refactor: 终极重构 - 清理冗余、锁定依赖、增强CI

### Fixed
- 删除重复的 deduplicator.py 文件 (src/deduplicator.py, src/core/deduplicator.py)
- 修复 CI 中未执行 mypy/bandit/coverage 的问题
- 锁定依赖版本确保可重复构建 (使用 ~= 约束)

### Removed
- 删除遗留目录 (agent/, _bmad/, _bmad-output/)
- 删除临时配置文件 (config_temp.json)
- 删除重复的 docs/index.md
- 精简 OpenSpec 归档 (保留最新的 2026-04-26)

### Changed
- 增强 CI 工作流：添加 mypy 类型检查、bandit 安全检查、覆盖率报告
- 添加 Dependabot 支持 GitHub Actions 更新
- pre-commit 配置添加 mypy 检查

Author: shijiashuai

.github/dependabot.yml

@@ -20,3 +20,15 @@ updates:
     labels:
       - "dependencies"
       - "documentation"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    open-pull-requests-limit: 1
+    labels:
+      - "dependencies"
+      - "ci"
+    commit-message:
+      prefix: "ci"
+      include: "scope"

.github/workflows/ci.yml

@@ -40,6 +40,12 @@ jobs:
       - name: Flake8
         run: python -m flake8 src/ main.py --max-line-length=120 --count --select=E9,F63,F7,F82 --show-source --statistics
 
+      - name: Type check (mypy)
+        run: python -m mypy src/ --ignore-missing-imports
+
+      - name: Security check (bandit)
+        run: python -m bandit -r src/ -c pyproject.toml -ll
+
       - name: Runtime path baseline
         run: python -m pytest -q tests/test_runtime_paths.py
 
@@ -68,7 +74,14 @@ jobs:
           python -m pip install ".[dev]"
 
       - name: Run test suite
-        run: python -m pytest -q
+        run: python -m pytest -q --cov=src --cov-report=xml --cov-report=term-missing
+
+      - name: Upload coverage report
+        uses: actions/upload-artifact@v4
+        with:
+          name: coverage-report-${{ matrix.python-version }}
+          path: coverage.xml
+          retention-days: 7
 
   build:
     name: Build package

.pre-commit-config.yaml

@@ -38,6 +38,16 @@ repos:
       - id: isort
         args: ["--profile", "black"]
 
+  # ====================
+  # Type Checking
+  # ====================
+  - repo: https://github.com/pre-commit/mirrors-mypy
+    rev: v1.10.0
+    hooks:
+      - id: mypy
+        args: [--ignore-missing-imports]
+        additional_dependencies: [types-requests, types-PyYAML]
+
   # ====================
   # Linting
   # ====================

CHANGELOG.md

@@ -4,8 +4,24 @@ This file keeps a **small maintained release record** for CleanBook. Detailed hi
 
 ## [Unreleased]
 
+## [2.0.2] - 2026-04-28
+
+### Fixed
+- 删除重复的 deduplicator.py 文件 (src/deduplicator.py, src/core/deduplicator.py)
+- 修复 CI 中未执行 mypy/bandit/coverage 的问题
+- 锁定依赖版本确保可重复构建 (使用 ~= 约束)
+
+### Removed
+- 删除遗留目录 (agent/, _bmad/, _bmad-output/)
+- 删除临时配置文件 (config_temp.json)
+- 删除重复的 docs/index.md
+- 精简 OpenSpec 归档 (保留最新的 2026-04-26)
+
 ### Changed
-- Repository closeout normalization in progress: governance, docs surface, workflows, packaging, and runtime validation are being simplified around the maintained CLI product.
+- 增强 CI 工作流：添加 mypy 类型检查、bandit 安全检查、覆盖率报告
+- 添加 Dependabot 支持 GitHub Actions 更新
+- pre-commit 配置添加 mypy 检查
+- 更新 GitHub 仓库描述和 topics
 
 ## Recent Releases