chore(main): release 0.3.1

[rigelbuild-compass-ci]

🤖 I have created a release beep boop

0.3.1 (2026-10-07)

Features

• agent-image: ship jj and jj-vine in the agent image (RIG-4723) (#1800) (47e37c7)
• agent: port portable operating guidance and survival kernel (RIG-3903) (#1491) (9ec4eb5)
• agent: range-encode ControlAck applied_above (RIG-1466) (#1813) (403f672)
• agent: Reload continues the session transcript under the new config (RIG-4418) (#1704) (5af811b)
• api: expose issue search RPC (RIG-4278) (#1540) (2b8034c)
• appconfig: add the no-config signal, URL normalizer, and app.toml writer (#1740) (092d7c6)
• comms: agent tools name channel groups by leaf or slash path (#1705) (b071662)
• comms: carry the author handle on every wire Message (RIG-2880) (#1340) (5bd98f8)
• comms: carry the channel id on SearchMessages hits (RIG-4295) (#1612) (e260f49)
• comms: publish message_posted on the event fabric (RIG-3107) (#1333) (896506d)
• comms: require a taxonomy role on CreateAgent (RIG-3097) (#1733) (10f50c3)
• compass-agent: add channel, group, and membership comms tools (RIG-2726) (#1809) (51d2290)
• compass-agent: record publish flush shape and batch size (RIG-3694) (#1245) (67304fd)
• dashboards: ship Grafana dashboard JSON for agent obs signals (RIG-2826) (#670) (7d17aba)
• delivery: consume message_posted from the event fabric (RIG-3107) (#1345) (fc3dbc5)
• design-ledger: derive Compass record status from main (RIG-3662) (#1284) (c10b267)
• devenv: assert the operator CLI artifact after build (RIG-3412) (#1329) (3b81120)
• docs: reconcile design ledger IDs (RIG-3634) (#1313) (2a6b7bf)
• fabric: let a subscriber callback fail so the event is redelivered (RIG-4030) (#1355) (8732432)
• fabric: park events the server drops at MaxDeliver (RIG-4036) (#1400) (473b409)
• fabric: propagate trace context, add OnReconnect, pin serial callbacks (RIG-3107) (#1337) (0776d3f)
• fabric: report each durable consumer backlog as an OTel gauge (RIG-4299) (#1585) (f890817)
• forge: read PR review threads and required checks from GitHub GraphQL (RIG-1728) (#1354) (9daf76e)
• gateway-image: lane scaffold and pure core (RIG-4340) (#1587) (bb0ae15)
• guest-image: derive the guest rootfs from the pinned agent OCI image (#1252) (d8ccbb3)
• guest-image: pin the agent OCI image the guest rootfs derives from (RIG-3786) (#1215) (cc9e600)
• guest-image: publish the guest triple as a non-runnable OCI artifact (#1268) (99f867f)
• linearagent: end Linear "Thinking" on the Manager's first reply (RIG-4163) (#1469) (b98800c)
• linear: link sessions through a click-time /l/session redirect (RIG-2794) (#1717) (dbb0751)
• linear: record the issue identifier on the agent-session association (RIG-4043) (#1709) (526324a)
• proto: add the channel attach edge, membership mode, and ReparentChannel (RIG-4185) (#1590) (8232d08)
• proto: add the GatewayCredentials service for the LLM gateway (RIG-2863) (#1611) (9fee8fd)
• release: digest-re-tag the runner image to vX.Y.Z on release (RIG-3758) (#1341) (c7e6189)
• release: digest-re-tag the runner image to vX.Y.Z on release (RIG-3758) (#1397) (53bb2ab)
• renovate: manage the Go analysis battery pins (RIG-3306) (#1742) (0a000af)
• renovate: refresh the UI node_modules FOD pin on bun and flake bumps (#1647) (bc3da6f)
• runner: bind a resume lifetime on the Runner after accept (RIG-4297) (#1707) (c421fb1)
• runner: mint server session IDs (RIG-3696) (#1283) (640a019)
• runtime: label and list apple-container agent containers by Runner (RIG-4080) (#1405) (02f9714)
• search: add message search provider (RIG-4280) (#1555) (8abd1e6)
• server: add forge scope storage (RIG-4434) (#1654) (e09539d)
• server: archive the transcript tail when a session ends without Stop (RIG-4135) (#1464) (00510f4)
• server: assemble the Linear agent session responder (RIG-2717) (#1360) (2015710)
• server: configure forge scope enforcement and boot grants (RIG-4434) (#1656) (9bbb94e)
• server: gate forge writes on account scope grants (RIG-4434) (#1655) (4637391)
• server: owner-qualify agent author handles (RIG-4026) (#1720) (1e42084)
• server: per-account first-run tour state (RIG-4505) (#1687) (2c16dd0)
• server: report build git rev via GetServerInfo (RIG-2039) (#1760) (470dde8)
• sql-migration-gate: fail CI when a PR edits a migration on the base branch (RIG-3338) (#1624) (8f94503)
• stack: add the microVM guest configuration seam (RIG-3789) (#1281) (c2e91f4)
• stack: configurable host ports for bundled NATS and collector (#1690) (b36c78f)
• stack: materialize digest-pinned guest artifacts (RIG-3789) (#1282) (64dd436)
• stack: supervise the LLM gateway as a container child (RIG-2862) (#1382) (3f07cba)
• store: add issue search query (RIG-4277) (#1539) (c5249a1)
• store: index issue search text (RIG-4276) (#1538) (194254a)
• store: let an agent see every agent of its own owner (RIG-4147) (#1462) (25d91b7)
• store: refuse to serve an applied migration edited after it ran (RIG-3338) (#1623) (0f28925)
• tools: add dl-claim CLI for Compass design-ledger ids (RIG-3634) (#1418) (396c02d)
• tools: add the font-coverage gate (RIG-3603) (#1208) (a51dd4d)
• ui: add the top-bar search shell (RIG-4279) (#1544) (bf164d1)
• ui: ask for the bearer at runtime in browser mode (RIG-4164) (#1470) (0d18263)
• ui: drop the New folder button and rename folder-* to tree-* (RIG-4191) (#1490) (b9670ab)
• ui: export RespondToAsk generated types (RIG-1330) (#1298) (5e5f054)
• ui: first-run setup screen and server connect form (#1757) (1f70448)
• ui: let a deployment bake the door URL into compass-ui (RIG-4169) (#1492) (9805b5c)
• ui: lift the channel attach fields in the live adapter (RIG-4192) (#1596) (fed476a)
• ui: New tab always opens a new tab (RIG-4676) (#1798) (3069ccb)
• ui: read-only model registry view in Settings (RIG-3124) (#1332) (a282952)
• ui: render channels in the one sidebar agent tree (RIG-4191) (#1552) (d3a4499)
• ui: search all issues and PRs from the palette and top bar (RIG-4281) (#1613) (14537fb)
• ui: stack the agent log panel in narrow panes (RIG-4682) (#1787) (f3ee331)
• ui: two-pane split with a resizable splitter (RIG-4446) (#1780) (9fa2751)
• ui: view tab strip with keep-alive and open-in-tab links (RIG-4444) (#1755) (04278b6)
• ui: W leader chords and palette commands for tabs and panes (RIG-4445) (#1770) (2afaa08)
• ui: window layout model, hash sync and session persistence (RIG-4443) (#1743) (26f50c3)
• usage: add the GetUsageSeries read RPC over token-usage rollups (RIG-2865) (#1370) (3cf8027)
• usage: add the Plane-A token-usage store (RIG-2872) (#1365) (2c2c3e5)
• usage: derive compute-usage rollups and prune the raw compute log (RIG-2872) (#1513) (c144385)
• usage: record compute-usage intervals with the session binding (RIG-2872) (#1509) (d0cffd2)

Bug Fixes

• agent-image: bundle legacy Pi module registry (RIG-4070) (#1378) (f1ab32d)
• auth: scope bearer callers to their token's tenant (RIG-4066) (#1375) (dc0a9f4)
• build: ship the pinned secretspec CLI with compass-server (RIG-4583) (#1758) (1024cd5)
• ci: run design-ledger touch-coupling on PRs, fail if unwired (RIG-3924) (#1799) (e9aea23)
• ci: save the e2e Go cache only from main push/schedule (RIG-4384) (#1629) (ce258fd)
• comms: refuse a member's owner-only post with PermissionDenied (RIG-4116) (#1424) (ba2938d)
• comms: resolve update_members channel by name for agent tools (RIG-3030) (#1588) (8c851ed)
• comms: trim a departing member's final ChannelChanged to the channel id (RIG-1325) (#1745) (50b3224)
• compass-agent: keep benign horizontal whitespace in marker rendering (RIG-1544) (#1262) (fdd4f8f)
• compass-agent: mark a full forge_list_issues page as possibly having more (RIG-4121) (#1511) (acf0a86)
• compass-agent: render GitHub App [bot] logins in forge_account (RIG-4120) (#1427) (ea515f5)
• compass-agent: run tests against a scratch omp agent dir (RIG-4110) (#1512) (5369eb1)
• delivery: fire a hold that lost the race to its settle; skip held in start sweeps (RIG-4031) (#1351) (8a58d24)
• delivery: wake owed agents when a Runner attaches (RIG-4166) (#1465) (066e46c)
• devenv-cli: reject multi-output nix builds; test repo charset (RIG-3047) (#1517) (13a204c)
• devenv: correct the runner-token comment to the real failure (RIG-3935) (#1321) (8eb37ab)
• devenv: default GOLANGCI_LINT_CACHE to the per-clone lint cache (RIG-1465) (#1792) (56feb99)
• devenv: fail the dogfood builds instead of exec'ing a stale binary (RIG-3935) (#1318) (263cebd)
• devenv: guard XDG_RUNTIME_DIR before dogfood:clean removes anything (RIG-3366) (#1317) (4353932)
• devenv: name both halves of the masked token-read failure (RIG-3935) (#1322) (998397c)
• devenv: refuse a NUL or UTF-16 version.txt before stamping (RIG-3439) (#1789) (5b23d08)
• devenv: surface a failed runner-token read instead of enrolling empty (RIG-3935) (#1320) (12e4007)
• dl-claim: give a runnable status check and the returned ids (RIG-3634) (#1419) (0879f01)
• dl-reconcile: classify ledger lines once for both counters (RIG-3634) (#1325) (1ba92c8)
• dl-reconcile: classify ledger lines once for both counters (RIG-3634) (#1327) (401bbb7)
• dl-reconcile: reject unrendered ledger rows (RIG-3941) (#1489) (fc2c80d)
• e2e: carry the shared stand-up failure text into every leg (RIG-4613) (#1759) (e388948)
• fabric: park an event once when a late Term races the advisory (RIG-4494) (#1683) (6e9a113)
• fabric: reap abandoned durable consumers after 2x MaxAge (RIG-3448) (#1807) (1ddda30)
• font-gate: enforce fail-closed font coverage parsing (RIG-3742) (#1294) (b1ddf48)
• forge: apply list_issues limit so an agent gets a bounded page (RIG-4121) (#1426) (d2a48e1)
• forge: leave a PR's checks unset when no roll-up was fetched (#1680) (ca5a14e)
• guest-image: allowlist layer entry types and fixture-test the unpack (RIG-3850) (#1334) (e2df925)
• guest-image: stop the e8/e9 fixture checks racing tar against grep -q (RIG-3850) (#1398) (3d9db31)
• hooks: bound the pre-push moon ci concurrency to 4 (#1682) (4fae441)
• ingest: skip check_suite events whose head sha has no pull request at debug level (RIG-4205) (#1507) (895c7be)
• linearagent: key session posts on the Linear-Delivery id (RIG-2717) (#1361) (07705d0)
• linearagent: read prompted follow-up text from agentActivity.content.body (RIG-4161) (#1461) (c1590b2)
• linearagent: route Linear comment events by issue identifier when number is absent (RIG-4205) (#1502) (ab1e45b)
• linearagent: skip Linear emits for a replayed delivery (RIG-4133) (#1781) (5c58c64)
• macos-bundle: bound the pre-create hdiutil calls (RIG-3939) (#1484) (fbc9c56)
• macos-bundle: inject the pre-create flush so tests never run a real sync (RIG-4476) (#1671) (7d7f1a9)
• macos-bundle: name what holds the staging tree when hdiutil create fails (RIG-3939) (#1326) (991625d)
• macos-bundle: retry hdiutil create when the image is busy (RIG-3939) (#1483) (5137d11)
• microvm: treat a cancelled launch ctx as an expected teardown wait (RIG-4124) (#1431) (8537af8)
• release: let rootlesskit create user namespaces on ubuntu-24.04 (RIG-4129) (#1439) (d783fc1)
• release: republish guest and runner images on devenv.lock changes (#1689) (9a39795)
• release: tag runner image only after digest check; rename-aware closure diff (RIG-4025) (#1344) (92e4a29)
• repo: exempt release CHANGELOG from MD050 (RIG-1746) (#1650) (f89fa83)
• runner,server: report ERRORED after in-flight frames and reject spawn on an errored agent (RIG-4097) (#1634) (5dd4cc0)
• runner: consume server-minted session IDs (RIG-3696) (#1304) (e9fcfdf)
• runner: handle a container removed outside Compass on podman (RIG-4401) (#1639) (0100ae8)
• runnerhub: cap inbound RunnerService messages (RIG-3586) (#1676) (f1c3291)
• runnerhub: fail enrollment when the durable reap fails (RIG-3691) (#1700) (c7a9a5f)
• runnerhub: keep the container binding after Start so a resume can fetch secrets (RIG-4122) (#1458) (e01f820)
• runnerhub: reap a Runner's session bindings in every tenant on enroll (RIG-4296) (#1606) (2059ba7)
• runnerhub: reap a Runner's session bindings on every enroll (RIG-4223) (#1515) (17e3f8f)
• runnerhub: reject FetchSecrets from a Runner that does not own the session (RIG-4102) (#1404) (ae03a60)
• runnerhub: reject Runner calls for a session another Runner owns (RIG-4083) (#1399) (a7e6b28)
• runnerhub: rotate a runner token file registered to another subject (RIG-3343) (#1548) (2040628)
• runnerhub: scope Runner-originated binding calls to the session's tenant (RIG-4146) (#1463) (e25b064)
• runnerhub: scope the faulted-reap read-through refusal per Runner (RIG-3691) (#1681) (7e8faf5)
• runnerhub: serialize enroll reaps with session promotion (#1756) (77a78f5)
• runnerhub: treat a Runner-reported ERRORED as the lost-session edge (RIG-4221) (#1570) (541031f)
• runner: keep a live container's socket when re-Provision fails (RIG-4075) (#1385) (19a0444)
• runner: re-Provision replaces a registered workload that is not running (RIG-4199) (#1609) (5ebcb61)
• runner: read the stream outcome when the bootstrap Send hits EOF (RIG-4359) (#1605) (69c7a19)
• runner: reject re-Provision onto a launched container name (RIG-4090) (#1422) (dc0ad13)
• runner: report agent exit while a descendant holds the stdio pipes (RIG-4100) (#1510) (81c9e67)
• runner: report unexpected agent exits with stderr tail (RIG-4068) (#1371) (2980408)
• runner: retry enrollment with bounded backoff (RIG-3691) (#1699) (3058dcb)
• runner: run the startup preflight under the signal ctx (RIG-3218) (#1790) (ba07785)
• runner: serve AgentGateway.Board by relaying to the Server (RIG-4074) (#1374) (a47ddde)
• runner: sweep detached exec sessions when an agent stops (RIG-4708) (#1805) (4be37e2)
• runner: sweep stale agent containers on startup (RIG-4065) (#1373) (9e4bb4e)
• runtime: kill the in-container process group when a CLI exec client dies (RIG-4181) (#1791) (9b77e93)
• server: close doors when the shutdown drain overruns (RIG-1252) (#1785) (231a8be)
• server: forge_list_issues with no state lists open issues (RIG-4160) (#1459) (995750b)
• server: match the whole socket identity before cleanup removes it (RIG-4696) (#1786) (72ad0c1)
• server: re-provision a lost container when waking an agent (RIG-4131) (#1442) (f1d47bf)
• server: register the Linear write coordinate with host linear.app (RIG-4038) (#1356) (c733d49)
• server: reject forge coordinates registered with an empty host (RIG-3870) (#1667) (e9e698f)
• server: resolve admin-door agent and account handles (RIG-2880) (#1339) (f5f361a)
• server: resolve the despawn target by agent handle (RIG-2880) (#1338) (09f9966)
• server: run a delivery-loop wake under the agent's tenant (RIG-4167) (#1466) (52681dc)
• server: wake an agent whose session the runner no longer knows (RIG-4145) (#1455) (02013f5)
• server: wake checks liveness from the hub cache only (RIG-4223) (#1516) (8300131)
• server: warn when the admin-token state dir is shared (#1801) (cd1c445)
• stack: answer the registry bearer challenge when materialising the guest (RIG-3789) (#1604) (ddece0a)
• stack: authenticate cached guest image reuse (RIG-3906) (#1401) (49d1d47)
• store: backfill session rows stamped with an empty tenant (RIG-4167) (#1471) (ea782ab)
• store: enforce the owner-qualifier grammar in handle resolution (RIG-2880) (#1342) (1edb14e)
• store: name the supervisor routing channel routing (RIG-4037) (#1443) (65b2114)
• store: refuse a reserved group as a channel-group parent (RIG-4358) (#1610) (1aad54b)
• store: refuse reserved top-level group names in CreateChannelGroup (RIG-4045) (#1364) (020867f)
• store: reserve the linear group name at top level (RIG-4045) (#1521) (36cdb36)
• store: scope MessageAskIDs to the author's edit authz (RIG-1552) (#1753) (6f32ae5)
• toolchain: derive golangci-lint Go builder arg from nixpkgs (RIG-4180) (#1474) (91f9e90)
• toolchain: evaluate version-guard without copying the working tree (RIG-4094) (#1392) (a7e4046)
• tools: parse UI source with the TypeScript compiler in the font gate (RIG-3855) (#1274) (d320592)
• ui: add topbar search accessibility (RIG-4282) (#1556) (4a718ab)
• ui: reset top-level markdown margins and zero .r-tab padding (RIG-4087) (#1381) (3e4e7b7)
• ui: retire group_dm channel branches (RIG-3785) (#1314) (50ec6e3)
• ui: scope the pinned e2e fontconfig to the Playwright browser (RIG-4210) (#1608) (ca7c412)
• ui: use avatarInitial for channel thread summaries (RIG-3765) (#1305) (e5fd855)
• vfs: bound lock waits by ctx, reap by rename, reclaim orphan locks (RIG-3310) (#1493) (fd09de8)

Performance Improvements

• forge: stop listing issue pages at the requested limit (RIG-4123) (#1666) (5b7e6e4)
• store: resolve AccountsByHandles with one query per namespace (RIG-2880) (#1346) (ea77193)
• store: walk a PutAgentConfig bundle once for both profile lints (RIG-3220) (#1797) (fdf6220)

---

This PR was generated with Release Please. See documentation.

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

[github-actions]

Compass engineering docs preview: https://release-please--branches--ma.compass-eng-docs.pages.dev

Deployed from release-please--branches--main at f1d463d.

Changed pages:

• CHANGELOG.md