devsquad 4.5.0__tar.gz → 4.5.4__tar.gz

{devsquad-4.5.0 → devsquad-4.5.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsquad
-Version: 4.5.0
+Version: 4.5.4
 Summary: Production-Ready Multi-Role AI Task Orchestrator
 Author-email: DevSquad Team <devsquad@example.com>
 License: MIT
@@ -96,14 +96,14 @@ Dynamic: license-file
 <p align="center">
   <strong>🎯 把「单个 AI 助手」升级成「7 人 AI 专业团队」</strong>
   <br>
-  <em>One task → Multi-role AI collaboration → One conclusion | V4.5.0 (cross-session continuity + protocol-native skills + action-first reports) | V4.4.0 (5 enhancement modules)</em>
+  <em>One task → Multi-role AI collaboration → One conclusion | V4.5.4 (Module Fiber + Coeffect: 6-state FSM + topological activation + modules CLI) | V4.5.3 (Artifacts + Effect — ArtifactStore + DispatchEffect + EffectRegistry + Audit CLI) | V4.5.2 (Experience polish: MOKA + Metrics + GitLab + Doctor + BackendConfig) | V4.5.0 (cross-session continuity + protocol-native skills) | V4.4.0 (5 enhancement modules)</em>
 </p>
 
 <p align="center">
   <img alt="Python" src="https://img.shields.io/badge/Python-3.10+-blue?logo=python&logoColor=white" />
   <img alt="License" src="https://img.shields.io/badge/License-MIT-green" />
-  <img alt="Tests" src="https://img.shields.io/badge/Tests-8260%2B%20passing-brightgreen" />
-  <img alt="Version" src="https://img.shields.io/badge/V4.5.0-success" />
+  <img alt="Tests" src="https://img.shields.io/badge/Tests-8996%2B%20passing-brightgreen" />
+  <img alt="Version" src="https://img.shields.io/badge/V4.5.4-success" />
   <img alt="CI" src="https://img.shields.io/badge/CI-GitHub_Actions-blue?logo=githubactions" />
   <img alt="Quality" src="https://img.shields.io/badge/Code%20Quality-4.3%2F5%20%E2%98%85%E2%98%85%E2%98%85%E2%98%85%E2%98%86-blue" />
   <img alt="Security" src="https://img.shields.io/badge/Security-5%2F5%20%E2%98%85%E2%98%85%E2%98%85%E2%98%85%E2%98%85-success" />
@@ -157,14 +157,25 @@ devsquad run "设计一个安全的用户认证系统" --roles architect,securit
 | 复杂系统设计（需要多视角） | **DevSquad 多角色协作** 🎯 |
 | 生产环境自动化流程 | **DevSquad + REST API + Dashboard** 🎯 |
 
-📚 **想深入了解？** → [完整快速入门指南](QUICKSTART.md) | [185+ 模块详细参考](SKILL.md)
+📚 **想深入了解？** → [完整快速入门指南](QUICKSTART.md) | [193 模块详细参考](SKILL.md)
 
 ---
 
 <details>
 <summary>🔍 点击展开：完整功能介绍与架构详解</summary>
 
-## 🚀 V4.5.0: Cross-Session Continuity + Protocol-Native Skills + Action-First Reports
+## 🚀 V4.5.2: Approval Gate + Connector Framework + Anti-Ghost E2E
+
+**DevSquad V4.5.2** (PATCH release, SemVer compliant) introduces 2 new modules and completes 3 ROADMAP items (V451-1, V451-2, V451-7/8/9). All new modules default to safe, backward-compatible behavior — no API breaking changes. See [docs/release_notes/V4.5.2_RELEASE_NOTES.md](docs/release_notes/V4.5.2_RELEASE_NOTES.md) for full release notes.
+
+### V4.5.2 — 2 New Modules + 3 ROADMAP Items
+- **ApprovalGate**: User-level approval mechanism for external operations. Fail-closed on callback exceptions. Auto-approve fallback when no callback configured (backward compatible).
+- **ConnectorFramework**: Protocol-based interface for external system integration (GitHub first). `Connector` Protocol + `GitHubConnector` (api/cli/simulation modes). `simulation=True` enforced by default in dispatch pipeline.
+- **V451-7 Dashboard browser-level E2E**: 11 AppTest cases (Streamlit AppTest replaces Playwright — avoids heavy browser deps while still being browser-level DOM simulation)
+- **V451-8 REST API end-to-end user journey E2E**: 190 E2E tests covering dispatch→history→roles→quick dispatch→error handling→lifecycle→cross-entry
+- **V451-9 Connector Framework anti-ghost E2E**: 12 E2E tests (AG-1 through AG-8) proving pipeline activation
+
+### V4.5.0 — Cross-Session Continuity + Protocol-Native Skills + Action-First Reports
 
 **DevSquad V4.5.0** (merging V4.4.3 + V4.4.4 + V4.5.0 changes) delivers 10 new features for cross-session continuity, protocol-native skill architecture, and action-first reporting. The 7-role AI team orchestrates complex engineering tasks with full audit trails and consensus mechanisms. See [docs/VISION.md](docs/VISION.md) for the project vision.
 
@@ -202,13 +213,13 @@ devsquad run "设计一个安全的用户认证系统" --roles architect,securit
 - 13 E2E tests xpass + anti-ghost counters
 
 ### Anti-Ghost Feature Guarantee
-Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `check_module_activation.py` verification. Modules must be truly integrated into dispatch pipeline (not just instantiated), with Markdown report sections user-visible.
+Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `check_module_activation.py` verification. Modules must be truly integrated into dispatch pipeline (not just instantiated), with Markdown report sections user-visible. V4.5.2 extends this pattern from V4.4.0 (RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector) to V4.5.2 (ApprovalGate / ConnectorFramework).
 
 ### Test Pyramid Achieved
 - **Contract tests**: 5.2% (target ≥5% ✅)
 - **Integration tests**: 15.1% (target ≥15% ✅)
-- **Total tests**: 8260+ (CI authoritative)
-- **E2E coverage**: 107 e2e + 1244 integration + 13 V4.4.0 anti-ghost
+- **Total tests**: 8392+ (CI authoritative)
+- **E2E coverage**: 107 e2e + 1244 integration + 13 V4.4.0 anti-ghost + 12 V4.5.2 anti-ghost
 
 ### Historical Features (V4.0.0-V4.3.3)
 - **V4.3.3**: P0-P3 enhancement E2E skeletons (xfail TDD for V4.4.0)
@@ -224,7 +235,7 @@ Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `
 - **V4.0.0 P3-1 Autonomous**: plan → dev → verify → fix 4-stage autonomous iteration
 - **V4.0.0 P3-2 Plugin Hot-Loading**: 3 loading paths + path traversal 3-layer protection + reload rollback
 
-8260+ tests passing (CI authoritative).
+8996+ tests passing (CI authoritative).
 
 ---
 
@@ -724,7 +735,7 @@ python3 -m pytest tests/ -q --tb=line
 | Document | Description | Language |
 |----------|-------------|----------|
 | [**QUICKSTART.md**](QUICKSTART.md) | **⭐ 30 秒快速入门指南（推荐新用户）** | 中文 |
-| [SKILL.md](SKILL.md) | 完整技能手册 + 185+ 模块参考 | EN/CN/JP |
+| [SKILL.md](SKILL.md) | 完整技能手册 + 187+ 模块参考 | EN/CN/JP |
 | [GUIDE.md](GUIDE.md) | 完全用户指南 | 中文 |
 | [INSTALL.md](INSTALL.md) | 安装指南 (Unix + Windows) | EN/CN |
 | [EXAMPLES.md](EXAMPLES.md) | 实际使用示例 | EN |
@@ -804,6 +815,6 @@ This project is licensed under the MIT License - see the [LICENSE](LICENSE) file
 
 ---
 
-*Last updated: 2026-08-03 | Version: V4.5.0 (cross-session continuity + protocol-native skills + action-first reports — 10 new features) | V4.4.0 (5 enhancement modules: RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector — see [CHANGELOG.md](CHANGELOG.md))*
+*Last updated: 2026-08-05 | Version: V4.5.2 (Approval Gate + Connector Framework + anti-ghost E2E — 2 new modules, 3 ROADMAP items completed) | V4.5.0 (cross-session continuity + protocol-native skills + action-first reports — 10 new features) | V4.4.0 (5 enhancement modules: RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector — see [CHANGELOG.md](CHANGELOG.md))*
 
 </details>

{devsquad-4.5.0 → devsquad-4.5.4}/README.md

@@ -3,14 +3,14 @@
 <p align="center">
   <strong>🎯 把「单个 AI 助手」升级成「7 人 AI 专业团队」</strong>
   <br>
-  <em>One task → Multi-role AI collaboration → One conclusion | V4.5.0 (cross-session continuity + protocol-native skills + action-first reports) | V4.4.0 (5 enhancement modules)</em>
+  <em>One task → Multi-role AI collaboration → One conclusion | V4.5.4 (Module Fiber + Coeffect: 6-state FSM + topological activation + modules CLI) | V4.5.3 (Artifacts + Effect — ArtifactStore + DispatchEffect + EffectRegistry + Audit CLI) | V4.5.2 (Experience polish: MOKA + Metrics + GitLab + Doctor + BackendConfig) | V4.5.0 (cross-session continuity + protocol-native skills) | V4.4.0 (5 enhancement modules)</em>
 </p>
 
 <p align="center">
   <img alt="Python" src="https://img.shields.io/badge/Python-3.10+-blue?logo=python&logoColor=white" />
   <img alt="License" src="https://img.shields.io/badge/License-MIT-green" />
-  <img alt="Tests" src="https://img.shields.io/badge/Tests-8260%2B%20passing-brightgreen" />
-  <img alt="Version" src="https://img.shields.io/badge/V4.5.0-success" />
+  <img alt="Tests" src="https://img.shields.io/badge/Tests-8996%2B%20passing-brightgreen" />
+  <img alt="Version" src="https://img.shields.io/badge/V4.5.4-success" />
   <img alt="CI" src="https://img.shields.io/badge/CI-GitHub_Actions-blue?logo=githubactions" />
   <img alt="Quality" src="https://img.shields.io/badge/Code%20Quality-4.3%2F5%20%E2%98%85%E2%98%85%E2%98%85%E2%98%85%E2%98%86-blue" />
   <img alt="Security" src="https://img.shields.io/badge/Security-5%2F5%20%E2%98%85%E2%98%85%E2%98%85%E2%98%85%E2%98%85-success" />
@@ -64,14 +64,25 @@ devsquad run "设计一个安全的用户认证系统" --roles architect,securit
 | 复杂系统设计（需要多视角） | **DevSquad 多角色协作** 🎯 |
 | 生产环境自动化流程 | **DevSquad + REST API + Dashboard** 🎯 |
 
-📚 **想深入了解？** → [完整快速入门指南](QUICKSTART.md) | [185+ 模块详细参考](SKILL.md)
+📚 **想深入了解？** → [完整快速入门指南](QUICKSTART.md) | [193 模块详细参考](SKILL.md)
 
 ---
 
 <details>
 <summary>🔍 点击展开：完整功能介绍与架构详解</summary>
 
-## 🚀 V4.5.0: Cross-Session Continuity + Protocol-Native Skills + Action-First Reports
+## 🚀 V4.5.2: Approval Gate + Connector Framework + Anti-Ghost E2E
+
+**DevSquad V4.5.2** (PATCH release, SemVer compliant) introduces 2 new modules and completes 3 ROADMAP items (V451-1, V451-2, V451-7/8/9). All new modules default to safe, backward-compatible behavior — no API breaking changes. See [docs/release_notes/V4.5.2_RELEASE_NOTES.md](docs/release_notes/V4.5.2_RELEASE_NOTES.md) for full release notes.
+
+### V4.5.2 — 2 New Modules + 3 ROADMAP Items
+- **ApprovalGate**: User-level approval mechanism for external operations. Fail-closed on callback exceptions. Auto-approve fallback when no callback configured (backward compatible).
+- **ConnectorFramework**: Protocol-based interface for external system integration (GitHub first). `Connector` Protocol + `GitHubConnector` (api/cli/simulation modes). `simulation=True` enforced by default in dispatch pipeline.
+- **V451-7 Dashboard browser-level E2E**: 11 AppTest cases (Streamlit AppTest replaces Playwright — avoids heavy browser deps while still being browser-level DOM simulation)
+- **V451-8 REST API end-to-end user journey E2E**: 190 E2E tests covering dispatch→history→roles→quick dispatch→error handling→lifecycle→cross-entry
+- **V451-9 Connector Framework anti-ghost E2E**: 12 E2E tests (AG-1 through AG-8) proving pipeline activation
+
+### V4.5.0 — Cross-Session Continuity + Protocol-Native Skills + Action-First Reports
 
 **DevSquad V4.5.0** (merging V4.4.3 + V4.4.4 + V4.5.0 changes) delivers 10 new features for cross-session continuity, protocol-native skill architecture, and action-first reporting. The 7-role AI team orchestrates complex engineering tasks with full audit trails and consensus mechanisms. See [docs/VISION.md](docs/VISION.md) for the project vision.
 
@@ -109,13 +120,13 @@ devsquad run "设计一个安全的用户认证系统" --roles architect,securit
 - 13 E2E tests xpass + anti-ghost counters
 
 ### Anti-Ghost Feature Guarantee
-Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `check_module_activation.py` verification. Modules must be truly integrated into dispatch pipeline (not just instantiated), with Markdown report sections user-visible.
+Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `check_module_activation.py` verification. Modules must be truly integrated into dispatch pipeline (not just instantiated), with Markdown report sections user-visible. V4.5.2 extends this pattern from V4.4.0 (RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector) to V4.5.2 (ApprovalGate / ConnectorFramework).
 
 ### Test Pyramid Achieved
 - **Contract tests**: 5.2% (target ≥5% ✅)
 - **Integration tests**: 15.1% (target ≥15% ✅)
-- **Total tests**: 8260+ (CI authoritative)
-- **E2E coverage**: 107 e2e + 1244 integration + 13 V4.4.0 anti-ghost
+- **Total tests**: 8392+ (CI authoritative)
+- **E2E coverage**: 107 e2e + 1244 integration + 13 V4.4.0 anti-ghost + 12 V4.5.2 anti-ghost
 
 ### Historical Features (V4.0.0-V4.3.3)
 - **V4.3.3**: P0-P3 enhancement E2E skeletons (xfail TDD for V4.4.0)
@@ -131,7 +142,7 @@ Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `
 - **V4.0.0 P3-1 Autonomous**: plan → dev → verify → fix 4-stage autonomous iteration
 - **V4.0.0 P3-2 Plugin Hot-Loading**: 3 loading paths + path traversal 3-layer protection + reload rollback
 
-8260+ tests passing (CI authoritative).
+8996+ tests passing (CI authoritative).
 
 ---
 
@@ -631,7 +642,7 @@ python3 -m pytest tests/ -q --tb=line
 | Document | Description | Language |
 |----------|-------------|----------|
 | [**QUICKSTART.md**](QUICKSTART.md) | **⭐ 30 秒快速入门指南（推荐新用户）** | 中文 |
-| [SKILL.md](SKILL.md) | 完整技能手册 + 185+ 模块参考 | EN/CN/JP |
+| [SKILL.md](SKILL.md) | 完整技能手册 + 187+ 模块参考 | EN/CN/JP |
 | [GUIDE.md](GUIDE.md) | 完全用户指南 | 中文 |
 | [INSTALL.md](INSTALL.md) | 安装指南 (Unix + Windows) | EN/CN |
 | [EXAMPLES.md](EXAMPLES.md) | 实际使用示例 | EN |
@@ -711,6 +722,6 @@ This project is licensed under the MIT License - see the [LICENSE](LICENSE) file
 
 ---
 
-*Last updated: 2026-08-03 | Version: V4.5.0 (cross-session continuity + protocol-native skills + action-first reports — 10 new features) | V4.4.0 (5 enhancement modules: RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector — see [CHANGELOG.md](CHANGELOG.md))*
+*Last updated: 2026-08-05 | Version: V4.5.2 (Approval Gate + Connector Framework + anti-ghost E2E — 2 new modules, 3 ROADMAP items completed) | V4.5.0 (cross-session continuity + protocol-native skills + action-first reports — 10 new features) | V4.4.0 (5 enhancement modules: RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector — see [CHANGELOG.md](CHANGELOG.md))*
 
 </details>

{devsquad-4.5.0 → devsquad-4.5.4}/devsquad.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devsquad
-Version: 4.5.0
+Version: 4.5.4
 Summary: Production-Ready Multi-Role AI Task Orchestrator
 Author-email: DevSquad Team <devsquad@example.com>
 License: MIT
@@ -96,14 +96,14 @@ Dynamic: license-file
 <p align="center">
   <strong>🎯 把「单个 AI 助手」升级成「7 人 AI 专业团队」</strong>
   <br>
-  <em>One task → Multi-role AI collaboration → One conclusion | V4.5.0 (cross-session continuity + protocol-native skills + action-first reports) | V4.4.0 (5 enhancement modules)</em>
+  <em>One task → Multi-role AI collaboration → One conclusion | V4.5.4 (Module Fiber + Coeffect: 6-state FSM + topological activation + modules CLI) | V4.5.3 (Artifacts + Effect — ArtifactStore + DispatchEffect + EffectRegistry + Audit CLI) | V4.5.2 (Experience polish: MOKA + Metrics + GitLab + Doctor + BackendConfig) | V4.5.0 (cross-session continuity + protocol-native skills) | V4.4.0 (5 enhancement modules)</em>
 </p>
 
 <p align="center">
   <img alt="Python" src="https://img.shields.io/badge/Python-3.10+-blue?logo=python&logoColor=white" />
   <img alt="License" src="https://img.shields.io/badge/License-MIT-green" />
-  <img alt="Tests" src="https://img.shields.io/badge/Tests-8260%2B%20passing-brightgreen" />
-  <img alt="Version" src="https://img.shields.io/badge/V4.5.0-success" />
+  <img alt="Tests" src="https://img.shields.io/badge/Tests-8996%2B%20passing-brightgreen" />
+  <img alt="Version" src="https://img.shields.io/badge/V4.5.4-success" />
   <img alt="CI" src="https://img.shields.io/badge/CI-GitHub_Actions-blue?logo=githubactions" />
   <img alt="Quality" src="https://img.shields.io/badge/Code%20Quality-4.3%2F5%20%E2%98%85%E2%98%85%E2%98%85%E2%98%85%E2%98%86-blue" />
   <img alt="Security" src="https://img.shields.io/badge/Security-5%2F5%20%E2%98%85%E2%98%85%E2%98%85%E2%98%85%E2%98%85-success" />
@@ -157,14 +157,25 @@ devsquad run "设计一个安全的用户认证系统" --roles architect,securit
 | 复杂系统设计（需要多视角） | **DevSquad 多角色协作** 🎯 |
 | 生产环境自动化流程 | **DevSquad + REST API + Dashboard** 🎯 |
 
-📚 **想深入了解？** → [完整快速入门指南](QUICKSTART.md) | [185+ 模块详细参考](SKILL.md)
+📚 **想深入了解？** → [完整快速入门指南](QUICKSTART.md) | [193 模块详细参考](SKILL.md)
 
 ---
 
 <details>
 <summary>🔍 点击展开：完整功能介绍与架构详解</summary>
 
-## 🚀 V4.5.0: Cross-Session Continuity + Protocol-Native Skills + Action-First Reports
+## 🚀 V4.5.2: Approval Gate + Connector Framework + Anti-Ghost E2E
+
+**DevSquad V4.5.2** (PATCH release, SemVer compliant) introduces 2 new modules and completes 3 ROADMAP items (V451-1, V451-2, V451-7/8/9). All new modules default to safe, backward-compatible behavior — no API breaking changes. See [docs/release_notes/V4.5.2_RELEASE_NOTES.md](docs/release_notes/V4.5.2_RELEASE_NOTES.md) for full release notes.
+
+### V4.5.2 — 2 New Modules + 3 ROADMAP Items
+- **ApprovalGate**: User-level approval mechanism for external operations. Fail-closed on callback exceptions. Auto-approve fallback when no callback configured (backward compatible).
+- **ConnectorFramework**: Protocol-based interface for external system integration (GitHub first). `Connector` Protocol + `GitHubConnector` (api/cli/simulation modes). `simulation=True` enforced by default in dispatch pipeline.
+- **V451-7 Dashboard browser-level E2E**: 11 AppTest cases (Streamlit AppTest replaces Playwright — avoids heavy browser deps while still being browser-level DOM simulation)
+- **V451-8 REST API end-to-end user journey E2E**: 190 E2E tests covering dispatch→history→roles→quick dispatch→error handling→lifecycle→cross-entry
+- **V451-9 Connector Framework anti-ghost E2E**: 12 E2E tests (AG-1 through AG-8) proving pipeline activation
+
+### V4.5.0 — Cross-Session Continuity + Protocol-Native Skills + Action-First Reports
 
 **DevSquad V4.5.0** (merging V4.4.3 + V4.4.4 + V4.5.0 changes) delivers 10 new features for cross-session continuity, protocol-native skill architecture, and action-first reporting. The 7-role AI team orchestrates complex engineering tasks with full audit trails and consensus mechanisms. See [docs/VISION.md](docs/VISION.md) for the project vision.
 
@@ -202,13 +213,13 @@ devsquad run "设计一个安全的用户认证系统" --roles architect,securit
 - 13 E2E tests xpass + anti-ghost counters
 
 ### Anti-Ghost Feature Guarantee
-Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `check_module_activation.py` verification. Modules must be truly integrated into dispatch pipeline (not just instantiated), with Markdown report sections user-visible.
+Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `check_module_activation.py` verification. Modules must be truly integrated into dispatch pipeline (not just instantiated), with Markdown report sections user-visible. V4.5.2 extends this pattern from V4.4.0 (RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector) to V4.5.2 (ApprovalGate / ConnectorFramework).
 
 ### Test Pyramid Achieved
 - **Contract tests**: 5.2% (target ≥5% ✅)
 - **Integration tests**: 15.1% (target ≥15% ✅)
-- **Total tests**: 8260+ (CI authoritative)
-- **E2E coverage**: 107 e2e + 1244 integration + 13 V4.4.0 anti-ghost
+- **Total tests**: 8392+ (CI authoritative)
+- **E2E coverage**: 107 e2e + 1244 integration + 13 V4.4.0 anti-ghost + 12 V4.5.2 anti-ghost
 
 ### Historical Features (V4.0.0-V4.3.3)
 - **V4.3.3**: P0-P3 enhancement E2E skeletons (xfail TDD for V4.4.0)
@@ -224,7 +235,7 @@ Every new module includes `_call_counter` mechanism + E2E anti_ghost test + CI `
 - **V4.0.0 P3-1 Autonomous**: plan → dev → verify → fix 4-stage autonomous iteration
 - **V4.0.0 P3-2 Plugin Hot-Loading**: 3 loading paths + path traversal 3-layer protection + reload rollback
 
-8260+ tests passing (CI authoritative).
+8996+ tests passing (CI authoritative).
 
 ---
 
@@ -724,7 +735,7 @@ python3 -m pytest tests/ -q --tb=line
 | Document | Description | Language |
 |----------|-------------|----------|
 | [**QUICKSTART.md**](QUICKSTART.md) | **⭐ 30 秒快速入门指南（推荐新用户）** | 中文 |
-| [SKILL.md](SKILL.md) | 完整技能手册 + 185+ 模块参考 | EN/CN/JP |
+| [SKILL.md](SKILL.md) | 完整技能手册 + 187+ 模块参考 | EN/CN/JP |
 | [GUIDE.md](GUIDE.md) | 完全用户指南 | 中文 |
 | [INSTALL.md](INSTALL.md) | 安装指南 (Unix + Windows) | EN/CN |
 | [EXAMPLES.md](EXAMPLES.md) | 实际使用示例 | EN |
@@ -804,6 +815,6 @@ This project is licensed under the MIT License - see the [LICENSE](LICENSE) file
 
 ---
 
-*Last updated: 2026-08-03 | Version: V4.5.0 (cross-session continuity + protocol-native skills + action-first reports — 10 new features) | V4.4.0 (5 enhancement modules: RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector — see [CHANGELOG.md](CHANGELOG.md))*
+*Last updated: 2026-08-05 | Version: V4.5.2 (Approval Gate + Connector Framework + anti-ghost E2E — 2 new modules, 3 ROADMAP items completed) | V4.5.0 (cross-session continuity + protocol-native skills + action-first reports — 10 new features) | V4.4.0 (5 enhancement modules: RiskRegister / ViewpointRegistry / ErrorBudgetTracker / GapAnalyzer / DoraMetricsCollector — see [CHANGELOG.md](CHANGELOG.md))*
 
 </details>

{devsquad-4.5.0 → devsquad-4.5.4}/devsquad.egg-info/SOURCES.txt

@@ -20,14 +20,21 @@ scripts/check_dependency_lock.py
 scripts/check_dependency_sync.py
 scripts/check_doc_consistency.py
 scripts/check_hidden_content.py
+scripts/check_module_activation.py
 scripts/check_test_pyramid.py
 scripts/check_test_quality.py
 scripts/check_version_consistency.py
 scripts/cli.py
+scripts/cli_audit.py
+scripts/cli_backend.py
 scripts/cli_dispatch.py
+scripts/cli_doctor.py
 scripts/cli_lifecycle.py
+scripts/cli_metrics.py
+scripts/cli_modules.py
 scripts/cli_sessions.py
 scripts/cli_utils.py
+scripts/collect_baseline.py
 scripts/dashboard.py
 scripts/generate_benchmark_report.py
 scripts/generate_quality_decision_report.py
@@ -54,10 +61,14 @@ scripts/collaboration/agent_identity.py
 scripts/collaboration/ai_semantic_matcher.py
 scripts/collaboration/anchor_checker.py
 scripts/collaboration/anti_rationalization.py
+scripts/collaboration/approval_gate.py
+scripts/collaboration/artifact_store.py
 scripts/collaboration/async_adapter.py
 scripts/collaboration/async_coordinator.py
 scripts/collaboration/async_llm_backend.py
 scripts/collaboration/audit_logger.py
+scripts/collaboration/backend_config.py
+scripts/collaboration/backend_paths.py
 scripts/collaboration/batch_scheduler.py
 scripts/collaboration/benchmark_regression_checker.py
 scripts/collaboration/cache_interface.py
@@ -69,9 +80,11 @@ scripts/collaboration/code_graph_query.py
 scripts/collaboration/code_graph_storage.py
 scripts/collaboration/code_knowledge_graph.py
 scripts/collaboration/code_map_generator.py
+scripts/collaboration/coeffect.py
 scripts/collaboration/concern_pack_loader.py
 scripts/collaboration/confidence_score.py
 scripts/collaboration/config_manager.py
+scripts/collaboration/connector_framework.py
 scripts/collaboration/consensus.py
 scripts/collaboration/consensus_gate.py
 scripts/collaboration/constants.py
@@ -85,6 +98,7 @@ scripts/collaboration/dependency_hallucination_checker.py
 scripts/collaboration/deployment_compliance_checker.py
 scripts/collaboration/dispatch_audit.py
 scripts/collaboration/dispatch_component_factory.py
+scripts/collaboration/dispatch_effect.py
 scripts/collaboration/dispatch_hooks.py
 scripts/collaboration/dispatch_lifecycle.py
 scripts/collaboration/dispatch_models.py
@@ -113,6 +127,7 @@ scripts/collaboration/dispatcher_status_mixin.py
 scripts/collaboration/dispatcher_utils_mixin.py
 scripts/collaboration/dora_metrics_collector.py
 scripts/collaboration/dual_layer_context.py
+scripts/collaboration/effect_registry.py
 scripts/collaboration/enhanced_worker.py
 scripts/collaboration/enterprise_feature.py
 scripts/collaboration/error_budget_tracker.py
@@ -123,6 +138,8 @@ scripts/collaboration/feedback_control_loop.py
 scripts/collaboration/file_bundler.py
 scripts/collaboration/five_axis_consensus.py
 scripts/collaboration/gap_analyzer.py
+scripts/collaboration/gitlab_connector.py
+scripts/collaboration/host_llm_bridge.py
 scripts/collaboration/input_validator.py
 scripts/collaboration/intent_workflow_mapper.py
 scripts/collaboration/judge_agent.py
@@ -154,13 +171,17 @@ scripts/collaboration/models.py
 scripts/collaboration/models_base.py
 scripts/collaboration/models_dispatch.py
 scripts/collaboration/models_lifecycle.py
+scripts/collaboration/module_fiber.py
+scripts/collaboration/moka_backend.py
 scripts/collaboration/multi_host_adapter.py
 scripts/collaboration/multi_level_cache.py
 scripts/collaboration/multi_tenant.py
 scripts/collaboration/null_providers.py
 scripts/collaboration/operation_classifier.py
+scripts/collaboration/order_chain_detector.py
 scripts/collaboration/output_slicer.py
 scripts/collaboration/output_validator.py
+scripts/collaboration/perf_baseline.py
 scripts/collaboration/performance_fingerprint.py
 scripts/collaboration/performance_monitor.py
 scripts/collaboration/permission_guard.py
@@ -203,6 +224,7 @@ scripts/collaboration/skill_storage.py
 scripts/collaboration/skillifier.py
 scripts/collaboration/standardized_role_template.py
 scripts/collaboration/task_completion_checker.py
+scripts/collaboration/task_scale_gate.py
 scripts/collaboration/tech_debt_manager.py
 scripts/collaboration/test_quality_guard.py
 scripts/collaboration/todo_drift_monitor.py
@@ -291,11 +313,15 @@ tests/test_antipattern_bans.py
 tests/test_api_budget_status_endpoint.py
 tests/test_api_security.py
 tests/test_api_server_v362.py
+tests/test_approval_gate.py
+tests/test_artifact_effect_binding.py
+tests/test_artifact_store.py
 tests/test_async_coordinator.py
 tests/test_async_modules.py
 tests/test_audit_logger.py
 tests/test_auth_phase5.py
 tests/test_autonomous.py
+tests/test_backend_config.py
 tests/test_benchmark_ponytail_smart.py
 tests/test_cache_interface.py
 tests/test_ccr_store.py
@@ -308,9 +334,12 @@ tests/test_check_test_pyramid.py
 tests/test_check_test_quality.py
 tests/test_check_version_consistency.py
 tests/test_ci_feedback_adapter.py
+tests/test_cli_audit.py
 tests/test_cli_command_classifier.py
 tests/test_cli_deep_v362.py
+tests/test_cli_doctor.py
 tests/test_cli_lifecycle.py
+tests/test_cli_metrics.py
 tests/test_cli_phase5.py
 tests/test_code_knowledge_graph.py
 tests/test_collaboration_claw_integration_test.py
@@ -362,16 +391,20 @@ tests/test_dispatcher_mixins.py
 tests/test_dispatcher_phase5_core.py
 tests/test_docker_deployment.py
 tests/test_dual_layer_context.py
+tests/test_effect_registry.py
 tests/test_enhanced_worker.py
+tests/test_fallback_fuse.py
 tests/test_feedback_control_loop.py
 tests/test_five_axis_consensus.py
 tests/test_flow_standalone.py
 tests/test_full_lifecycle_adapter.py
 tests/test_git_guardrails.py
+tests/test_gitlab_connector.py
 tests/test_glossary_loader.py
 tests/test_grilling_mode.py
 tests/test_handoff_redaction.py
 tests/test_history_manager_v362.py
+tests/test_host_bridge_unit.py
 tests/test_input_validator_phase5.py
 tests/test_input_validator_sensitive.py
 tests/test_intent_workflow_mapper.py
@@ -379,6 +412,7 @@ tests/test_judge_agent.py
 tests/test_learned_rule_phase4.py
 tests/test_lifecycle_protocol.py
 tests/test_llm_auto_fallback.py
+tests/test_llm_backend_resolve.py
 tests/test_llm_cache_protocol.py
 tests/test_loop_engineering.py
 tests/test_loop_engineering_rollback.py
@@ -386,6 +420,7 @@ tests/test_mcp_server_v362.py
 tests/test_memory_benchmarks.py
 tests/test_meta_skill_layering.py
 tests/test_micro_task_planner.py
+tests/test_moka_backend.py
 tests/test_multi_host_adapter.py
 tests/test_multi_tenant.py
 tests/test_multi_tenant_isolation_e2e.py
@@ -394,8 +429,11 @@ tests/test_node_type_separation.py
 tests/test_null_providers.py
 tests/test_oklch_color.py
 tests/test_operation_classifier.py
+tests/test_order_chain_detector.py
 tests/test_output_slicer.py
 tests/test_output_validator_prompt_injection.py
+tests/test_perf_baseline.py
+tests/test_perf_baseline_ci_gate.py
 tests/test_performance_benchmarks.py
 tests/test_performance_fingerprint.py
 tests/test_performance_monitor_protocol.py
@@ -435,6 +473,7 @@ tests/test_start_script.py
 tests/test_step_node_types.py
 tests/test_suggested_next_steps.py
 tests/test_task_completion_checker.py
+tests/test_task_scale_gate.py
 tests/test_taste_dials.py
 tests/test_tautological_seams.py
 tests/test_teach_skill.py
@@ -452,6 +491,7 @@ tests/test_v411_security_hardening.py
 tests/test_verification_gate.py
 tests/test_version.py
 tests/test_vertical_slice.py
+tests/test_worker_artifact_integration.py
 tests/test_workflow_engine.py
 tests/test_workflow_engine_base.py
 tests/test_workflow_engine_lifecycle.py

{devsquad-4.5.0 → devsquad-4.5.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "devsquad"
-version = "4.5.0"
+version = "4.5.4"
 description = "Production-Ready Multi-Role AI Task Orchestrator"
 readme = "README.md"
 license = {text = "MIT"}
@@ -219,6 +219,10 @@ markers = [
     "unit: marks tests as unit tests",
     "smoke: marks tests as release smoke tests",
     "asyncio: async tests using pytest-asyncio",
+    "security: security tests (no-secrets-in-repo, redteam)",
+    "contract: cross-module API contract tests",
+    "openai: real OpenAI API tests (release-only)",
+    "moka: real MOKA AI API tests (release-only)",
 ]
 filterwarnings = [
     "ignore::DeprecationWarning",

{devsquad-4.5.0 → devsquad-4.5.4}/scripts/api/routes/dispatch.py

@@ -49,12 +49,22 @@ _global_dispatcher: MultiAgentDispatcher | None = None
 
 
 def _get_dispatcher() -> MultiAgentDispatcher:
-    """Get or create the global MultiAgentDispatcher instance."""
+    """Get or create the global MultiAgentDispatcher instance.
+
+    RBAC mode is selected by environment:
+      - ``DEVSQUAD_API_AUTH_DISABLED=1`` → development_mode=True (RBAC open,
+        for E2E tests and local dev). This env var already disables API key
+        auth, so treating it as a dev/test signal is consistent.
+      - Otherwise → development_mode=False (HC-1: production RBAC fail-closed).
+    """
     global _global_dispatcher
     if _global_dispatcher is None:
         try:
             from scripts.collaboration.dispatcher import MultiAgentDispatcher
 
+            _is_dev_mode = os.environ.get("DEVSQUAD_API_AUTH_DISABLED", "").strip() in (
+                "1", "true", "True", "TRUE",
+            )
             _global_dispatcher = MultiAgentDispatcher(
                 enable_warmup=True,
                 enable_compression=True,
@@ -62,9 +72,12 @@ def _get_dispatcher() -> MultiAgentDispatcher:
                 enable_memory=True,
                 enable_skillify=True,
                 enable_quality_guard=False,
-                development_mode=False,  # HC-1: production mode enforces RBAC fail-closed
+                development_mode=_is_dev_mode,  # HC-1: prod fail-closed; dev open
+            )
+            logger.info(
+                "MultiAgentDispatcher initialized (development_mode=%s)",
+                _is_dev_mode,
             )
-            logger.info("MultiAgentDispatcher initialized successfully")
         except (ImportError, RuntimeError) as e:
             logger.error("Failed to initialize MultiAgentDispatcher: %s", e)
             raise HTTPException(status_code=503, detail=f"Dispatcher initialization failed: {str(e)}") from None

{devsquad-4.5.0 → devsquad-4.5.4}/scripts/check_doc_consistency.py

@@ -18,7 +18,7 @@ from __future__ import annotations
 
 import re
 import sys
-from dataclasses import dataclass, field
+from dataclasses import dataclass
 from pathlib import Path
 
 __all__ = ["Violation", "check_test_count_consistency", "check_module_count_consistency", "main"]