pactkit 4.1.0__tar.gz → 4.1.2__tar.gz

{pactkit-4.1.0 → pactkit-4.1.2}/.github/workflows/pactkit.yml

@@ -4,6 +4,9 @@ name: PactKit CI
 on:
   push:
     branches: [main]
+    paths-ignore:
+      - "docs/specs/**"
+      - "docs/acceptance/**"
   pull_request:
     branches: [main]
 

{pactkit-4.1.0 → pactkit-4.1.2}/.secrets.baseline

@@ -220,17 +220,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "6351b900c87540ae213c142ffe780668272452f5",
+        "hashed_secret": "4f8202f7042cb0ccac59fd12f2bbbf9b1ab47bb3",
         "is_verified": false,
         "line_number": 8
       },
-      {
-        "type": "Hex High Entropy String",
-        "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "53539aec0539527fe6f6ad8e22e95f4e76562761",
-        "is_verified": false,
-        "line_number": 9
-      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -297,9 +290,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "c34a9b4f0765956c13b49d073f1a30c30f7eb97b",
+        "hashed_secret": "4a7edc9521bc1cd35553bb6ad86199a86287ba44",
         "is_verified": false,
-        "line_number": 20
+        "line_number": 20,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -591,9 +585,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "954a14e76fb04a5b185400ab2341c246c1c52bb3",
+        "hashed_secret": "8e4f7124e75f0767cbf8609526b9baee083d9a30",
         "is_verified": false,
-        "line_number": 68
+        "line_number": 68,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -640,9 +635,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "161c14d87c9c13c53a557f4dcb541f5ae3c0430b",
+        "hashed_secret": "ba18ed0fc43bdb24f60242417966a31be765fd5a",
         "is_verified": false,
-        "line_number": 76
+        "line_number": 76,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -710,9 +706,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "9137df338cf3dffd7504ed0128cba3222b03c47a",
+        "hashed_secret": "87b3a5d6ed0d533de33cf796af46fefecccb7b8e",
         "is_verified": false,
-        "line_number": 87
+        "line_number": 87,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -724,9 +721,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "d9df495d0a77716ffb8b935e29909d9701ddd37e",
+        "hashed_secret": "67e4b874e417d4cbb765ee5984f94c1d7c94dccd",
         "is_verified": false,
-        "line_number": 89
+        "line_number": 89,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -791,20 +789,6 @@
         "is_verified": false,
         "line_number": 283
       },
-      {
-        "type": "Hex High Entropy String",
-        "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "ae2c532602dfdc9350011247773481e82fe0a816",
-        "is_verified": false,
-        "line_number": 386
-      },
-      {
-        "type": "Hex High Entropy String",
-        "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "6b205ccd1f9851e99aa2cf8f57cc33bbfeee92b6",
-        "is_verified": false,
-        "line_number": 388
-      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -836,9 +820,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "cd6780e73e3a283cc61400bf0a4c3cbbbd19c7fa",
+        "hashed_secret": "8cec18457a649d53daf38dac889a527ed0720ea5",
         "is_verified": false,
-        "line_number": 400
+        "line_number": 400,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -889,6 +874,22 @@
         "is_verified": false,
         "line_number": 437
       },
+      {
+        "type": "Hex High Entropy String",
+        "filename": "tests/fixtures/host_artifact_paths.json",
+        "hashed_secret": "93010b15e4d478d8d2d92d95f7e4e7587e356f42",
+        "is_verified": false,
+        "line_number": 441,
+        "is_secret": false
+      },
+      {
+        "type": "Hex High Entropy String",
+        "filename": "tests/fixtures/host_artifact_paths.json",
+        "hashed_secret": "7d8ffb4a229b83e3cf0a4879f59a85bb81b8d16c",
+        "is_verified": false,
+        "line_number": 443,
+        "is_secret": false
+      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -938,6 +939,14 @@
         "is_verified": false,
         "line_number": 462
       },
+      {
+        "type": "Hex High Entropy String",
+        "filename": "tests/fixtures/host_artifact_paths.json",
+        "hashed_secret": "1dc3774d016aa761b26987b0bfa764b3b525ef87",
+        "is_verified": false,
+        "line_number": 550,
+        "is_secret": false
+      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -1004,7 +1013,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "10e2fb86f3db90caf417428bcd644b15b0a50ddc",
+        "hashed_secret": "084ee786af0acb25de8e6a73bbb1192d75993909",
         "is_verified": false,
         "line_number": 562
       },
@@ -1039,16 +1048,18 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "391f9167f3f386bdac1d8a131a66cf5f70fc215e",
+        "hashed_secret": "7f3fe1ae9dc1cf6975fee94c0b89c2c5ae12df3a",
         "is_verified": false,
-        "line_number": 569
+        "line_number": 569,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "2317261ee8f6909d7f2f444ef001937e214872c3",
+        "hashed_secret": "c6f8a1c9413377d10fa9a48f6cfff940a689795f",
         "is_verified": false,
-        "line_number": 571
+        "line_number": 571,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -1095,9 +1106,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "a4536a1a0bad5cc04e206985d2c900441dc5a293",
+        "hashed_secret": "ea8f6d2635b9887ff251fc840924b1d071aa6a6f",
         "is_verified": false,
-        "line_number": 587
+        "line_number": 587,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -1116,7 +1128,7 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "770162370065c0c4f8f750dfff8945d9e85eea22",
+        "hashed_secret": "ebe682349d0ffd46898a0c8b4ca993331439341f",
         "is_verified": false,
         "line_number": 649
       },
@@ -1207,9 +1219,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "30ebe24f91178a1e4dffd22557d161ed38c52fcf",
+        "hashed_secret": "16e442debd2ce17f968beae4d2d633cb5a9f2baf",
         "is_verified": false,
-        "line_number": 664
+        "line_number": 664,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -1218,13 +1231,6 @@
         "is_verified": false,
         "line_number": 665
       },
-      {
-        "type": "Hex High Entropy String",
-        "filename": "tests/fixtures/host_artifact_paths.json",
-        "hashed_secret": "1f7e1117c7a2718acc836ce3f93127dcb9ff1165",
-        "is_verified": false,
-        "line_number": 666
-      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -1288,6 +1294,14 @@
         "is_verified": false,
         "line_number": 726
       },
+      {
+        "type": "Hex High Entropy String",
+        "filename": "tests/fixtures/host_artifact_paths.json",
+        "hashed_secret": "37a17b0d9274f7a4e0e2d97e1c108226e83ed024",
+        "is_verified": false,
+        "line_number": 729,
+        "is_secret": false
+      },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_artifact_paths.json",
@@ -1307,14 +1321,15 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "ea73131ae9eed86b08c2c4c352fce3440a7f0aaa",
+        "hashed_secret": "090f6d9611991ebcd866a91cd1033198872d941a",
         "is_verified": false,
-        "line_number": 92
+        "line_number": 92,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "14930f28460a7a126ce11cacef1e570775f2f0f9",
+        "hashed_secret": "1bc10e8a671e61c4ab0edad644f34293ee66409f",
         "is_verified": false,
         "line_number": 93
       },
@@ -1391,9 +1406,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "ac04ef7149390ebfda6ac94cca04329dad638b70",
+        "hashed_secret": "d82e4a952cc36cadc58231d64f7142ea49b93482",
         "is_verified": false,
-        "line_number": 104
+        "line_number": 104,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -1769,9 +1785,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "71ff5a2ca6be7728314f97fcd27701d1a1522dde",
+        "hashed_secret": "bac1a61a17073c014fca039fd0249c6061d5f97c",
         "is_verified": false,
-        "line_number": 158
+        "line_number": 158,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -1832,9 +1849,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "42033fc6ee5accf3bdc9b426b0c0fa72fe58eec0",
+        "hashed_secret": "1f5915a7415ee43160eb84ceafc90a05d1a0bbde",
         "is_verified": false,
-        "line_number": 167
+        "line_number": 167,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -1846,9 +1864,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/classic.json",
-        "hashed_secret": "58a4b3a013fe2affd0865b77a51ac995a64f1af0",
+        "hashed_secret": "8466c3f26e4f69fa1486da6ca47052ec93bd713b",
         "is_verified": false,
-        "line_number": 169
+        "line_number": 169,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -1911,14 +1930,15 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "4721f9fd177e1dbe036a2b6858ba0933f7f2e49b",
+        "hashed_secret": "55a427e5089676df7b3f8d411964b2522726873d",
         "is_verified": false,
-        "line_number": 78
+        "line_number": 78,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "09661920ad89dad89764eee8ba5b079e6f493f7a",
+        "hashed_secret": "0edd823ff39a4b4f938eab319c72af56e2117ffe",
         "is_verified": false,
         "line_number": 79
       },
@@ -1932,9 +1952,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "54b001d20f7ae8fb04fbf87680bfd8ac5f42d13b",
+        "hashed_secret": "351ecd3b0712f30faf53973604836fe2d5e39453",
         "is_verified": false,
-        "line_number": 81
+        "line_number": 81,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -2002,9 +2023,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "975aeb5d52b29058f6581941ebbd3d7f8ca9f7eb",
+        "hashed_secret": "32d2c53c310b3897735f8dc3a8ef5baa83a2712b",
         "is_verified": false,
-        "line_number": 91
+        "line_number": 91,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -2254,9 +2276,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "c212aacbd8e97ecb249c07891c7c18ec63db500f",
+        "hashed_secret": "fd580316388f0be80be1db82ec84bc738573a8bb",
         "is_verified": false,
-        "line_number": 130
+        "line_number": 130,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -2268,9 +2291,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/codex.json",
-        "hashed_secret": "cabd016a0dbdb4357264daa057ca857e735a42ed",
+        "hashed_secret": "1658907f492010be374e7d730457e1532323beb5",
         "is_verified": false,
-        "line_number": 132
+        "line_number": 132,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -2361,14 +2385,15 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "fa877517c81dce610f47910a0ffc5630c00c7a2e",
+        "hashed_secret": "2fbf93d0dfe98adb2ac76b1754e5834a01a1899c",
         "is_verified": false,
-        "line_number": 90
+        "line_number": 90,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "69ff7d55d437ed007f58f1508ab969d499e41746",
+        "hashed_secret": "d783c01b10c0784954d479095f433e784c9d8c30",
         "is_verified": false,
         "line_number": 91
       },
@@ -2473,9 +2498,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "52213d69105ae0d7e80deefb9ffc63e8fb58d57e",
+        "hashed_secret": "dd0ef5b8d6a3ef5cc4c40d9976ee5c1614d7e7f4",
         "is_verified": false,
-        "line_number": 106
+        "line_number": 106,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -2487,9 +2513,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "c6f890bd3b77f4c880e499e6ba4eeeee86dea031",
+        "hashed_secret": "4d315fe13204f82152d82ecfe377464429185f9e",
         "is_verified": false,
-        "line_number": 108
+        "line_number": 108,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -2907,9 +2934,10 @@
       {
         "type": "Hex High Entropy String",
         "filename": "tests/fixtures/host_prompt_snapshots/opencode.json",
-        "hashed_secret": "ddffaa1bc5319efb54c264a91659fab0c7b2301e",
+        "hashed_secret": "86b33f4d7cc94d21ee884dd6bc78fcabde8b1cac",
         "is_verified": false,
-        "line_number": 168
+        "line_number": 168,
+        "is_secret": false
       },
       {
         "type": "Hex High Entropy String",
@@ -3074,5 +3102,5 @@
       }
     ]
   },
-  "generated_at": "2026-09-29T15:51:24Z"
+  "generated_at": "2026-10-10T07:27:53Z"
 }

{pactkit-4.1.0 → pactkit-4.1.2}/CHANGELOG.md

@@ -1,9 +1,115 @@
 # Changelog
 
-## [4.1.0] - 未发布
-
-> 发布日期在发布时填入。本节内容与
+## [4.1.2] - 2026-10-10
+
+**验证必须「完整」，不只是「没有失败」；验证回执必须绑定执行它的那个环境。**
+
+这一版把两件此前同形的事分开：**没跑**，与**跑了但没验证到**。Story 做完最后一个
+task 此前直接进 `Done`，`done-verify` 的 WARN 只是「打印后继续」——两者都让「没有
+失败」冒充了「验证过」。现在 In Progress 与 Done 之间多一个 `Verifying`：做完最后
+一个 task 只进入 `Verifying`，`done-verify` 全项 PASS 是唯一的常规出口，WARN 一律
+算 **INCOMPLETE**（非零退出），空结果集不算通过，手动搬 board 绕不过去。
+
+另一半在 commit-gate 的回执上。此前它记的是一个绿/红标签；现在它记**这次执行**：
+运行前后的项目输入指纹、Git 身份（HEAD / symbolic-ref / index / dirty）、单调时钟
+与墙钟的差值（>1s 标记 untrusted，暂停或时钟调整可见）、结构化的通过/失败/跳过计数
+与跳过位置、与上一次**可比**运行的跳过数变化、以及声明式环境变量的存在性。验证记录
+同时带上**产出它的环境**（已安装发行版、运行时路径变量、测试工具链身份），复用只在
+环境相同时成立。
+
+第三条是 CI：新增 **opt-in** 的 `ci.push_paths_ignore`，让生成的工作流在 push 时忽略
+指定路径；`pull_request` 不过滤——doc-only PR 的必需检查不能因此消失。
+
+### 行为变更范围
+
+- **变（生命周期）**：Story 完成最后一个 task 后进入 `Verifying` 而非 `Done`；
+  `done-verify` 的 WARN 从「打印后继续」改为 **INCOMPLETE 且非零退出**；空检查集不算
+  通过；手动移动 board 不能绕过验证。
+- **变（commit-gate 新增两条阻断）**：运行期间 Git 身份（HEAD / ref / index / dirty）
+  变化或不可读；声明式环境变量存在性变化或不可读。运行期间**目录内容**变化照旧阻断。
+- **变（复用更严）**：项目一旦在 `.env.example` / `.env.sample` / `.env.template`
+  里声明了变量名，缺少该字段的旧记录**不可复用**；验证记录与运行时环境绑定，环境变了
+  同样不复用。两条都让升级后的第一次提交重跑一次测试。
+- **新增（opt-in）**：`ci.push_paths_ignore`。不配置时生成的工作流逐字节不变。
+- **变（部署产物）**：`prompts/` 的改动**进入三个宿主的部署产物**——Done 流程重排与
+  board 段头在 classic / codex / opencode 各自落地。实测（同一 adapter 分别对着 PyPI
+  4.1.1 与本版部署）：classic 与 codex 各 6 个产物变化、opencode 5 个，其中各有 2 个是
+  版本内嵌（`.pactkit-deployed.json` 与宿主顶层 prompt），其余为 prompt 内容——分别是
+  `skills/.pactkit-command-manifest.json`、`skills/pactkit-scaffold/SKILL.md`、
+  `skills/project-done/SKILL.md`、`skills/project-init/SKILL.md`（opencode 为
+  `commands/project-done.md`、`commands/project-init.md`、`skills/pactkit-scaffold/SKILL.md`）。
+  其余产物逐字节不变。
+- **不变**：`--format copilot` 的部署路径不变。
+- **兼容**：adapter pin 是 `pactkit>=4.1.0,<4.2.0`，`doctor.check_adapter_compat` 比对
+  major.minor——**adapter 无需跟发**。但两个 adapter 仓库的
+  `tests/fixtures/host_body_golden.json` 钉的是**精确 core 版本字符串**，必须在 core
+  发布**之后**用 `tests/scripts/refresh_host_body_golden.py` 重生成；顺序反过来
+  （golden 先写 4.1.2 而 PyPI 最新仍是 4.1.1）会照样红。**这次的重生成不是只改版本
+  字段**——codex 4 个、opencode 3 个产物有真实内容变化，按脚本的要求把原因记进提交信息。
+
+### 迁移（MUST 读）
+
+- **升级后第一次提交会重跑测试**：复用判定要求环境一致，旧记录没有该字段。
+- **若你的测试会改动 Git 状态**（`git add` / `git commit` / 切换 HEAD），commit-gate
+  现在会阻断并打印 `[FAIL] Git HEAD, index or dirty state changed …`。这是有意的：
+  那种情况下测试结果不对应当前文件。把这类操作移出被测进程即可。
+- **跳过数变化现在会 WARN**：与上一次可比的运行相比跳过数变化时提示，不阻断。
+- 声明了环境变量却未设置时，gate 打印 `[WARN] declared environment variables missing
+  or empty: …`——模板常含可选项，所以是 WARN 不是 FAIL。
+
+### 修正
+
+- `done-verify` 此前在**空结果集**下返回 0（「没有任何检查失败」被读成通过），
+  WARN 也不影响退出码。两者都改为非零。
+- commit-gate 的「无机器可读计数」文案此前写成「non-Python runners report exit status
+  only」——Python runner 同样可能没有计数通道，现改为指向 per-runner 结果，并在回执里
+  用 `null` 表示未知计数，而不是编造 0。
+- 新增 [验证执行完整性指南](docs/guides/verification-execution-integrity.md)：管道会吞
+  退出码（`pytest … | tail`、`gh run watch --exit-status`），指南给出 bash/zsh 两种
+  保留原状态的写法。
+
+## [4.1.1] - 2026-10-04
+
+**`--format all` 不再部署已退役的宿主；显式指名不受影响。**
+
+Copilot 退出支持范围是 4.1.0 定下的裁定，这一版把它落到**批量部署路径**上：
+默认批量部署跳过 `compatibility_hosts` 里的宿主，并在输出里明说跳过了谁——
+**静默跳过与「本来就没有」同形**，所以这一条是可见性要求，不是措辞偏好。
+
+判据切在批量路径，是因为两条通道的语义不同：`all` 的承诺是「部署本安装能部署的
+一切」，退役宿主不再属于这个承诺；`--format copilot` 是用户的直接请求，**照常部署**。
+`pactkit-copilot` 4.1.0 仍可安装可用，只是不再更新。
+
+宿主名单此前**内联**写在 manifest 构建器里，现抽为
+`deploy_manifest.PRIMARY_HOSTS` / `COMPATIBILITY_HOSTS`——裁定只有一处落笔，
+manifest 记录它、部署路径读它，而不是各自复述名字。
+
+### 行为变更范围
+
+- **变**：`pactkit init` / `pactkit update` 不带 `--format`（即 `all`）时不再部署
+  Copilot。已部署的 Copilot 产物**不会被删除**，只是不再被批量路径更新。
+- **不变**：`--format copilot` 的部署路径逐字节不变；`prompts/` 未改动，各宿主
+  部署产物内容不变（两个 golden 的重生成仅因版本号内嵌在 `.pactkit-deployed.json`
+  与各宿主 prompt 里）。
+- **兼容**：adapter 的 pin 是 `pactkit>=4.1.0,<4.2.0`，且 `doctor.check_adapter_compat`
+  比对 major.minor——4.1.1 与 4.1.0 的 adapter 是允许的组合，**adapter 无需跟发**。
+
+### 修正
+
+- CHANGELOG 的 4.1.0 段此前标为 `未发布`，而 4.1.0 已于 2026-10-02 发布。一个已
+  发布的版本在 CHANGELOG 里自称未发布，属于「过期工件冒充当前事实」的同族缺陷，
+  随本版一并修正。
+- 退役声明在代码注释与文档里三处写「Copilot still deploys」——批量路径变更后只对
+  显式路径成立，已改正。
+
+## [4.1.0] - 2026-10-02
+
+> 本节内容与
 > `docs/architecture/governance/migration-support-scope-4.1.md` 同源，那份更详细。
+>
+> 日期取自 PyPI 上传时间（2026-10-02T15:30Z）。此前的 `未发布` 是发布时漏填，
+> 于 4.1.1 一并修正——一个已发布的版本在 CHANGELOG 里自称未发布，属于
+> 「过期工件冒充当前事实」的同族缺陷。
 
 **增强旧项目兼容诊断与安全迁移能力；有歧义的项目策略需要明确裁定。**
 

{pactkit-4.1.0 → pactkit-4.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pactkit
-Version: 4.1.0
+Version: 4.1.2
 Summary: Spec-driven agentic DevOps toolkit for AI coding assistants
 Project-URL: Homepage, https://pactkit.dev
 Project-URL: Repository, https://github.com/pactkit/pactkit-public
@@ -65,23 +65,34 @@ Description-Content-Type: text/markdown
 
 > **PactKit** (Pact 契约 + Kit) is a lightweight dev-enablement scaffold: it gives AI coding assistants the standards, specs and methods of a disciplined engineering workflow, without getting in the way. Ordinary questions and ordinary coding never activate the workflow — you opt in per task. There is no admin plane, no central control, and nothing that cannot be uninstalled.
 >
-> Deterministic operations run as code, not prompts (CODE is the Law). Decisions are grounded in data, not memory (Data is the Truth). 67 CLI subcommands, 9 specialized agents, 12 commands, 25 skills, and a Plan-Act-Check-Done lifecycle you invoke when you want it. One `pip install` deploys to all 4 supported IDEs (adapters are opt-in extras).
+> Deterministic operations run as code, not prompts (CODE is the Law). Decisions are grounded in data, not memory (Data is the Truth). 67 CLI subcommands, 9 specialized agents, 12 commands, 25 skills, and a Plan-Act-Check-Done lifecycle you invoke when you want it. One `pip install` deploys to Claude Code, Codex and OpenCode (adapters are opt-in extras).
 
 ### Supported AI Tools
 
+Supports **Claude Code**, **Codex** and **OpenCode**.
+
 | Tool | Format | Command |
 |------|--------|---------|
 | **Claude Code** | Classic | `pactkit init` |
-| **OpenCode** | OpenCode | `pactkit init` |
 | **Codex CLI** | Codex | `pactkit init` |
-| **GitHub Copilot** | Copilot | `pactkit init --format copilot` |
+| **OpenCode** | OpenCode | `pactkit init` |
+
+> `pactkit init` deploys all three formats at once. Use `--format <name>` to target a single one.
 
-> `pactkit init` deploys all 4 IDE formats at once. Use `--format <name>` to target a single IDE.
+**GitHub Copilot is out of the supported scope.** `pactkit-copilot` was published
+through 4.1.0 and that release still installs and works
+(`pip install pactkit-copilot`); it receives no further updates. It was never
+part of the default install — `pip install "pactkit[all]"` does not pull it, and
+there is no `pactkit[copilot]` extra — it is skipped by the batch deploy
+(`pactkit init` deploys the three supported formats, not this one), and it is
+not covered by release acceptance. Naming it explicitly still works:
+`pactkit init --format copilot` deploys it. It is the one Host whose deploy root
+is **project-relative** (`.github/`) rather than a machine-global config root.
 
 Gate coverage differs by host: Claude Code and Codex CLI get the full gate set
-through native hooks; OpenCode and Copilot fall back to the git-hook layer,
-which covers the commit and push gates but not the pre-tool ones
-(`auth_gate`, `secrets_gate`, `tamper_guard`, `spec_guard`).
+through native hooks; OpenCode falls back to the git-hook layer, which covers the
+commit and push gates but not the pre-tool ones (`auth_gate`, `secrets_gate`,
+`tamper_guard`, `spec_guard`).
 
 ### What it looks like
 
@@ -596,7 +607,7 @@ when you want one shared config after all.
 | `telemetry` | object | `enabled: true` | Local-only usage telemetry (`.pactkit/events/`). Set `enabled: false` to stop recording; gate verdicts are unaffected |
 | `exclude` | object | `{}` | Components to exclude (e.g., `exclude.agents: [agent-name]`) |
 | `visualize.graph_provider` | string | (absent) | Code-relation backend. Absent/`auto` = Codegraph (the single source). Explicit `builtin_graph` returns a retirement notice — the MMD-based provider is gone |
-| `ci` | object | `provider: none` | CI/CD pipeline generation (`github`, `gitlab`, `none`). Sub-fields: `runner` (default: `ubuntu-latest`), `language_version` (default: auto per stack), `github_host` (GHE server address), `actions_ref` (GHE actions prefix) |
+| `ci` | object | `provider: none` | CI/CD pipeline generation (`github`, `gitlab`, `none`). Sub-fields: `runner` (default: `ubuntu-latest`), `language_version` (default: auto per stack), `github_host` (GHE server address), `actions_ref` (GHE actions prefix), `push_paths_ignore` (path globs skipped on **push** only — `pull_request` stays unfiltered so required checks never disappear for a doc-only PR) |
 | `issue_tracker` | object | `provider: none` | External issue tracker (`github`, `none`) |
 | `hooks` | object | disabled | Opt-in hook templates (pre-commit, post-test, pre-push) |
 | `lint_blocking` | bool | `false` | Whether lint failures block commits |
@@ -721,7 +732,9 @@ gates × platforms, what each host actually gets), the [credential incident
 response guide](docs/guides/credential-incident-response.md) (pre-2.27.0
 audit-record sweep), and the [release & recovery
 runbook](docs/guides/release-recovery-runbook.md) (second-person drill —
-build, verify, release, recover from the shipped artifacts).
+build, verify, release, recover from the shipped artifacts), plus the
+[verification execution integrity guide](docs/guides/verification-execution-integrity.md)
+(preserving command status and interpreting gate evidence).
 
 ## Contributing