pactkit 3.0.4__tar.gz → 4.0.0__tar.gz

{pactkit-3.0.4 → pactkit-4.0.0}/.github/workflows/pactkit.yml

@@ -20,6 +20,17 @@ jobs:
         with:
           python-version: "3.11"
 
+      - name: Isolated environment
+        run: |
+          python -m venv "$RUNNER_TEMP/pactkit-venv"
+          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Verify the environment is isolated
+        run: |
+          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"
+          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"
+          python -c "import sys; print('isolated venv:', sys.prefix)"
+
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
@@ -31,4 +42,6 @@ jobs:
         run: ruff check src/ tests/
 
       - name: Test
+        env:
+          TMPDIR: ${{ runner.temp }}
         run: pytest tests/ -v

{pactkit-3.0.4 → pactkit-4.0.0}/.github/workflows/publish.yml

@@ -31,6 +31,17 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
+      - name: Isolated environment
+        run: |
+          python -m venv "$RUNNER_TEMP/pactkit-venv"
+          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Verify the environment is isolated
+        run: |
+          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"
+          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"
+          python -c "import sys; print('isolated venv:', sys.prefix)"
+
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
@@ -41,6 +52,8 @@ jobs:
         run: ruff check src/ tests/
 
       - name: Test
+        env:
+          TMPDIR: ${{ runner.temp }}
         run: pytest tests/ -q
 
   publish:
@@ -123,6 +136,17 @@ jobs:
         with:
           python-version: "3.12"
 
+      - name: Isolated environment
+        run: |
+          python -m venv "$RUNNER_TEMP/pactkit-venv"
+          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Verify the environment is isolated
+        run: |
+          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"
+          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"
+          python -c "import sys; print('isolated venv:', sys.prefix)"
+
       - name: Install build tools
         run: python -m pip install --upgrade pip build
 

{pactkit-3.0.4 → pactkit-4.0.0}/.github/workflows/release-acceptance.yml

@@ -96,6 +96,17 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
 
+      - name: Isolated environment
+        run: |
+          python -m venv "$RUNNER_TEMP/pactkit-venv"
+          echo "$RUNNER_TEMP/pactkit-venv/bin" >> "$GITHUB_PATH"
+
+      - name: Verify the environment is isolated
+        run: |
+          test "$(command -v python)" = "$RUNNER_TEMP/pactkit-venv/bin/python"
+          test "$(command -v pip)" = "$RUNNER_TEMP/pactkit-venv/bin/pip"
+          python -c "import sys; print('isolated venv:', sys.prefix)"
+
       - name: Build the core wheel
         run: |
           python -m pip install --upgrade pip build
@@ -161,6 +172,12 @@ jobs:
       - name: Prompt-body snapshots from the wheel (AC10/R7)
         env:
           PACTKIT_SNAPSHOT_FROM_WHEEL: "1"
+          # The runner is persistent, so /tmp is shared across jobs: a pytest
+          # tmp_path under it can walk up into host markers an earlier job left
+          # behind. runner.temp is created and cleaned per job. Step-level, not
+          # workflow-level — the `runner` context is not available there and
+          # GitHub rejects the whole file for it.
+          TMPDIR: ${{ runner.temp }}
         run: |
           # Wheel mode: the deploy subprocesses must import the WHEEL — no
           # checkout PYTHONPATH, provenance asserted (site-packages origin),

{pactkit-3.0.4 → pactkit-4.0.0}/.secrets.baseline

@@ -136,15 +136,6 @@
         "line_number": 65
       }
     ],
-    "docs/architecture/graphs/class_graph.mmd": [
-      {
-        "type": "Base64 High Entropy String",
-        "filename": "docs/architecture/graphs/class_graph.mmd",
-        "hashed_secret": "1f4fddb18c4bc3feeb76c3fde85134e2991e0b7e",
-        "is_verified": false,
-        "line_number": 252
-      }
-    ],
     "docs/specs/STORY-slim-20260828897396a935ab.md": [
       {
         "type": "AWS Access Key",
@@ -190,7 +181,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "f434175bb54ac196cf0cabd4524e52dc0f237640",
+        "hashed_secret": "a5994eaed0a6069e4e858cece615943d4d851db5",
         "is_verified": false,
         "line_number": 7
       },
@@ -743,7 +734,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "a35c3fe793c1079190440bbb8176a2a100e9dba1",
+        "hashed_secret": "86bc90e8b5cf7fd911df5eb91a3ea18fef34da3b",
         "is_verified": false,
         "line_number": 380
       },
@@ -887,13 +878,6 @@
         "is_verified": false,
         "line_number": 453
       },
-      {
-        "type": "Hex High Entropy String",
-        "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "26e2cbb16c8c25e58b339cb24cdf45220684093d",
-        "is_verified": false,
-        "line_number": 454
-      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -974,7 +958,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "63220164c8da47c31d823d689bd4614f9d4fe05b",
+        "hashed_secret": "13d57d1a3632c09ba09725607afee063cb16eac6",
         "is_verified": false,
         "line_number": 552
       },
@@ -1093,7 +1077,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "903a1eaf73466426692aea183cd095720567161d",
+        "hashed_secret": "fec022c577e244da45c84829c4aed6697cda7a24",
         "is_verified": false,
         "line_number": 635
       },
@@ -1263,21 +1247,21 @@
         "filename": "tests/fixtures/host_artifact_paths.json",
         "hashed_secret": "2ddcea7c868c0d35d028d1a70dc96c669f7a70f8",
         "is_verified": false,
-        "line_number": 721
+        "line_number": 722
       }
     ],
     "tests/fixtures/host_prompt_snapshots/classic.json": [
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "08145b119265b804229e8bbeb58eb31d5edaa5ca",
+        "hashed_secret": "9eb8e7de843e2cf429d9119be0f9c66a93c38d15",
         "is_verified": false,
         "line_number": 91
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "c36f1c3069789b9aafbf4767cdc107fcf686ca34",
+        "hashed_secret": "68dc070c5fe5a6c51fd1dd7dcf577fccb523975e",
         "is_verified": false,
         "line_number": 92
       },
@@ -1867,14 +1851,14 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "7ebf38e7f76d350000bce0a0f95fc05515e7fc1f",
+        "hashed_secret": "da3a5039feb882c27805f5ab2c98e8748b2031ff",
         "is_verified": false,
         "line_number": 77
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "7168da3ffbbfd5ce0ca8a66b6deb759b87fe1fa3",
+        "hashed_secret": "485c59fbcae2d2df77377c54cce51c10fdbd2240",
         "is_verified": false,
         "line_number": 78
       },
@@ -2310,14 +2294,14 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "4b0e4a8111be83bca59e6fe9071cd63c57c62379",
+        "hashed_secret": "58a9b55e813b7490985b28f43a3d3a81fac8df6a",
         "is_verified": false,
         "line_number": 89
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "b35e97e6c3c2c3213e662a3fb35ede4f022f5612",
+        "hashed_secret": "c96cd1968d51ffb12bc6976ff3ab4cbbd9a8ef4f",
         "is_verified": false,
         "line_number": 90
       },
@@ -2943,14 +2927,14 @@
         "filename": "tests/unit/test_hotfix_slim20260916c4f2a9e6b013_gate_review.py",
         "hashed_secret": "be4fc4886bd949b369d5e092eb87494f12e57e5b",
         "is_verified": false,
-        "line_number": 63
+        "line_number": 64
       },
       {
         "type": "Basic Auth Credentials",
         "filename": "tests/unit/test_hotfix_slim20260916c4f2a9e6b013_gate_review.py",
         "hashed_secret": "f3bbbd66a63d4bf1747940578ec3d0103530e21d",
         "is_verified": false,
-        "line_number": 184
+        "line_number": 234
       }
     ],
     "tests/unit/test_rule_diagnostics.py": [
@@ -3005,16 +2989,16 @@
         "filename": "tests/unit/test_story_slim146.py",
         "hashed_secret": "ec09a041656818107eb855453ffbf7327d3bbc9d",
         "is_verified": false,
-        "line_number": 141
+        "line_number": 149
       },
       {
         "type": "Secret Keyword",
         "filename": "tests/unit/test_story_slim146.py",
         "hashed_secret": "7e8c0470241a76be5c7ae9394a4d3d331fe1b04e",
         "is_verified": false,
-        "line_number": 143
+        "line_number": 151
       }
     ]
   },
-  "generated_at": "2026-09-23T16:02:34Z"
+  "generated_at": "2026-09-26T13:03:05Z"
 }

{pactkit-3.0.4 → pactkit-4.0.0}/CHANGELOG.md

@@ -1,5 +1,74 @@
 # Changelog
 
+## [3.1.0] - 2026-09-25
+
+**外部宿主的归属从 core 移到 adapter。** SPEC-4.0-22 Step 7：core 不再为
+opencode / codex / copilot 声明任何东西——profile、能力、pre-tool 面、部署
+声明、安全事实、线格式，全部由各自 adapter 自带并经 entry-point discovery
+注册。core 只保留它自己随包发布的 `classic`。
+
+**这是契约边界变更，不是内部重构**，所以是 minor 而不是 patch：宿主从
+「core 预置」变成「adapter 装上才出现」，过渡期的 API 与状态整体删除。
+
+**这不是 PactKit 4.0 的最终发布**——4.0 的 lifecycle closure 还在后面。
+
+### 升级编排（MUST 读）
+
+**adapter 与 core 必须共享 major.minor，四包在稳定态 lockstep 发布。**
+
+两条独立的锁表达同一件事：
+
+- 每个 adapter 钉 `pactkit>=X,<Y`；
+- `doctor.check_adapter_compat` 要求
+  `_major_minor(adapter) == _major_minor(core)`。
+
+所以**必须先升 adapter 到 3.1.0，再升 core 到 3.1.0**。反过来（core 先升）
+的实测后果是 pip 把 core **静默降级**回 3.0.4：
+
+    Attempting uninstall: pactkit
+      Uninstalling pactkit-3.1.0
+    Successfully installed pactkit-3.0.4
+
+而旧的 adapter 3.0.x 装到 core 3.1.0 上会在 import 期就失败——它们仍在类体里
+读 core 的 profile 表，而那张表已经不存在了。
+
+**兼容前提：adapter >= 3.1.0。** 过渡窗口里（adapter 3.1.0 + core 3.0.4）
+import 正常、注册正常，部署由 skew guard 明确拒绝，可用
+`--allow-adapter-skew` 显式放行——这是刻意选择的更轻的失败模式。
+
+### Removed
+
+- **core 侧的外部宿主声明** —— `FORMAT_PROFILES` 的三条外部宿主条目，
+  以及 `_CORE_CAPABILITIES` / `_CORE_PRETOOL_SURFACES` /
+  `_CORE_DEPLOYMENT_CLAIMS` / `_CORE_SECURITY` 的外部宿主行。四张表收窄为
+  `_BUILTIN_*`，只承载 core 自带宿主。
+- **`SOURCE_CORE_TRANSITIONAL`** 与 **`transitional_hosts()`** —— 过渡集合
+  已空，读数与来源标签一并删除。宿主现在只有一条到达路径：adapter 注册。
+- **`host_payloads.OPENCODE_INPUT`** 及其 import 时注册。它让 core 持有宿主
+  专属线格式；删除 seed 后，这一行在**没跑过 discovery 的进程里**抛
+  `UnknownAdapterError`，而门禁按 R3 自锁保护**放行**——即静默 fail-open。
+  线格式现在属于 `pactkit_opencode.declarations.INPUT_TRANSLATION`。
+
+### Changed
+
+- **`_seed_from_core` → `_seed_builtin`，且拒绝非 `core_bundled` 行。**
+  `FORMAT_PROFILES` 里出现一个没有 `core_bundled` 标记的宿主会在 import 期
+  报错，而不是悄悄成为第二处宿主声明。
+- **CLI 在构建 `argparse` 的 `choices` 之前先触发 discovery。**
+  `VALID_FORMATS` 是活视图，但 `choices` 只快照一次；没有这一步，
+  `pactkit init --format codex` 会被拒（实测）。
+- **配置发现顺序改为显式策略。** `_LiveYamlCandidates._CORE_ORDER` →
+  `_PREFERRED_ORDER`，并写明它是 core 对「宿主无法被识别时读哪份配置」的
+  优先级策略，不是对宿主的声明——所以它随 Step 7 保留，而宿主数据全部离开。
+- **`host_dispatch_ratchet` 改为 site-driven。** 旧判据问「这个字符串是不是
+  宿主名」，宿主名集来自 `FORMAT_PROFILES`；Step 7 把那张表收窄后，集合悄悄
+  塌成 `{classic}`，计数从 5 假降到 2——**代码一行没改**。新判据问「这个比较
+  的主语是不是 host identity」，不需要任何宿主名单。detector 只发现，
+  classification 层负责裁定；未裁定的点 fail-closed 计入主指标。
+  分类由两档增至三档：`host-dispatch` / `domain-value` /
+  `not-host-knowledge`。**主指标仍为 5，domain-value 仍为 2**——Step 7 没有
+  减少任何真实分派点。
+
 ## [3.0.4] - 2026-09-24
 
 **为 adapter 解锁的 core 依赖发布。** 本版把宿主描述数据从 core 的硬编码表

{pactkit-3.0.4 → pactkit-4.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pactkit
-Version: 3.0.4
+Version: 4.0.0
 Summary: Spec-driven agentic DevOps toolkit for AI coding assistants
 Project-URL: Homepage, https://pactkit.dev
 Project-URL: Repository, https://github.com/pactkit/pactkit-public
@@ -25,19 +25,19 @@ Requires-Dist: detect-secrets>=1.5.0
 Requires-Dist: pre-commit>=4.6.1
 Requires-Dist: pyyaml>=6.0
 Provides-Extra: all
-Requires-Dist: pactkit-codex<3.1.0,>=3.0.0; extra == 'all'
-Requires-Dist: pactkit-opencode<3.1.0,>=3.0.0; extra == 'all'
+Requires-Dist: pactkit-codex<4.1.0,>=4.0.0; extra == 'all'
+Requires-Dist: pactkit-opencode<4.1.0,>=4.0.0; extra == 'all'
 Requires-Dist: ruff>=0.4; extra == 'all'
 Requires-Dist: tree-sitter-go>=0.25; extra == 'all'
 Requires-Dist: tree-sitter-java>=0.23; extra == 'all'
 Requires-Dist: tree-sitter-typescript>=0.23; extra == 'all'
 Requires-Dist: tree-sitter>=0.25; extra == 'all'
 Provides-Extra: codex
-Requires-Dist: pactkit-codex<3.1.0,>=3.0.0; extra == 'codex'
+Requires-Dist: pactkit-codex<4.1.0,>=4.0.0; extra == 'codex'
 Provides-Extra: lint
 Requires-Dist: ruff>=0.4; extra == 'lint'
 Provides-Extra: opencode
-Requires-Dist: pactkit-opencode<3.1.0,>=3.0.0; extra == 'opencode'
+Requires-Dist: pactkit-opencode<4.1.0,>=4.0.0; extra == 'opencode'
 Provides-Extra: test
 Requires-Dist: pytest>=7; extra == 'test'
 Requires-Dist: tomli>=1.1.0; (python_version < '3.11') and extra == 'test'

{pactkit-3.0.4 → pactkit-4.0.0}/SECURITY.md

@@ -4,9 +4,10 @@
 
 | Version | Supported          |
 |---------|--------------------|
+| 4.0.x   | :white_check_mark: |
+| 3.1.x   | :white_check_mark: |
 | 3.0.x   | :white_check_mark: |
-| 2.27.x  | :white_check_mark: |
-| < 2.27  | :x:                |
+| < 3.0   | :x:                |
 
 We provide security fixes for the current and previous minor release. Users on
 older versions should upgrade — the version is reported by `pactkit version`,

{pactkit-3.0.4 → pactkit-4.0.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pactkit"
-version = "3.0.4"
+version = "4.0.0"
 description = "Spec-driven agentic DevOps toolkit for AI coding assistants"
 readme = "README.md"
 license = "MIT"
@@ -75,8 +75,8 @@ Issues = "https://github.com/pactkit/pactkit-public/issues"
 pactkit = "pactkit.cli:main"
 
 [project.optional-dependencies]
-opencode = ["pactkit-opencode>=3.0.0,<3.1.0"]
-codex = ["pactkit-codex>=3.0.0,<3.1.0"]
+opencode = ["pactkit-opencode>=4.0.0,<4.1.0"]
+codex = ["pactkit-codex>=4.0.0,<4.1.0"]
 visualize = [
     "tree-sitter>=0.25",
     "tree-sitter-go>=0.25",

{pactkit-3.0.4 → pactkit-4.0.0}/scripts/provision-self-hosted-runner.sh

@@ -54,6 +54,31 @@ sudo apt-get install -y -qq \
   gh jq graphviz zip unzip xz-utils \
   nodejs npm python3-venv python3-pip
 
+# ---------------------------------------------------------------------------
+# 1b. QEMU binfmt — the publish action is amd64-only
+# ---------------------------------------------------------------------------
+# `pypa/gh-action-pypi-publish` ships an amd64-only image, so the release job
+# runs it under emulation, which needs `qemu-x86_64` in binfmt_misc.
+#
+# The registration is NOT durable by itself. `systemd-binfmt` removes every
+# existing entry and re-registers only what is in /usr/lib/binfmt.d and
+# /etc/binfmt.d when it restarts — and any apt operation can trigger that.
+# Measured 2026-09-24: an `apt-get install python3-venv` wiped colima's
+# registration, and the release then died with
+#   exec /app/twine-upload.sh: exec format error
+# on a runner that had done nothing wrong. It looked like an arch problem and
+# was really a "someone ran apt" problem.
+#
+# qemu-user-static ships those /usr/lib/binfmt.d entries, so installing it makes
+# the registration survive the next systemd-binfmt restart. Install it *before*
+# trusting any emulated container.
+say "installing qemu-user-static (binfmt for the amd64-only publish action)"
+sudo apt-get install -y -qq qemu-user-static
+if ! ls /proc/sys/fs/binfmt_misc/qemu-x86_64 >/dev/null 2>&1; then
+  echo "FATAL: qemu-x86_64 is not registered; the publish job cannot run its action." >&2
+  exit 1
+fi
+
 # ---------------------------------------------------------------------------
 # 2. The RUNPATH symlink — without this, setup-python's arm64 builds cannot run
 # ---------------------------------------------------------------------------
@@ -79,20 +104,26 @@ TOOL_CACHE="${RUNNER_TOOL_CACHE:-/opt/actions-runner/_work/_tool}"
 sudo ln -sfn "$TOOL_CACHE" /opt/hostedtoolcache
 
 # ---------------------------------------------------------------------------
-# 3. The runner itself
+# 3. The runner instances
 # ---------------------------------------------------------------------------
-if [[ ! -f "$RUNNER_DIR/run.sh" ]]; then
-  say "downloading the runner"
-  VER="$(curl -fsSL https://api.github.com/repos/actions/runner/releases/latest \
-    | jq -r .tag_name | sed 's/^v//')"
-  echo "  version $VER"
-  sudo mkdir -p "$RUNNER_DIR"
-  sudo chown "$(id -un):$(id -gn)" "$RUNNER_DIR"
-  curl -fsSL -o /tmp/runner.tar.gz \
-    "https://github.com/actions/runner/releases/download/v${VER}/actions-runner-linux-arm64-${VER}.tar.gz"
-  tar xzf /tmp/runner.tar.gz -C "$RUNNER_DIR"
-  rm -f /tmp/runner.tar.gz
-fi
+# WHY MORE THAN ONE, and why it is not a tuning knob:
+#
+# `publish.yml` gates the PyPI upload on release-acceptance having passed the
+# SAME commit — the publish job polls for that run and waits. On GitHub-hosted
+# runners every job gets its own machine, so the wait is free. One self-hosted
+# runner runs ONE job at a time, so the publish job held the only slot while
+# waiting for a run that could not start: a deadlock, not a slow queue.
+# Measured 2026-09-24 — publish sat 7 minutes with the tag's acceptance showing
+# `queued`, then died on an unrelated TLS timeout.
+#
+# actions/runner has no multi-job mode (`RUNNER_CONCURRENCY` appears nowhere in
+# the 2.337.0 binaries; `config.sh` has no such flag). The supported way to get
+# parallelism is more instances sharing a label. Two is the minimum that lets a
+# waiting job coexist with the job it waits for.
+RUNNER_COUNT="${RUNNER_COUNT:-2}"
+VER="$(curl -fsSL https://api.github.com/repos/actions/runner/releases/latest \
+  | jq -r .tag_name | sed 's/^v//')"
+echo "  runner version $VER, instances $RUNNER_COUNT"
 
 # .NET dependencies (libicu). The bundled script is the supported path.
 # Capture first, then test: `ldconfig -p | grep -q` under `set -o pipefail`
@@ -101,40 +132,76 @@ fi
 LIBS="$(ldconfig -p 2>/dev/null || true)"
 if [[ "$LIBS" != *libicu* ]]; then
   say "installing the runner's .NET dependencies"
+  sudo mkdir -p "$RUNNER_DIR" && sudo chown "$(id -un):$(id -gn)" "$RUNNER_DIR"
+  curl -fsSL -o /tmp/runner.tar.gz \
+    "https://github.com/actions/runner/releases/download/v${VER}/actions-runner-linux-arm64-${VER}.tar.gz"
+  tar xzf /tmp/runner.tar.gz -C "$RUNNER_DIR" && rm -f /tmp/runner.tar.gz
   ( cd "$RUNNER_DIR" && sudo ./bin/installdependencies.sh )
 fi
 
-if [[ ! -f "$RUNNER_DIR/.runner" ]]; then
-  say "registering the runner (reading the token from stdin)"
+# One registration token authorises several instances; mint one and read it
+# once, then reuse it. It is never an argument, so it stays out of argv and out
+# of shell history.
+NEED_TOKEN=0
+for i in $(seq 1 "$RUNNER_COUNT"); do
+  d="$RUNNER_DIR$([[ $i -eq 1 ]] && echo "" || echo "-$i")"
+  [[ -f "$d/.runner" ]] || NEED_TOKEN=1
+done
+TOKEN=""
+if [[ "$NEED_TOKEN" -eq 1 ]]; then
+  say "reading a registration token from stdin"
   read -r TOKEN
   if [[ -z "${TOKEN:-}" ]]; then
-    echo "FATAL: no registration token on stdin and no runner configured yet." >&2
-    echo "  gh api -X POST ${ORG_URL/https:\/\/github.com}/actions/runners/registration-token --jq .token" >&2
+    echo "FATAL: instances are unregistered and no token arrived on stdin." >&2
+    echo "  gh api -X POST /orgs/pactkit/actions/runners/registration-token --jq .token" >&2
     exit 1
   fi
-  ( cd "$RUNNER_DIR" && ./config.sh \
-      --url "$ORG_URL" --token "$TOKEN" --unattended --replace \
-      --name "$RUNNER_NAME" --labels "$RUNNER_LABELS" \
-      --work "$RUNNER_DIR/_work" )
-  unset TOKEN
-else
-  say "runner already configured — skipping registration"
 fi
 
+for i in $(seq 1 "$RUNNER_COUNT"); do
+  if [[ $i -eq 1 ]]; then
+    d="$RUNNER_DIR"; name="$RUNNER_NAME"
+  else
+    d="$RUNNER_DIR-$i"; name="$RUNNER_NAME-$i"
+  fi
+  say "instance $i: $name"
+  if [[ ! -f "$d/run.sh" ]]; then
+    sudo mkdir -p "$d" && sudo chown "$(id -un):$(id -gn)" "$d"
+    curl -fsSL -o /tmp/runner.tar.gz \
+      "https://github.com/actions/runner/releases/download/v${VER}/actions-runner-linux-arm64-${VER}.tar.gz"
+    tar xzf /tmp/runner.tar.gz -C "$d" && rm -f /tmp/runner.tar.gz
+  fi
+  if [[ ! -f "$d/.runner" ]]; then
+    ( cd "$d" && ./config.sh \
+        --url "$ORG_URL" --token "$TOKEN" --unattended --replace \
+        --name "$name" --labels "$RUNNER_LABELS" --work "$d/_work" )
+  else
+    echo "  already registered"
+  fi
+done
+unset TOKEN
+
 # ---------------------------------------------------------------------------
 # 4. Supervision
 # ---------------------------------------------------------------------------
 # svc.sh writes a systemd unit and `enable`s it, so the chain survives a host
 # reboot: launchd starts colima, the VM boots, systemd starts the runner.
-say "installing the systemd service"
+say "installing the systemd services"
 # Test the unit file directly rather than piping `systemctl list-unit-files`
 # into `grep -q` — see the libicu note above for why that idiom misfires here.
-UNIT="/etc/systemd/system/actions.runner.pactkit.${RUNNER_NAME}.service"
-if [[ ! -f "$UNIT" ]]; then
-  ( cd "$RUNNER_DIR" && sudo ./svc.sh install "$(id -un)" )
-fi
-sudo systemctl enable "actions.runner.pactkit.${RUNNER_NAME}.service" >/dev/null 2>&1 || true
-sudo systemctl restart "actions.runner.pactkit.${RUNNER_NAME}.service"
+for i in $(seq 1 "$RUNNER_COUNT"); do
+  if [[ $i -eq 1 ]]; then
+    d="$RUNNER_DIR"; name="$RUNNER_NAME"
+  else
+    d="$RUNNER_DIR-$i"; name="$RUNNER_NAME-$i"
+  fi
+  UNIT="/etc/systemd/system/actions.runner.pactkit.${name}.service"
+  if [[ ! -f "$UNIT" ]]; then
+    ( cd "$d" && sudo ./svc.sh install "$(id -un)" )
+  fi
+  sudo systemctl enable "actions.runner.pactkit.${name}.service" >/dev/null 2>&1 || true
+  sudo systemctl restart "actions.runner.pactkit.${name}.service"
+done
 sleep 3
 
 # ---------------------------------------------------------------------------

{pactkit-3.0.4 → pactkit-4.0.0}/src/pactkit/__init__.py

@@ -1,3 +1,3 @@
 """PactKit - Spec-driven agentic DevOps toolkit."""
 
-__version__ = "3.0.4"
+__version__ = "4.0.0"

{pactkit-3.0.4 → pactkit-4.0.0}/src/pactkit/cli.py

@@ -216,6 +216,31 @@ def _run_deploy_command(args, project_root):
             print(f"\n{report}")
 
 def _main():
+    # Force the entry-point adapters to load **before** the parser is built.
+    #
+    # `VALID_FORMATS` is a live view over the registry, but `argparse` snapshots
+    # `choices` once, here.  Until Step 7 that was invisible: Core seeded every
+    # host at `profiles` import, so the registry already held all four by the
+    # time this ran.  With the seed gone the snapshot became "whichever hosts
+    # happened to be registered", and `pactkit init --format codex` was refused
+    # with `invalid choice: 'codex'` — measured 2026-09-24.
+    #
+    # This is the same fix, for the same reason, as `gate_matrix.
+    # _available_env_formats` and `commit_gate._load_adapter_channels`: the
+    # answer must not depend on whether something already deployed in this
+    # process.  It is deliberately not a static format table — putting the
+    # external hosts back into one would undo Step 7 to hide the symptom.
+    #
+    # A broken adapter must not make the CLI unusable, so this is best-effort:
+    # the hosts it fails to load are simply absent from `choices`, which is the
+    # honest answer for an adapter that cannot be imported.
+    try:
+        from pactkit.generators.deployer import _ensure_entry_point_deployers
+
+        _ensure_entry_point_deployers()
+    except Exception:  # noqa: BLE001 - see above
+        pass
+
     parser = argparse.ArgumentParser(
         prog="pactkit",
         description="PactKit — Spec-driven agentic DevOps toolkit",