trusting any emulated container.
+say "installing qemu-user-static (binfmt for the amd64-only publish action)"
+sudo apt-get install -y -qq qemu-user-static
+if ! ls /proc/sys/fs/binfmt_misc/qemu-x86_64 >/dev/null 2>&1; then
+  echo "FATAL: qemu-x86_64 is not registered; the publish job cannot run its action." >&2
+  exit 1
+fi
+
 # ---------------------------------------------------------------------------
 # 2. The RUNPATH symlink — without this, setup-python's arm64 builds cannot run
 # ---------------------------------------------------------------------------
@@ -79,20 +104,26 @@ TOOL_CACHE="${RUNNER_TOOL_CACHE:-/opt/actions-runner/_work/_tool}"
 sudo ln -sfn "$TOOL_CACHE" /opt/hostedtoolcache
 
 # ---------------------------------------------------------------------------
-# 3. The runner itself
+# 3. The runner instances
 # ---------------------------------------------------------------------------
-if [[ ! -f "$RUNNER_DIR/run.sh" ]]; then
-  say "downloading the runner"
-  VER="$(curl -fsSL https://api.github.com/repos/actions/runner/releases/latest \
-    | jq -r .tag_name | sed 's/^v//')"
-  echo "  version $VER"
-  sudo mkdir -p "$RUNNER_DIR"
-  sudo chown "$(id -un):$(id -gn)" "$RUNNER_DIR"
-  curl -fsSL -o /tmp/runner.tar.gz \
-    "https://github.com/actions/runner/releases/download/v${VER}/actions-runner-linux-arm64-${VER}.tar.gz"
-  tar xzf /tmp/runner.tar.gz -C "$RUNNER_DIR"
-  rm -f /tmp/runner.tar.gz
-fi
+# WHY MORE THAN ONE, and why it is not a tuning knob:
+#
+# `publish.yml` gates the PyPI upload on release-acceptance having passed the
+# SAME commit — the publish job polls for that run and waits. On GitHub-hosted
+# runners every job gets its own machine, so the wait is free. One self-hosted
+# runner runs ONE job at a time, so the publish job held the only slot while
+# waiting for a run that could not start: a deadlock, not a slow queue.
+# Measured 2026-09-24 — publish sat 7 minutes with the tag's acceptance showing
+# `queued`, then died on an unrelated TLS timeout.
+#
+# actions/runner has no multi-job mode (`RUNNER_CONCURRENCY` appears nowhere in
+# the 2.337.0 binaries; `config.sh` has no such flag). The supported way to get
+# parallelism is more instances sharing a label. Two is the minimum that lets a
+# waiting job coexist with the job it waits for.
+RUNNER_COUNT="${RUNNER_COUNT:-2}"
+VER="$(curl -fsSL https://api.github.com/repos/actions/runner/releases/latest \
+  | jq -r .tag_name | sed 's/^v//')"
+echo "  runner version $VER, instances $RUNNER_COUNT"
 
 # .NET dependencies (libicu). The bundled script is the supported path.
 # Capture first, then test: `ldconfig -p | grep -q` under `set -o pipefail`
@@ -101,40 +132,76 @@ fi
 LIBS="$(ldconfig -p 2>/dev/null || true)"
 if [[ "$LIBS" != *libicu* ]]; then
   say "installing the runner's .NET dependencies"
+  sudo mkdir -p "$RUNNER_DIR" && sudo chown "$(id -un):$(id -gn)" "$RUNNER_DIR"
+  curl -fsSL -o /tmp/runner.tar.gz \
+    "https://github.com/actions/runner/releases/download/v${VER}/actions-runner-linux-arm64-${VER}.tar.gz"
+  tar xzf /tmp/runner.tar.gz -C "$RUNNER_DIR" && rm -f /tmp/runner.tar.gz
   ( cd "$RUNNER_DIR" && sudo ./bin/installdependencies.sh )
 fi
 
-if [[ ! -f "$RUNNER_DIR/.runner" ]]; then
-  say "registering the runner (reading the token from stdin)"
+# One registration token authorises several instances; mint one and read it
+# once, then reuse it. It is never an argument, so it stays out of argv and out
+# of shell history.
+NEED_TOKEN=0
+for i in $(seq 1 "$RUNNER_COUNT"); do
+  d="$RUNNER_DIR$([[ $i -eq 1 ]] && echo "" || echo "-$i")"
+  [[ -f "$d/.runner" ]] || NEED_TOKEN=1
+done
+TOKEN=""
+if [[ "$NEED_TOKEN" -eq 1 ]]; then
+  say "reading a registration token from stdin"
   read -r TOKEN
   if [[ -z "${TOKEN:-}" ]]; then
-    echo "FATAL: no registration token on stdin and no runner configured yet." >&2
-    echo "  gh api -X POST ${ORG_URL/https:\/\/github.com}/actions/runners/registration-token --jq .token" >&2
+    echo "FATAL: instances are unregistered and no token arrived on stdin." >&2
+    echo "  gh api -X POST /orgs/pactkit/actions/runners/registration-token --jq .token" >&2
     exit 1
   fi
-  ( cd "$RUNNER_DIR" && ./config.sh \
-      --url "$ORG_URL" --token "$TOKEN" --unattended --replace \
-      --name "$RUNNER_NAME" --labels "$RUNNER_LABELS" \
-      --work "$RUNNER_DIR/_work" )
-  unset TOKEN
-else
-  say "runner already configured — skipping registration"
 fi
 
+for i in $(seq 1 "$RUNNER_COUNT"); do
+  if [[ $i -eq 1 ]]; then
+    d="$RUNNER_DIR"; name="$RUNNER_NAME"
+  else
+    d="$RUNNER_DIR-$i"; name="$RUNNER_NAME-$i"
+  fi
+  say "instance $i: $name"
+  if [[ ! -f "$d/run.sh" ]]; then
+    sudo mkdir -p "$d" && sudo chown "$(id -un):$(id -gn)" "$d"
+    curl -fsSL -o /tmp/runner.tar.gz \
+      "https://github.com/actions/runner/releases/download/v${VER}/actions-runner-linux-arm64-${VER}.tar.gz"
+    tar xzf /tmp/runner.tar.gz -C "$d" && rm -f /tmp/runner.tar.gz
+  fi
+  if [[ ! -f "$d/.runner" ]]; then
+    ( cd "$d" && ./config.sh \
+        --url "$ORG_URL" --token "$TOKEN" --unattended --replace \
+        --name "$name" --labels "$RUNNER_LABELS" --work "$d/_work" )
+  else
+    echo "  already registered"
+  fi
+done
+unset TOKEN
+
 # ---------------------------------------------------------------------------
 # 4. Supervision
 # ---------------------------------------------------------------------------
 # svc.sh writes a systemd unit and `enable`s it, so the chain survives a host
 # reboot: launchd starts colima, the VM boots, systemd starts the runner.
-say "installing the systemd service"
+say "installing the systemd services"
 # Test the unit file directly rather than piping `systemctl list-unit-files`
 # into `grep -q` — see the libicu note above for why that idiom misfires here.
-UNIT="/etc/systemd/system/actions.runner.pactkit.${RUNNER_NAME}.service"
-if [[ ! -f "$UNIT" ]]; then
-  ( cd "$RUNNER_DIR" && sudo ./svc.sh install "$(id -un)" )
-fi
-sudo systemctl enable "actions.runner.pactkit.${RUNNER_NAME}.service" >/dev/null 2>&1 || true
-sudo systemctl restart "actions.runner.pactkit.${RUNNER_NAME}.service"
+for i in $(seq 1 "$RUNNER_COUNT"); do
+  if [[ $i -eq 1 ]]; then
+    d="$RUNNER_DIR"; name="$RUNNER_NAME"
+  else
+    d="$RUNNER_DIR-$i"; name="$RUNNER_NAME-$i"
+  fi
+  UNIT="/etc/systemd/system/actions.runner.pactkit.${name}.service"
+  if [[ ! -f "$UNIT" ]]; then
+    ( cd "$d" && sudo ./svc.sh install "$(id -un)" )
+  fi
+  sudo systemctl enable "actions.runner.pactkit.${name}.service" >/dev/null 2>&1 || true
+  sudo systemctl restart "actions.runner.pactkit.${name}.service"
+done
 sleep 3
 
 # ---------------------------------------------------------------------------

{pactkit-3.0.4 → pactkit-3.1.0}/src/pactkit/__init__.py

@@ -1,3 +1,3 @@
 """PactKit - Spec-driven agentic DevOps toolkit."""
 
-__version__ = "3.0.4"
+__version__ = "3.1.0"

{pactkit-3.0.4 → pactkit-3.1.0}/src/pactkit/cli.py

@@ -216,6 +216,31 @@ def _run_deploy_command(args, project_root):
             print(f"\n{report}")
 
 def _main():
+    # Force the entry-point adapters to load **before** the parser is built.
+    #
+    # `VALID_FORMATS` is a live view over the registry, but `argparse` snapshots
+    # `choices` once, here.  Until Step 7 that was invisible: Core seeded every
+    # host at `profiles` import, so the registry already held all four by the
+    # time this ran.  With the seed gone the snapshot became "whichever hosts
+    # happened to be registered", and `pactkit init --format codex` was refused
+    # with `invalid choice: 'codex'` — measured 2026-09-24.
+    #
+    # This is the same fix, for the same reason, as `gate_matrix.
+    # _available_env_formats` and `commit_gate._load_adapter_channels`: the
+    # answer must not depend on whether something already deployed in this
+    # process.  It is deliberately not a static format table — putting the
+    # external hosts back into one would undo Step 7 to hide the symptom.
+    #
+    # A broken adapter must not make the CLI unusable, so this is best-effort:
+    # the hosts it fails to load are simply absent from `choices`, which is the
+    # honest answer for an adapter that cannot be imported.
+    try:
+        from pactkit.generators.deployer import _ensure_entry_point_deployers
+
+        _ensure_entry_point_deployers()
+    except Exception:  # noqa: BLE001 - see above
+        pass
+
     parser = argparse.ArgumentParser(
         prog="pactkit",
         description="PactKit — Spec-driven agentic DevOps toolkit",

{pactkit-3.0.4 → pactkit-3.1.0}/src/pactkit/doctor.py

@@ -861,7 +861,7 @@ class _DeployProbePaths(Sequence[str]):
     **registry order**, so `{root}/.codex` and `{root}/.github` swap places.
     The old order matched no derivable rule; preserving it would have meant
     keeping a Host-name ordering list with no stated meaning — unlike
-    `profiles._LiveYamlCandidates._CORE_ORDER`, which encodes a documented
+    `profiles._LiveYamlCandidates._PREFERRED_ORDER`, which encodes a documented
     fallback precedence.  Nothing depends on it: `check_deploy_parity` dedupes
     by resolved path and checks every root, `rule_diagnostics` breaks on the
     first hit into a single boolean, and `accept_candidates` sums per root.

{pactkit-3.0.4 → pactkit-3.1.0}/src/pactkit/generators/deployer.py

@@ -1467,6 +1467,34 @@ def _build_github_workflow(stack, ci_config, lang_profile, is_ghe=False, *, conf
         for key, val in ci_prof["extra_setup"].items():
             lines.append(f"          {key}: {val}")
     lines.append("")
+    # Isolated environment (2026-09-26).  A hosted runner gives every job a
+    # fresh VM, so the interpreter `setup-python` selects is nobody else's.  A
+    # **persistent self-hosted** runner gives every job the *same* toolcache
+    # interpreter, and then every sibling job's `pip install` lands in its
+    # site-packages.  Measured on `slimmini` that day: all eight toolcache
+    # interpreters carried stray editable adapters at three different versions,
+    # so a core-only job saw `codex 3.0.5` + `opencode 3.1.0` and no copilot —
+    # a half-equipped environment produced entirely by *other* jobs.
+    #
+    # `$GITHUB_PATH` is how the venv wins, and the mechanism is worth naming
+    # because it is not obvious: the runner stores entries in insertion order
+    # and then **reverses** them before joining
+    # (`Handler.AddPrependPathToEnvironment`), so the last writer ends up first
+    # on PATH — and this step runs after `setup-python`.
+    lines.append("      - name: Isolated environment")
+    lines.append("        run: |")
+    lines.append('          python -m venv "$RUNNER_TEMP/pactkit-venv"')
+    lines.append('          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"')
+    lines.append("")
+    # Asserted, not assumed: a future change to the step order would put the
+    # shared interpreter back in front, and every later step would look like it
+    # passed while measuring the runner's leftovers.
+    lines.append("      - name: Verify the environment is isolated")
+    lines.append("        run: |")
+    lines.append('          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"')
+    lines.append('          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"')
+    lines.append("          python -c \"import sys; print('isolated venv:', sys.prefix)\"")
+    lines.append("")
     install_cmd = commands["install_cmd"]
     lines.append("      - name: Install dependencies")
     _emit_run(lines, install_cmd)
@@ -1475,6 +1503,13 @@ def _build_github_workflow(stack, ci_config, lang_profile, is_ghe=False, *, conf
     _emit_run(lines, commands["lint_command"])
     lines.append("")
     lines.append("      - name: Test")
+    # `TMPDIR` pinned to the runner's per-job temp dir: a hosted runner's /tmp is
+    # a fresh VM per run, but a persistent self-hosted one shares it, and a
+    # pytest `tmp_path` under it can walk up into a previous job's host markers
+    # (measured 2026-09-24). Step-level — the `runner` context is not available
+    # in a workflow-level `env`, and GitHub rejects the whole file for it.
+    lines.append("        env:")
+    lines.append("          TMPDIR: ${{ runner.temp }}")
     _emit_run(lines, commands["test_cmd"])
     lines.append("")