chore: release main

[agent-core-release-bot]

🤖 I have created a release beep boop

0.3.0

0.3.0 (2026-08-07)

Features

• add a GitHub-aware ticket dependency graph (level-triggered reconciler) (#527) (99f9a25)
• backup: add pg_dump backup/restore DR story for foreman-pg-data volume (#464) (3b3f2df)
• bootstrap: auto-clone missing project repos at daemon startup (#505) (a4fcee6)
• cli: add gate-update watchtower pre-update lifecycle hook (#459) (83b624c), closes #412
• config: move [[projects]] to host-mounted hot-reloadable file (#503) (068a6aa)
• docker: env-toggle for the bubblewrap sandbox (FOREMAN_SANDBOX_ENABLED) (#561) (cbd267b)
• gate-update: add drain lease to close idle-check/SIGTERM race (#601) (7484c6e)
• impl_approved: back off human-gated polling to 5-minute intervals (#597) (ad5a635)
• inbound: derive webhook coverage from projects.toml and flag gaps (#593) (046040e)
• no-output watchdog + first-turn instrumentation for role subprocesses (#483) (#516) (32482c2)
• observer: scrub sibling terminal labels on Done completion (#488) (7656bae)
• queue: add per-project max_in_flight cap to QueueManager (#474) (cec3a3b)
• v4: complete sandbox enabled-path — private per-job clone (#556) (8e33ea2)
• v4: granular merge-state routing — CI-failed PRs go to ImplFix, not infinite BLOCKED (#317) (#549) (98e6daa)
• v4: parallelise across repos — per-repo in-flight cap replaces global pin (#539) (22be8f1)
• v4: per-repo FIFO merge coordinator (#550) (ed76837)
• v4: sandbox clone-freshness — base-as-mirror + fail-closed fetch chokepoint (#567) (f3aa241)
• v4: sandbox role subprocesses with bubblewrap (ships flag-off) (#557) (5422c46)
• v4: sandboxed-role identity — PEM-free auth inside the bubblewrap box (#564) (162eae6)
• worker_pool: block dispatch after SIGTERM via _shutting_down flag (#605) (fa1129f)
• worker: rebase impl worktree onto current origin/<base> before check (#513) (f081d59)

Bug Fixes

• ci: restore coverage floor to 80 (canon set 85 unauthorized; unblocks foreman loop) (#492) (69fb40d)
• config: catch tomllib.TOMLDecodeError in startup and reload guards (#515) (017274e), closes #509
• daemon: disable no-output watchdog + persist uv cache (#523) (e538b4e)
• docker: derive PGDG apt suite from base image codename (#467) (f6b0c39)
• git-host: explicit-lease force push so pushes over a token URL land (#512) (24807ab)
• git-host: use --force-with-lease in push_branch to survive Fixer rebases (#498) (fd60fe4)
• github: normalize PR-title casing at creation so pr-title-lint can't block (#541) (10bd859)
• github: use --force-with-lease in push_branch to survive Fixer rebases (#499) (2d56131)
• impl-approved: back off human-gated polling to 5-minute interval (#596) (4c26037)
• providers: forward SDK envelopes to role stdout so the watchdog sees liveness (#519) (#520) (6ded822)
• reset: refuse on closed issues by default, add --force-reopen (#514) (2badf2d)
• roles: pass wt_path to load_project_instructions, not bare mirror (#595) (1d71647)
• unclog merge flow — advance behind PRs (#575) + guard set-state into MergeQueued (#576) (8dc6bd3)
• v4: advance impl worker to ImplReview when a PR exists, not NeedsHelp (#538) (c7cebf0)
• v4: auto-rerun flaky failed required-checks before blocking merge (#537) (9ad1092)
• v4: correct blocked_by URL to issue-scoped path + swallow 404 (#529) (91ed6e2)
• v4: crash-recovery-core trio — max_in_flight guard (I4), worker-crash escalation (#454), resume-fresh fallback (#461) (#462) (19482a2)
• v4: declare dispatch priority per state — ImplApproved no longer dispatched last (#591) (91dc722)
• v4: forward CLAUDE_CODE_OAUTH_TOKEN into the sandbox box (#565) (a78596c)
• v4: gate-update defers only on in-flight jobs, not parked tickets (#572) (478ef39)
• v4: isolate tick failures so one poller error can't kill the daemon (I1) (#540) (27404e0)
• v4: make the sandbox box a faithful CI runner (CI marker + uid resolution) (#570) (57e609d)
• v4: mount /dev, /proc, ld.so.cache in the sandbox box (#556 dogfood) (54262de)
• v4: pipeline resilience — isolate poller reconcile + escalate a raising merge head (review #2, #3) (#571) (d71be9a)
• v4: preflight must mount OS exec roots (sandbox canary crash-loop) (#563) (a0ef15a)
• v4: scope poller reconcile to its own project (#568) (#569) (c1ecfb4)
• v4: stamp merge-queued label + unify state-label naming to kebab-case (#552) (5e641bf)
• v4: swallow bare GithubException 404 in remove_labels (#534) (ffbeeca)
• v4: writable session-env tmpfs so Claude's Bash tool works in-box (#566) (ba17670)
• worker-pool: stop new state-instance dispatch after SIGTERM (#604) (48d5a2d)
• worktree: auto-refresh stale worktrees + remote branches at role start (#501) (13f2edb)

---

This PR was generated with Release Please. See documentation.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!