execweave 0.7.6__tar.gz → 0.7.8__tar.gz

{execweave-0.7.6 → execweave-0.7.8}/.github/workflows/provider-capability-stage-integrity.yml

@@ -46,3 +46,4 @@ jobs:
           python scripts/check_release_stage_integrity.py
           --baseline-ref "${{ github.event.pull_request.base.sha || inputs.baseline_ref }}"
           --allow-test-change "tests/test_dashboard_information_architecture.py=the assertion pinned the colliding eight-character id fallback, which was the defect itself; the labels-are-provider-neutral subject is unchanged and still asserted"
+          --allow-test-change "tests/test_agent_node_labels.py=the assertion required the unscoped conversation record fallback to label agents correctly; that fallback showed every agent every other agent's conversation and has been removed, so the test now asserts the stronger property that no such fallback exists"

execweave-0.7.8/.github/workflows/viewer-agent-isolation.yml

@@ -0,0 +1,40 @@
+name: Viewer Agent Isolation
+
+# Every agent-isolation defect this project shipped passed the unit suite and was
+# found by a person opening the page. This job opens the pages instead: it renders
+# one four-agent run through both shipped viewers and reads what each agent shows.
+# The live dashboard is exercised mid-run, because that is the state in which it
+# showed every agent every other agent's conversation.
+on:
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  viewers:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Install
+        run: python -m pip install -e ".[dev,e2e]"
+
+      - name: Install Chromium
+        run: python -m playwright install --with-deps chromium
+
+      # EXECWEAVE_E2E_REQUIRED turns a missing browser into a failure. Without it
+      # the checks skip themselves when the browser cannot start, and a skipped
+      # viewer check is indistinguishable from a passing one.
+      - name: Read both viewers in a browser
+        env:
+          EXECWEAVE_E2E_REQUIRED: "1"
+        run: python -m pytest -m viewer_e2e -v

{execweave-0.7.6 → execweave-0.7.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: execweave
-Version: 0.7.6
+Version: 0.7.8
 Summary: Turn AI-agent runtime behavior into a local interactive execution graph.
 Project-URL: Homepage, https://github.com/Irish-kw/ExecWeave
 Project-URL: Repository, https://github.com/Irish-kw/ExecWeave
@@ -44,6 +44,8 @@ Requires-Dist: watchdog>=4.0
 Provides-Extra: dev
 Requires-Dist: pytest>=8.0; extra == 'dev'
 Requires-Dist: ruff<0.17,>=0.16; extra == 'dev'
+Provides-Extra: e2e
+Requires-Dist: playwright>=1.44; extra == 'e2e'
 Provides-Extra: release
 Requires-Dist: build>=1.2; extra == 'release'
 Requires-Dist: twine>=6.0; extra == 'release'
@@ -82,7 +84,7 @@ Install the latest published wheel/sdist from PyPI:
 python -m pip install -U execweave
 ```
 
-The current release is **v0.7.6**.
+The current release is **v0.7.8**.
 
 For development:
 
@@ -118,7 +120,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex` keeps the Agent interactive in the launch terminal while opening/attaching the detached Top dashboard according to the host environment.
 
-**v0.7.6 — an agent panel that answers what the agent said, and streamed responses rebuilt into one record.** Selecting an agent now opens with that agent's own turns, read as who said what, keeping the provider-neutral, agent-local multi-agent conversations each agent already owned. Consecutive turns a provider did not expose collapse into one line that still names the agents they were addressed to, and the multi-kilobyte preamble a provider prepends to every subagent is folded rather than leading the panel; the node evidence and trace stay one disclosure away. Graph labels resolve each agent's declared path, so siblings spawned in the same millisecond no longer render as the same fragment of a time-ordered id. Underneath, a streamed response is reassembled into the same canonical record its non-streamed twin would produce — text, reasoning and tool calls split across frames are rejoined before anything is materialized, and a stream that ended early is recorded as interrupted rather than completed.
+**v0.7.8 — a conversation belongs to an agent, everywhere a person can click.** Selecting a node that is not an agent used to resolve to the same empty selection an unselected graph does, so a network endpoint or a process drew every agent's conversation; the selection kind is now tracked apart from the focused agent, and anything that is not an agent says so instead. A provider that prepends the same multi-kilobyte block to every subagent had it recorded where each agent's own assignment belongs, so four siblings rendered as four copies of one plugin catalogue: a text appearing verbatim under two or more agents is not any one agent's assignment, and is folded and named for what it is. Where several agents were read from one rollout — Codex records a child's delegation and return in the parent's file — only the agent that owns it offers the raw bytes, and the others name whose record their turns came from, so a link inside a child's section no longer opens the whole run. The provider-neutral, agent-local multi-agent conversations each agent owns are also projected during a run now, not only once it ends. A release check drives both shipped viewers in a real browser through every selection a person can make, so an agent seeing what is not its own fails a build instead of reaching a release.
 
 The unified dashboard brings the execution graph, logs, and conversation records into the same inspection flow. Finalized runs generate `conversations.md` and `conversations.json`, while validated provider transcripts are copied into the run-local SHA-256 content store. Claude Code, OpenAI Codex, Cursor, OpenCode, and Google Antigravity use the strongest provider-exposed multi-agent evidence available to each integration. For gateways and local runtimes that expose only root request/response traffic, ExecWeave shows only that root conversation and does not invent subagents or hidden routing.
 
@@ -327,7 +329,7 @@ Conversation isolation is an attribution/display rule, not a redaction boundary.
 
 ## Current status
 
-v0.7.6 combines cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, conservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, direct run-local conversation access, agent-local conversation isolation across provider-neutral projections, and per-agent conversation focus in the standalone and live dashboards. Supported integrations preserve the strongest identity/routing evidence actually exposed by each provider and abstain when that evidence is unavailable. Observed evidence and inference remain separate by design.
+v0.7.8 combines cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, conservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, direct run-local conversation access, agent-local conversation isolation across provider-neutral projections, and per-agent conversation focus in the standalone and live dashboards. Supported integrations preserve the strongest identity/routing evidence actually exposed by each provider and abstain when that evidence is unavailable. Observed evidence and inference remain separate by design.
 
 ## Documentation
 

{execweave-0.7.6 → execweave-0.7.8}/README.de.md

@@ -31,7 +31,7 @@ Installieren Sie das neueste veröffentlichte wheel/sdist von PyPI:
 python -m pip install -U execweave
 ```
 
-Die aktuelle Version ist **v0.7.6**.
+Die aktuelle Version ist **v0.7.8**.
 
 Für die Entwicklung:
 
@@ -67,7 +67,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex` hält den Agent im Startterminal interaktiv und öffnet bzw. verbindet gleichzeitig das detached Top dashboard entsprechend der Host-Umgebung.
 
-**v0.7.6 — ein Agent-Panel, das beantwortet, was der Agent gesagt hat, und gestreamte Antworten, die zu einem Datensatz zusammengesetzt werden.** Die Auswahl eines Agents öffnet nun mit dessen eigenen Turns, gelesen als wer was gesagt hat, und behält die provider-neutralen, agent-lokalen Multi-Agent-Conversations bei, die jeder Agent bereits besaß. Aufeinanderfolgende Turns, die ein Provider nicht offengelegt hat, klappen zu einer Zeile zusammen, die weiterhin die adressierten Agents nennt, und die mehrere Kilobyte lange Präambel, die ein Provider jedem Subagent voranstellt, wird gefaltet statt an den Anfang gestellt; Node-Evidence und Trace bleiben eine Offenlegung entfernt. Graph-Labels lösen den deklarierten Path jedes Agents auf, sodass in derselben Millisekunde erzeugte Geschwister nicht mehr als dasselbe Fragment einer zeitgeordneten Id erscheinen. Darunter wird eine gestreamte Antwort zu demselben kanonischen Datensatz zusammengesetzt, den ihr nicht gestreamtes Gegenstück erzeugen würde: über Frames verteilte Texte, Reasoning und Tool Calls werden vor der Materialisierung wieder verbunden, und ein früh beendeter Stream wird als unterbrochen festgehalten.
+**v0.7.8 — eine Conversation gehört einem Agent, überall wo eine Person klicken kann.** Die Auswahl eines Nodes, der kein Agent ist, löste sich zur selben leeren Auswahl auf wie ein nicht ausgewählter Graph, sodass ein Netzwerk-Endpunkt oder ein Prozess die Conversation jedes Agents zeichnete; die Art der Auswahl wird nun getrennt vom fokussierten Agent verfolgt, und was kein Agent ist, sagt das auch. Der mehrere Kilobyte große Block, den ein Provider jedem Subagent voranstellt, war dort aufgezeichnet, wo die eigene Zuweisung jedes Agents hingehört, sodass vier Geschwister als vier Kopien eines Plugin-Katalogs erschienen: Ein Text, der wortgleich unter zwei oder mehr Agents auftaucht, ist die Zuweisung keines von ihnen, wird gefaltet und benannt, was er ist. Wo mehrere Agents aus einem Rollout gelesen wurden — Codex hält die Delegation eines Kindes und dessen Rückgabe in der Datei des Elternteils fest — bietet nur der Agent, dem sie gehört, die Rohbytes an, und die übrigen nennen, aus wessen Aufzeichnung ihre Turns gelesen wurden, sodass ein Link in der Sektion eines Kindes nicht mehr den ganzen Run öffnet. Die provider-neutralen, agent-lokalen Multi-Agent-Conversations, die jeder Agent besitzt, werden nun während eines Runs projiziert, nicht erst wenn er endet. Eine Release-Prüfung führt beide ausgelieferten Viewer in einem echten Browser durch jede Auswahl, die eine Person treffen kann: Ein Agent, der sieht, was ihm nicht gehört, lässt den Build scheitern, statt in ein Release zu gelangen.
 
 Das vereinheitlichte Dashboard bringt execution graph, logs und conversation records in denselben Inspection-Flow. Finalisierte Runs erzeugen `conversations.md` und `conversations.json`; validierte Provider-Transcripts werden in den run-local SHA-256 content store kopiert. Claude Code, OpenAI Codex, Cursor, OpenCode und Google Antigravity verwenden jeweils die stärkste Multi-Agent-Evidence, die ihre Integration tatsächlich offenlegt. Wenn ein Gateway oder lokaler Runtime nur root request/response sichtbar macht, zeigt ExecWeave nur diese Root-Conversation und erfindet weder Subagents noch hidden routing.
 
@@ -276,7 +276,7 @@ Conversation isolation ist eine Attribution-/Display-Regel, keine Redaction Boun
 
 ## Aktueller Stand
 
-v0.7.6 kombiniert cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, konservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, direkten run-local conversation access agent-local conversation isolation in provider-neutralen Projektionen und per-agent conversation focus in den Standalone- und Live-Dashboards. Jede Integration bewahrt nur die stärkste identity/routing evidence, die der Provider tatsächlich offenlegt, und enthält sich, wenn diese Evidence fehlt. Observed evidence und inference bleiben konstruktiv getrennt.
+v0.7.8 kombiniert cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, konservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, direkten run-local conversation access agent-local conversation isolation in provider-neutralen Projektionen und per-agent conversation focus in den Standalone- und Live-Dashboards. Jede Integration bewahrt nur die stärkste identity/routing evidence, die der Provider tatsächlich offenlegt, und enthält sich, wenn diese Evidence fehlt. Observed evidence und inference bleiben konstruktiv getrennt.
 
 ## Dokumentation
 

{execweave-0.7.6 → execweave-0.7.8}/README.fr.md

@@ -31,7 +31,7 @@ Installez le dernier wheel/sdist publié depuis PyPI :
 python -m pip install -U execweave
 ```
 
-La version courante est **v0.7.6**.
+La version courante est **v0.7.8**.
 
 Pour le développement :
 
@@ -67,7 +67,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex` garde l’Agent interactif dans le terminal de lancement tout en ouvrant ou en attachant le dashboard Top détaché selon l’environnement hôte.
 
-**v0.7.6 — un panneau d’agent qui répond à ce que l’agent a dit, et des réponses en flux reconstruites en un seul enregistrement.** Sélectionner un agent ouvre désormais sur ses propres turns, lus comme qui a dit quoi, en conservant les conversations multi-agent provider-neutral et agent-local que chaque agent possédait déjà. Les turns consécutifs qu’un provider n’a pas exposés se replient en une ligne qui nomme toujours les agents destinataires, et le préambule de plusieurs kilo-octets qu’un provider ajoute devant chaque subagent est plié plutôt que placé en tête du panneau ; l’evidence du node et la trace restent à une divulgation de distance. Les libellés du graphe résolvent le path déclaré de chaque agent, si bien que des frères créés dans la même milliseconde ne s’affichent plus comme le même fragment d’un id ordonné par le temps. En dessous, une réponse en flux est réassemblée dans le même enregistrement canonique que produirait sa jumelle non diffusée : texte, reasoning et tool calls répartis sur plusieurs frames sont rejoints avant toute matérialisation, et un flux interrompu est consigné comme interrompu.
+**v0.7.8 — une conversation appartient à un agent, partout où une personne peut cliquer.** Sélectionner un node qui n'est pas un agent se résolvait comme la sélection vide d'un graphe non sélectionné, si bien qu'un point de terminaison réseau ou un processus dessinait la conversation de tous les agents ; le type de sélection est désormais suivi séparément de l'agent ciblé, et ce qui n'est pas un agent le dit. Le bloc de plusieurs kilo-octets qu'un provider ajoute devant chaque subagent était enregistré là où appartient l'assignation propre de chaque agent, si bien que quatre frères s'affichaient comme quatre copies d'un même catalogue de plugins : un texte apparaissant mot pour mot sous deux agents ou plus n'est l'assignation d'aucun d'eux, il est plié et nommé pour ce qu'il est. Lorsque plusieurs agents ont été lus depuis un seul rollout — Codex enregistre la délégation d'un enfant et son retour dans le fichier du parent — seul l'agent qui le possède offre les octets bruts, et les autres nomment le registre d'où viennent leurs turns, si bien qu'un lien dans la section d'un enfant n'ouvre plus le run entier. Les conversations multi-agent provider-neutral et agent-local que chaque agent possède sont désormais projetées pendant un run, et non une fois seulement qu'il est terminé. Une vérification de release pilote les deux viewers livrés dans un vrai navigateur à travers chaque sélection possible : un agent voyant ce qui ne lui appartient pas fait échouer la construction au lieu d'atteindre une release.
 
 Le dashboard unifié rassemble execution graph, logs et conversation records dans le même flux d’inspection. Les runs finalisés génèrent `conversations.md` et `conversations.json`, et les transcripts provider validés sont copiés dans le content store SHA-256 local au run. Claude Code, OpenAI Codex, Cursor, OpenCode et Google Antigravity exploitent chacun le niveau de multi-agent evidence réellement exposé par leur integration. Lorsqu’un gateway ou un local runtime n’expose que des request/response root, ExecWeave affiche uniquement cette root conversation et n’invente ni subagent ni hidden routing.
 
@@ -276,7 +276,7 @@ La conversation isolation est une règle d’attribution et d’affichage, pas u
 
 ## État actuel
 
-v0.7.6 combine cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, conservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, accès direct aux conversations run-local agent-local conversation isolation dans les projections provider-neutral et per-agent conversation focus dans les dashboards standalone et live. Chaque integration conserve uniquement la meilleure identity/routing evidence réellement exposée par le provider et s’abstient lorsque cette evidence manque. Observed evidence et inference restent séparées par conception.
+v0.7.8 combine cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, conservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, accès direct aux conversations run-local agent-local conversation isolation dans les projections provider-neutral et per-agent conversation focus dans les dashboards standalone et live. Chaque integration conserve uniquement la meilleure identity/routing evidence réellement exposée par le provider et s’abstient lorsque cette evidence manque. Observed evidence et inference restent séparées par conception.
 
 ## Documentation
 

{execweave-0.7.6 → execweave-0.7.8}/README.ja.md

@@ -31,7 +31,7 @@ PyPI から最新の wheel/sdist をインストールします。
 python -m pip install -U execweave
 ```
 
-現在のリリースは **v0.7.6** です。
+現在のリリースは **v0.7.8** です。
 
 開発環境では次のようにインストールできます。
 
@@ -67,7 +67,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex` は Agent を起動 terminal 上でインタラクティブなまま保ち、ホスト環境に応じて detached Top dashboard を開くか既存のものに attach します。
 
-**v0.7.6 — その agent が何を言ったかに答える agent panel と、ひとつのレコードに再構成される streamed response。** agent を選択すると、その agent 自身の turn が「誰が何を言ったか」として最初に表示され、各 agent がすでに保持していた provider-neutral かつ agent-local な multi-agent conversation を引き継ぎます。provider が公開しなかった連続する turn は 1 行にまとめられますが、宛先の agent は列挙されたままです。provider がすべての subagent に前置きする数キロバイトの内容は 折りたたまれ、パネルの先頭を占めません。node evidence と trace も開示ひとつ分の距離にあります。Graph label は各 agent が 宣言した path を解決するため、同一ミリ秒で生成された兄弟が同じ time-ordered id の断片として描画されることはありません。内部では streamed response が非ストリーミング版と同じ canonical record に再構成され、frame をまたいで分割されたテキスト、reasoning、tool call は materialize の前に結合され、途中で終わったストリームは完了ではなく中断として記録されます。
+**v0.7.8 — conversation は agent のものであり、それは人がクリックできるすべての場所で成り立つ。** agent ではない node の選択は、何も選ばれていない状態と同じものに解決されていたため、network endpoint や process がすべての agent の conversation を描いていました。選択の種類は焦点の agent とは別に追跡され、agent でないものはそう述べます。provider がすべての subagent の前に付ける同一の数キロバイトのブロックは各 agent 自身の assignment の位置に記録されており、四つの兄弟が同じプラグイン一覧の四つの複製として描かれていました。二つ以上の agent の下に一字一句同じ形で現れるテキストは、どの agent の assignment でもありません。折りたたまれ、実態どおりに名付けられます。複数の agent が一つの rollout から読まれている場合 — Codex は child の委任と返答を親のファイルに記録します — 生のバイト列を提供するのはそれを所有する agent だけで、他は自分の turn がどの記録から読まれたかを示すため、child のセクション内のリンクが run 全体を開くことはありません。各 agent が保持する provider-neutral かつ agent-local な multi-agent conversation は、実行が終わったあとだけでなく実行中にも投影されます。リリース前の検査は実物のブラウザで両方の viewer を、人が行えるあらゆる選択にわたって駆動するため、agent が自分のものでないものを見る状態は release に届く前にビルドを失敗させます。
 
 統合 dashboard では execution graph、logs、conversation records を同じ inspection flow で確認できます。Finalized run は `conversations.md` と `conversations.json` を生成し、検証済み provider transcript は run-local SHA-256 content store にコピーされます。Claude Code、OpenAI Codex、Cursor、OpenCode、Google Antigravity は、それぞれが実際に公開する最も強い multi-agent evidence を利用します。gateway や local runtime が root request/response しか公開しない場合、ExecWeave は root conversation だけを表示し、subagent や hidden routing を捏造しません。
 
@@ -276,7 +276,7 @@ Conversation isolation は attribution/display の規則であり redaction boun
 
 ## 現在の状態
 
-v0.7.6 は cross-platform runtime collection、materialized execution graph、standalone/live dashboard、保守的な provider↔runtime correlation、content-addressed full-fidelity provider evidence、attributable multi-agent execution trace、run-local conversation access、provider-neutral projection 上の agent-local conversation isolation、standalone および live dashboard での per-agent conversation focus を統合します。各 integration は provider が実際に公開した最も強い identity/routing evidence のみを保持し、不足する場合は abstain します。Observed evidence と inference は設計上分離されたままです。
+v0.7.8 は cross-platform runtime collection、materialized execution graph、standalone/live dashboard、保守的な provider↔runtime correlation、content-addressed full-fidelity provider evidence、attributable multi-agent execution trace、run-local conversation access、provider-neutral projection 上の agent-local conversation isolation、standalone および live dashboard での per-agent conversation focus を統合します。各 integration は provider が実際に公開した最も強い identity/routing evidence のみを保持し、不足する場合は abstain します。Observed evidence と inference は設計上分離されたままです。
 
 ## ドキュメント
 

{execweave-0.7.6 → execweave-0.7.8}/README.ko.md

@@ -31,7 +31,7 @@ PyPI에서 최신 wheel/sdist를 설치합니다.
 python -m pip install -U execweave
 ```
 
-현재 릴리스는 **v0.7.6** 입니다.
+현재 릴리스는 **v0.7.8** 입니다.
 
 개발 설치:
 
@@ -67,7 +67,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex`는 Agent를 시작 terminal에서 interactive 상태로 유지하면서 host 환경에 따라 detached Top dashboard를 열거나 attach합니다.
 
-**v0.7.6 — 그 agent가 무엇을 말했는지에 답하는 agent panel, 그리고 하나의 레코드로 재조립되는 streamed response.** agent를 선택하면 그 agent 자신의 turn이 '누가 무엇을 말했는가'로 가장 먼저 표시되며, 각 agent가 이미 보유하던 provider-neutral, agent-local multi-agent conversation을 그대로 이어갑니다. provider가 노출하지 않은 연속된 turn은 한 줄로 접히지만 수신한 agent들은 그대로 나열됩니다. provider가 모든 subagent 앞에 붙이는 수 킬로바이트 서두는 접혀서 패널 머리를 차지하지 않고, node evidence와 trace도 한 번의 펼침 거리에 있습니다. Graph label은 각 agent가 선언한 path를 해석하므로 같은 밀리초에 생성된 형제가 동일한 time-ordered id 조각으로 그려지지 않습니다. 내부적으로 streamed response는 비스트리밍 버전과 동일한 canonical record로 재조립되어, frame을 가로질러 나뉜 텍스트·reasoning·tool call이 materialize 전에 이어 붙고, 일찍 끝난 스트림은 완료가 아니라 중단으로 기록됩니다.
+**v0.7.8 — conversation 은 agent 의 것이며, 사람이 클릭할 수 있는 모든 곳에서 그렇다.** agent 가 아닌 node 를 선택하면 아무것도 선택하지 않은 상태와 같은 값으로 해석되어, network endpoint 나 process 가 모든 agent 의 conversation 을 그렸습니다. 이제 선택의 종류를 초점이 맞춰진 agent 와 분리해 추적하며, agent 가 아닌 것은 그렇다고 말합니다. provider 가 모든 subagent 앞에 붙이는 동일한 수 킬로바이트 블록이 각 agent 자신의 assignment 자리에 기록되어, 네 형제가 같은 플러그인 목록의 사본 넷으로 그려졌습니다. 둘 이상의 agent 아래에 한 글자도 다르지 않게 나타나는 텍스트는 어느 agent 의 assignment 도 아니므로, 접히고 실제 그대로 이름 붙습니다. 여러 agent 가 하나의 rollout 에서 읽힌 경우 — Codex 는 child 의 위임과 반환을 부모의 파일에 기록합니다 — 원본 바이트를 제공하는 것은 그것을 소유한 agent 뿐이며, 나머지는 자신의 turn 이 누구의 기록에서 읽혔는지 밝히므로 child 섹션의 링크가 run 전체를 열지 않습니다. 각 agent 가 소유한 provider-neutral, agent-local multi-agent conversation 은 실행이 끝난 뒤가 아니라 실행 중에도 투영됩니다. 릴리스 검사는 실제 브라우저로 두 viewer 를 사람이 할 수 있는 모든 선택에 걸쳐 구동하므로, agent 가 자기 것이 아닌 것을 보는 상태는 release 에 도달하는 대신 빌드를 실패시킵니다.
 
 통합 dashboard는 execution graph, logs, conversation records를 하나의 inspection flow에서 제공합니다. Finalized run은 `conversations.md`와 `conversations.json`을 만들며, 검증된 provider transcript는 run-local SHA-256 content store로 복사됩니다. Claude Code, OpenAI Codex, Cursor, OpenCode, Google Antigravity는 각 integration이 실제로 노출하는 가장 강한 multi-agent evidence를 사용합니다. gateway나 local runtime이 root request/response만 노출하면 ExecWeave는 root conversation만 보여 주며 subagent나 hidden routing을 만들어내지 않습니다.
 
@@ -276,7 +276,7 @@ Conversation isolation은 attribution/display 규칙이지 redaction boundary가
 
 ## 현재 상태
 
-v0.7.6는 cross-platform runtime collection, materialized execution graph, standalone/live dashboard, 보수적인 provider↔runtime correlation, content-addressed full-fidelity provider evidence, attributable multi-agent execution trace, run-local conversation access, provider-neutral projection의 agent-local conversation isolation, standalone 및 live dashboard의 per-agent conversation focus를 통합합니다. 각 integration은 provider가 실제로 노출한 가장 강한 identity/routing evidence만 보존하고 충분한 증거가 없으면 abstain합니다. Observed evidence와 inference는 설계상 계속 분리됩니다.
+v0.7.8는 cross-platform runtime collection, materialized execution graph, standalone/live dashboard, 보수적인 provider↔runtime correlation, content-addressed full-fidelity provider evidence, attributable multi-agent execution trace, run-local conversation access, provider-neutral projection의 agent-local conversation isolation, standalone 및 live dashboard의 per-agent conversation focus를 통합합니다. 각 integration은 provider가 실제로 노출한 가장 강한 identity/routing evidence만 보존하고 충분한 증거가 없으면 abstain합니다. Observed evidence와 inference는 설계상 계속 분리됩니다.
 
 ## 문서
 

{execweave-0.7.6 → execweave-0.7.8}/README.md

@@ -31,7 +31,7 @@ Install the latest published wheel/sdist from PyPI:
 python -m pip install -U execweave
 ```
 
-The current release is **v0.7.6**.
+The current release is **v0.7.8**.
 
 For development:
 
@@ -67,7 +67,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex` keeps the Agent interactive in the launch terminal while opening/attaching the detached Top dashboard according to the host environment.
 
-**v0.7.6 — an agent panel that answers what the agent said, and streamed responses rebuilt into one record.** Selecting an agent now opens with that agent's own turns, read as who said what, keeping the provider-neutral, agent-local multi-agent conversations each agent already owned. Consecutive turns a provider did not expose collapse into one line that still names the agents they were addressed to, and the multi-kilobyte preamble a provider prepends to every subagent is folded rather than leading the panel; the node evidence and trace stay one disclosure away. Graph labels resolve each agent's declared path, so siblings spawned in the same millisecond no longer render as the same fragment of a time-ordered id. Underneath, a streamed response is reassembled into the same canonical record its non-streamed twin would produce — text, reasoning and tool calls split across frames are rejoined before anything is materialized, and a stream that ended early is recorded as interrupted rather than completed.
+**v0.7.8 — a conversation belongs to an agent, everywhere a person can click.** Selecting a node that is not an agent used to resolve to the same empty selection an unselected graph does, so a network endpoint or a process drew every agent's conversation; the selection kind is now tracked apart from the focused agent, and anything that is not an agent says so instead. A provider that prepends the same multi-kilobyte block to every subagent had it recorded where each agent's own assignment belongs, so four siblings rendered as four copies of one plugin catalogue: a text appearing verbatim under two or more agents is not any one agent's assignment, and is folded and named for what it is. Where several agents were read from one rollout — Codex records a child's delegation and return in the parent's file — only the agent that owns it offers the raw bytes, and the others name whose record their turns came from, so a link inside a child's section no longer opens the whole run. The provider-neutral, agent-local multi-agent conversations each agent owns are also projected during a run now, not only once it ends. A release check drives both shipped viewers in a real browser through every selection a person can make, so an agent seeing what is not its own fails a build instead of reaching a release.
 
 The unified dashboard brings the execution graph, logs, and conversation records into the same inspection flow. Finalized runs generate `conversations.md` and `conversations.json`, while validated provider transcripts are copied into the run-local SHA-256 content store. Claude Code, OpenAI Codex, Cursor, OpenCode, and Google Antigravity use the strongest provider-exposed multi-agent evidence available to each integration. For gateways and local runtimes that expose only root request/response traffic, ExecWeave shows only that root conversation and does not invent subagents or hidden routing.
 
@@ -276,7 +276,7 @@ Conversation isolation is an attribution/display rule, not a redaction boundary.
 
 ## Current status
 
-v0.7.6 combines cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, conservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, direct run-local conversation access, agent-local conversation isolation across provider-neutral projections, and per-agent conversation focus in the standalone and live dashboards. Supported integrations preserve the strongest identity/routing evidence actually exposed by each provider and abstain when that evidence is unavailable. Observed evidence and inference remain separate by design.
+v0.7.8 combines cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, conservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, direct run-local conversation access, agent-local conversation isolation across provider-neutral projections, and per-agent conversation focus in the standalone and live dashboards. Supported integrations preserve the strongest identity/routing evidence actually exposed by each provider and abstain when that evidence is unavailable. Observed evidence and inference remain separate by design.
 
 ## Documentation
 

{execweave-0.7.6 → execweave-0.7.8}/README.ru.md

@@ -31,7 +31,7 @@ ExecWeave — source-available, local-first проект наблюдаемос
 python -m pip install -U execweave
 ```
 
-Текущая версия — **v0.7.6**.
+Текущая версия — **v0.7.8**.
 
 Для разработки:
 
@@ -67,7 +67,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex` оставляет Agent интерактивным в стартовом terminal и одновременно открывает либо подключает detached Top dashboard в зависимости от host environment.
 
-**v0.7.6 — панель agent, отвечающая на вопрос, что этот agent сказал, и потоковые ответы, собранные в одну запись.** Выбор agent теперь открывается его собственными turns, читаемыми как кто что сказал, сохраняя provider-neutral, agent-local multi-agent conversations, которыми каждый agent уже владел. Подряд идущие turns, не раскрытые provider, сворачиваются в одну строку, которая по-прежнему называет agents-получателей, а многокилобайтная преамбула, добавляемая provider перед каждым subagent, сворачивается, а не открывает панель; evidence узла и trace остаются в одном раскрытии. Метки графа разрешают объявленный path каждого agent, поэтому братья, созданные в ту же миллисекунду, больше не отображаются как один и тот же фрагмент упорядоченного по времени id. Ниже потоковый ответ пересобирается в ту же каноническую запись, что и его непотоковый двойник: текст, reasoning и tool calls, разделённые между frames, соединяются до материализации, а рано оборвавшийся поток фиксируется как прерванный.
+**v0.7.8 — conversation принадлежит agent, в каждом месте, куда человек может кликнуть.** Выбор node, который не является agent, разрешался в ту же пустую выборку, что и невыбранный граф, поэтому сетевая конечная точка или процесс рисовали conversation всех agents; вид выборки теперь отслеживается отдельно от сфокусированного agent, а то, что не является agent, так и говорит. Многокилобайтный блок, который provider добавляет перед каждым subagent, записывался там, где находится собственное задание каждого agent, и четыре брата отображались как четыре копии одного каталога плагинов: текст, появляющийся дословно под двумя и более agents, не является заданием ни одного из них — он сворачивается и называется тем, что он есть. Там, где несколько agents были прочитаны из одного rollout — Codex записывает делегирование ребёнка и его возврат в файл родителя — сырые байты предлагает только тот agent, которому файл принадлежит, а остальные называют, из чьей записи прочитаны их turns, поэтому ссылка внутри секции ребёнка больше не открывает весь прогон. Provider-neutral, agent-local multi-agent conversations, которыми владеет каждый agent, теперь проецируются во время прогона, а не только после его завершения. Релизная проверка ведёт оба поставляемых viewers в настоящем браузере через каждый выбор, который может сделать человек: agent, видящий не своё, роняет сборку вместо того, чтобы попасть в release.
 
 Единый dashboard объединяет execution graph, logs и conversation records в одном inspection flow. Finalized runs создают `conversations.md` и `conversations.json`, а проверенные provider transcripts копируются в run-local SHA-256 content store. Claude Code, OpenAI Codex, Cursor, OpenCode и Google Antigravity используют наиболее сильную multi-agent evidence, которую реально раскрывает соответствующая integration. Если gateway или local runtime показывает только root request/response, ExecWeave отображает только root conversation и не выдумывает subagents или hidden routing.
 
@@ -276,7 +276,7 @@ Conversation isolation — это правило attribution/display, а не re
 
 ## Текущий статус
 
-v0.7.6 объединяет cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, conservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, прямой run-local conversation access agent-local conversation isolation в provider-neutral projections и per-agent conversation focus в standalone и live dashboards. Каждая integration сохраняет только наиболее сильную identity/routing evidence, реально раскрытую provider, и abstain-ит при её отсутствии. Observed evidence и inference по-прежнему разделены архитектурно.
+v0.7.8 объединяет cross-platform runtime collection, materialized execution graphs, standalone/live dashboards, conservative provider↔runtime correlation, full-fidelity content-addressed provider evidence, attributable multi-agent execution traces, прямой run-local conversation access agent-local conversation isolation в provider-neutral projections и per-agent conversation focus в standalone и live dashboards. Каждая integration сохраняет только наиболее сильную identity/routing evidence, реально раскрытую provider, и abstain-ит при её отсутствии. Observed evidence и inference по-прежнему разделены архитектурно.
 
 ## Документация
 

{execweave-0.7.6 → execweave-0.7.8}/README.zh-CN.md

@@ -31,7 +31,7 @@ ExecWeave 是一个 source-available、local-first 的可观测性项目，把 A
 python -m pip install -U execweave
 ```
 
-当前正式版本是 **v0.7.6**。
+当前正式版本是 **v0.7.8**。
 
 开发安装：
 
@@ -67,7 +67,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex` 会让 Agent 保持在启动 terminal 中交互，并根据主机环境打开或附加 detached Top dashboard。
 
-**v0.7.6 — 回答「这个 agent 说了什么」的 agent panel，以及被重新组装成单一记录的 streamed response。** 选取一个 agent，现在最先看到的是该 agent 自己的 turn，以「谁说了什么」呈现，并延续每个 agent 原本就各自拥有的 provider-neutral、agent-local multi-agent conversation。provider 未暴露的连续 turn 会收合成一行，但仍列出它们寄给哪些 agent；provider 加在每个 subagent 前面的数 KB 前置内容改为折叠，不再占据面板开头，node evidence 与 trace 也只隔一次展开。Graph label 会解析每个 agent 声明的 path，因此同一毫秒生成的兄弟不再显示成同一段 time-ordered id 片段。底层则把 streamed response 重组成与非流式版本相同的 canonical record —— 跨 frame 切开的文字、reasoning 与 tool call 会先接回再 materialize，提前结束的流记为中断而非完成。
+**v0.7.8 — 对话属于 agent，在每一个点得下去的地方都成立。** 选取非 agent 的 node 以前会落到与「什么都没选」相同的状态，因此一个网络端点或进程就能画出所有 agent 的对话；现在选取种类与聚焦的 agent 分开追踪，不是 agent 就明说。provider 在每个 subagent 前面加上的同一段数 KB 内容，被记在各 agent 自己的交办栏位，于是四个兄弟渲染成四份相同的插件清单：一段文字若逐字出现在两个以上 agent 身上，它就不是任何一个 agent 的交办，因此折叠并如实命名。多个 agent 读自同一份 rollout 时——Codex 把 child 的交办与回复记在父层文件里——只有拥有它的 agent 提供原始字节，其余显示证据来自谁，child 区块里的链接不再打开整个 run。每个 agent 各自拥有的 provider-neutral、agent-local multi-agent conversation 现在也会在运行期间投影，而非只在结束后。发布前的检查会用真实浏览器把两个 viewer 走过每一种可操作的选取，因此 agent 看到不属于自己的内容会让构建失败，而不是流到 release。
 
 统一 dashboard 把 execution graph、logs 与 conversation records 放进同一条 inspection flow。Finalized run 会生成 `conversations.md` 与 `conversations.json`，经过验证的 provider transcript 也会复制进 run-local SHA-256 content store。Claude Code、OpenAI Codex、Cursor、OpenCode 与 Google Antigravity 都依据各自实际暴露的 evidence 强度建立 multi-agent trace；如果 gateway 或 local runtime 只提供 root request/response，ExecWeave 就只显示 root conversation，不会虚构 subagent 或 hidden routing。
 
@@ -276,7 +276,7 @@ Conversation isolation 是 attribution/display 规则，而不是 redaction boun
 
 ## 当前状态
 
-v0.7.6 组合 cross-platform runtime collection、materialized execution graph、standalone/live dashboard、保守的 provider↔runtime correlation、content-addressed full-fidelity provider evidence、可归属的 multi-agent execution trace、run-local conversation access，provider-neutral projection 上的 agent-local conversation isolation，以及 standalone 与 live dashboard 上的 per-agent conversation focus。各 integration 只保留 provider 实际暴露的最强 identity/routing evidence，证据不足时选择 abstain。Observed evidence 与 inference 从设计上保持分离。
+v0.7.8 组合 cross-platform runtime collection、materialized execution graph、standalone/live dashboard、保守的 provider↔runtime correlation、content-addressed full-fidelity provider evidence、可归属的 multi-agent execution trace、run-local conversation access，provider-neutral projection 上的 agent-local conversation isolation，以及 standalone 与 live dashboard 上的 per-agent conversation focus。各 integration 只保留 provider 实际暴露的最强 identity/routing evidence，证据不足时选择 abstain。Observed evidence 与 inference 从设计上保持分离。
 
 ## 文档
 

{execweave-0.7.6 → execweave-0.7.8}/README.zh-TW.md

@@ -31,7 +31,7 @@ ExecWeave 是一個 source-available、local-first 的可觀測性專案，會
 python -m pip install -U execweave
 ```
 
-目前正式版本是 **v0.7.6**。
+目前正式版本是 **v0.7.8**。
 
 開發安裝：
 
@@ -67,7 +67,7 @@ execweave record --open -- python my_agent.py
 
 `execweave top -- codex` 會讓 Agent 保持在啟動 terminal 中互動，並依主機環境開啟或附加 detached Top dashboard。
 
-**v0.7.6 — 回答「這個 agent 說了什麼」的 agent panel，以及被重新組裝成單一記錄的 streamed response。** 選取一個 agent，現在最先看到的是該 agent 自己的 turn，以「誰說了什麼」呈現，並延續每個 agent 原本就各自擁有的 provider-neutral、agent-local multi-agent conversation。provider 未曝露的連續 turn 會收合成一行，但仍列出它們寄給哪些 agent；provider 加在每個 subagent 前面的數 KB 前置內容改為折疊，不再佔據面板開頭，node evidence 與 trace 也只隔一次展開。Graph label 會解析每個 agent 宣告的 path，因此同一毫秒生成的兄弟不再顯示成同一段 time-ordered id 片段。底層則把 streamed response 重組成與非串流版本相同的 canonical record —— 跨 frame 切開的文字、reasoning 與 tool call 會先接回再 materialize，提早結束的串流記為中斷而非完成。
+**v0.7.8 — 對話屬於 agent，在每一個點得下去的地方都成立。** 選取非 agent 的 node 以前會落到與「什麼都沒選」相同的狀態，因此一個網路端點或行程就能畫出所有 agent 的對話；現在選取種類與聚焦的 agent 分開追蹤，不是 agent 就明說。provider 在每個 subagent 前面加上的同一段數 KB 內容，被記在各 agent 自己的交辦欄位，於是四個兄弟渲染成四份相同的外掛清單：一段文字若逐字出現在兩個以上 agent 身上，它就不是任何一個 agent 的交辦，因此折疊並如實命名。多個 agent 讀自同一份 rollout 時——Codex 把 child 的交辦與回覆記在父層檔案裡——只有擁有它的 agent 提供原始位元組，其餘顯示證據來自誰，child 區塊裡的連結不再打開整個 run。每個 agent 各自擁有的 provider-neutral、agent-local multi-agent conversation 現在也會在執行期間投影，而非只在結束後。發布前的檢查會用真實瀏覽器把兩個 viewer 走過每一種可操作的選取，因此 agent 看到不屬於自己的內容會讓建置失敗，而不是流到 release。
 
 統一 dashboard 把 execution graph、logs 與 conversation records 放進同一條 inspection flow。Finalized run 會產生 `conversations.md` 與 `conversations.json`，經驗證的 provider transcript 也會複製進 run-local SHA-256 content store。Claude Code、OpenAI Codex、Cursor、OpenCode 與 Google Antigravity 都依各自實際曝露的 evidence 強度建立 multi-agent trace；若 gateway 或 local runtime 只提供 root request/response，ExecWeave 就只顯示 root conversation，不會虛構 subagent 或 hidden routing。
 
@@ -276,7 +276,7 @@ Conversation isolation 是 attribution/display 規則，不是 redaction boundar
 
 ## 目前狀態
 
-v0.7.6 整合 cross-platform runtime collection、materialized execution graph、standalone/live dashboard、保守的 provider↔runtime correlation、content-addressed full-fidelity provider evidence、可歸屬的 multi-agent execution trace、run-local conversation access，provider-neutral projection 上的 agent-local conversation isolation，以及 standalone 與 live dashboard 上的 per-agent conversation focus。各 integration 只保留 provider 實際曝露的最強 identity/routing evidence，證據不足時選擇 abstain。Observed evidence 與 inference 仍從設計上分離。
+v0.7.8 整合 cross-platform runtime collection、materialized execution graph、standalone/live dashboard、保守的 provider↔runtime correlation、content-addressed full-fidelity provider evidence、可歸屬的 multi-agent execution trace、run-local conversation access，provider-neutral projection 上的 agent-local conversation isolation，以及 standalone 與 live dashboard 上的 per-agent conversation focus。各 integration 只保留 provider 實際曝露的最強 identity/routing evidence，證據不足時選擇 abstain。Observed evidence 與 inference 仍從設計上分離。
 
 ## 文件
 

{execweave-0.7.6 → execweave-0.7.8}/pyproject.toml

@@ -4,8 +4,8 @@ build-backend = "hatchling.build"
 
 [project]
 name = "execweave"
-# ExecWeave v0.7.6 release metadata
-version = "0.7.6"
+# ExecWeave v0.7.8 release metadata
+version = "0.7.8"
 description = "Turn AI-agent runtime behavior into a local interactive execution graph."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -50,6 +50,11 @@ release = [
   "build>=1.2",
   "twine>=6.0",
 ]
+# Drives the shipped viewers in a real browser. Kept out of dev so an ordinary
+# development install stays small; CI installs it and requires the checks to run.
+e2e = [
+  "playwright>=1.44",
+]
 
 [project.urls]
 Homepage = "https://github.com/Irish-kw/ExecWeave"
@@ -91,6 +96,9 @@ packages = ["src/execweave"]
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]
+markers = [
+  "viewer_e2e: drives a shipped viewer in a real browser; needs playwright and chromium",
+]
 
 [tool.ruff]
 target-version = "py310"

{execweave-0.7.6 → execweave-0.7.8}/scripts/check_release_stage_integrity.py

@@ -5,6 +5,7 @@ import ast
 import io
 import json
 import os
+import re
 import subprocess
 import sys
 import tarfile
@@ -16,10 +17,19 @@ ROOT = Path(__file__).resolve().parents[1]
 CRITICAL_UNCHANGED = (
     "tests/test_http_proxy.py",
     "scripts/audit_i18n_parity.py",
-    "pyproject.toml",
-    "src/execweave/__init__.py",
 )
 
+# pyproject.toml and __init__.py were frozen whole, but the red line in them is the
+# release version and the runtime dependency set — not the file. Freezing the file
+# blocked ordinary stage work that touches neither: registering a pytest marker, or
+# declaring an optional extra for a check CI runs. Those two values are now compared
+# against the baseline directly, which is what the freeze was standing in for.
+RELEASE_METADATA = (
+    ("pyproject.toml", re.compile(r'(?m)^version\s*=\s*"([^"]+)"')),
+    ("src/execweave/__init__.py", re.compile(r'(?m)^__version__\s*=\s*"([^"]+)"')),
+)
+RUNTIME_DEPENDENCIES = re.compile(r"(?ms)^dependencies\s*=\s*\[(.*?)^\]")
+
 # The relay module itself has to keep changing — 0.7.6 rebuilds streamed responses
 # inside it — so freezing the whole file would block the staged work it is meant to
 # protect. What must never move is the refusal to terminate TLS. The handler body is
@@ -70,6 +80,14 @@ SKIP_MARKERS = (
     "pytest.skip(",
 )
 ENVIRONMENT_PROBE_SKIP = "pytest.mark.skipif(shutil.which("
+# The second accepted form covers a check that needs a capability CI supplies and a
+# developer's machine may not — a browser. A runtime skip is permitted only in a file
+# that also escalates: where the environment declares the check required, the same
+# helper fails instead of skipping, so the skip can never stand in for a pass in CI.
+# Decorated skips and xfails stay refused in such a file; only the escalating runtime
+# form is exempt.
+REQUIRED_MODE_FLAG = "EXECWEAVE_E2E_REQUIRED"
+REQUIRED_MODE_ESCALATION = "pytest.fail("
 
 
 def _run(
@@ -207,14 +225,30 @@ def _assert_existing_tests_untouched(
 
 def _assert_no_new_skip_or_xfail(baseline_ref: str) -> None:
     diff = _git("diff", "--unified=0", f"{baseline_ref}...HEAD", "--", "tests").stdout
-    offenders = []
+    added: dict[str, list[str]] = {}
+    current = ""
     for line in diff.splitlines():
-        if not line.startswith("+") or line.startswith("+++"):
+        if line.startswith("+++ "):
+            current = line[4:].strip()
+            if current.startswith("b/"):
+                current = current[2:]
             continue
-        if ENVIRONMENT_PROBE_SKIP in line and "is None" in line:
+        if not line.startswith("+"):
             continue
-        if any(marker in line for marker in SKIP_MARKERS):
-            offenders.append(line)
+        added.setdefault(current, []).append(line)
+
+    offenders = []
+    for path, lines in sorted(added.items()):
+        escalates = any(REQUIRED_MODE_FLAG in line for line in lines) and any(
+            REQUIRED_MODE_ESCALATION in line for line in lines
+        )
+        for line in lines:
+            if ENVIRONMENT_PROBE_SKIP in line and "is None" in line:
+                continue
+            if escalates and "pytest.skip(" in line and "pytest.mark." not in line:
+                continue
+            if any(marker in line for marker in SKIP_MARKERS):
+                offenders.append(f"{path}: {line}")
     if offenders:
         raise RuntimeError("new skip/xfail markers are not allowed:\n" + "\n".join(offenders))
 
@@ -232,6 +266,32 @@ def _assert_critical_files_unchanged(baseline_ref: str) -> None:
         raise RuntimeError("release red-line files changed:\n" + "\n".join(changed))
 
 
+def _assert_release_metadata_unchanged(baseline_ref: str) -> None:
+    """A stage may not move the release version or the runtime dependency set."""
+    for path, pattern in RELEASE_METADATA:
+        baseline = _git("show", f"{baseline_ref}:{path}").stdout
+        current = (ROOT / path).read_text(encoding="utf-8")
+        before, after = pattern.search(baseline), pattern.search(current)
+        if before is None or after is None:
+            raise RuntimeError(f"release version is no longer declared in {path}")
+        if before.group(1) != after.group(1):
+            raise RuntimeError(
+                f"{path} moves the release version from {before.group(1)} to "
+                f"{after.group(1)}; a stage lands before its release, not with it"
+            )
+
+    baseline = _git("show", f"{baseline_ref}:pyproject.toml").stdout
+    current = (ROOT / "pyproject.toml").read_text(encoding="utf-8")
+    before, after = RUNTIME_DEPENDENCIES.search(baseline), RUNTIME_DEPENDENCIES.search(current)
+    if before is None or after is None:
+        raise RuntimeError("the runtime dependency set is no longer declared in pyproject.toml")
+    if before.group(1) != after.group(1):
+        raise RuntimeError(
+            "pyproject.toml changes the runtime dependency set:\n"
+            f"baseline:{before.group(1)}\ncurrent:{after.group(1)}"
+        )
+
+
 def _connect_handler_source(source: str, origin: str) -> str:
     module = ast.parse(source)
     for node in ast.walk(module):
@@ -495,6 +555,7 @@ def main() -> int:
     )
     _assert_no_new_skip_or_xfail(args.baseline_ref)
     _assert_critical_files_unchanged(args.baseline_ref)
+    _assert_release_metadata_unchanged(args.baseline_ref)
     tls_status = _assert_no_tls_mitm(args.baseline_ref)
     completeness = _assert_conversation_completeness_unchanged(args.baseline_ref)
     i18n_status = _assert_i18n_audit()

{execweave-0.7.6 → execweave-0.7.8}/src/execweave/__init__.py

@@ -1,3 +1,3 @@
 """ExecWeave runtime graph package."""
 
-__version__ = "0.7.6"
+__version__ = "0.7.8"