Agentic SDLC v0.5.0

Highlights

Kernel is now pip/pipx-installable (#5)

plugins/agentic-sdlc/ is a real Python distribution: a new pyproject.toml
(hatchling, package name agentic-sdlc, console script agentic-sdlc) makes

pipx install ./plugins/agentic-sdlc
agentic-sdlc --help

work with no repository checkout needed at runtime. The kernel script moved
from scripts/agentic_sdlc.py to the importable agentic_sdlc/ package.
contracts/ deliberately stays at its existing location
(plugins/agentic-sdlc/contracts/, still read directly by
agentic_sdlc_langgraph's runtime.py) rather than moving under the new
package — the build bundles a copy into the installed wheel via hatchling
force-include instead, and the CLI resolves whichever copy is actually
present (bundled, editable-install, or checkout) at runtime. bin/agentic-sdlc
now runs the checkout via a dedicated dev_entrypoint.py rather than
python -m agentic_sdlc, specifically to avoid the caller's own working
directory ever shadowing the real package on sys.path. CI now builds and
installs the packaged distribution and runs it from outside the checkout on
every change, so this keeps working rather than silently regressing.

init --dry-run, a GitLab approval adapter, and a docs fix (#4)

• init --dry-run: preview what init would create/change without writing
  anything.
• approve-from-gitlab / approve-from-gitlab-mr: a GitLab MR
  approval-evidence adapter analogous to the existing GitHub PR adapter, opt
  in via human_gate_default: "gitlab-mr". Speculative — not the approval
  source this kernel's own default provider uses; see
  plugins/agentic-sdlc/README.md for its documented trust-level caveats
  (MR-level rather than per-approver timestamps/commit values, gitlab.com/
  convention for self-hosted instances requiring an explicit
  gitlab_username field).
• Corrected --force documentation: init, with or without --force, is
  non-destructive and idempotent with respect to already-written wrapper and
  overlay files — the prior docs implied otherwise.

A2A (Agent2Agent) protocol support (#3)

agentic_sdlc_langgraph/a2a/ mounts a JSON-RPC surface into the FastAPI
service so external agents (e.g. Codex CLI) can participate as dispatch
targets through the same runtime helpers as REST/CLI, seeing identical
behavior for a given task_id across all three surfaces. a2a/client.py is
the reverse direction, used by agents.A2AModelClient to dispatch a graph
node to an external A2A agent instead of an in-process model call.

Compatibility

The kernel's VERSION constant remains 0.3.0 — no G1–G10 contract or
schema changes in this release. Existing providers pinned to
kernel_compatibility: {"minimum": "0.3.0", "maximum_exclusive": "0.4.0"}
remain compatible.

Note on v0.4.0 / v0.4.1

Those tags were pushed without corresponding GitHub Releases; their changes
(A2A support, and a CLAUDE.md addition) are folded into this release's
notes and changelog rather than backfilled separately.

Full changelog: v0.3.0...v0.5.0