@nanobpm/nano-workforce 0.26.0

package/.github/workflows/ci.yml

@@ -0,0 +1,60 @@
+name: CI
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  typecheck:
+    name: typecheck (Node + Deno)
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Typecheck (Node / tsc)
+        run: npm run typecheck
+
+      - name: Validate manifest (urban check)
+        run: npm run check
+
+      # DI-freshness gate: the `.bpmn` semantic model is authoritative and the
+      # `bpmndi:BPMNDiagram` is GENERATED (scripts/layout-bpmn.ts → layoutBpmn). This regenerates
+      # the DI in memory and fails if any committed diagram is stale — i.e. a flow was changed
+      # without re-running `npm run layout`. Keeps the diagram from drifting off the model.
+      - name: Check BPMN diagram freshness (layout)
+        run: npm run layout:check
+
+      - name: Setup Deno
+        uses: denoland/setup-deno@v2
+        with:
+          deno-version: v2.x
+
+      - name: Typecheck (Deno)
+        run: deno check main.ts 'workers/**/*.ts' 'actions/**/*.ts'
+
+      # Deploy-safety gate: every model-authored `{{template}}` agent-prompt header must resolve
+      # to a declared, non-blank prompt (and no agent prompt may ship blank). A broken/blank token
+      # means a prompt-less agent — the root of the empty escalations on nano-bpm #597/#599.
+      - name: Check agent prompt templates
+        run: deno run -A scripts/check-agent-prompts.ts
+
+      # Runs the app/*.test.ts suite (never exercised by the check globs above)
+      # AND guards the committed lockfile: --frozen fails the build if deno.lock
+      # is out of date for the full graph (incl. tests), so lockfile drift — e.g.
+      # a regenerate that drops the jsr:@std/* test deps — can't be merged.
+      - name: Test + frozen lockfile guard (Deno)
+        run: deno test -A --frozen

package/.github/workflows/release.yml

@@ -0,0 +1,58 @@
+name: Release
+
+on:
+  push:
+    branches: [main]
+
+# Prevent overlapping releases from racing on the same branch.
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+
+jobs:
+  release:
+    name: semantic-release
+    runs-on: ubuntu-latest
+    # `[skip ci]` on the release commit already prevents a re-trigger, but guard
+    # against loops from any automated release commit as well.
+    if: "!contains(github.event.head_commit.message, '[skip ci]')"
+    permissions:
+      contents: write # create tags, GitHub Releases, push CHANGELOG/version bump
+      issues: write # comment on released issues
+      pull-requests: write # comment on released PRs
+      id-token: write # OIDC token for npm Trusted Publishing (no NPM_TOKEN)
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0 # semantic-release needs full history + tags
+          persist-credentials: true # let @semantic-release/git push the release commit
+
+      - name: Configure git author
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Ensure npm supports OIDC Trusted Publishing
+        # Pinned (not @latest) for reproducible, supply-chain-safe releases.
+        # Any version >= 11.5.1 supports npm Trusted Publishing (OIDC).
+        run: npm install -g npm@11.12.1
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # No NPM_TOKEN / NODE_AUTH_TOKEN: publishing uses OIDC Trusted Publishing.
+          NPM_CONFIG_PROVENANCE: "true"
+        run: npx semantic-release

package/.releaserc.json

@@ -0,0 +1,17 @@
+{
+  "branches": ["main"],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/changelog",
+    "@semantic-release/npm",
+    "@semantic-release/github",
+    [
+      "@semantic-release/git",
+      {
+        "assets": ["CHANGELOG.md", "package.json", "package-lock.json"],
+        "message": "chore(release): ${nextRelease.version} [skip ci]\n\n${nextRelease.notes}"
+      }
+    ]
+  ]
+}

package/AGENTS.md

@@ -0,0 +1,168 @@
+# AGENTS.md
+
+Operational guide for AI coding agents working in this repository. Read this
+before making any change. `SPEC.md` is the behavioural source of truth for the
+processes; `README.md` covers setup, roles, and running.
+
+## What this repo is
+
+`nano-workforce` is an [Urban](https://github.com/jwulf/nano-ide) app (ADR 0055)
+— **Agent Graph Orchestration for Agentic SDLC**. It drives GitHub PRs to
+**review convergence** and then **merge**, and can take a whole issue and fan a
+fleet of agents out to implement it. It is a set of
+durable BPMN processes (`resources/processes/*.bpmn`) plus host glue
+(`app/`, `workers/`, `actions/`, `main.ts`) over the Urban runtime seams
+(`DataLayer`, `EngineClient`). The processes are executed by the **nanobpmn
+engine** (`~/workspace/nanobpmn` `engine-core`, embedded in the nano broker the
+app deploys to via the nano SDK).
+
+## Universal engineering principles
+
+### No such thing as "flaky tests"
+Intermittently failing tests must always be root-caused and fixed as either a
+product defect (code) or a production-line defect (test). We do not acknowledge
+the existence of "flaky tests".
+
+### No test retries
+A test must pass or fail deterministically on a single run — no test-runner
+`retry`, no CI re-run-on-failure to coax a green. A test that only passes on a
+later attempt is non-deterministic: root-cause and fix it, never paper over it.
+
+### Red/Green discipline
+Every bug fix must have a test that reproduces the defect **before** modifying
+code. Red first, then green — always.
+
+### Fix the failure mode, don't just squash the bug
+When you find a defect, reason about its whole class and write a guard for the
+class. Prefer securing the surface — including an architectural refactor that
+eliminates the failure mode categorically — over squashing a single instance.
+(Example: a durable wait that can hang forever is a *class* of bug — fix it by
+modelling a bounded race in the process, not by special-casing one PR.)
+
+### Feature test coverage
+New features must carry test coverage over the new surface so regressions are
+caught.
+
+### Derivation over duplication: no drift surfaces
+Eliminate duplicate sources of truth. Everything derivable must be derived from
+one canonical source with one canonical implementation. Do not add a parallel
+implementation of an existing stage (a second poller pass, a second escalation
+path, a second review loop) — extend the canonical one.
+
+### Zero tolerance for warnings, errors, and test failures
+There are no pre-existing failures or warnings, and you will not allow any to
+enter the codebase. `tsc`, `urban check`, `deno check`, and `deno test` must all
+be clean.
+
+### No task without a tracked issue or PR
+Before starting planned work, check for an existing issue or PR. If one is
+already in progress, stop and flag it with a link. Otherwise create and claim an
+issue before writing code.
+
+## BPMN: author the semantic model, generate the diagram
+
+**The `.bpmn` files under `resources/processes/` are hand-authored semantic
+models. The diagram interchange (`bpmndi:BPMNDiagram` — shapes and edges) is
+GENERATED, never hand-edited.**
+
+- Edit the BPMN semantics (elements, sequence flows, gateways, ioMappings,
+  `zeebe:taskHeaders`) by hand in the XML.
+- Regenerate the DI with `npm run layout <path/to/file.bpmn>`
+  (`scripts/layout-bpmn.ts` → `@nanobpm/urban`'s `layoutBpmn`, which wraps
+  `bpmn-auto-layout`). Re-run it **whenever the flow changes** (new node, new
+  flow). Header/ioMapping-only edits don't change shapes and don't need a relayout.
+- Never hand-edit `<bpmndi:…>` — the semantic model is authoritative; a
+  hand-tweaked diagram will be clobbered on the next layout and drifts from the
+  model in the meantime.
+- **CI enforces DI freshness.** `npm run layout:check` (`scripts/layout-bpmn.ts
+  --check`) regenerates every diagram in memory and fails if a committed one is
+  stale. It runs in `.github/workflows/ci.yml`, so a flow change that forgets the
+  relayout **cannot merge**. Run `npm run layout` and commit the result whenever
+  the check flags a model.
+
+## Engine capabilities (Zeebe parity — use them, don't work around them)
+
+The nanobpmn engine (`~/workspace/nanobpmn` `engine-core`, deployed via the nano
+broker) already implements, with **Zeebe-parity semantics** and passing tests:
+
+- **Event-based gateways** — the deferred-choice race (e.g. wait for a message
+  **or** a timer), with correct sibling-withdrawal when one arm wins
+  (engine PR #369).
+- **Boundary events** — timer, message, error, and signal, each **interrupting
+  and non-interrupting**, attachable to activities.
+- **FEEL-expression timer durations** — `<bpmn:timeDuration>=someVar</…>` is
+  evaluated at timer creation, so a timeout can be driven by a process variable
+  (not just a static `PT15M`).
+
+Model liveness properly in the process. To bound a durable wait, author an
+**event-based gateway** racing the awaited message against a timer catch (or a
+boundary event on an activity) — do **not** invent a poller-side timeout/sentinel
+to force a token off a wait. The engine owns token semantics; the poller only
+reconciles external (GitHub) state.
+
+**Caveat — code-first authoring:** the `@nanobpm/workflow` `defineFlow` builder
+cannot yet express event-based gateways or boundary events (its `FlowNode` union
+has no such node). This app authors BPMN as XML, so author those constructs in
+the XML directly; `layoutBpmn` lays them out correctly.
+
+## Data envelopes are scalar-only
+
+`nano:dataEnvelope` shapes support only **scalar** `nano:extend` types
+(`string`, `integer`, `datetime`, `boolean`) — **not arrays**. When a message
+must carry a list (e.g. failing check names), join it to a scalar (e.g.
+`\n`-separated) in the publisher before it crosses the envelope, and split it on
+the far side if needed.
+
+## The poller owns liveness/reconciliation
+
+`main.ts` runs a **self-scheduling** poll loop (`pollOnce` in `app/service.ts`),
+not `setInterval`, so a slow GitHub call can't overlap passes. Each pass advances
+the review stage, the merge stage, job-activation visibility, and wave gates by
+reading GitHub and correlating engine messages. Any new external-state watch
+belongs here as another idempotent pass. A pass must always make forward
+progress possible — never leave a PR on a status no pass scans (it wedges), and
+never rely on an external actor (e.g. Copilot re-reviewing) that the app doesn't
+itself trigger.
+
+## Database migrations (SQLite, forward-only, expand-and-contract)
+
+Migrations live in `db/migrations/*.sql` and are **auto-applied on boot** from
+`nano.app.json` (`data.sources.app.migrations`). They are forward-only.
+
+- **Default to additive (expand):** nullable/`DEFAULT`ed `ADD COLUMN`, new
+  tables/indexes. Never drop or rename a column/table in the same change that
+  stops using it.
+- **Destructive drops are a separate, later contract phase**, shipped only after
+  a release stopped reading the old shape.
+- Number a new migration after the current highest prefix (they apply in order).
+
+## Runtime & CI gates
+
+Node-hosted (`node --experimental-strip-types`), but the sources are
+**cross-runtime**: workers/actions/`main.ts` also typecheck and run under Deno.
+Match CI locally before pushing:
+
+```bash
+npm run typecheck                                     # tsc --noEmit (Node)
+npm run check                                         # urban check (manifest validation)
+npm run layout:check                                  # BPMN diagram freshness (no drift)
+deno check main.ts 'workers/**/*.ts' 'actions/**/*.ts'  # Deno typecheck
+deno test -A                                          # unit tests (run with -A)
+```
+
+CI (`.github/workflows/ci.yml`) gates typecheck, `urban check`, `layout:check`,
+Deno typecheck, and the Deno test suite. Run `npm run layout <file.bpmn>` after
+any BPMN flow change and commit the regenerated diagram — the `layout:check`
+gate fails the build otherwise.
+
+## Repo conventions
+
+- **DCO sign-off is enforced.** Every commit needs a `Signed-off-by` trailer —
+  use `git commit -s` (or `git rebase --signoff`). A missing sign-off fails the
+  DCO check.
+- **Conventional Commits.** `feat:`, `fix:`, `chore:`, `docs:`, `refactor:`,
+  `test:`, imperative mood. Review-comment fix-ups are `chore:`, not `fix:`.
+- **Feature work in a worktree** off `origin/main`, one branch per change; open a
+  PR and reference the closing issue (`Closes #NN`).
+- **Never `git push --force` on `main`;** use `--force-with-lease` on feature
+  branches.

package/CHANGELOG.md

@@ -0,0 +1,231 @@
+# [0.26.0](https://github.com/jwulf/urban-pr-review/compare/v0.25.0...v0.26.0) (2026-08-08)
+
+
+### Features
+
+* **cancel:** cooperative abandon check — a cancelled run makes no side effect ([#77](https://github.com/jwulf/urban-pr-review/issues/77)) ([11b0155](https://github.com/jwulf/urban-pr-review/commit/11b0155c0bd1ecadba7ac286317a2c5723a7d475)), closes [#76](https://github.com/jwulf/urban-pr-review/issues/76)
+
+# [0.25.0](https://github.com/jwulf/urban-pr-review/compare/v0.24.0...v0.25.0) (2026-08-07)
+
+
+### Features
+
+* rebrand to "Nano Workforce" with a shipped app icon ([#71](https://github.com/jwulf/urban-pr-review/issues/71)) ([3fb5386](https://github.com/jwulf/urban-pr-review/commit/3fb53863def6e7525401ddb0280a15ab9c81aae6)), closes [#638](https://github.com/jwulf/urban-pr-review/issues/638)
+
+# [0.24.0](https://github.com/jwulf/urban-pr-review/compare/v0.23.0...v0.24.0) (2026-08-07)
+
+
+### Features
+
+* **console:** epic pane — wave state × conflict graph (D10) ([#75](https://github.com/jwulf/urban-pr-review/issues/75)) ([54c9b5b](https://github.com/jwulf/urban-pr-review/commit/54c9b5bfb84ebcce435646191a27f07e78d28b45))
+
+# [0.23.0](https://github.com/jwulf/urban-pr-review/compare/v0.22.0...v0.23.0) (2026-08-07)
+
+
+### Features
+
+* **merge:** trial-merge integration gate for semantic conflicts (D3) ([#70](https://github.com/jwulf/urban-pr-review/issues/70)) ([22b6f99](https://github.com/jwulf/urban-pr-review/commit/22b6f994757c359f9258ce873a6b052f967c9e47))
+
+# [0.22.0](https://github.com/jwulf/urban-pr-review/compare/v0.21.0...v0.22.0) (2026-08-07)
+
+
+### Features
+
+* **merge:** serialize same-lane landings (D6) ([#68](https://github.com/jwulf/urban-pr-review/issues/68)) ([581d402](https://github.com/jwulf/urban-pr-review/commit/581d402c40ee43102a86a09d3e8c085eceb8c199)), closes [#67](https://github.com/jwulf/urban-pr-review/issues/67) [#49](https://github.com/jwulf/urban-pr-review/issues/49)
+
+# [0.21.0](https://github.com/jwulf/urban-pr-review/compare/v0.20.0...v0.21.0) (2026-08-07)
+
+
+### Features
+
+* **coordination:** add waiting-for-lane task state (D7) ([#65](https://github.com/jwulf/urban-pr-review/issues/65)) ([2311b07](https://github.com/jwulf/urban-pr-review/commit/2311b07b1f93793cde801fad5bad7fcc793e52f2))
+
+# [0.20.0](https://github.com/jwulf/urban-pr-review/compare/v0.19.0...v0.20.0) (2026-08-07)
+
+
+### Features
+
+* **merge:** reapply merge protocol on every landing attempt (D9) ([#66](https://github.com/jwulf/urban-pr-review/issues/66)) ([5bb4291](https://github.com/jwulf/urban-pr-review/commit/5bb42914589ad138afc5270b56af155b5ab2f4fb))
+
+# [0.19.0](https://github.com/jwulf/urban-pr-review/compare/v0.18.0...v0.19.0) (2026-08-07)
+
+
+### Features
+
+* **merge:** guard against landing a PR into a dead-end base branch ([#60](https://github.com/jwulf/urban-pr-review/issues/60)) ([#61](https://github.com/jwulf/urban-pr-review/issues/61)) ([e108598](https://github.com/jwulf/urban-pr-review/commit/e108598b1f46b1a0d85c0a4689adb25be301ef2c)), closes [#54](https://github.com/jwulf/urban-pr-review/issues/54)
+
+# [0.18.0](https://github.com/jwulf/urban-pr-review/compare/v0.17.0...v0.18.0) (2026-08-07)
+
+
+### Features
+
+* **coordination:** merge-exclusion graph + file-overlap conflict-scan (D1/D2) ([#59](https://github.com/jwulf/urban-pr-review/issues/59)) ([538ed94](https://github.com/jwulf/urban-pr-review/commit/538ed9448870abd99b5f2d82e14477a6bd299f97))
+
+# [0.17.0](https://github.com/jwulf/urban-pr-review/compare/v0.16.0...v0.17.0) (2026-08-07)
+
+
+### Features
+
+* **coordination:** structured scope/impl-change report from implementers ([#55](https://github.com/jwulf/urban-pr-review/issues/55)) ([#56](https://github.com/jwulf/urban-pr-review/issues/56)) ([13b62c2](https://github.com/jwulf/urban-pr-review/commit/13b62c25052e2132ad677fec337dc7b2ca6997d3)), closes [#49](https://github.com/jwulf/urban-pr-review/issues/49) [nano-bpm#614](https://github.com/nano-bpm/issues/614) [#624](https://github.com/jwulf/urban-pr-review/issues/624) [#54](https://github.com/jwulf/urban-pr-review/issues/54)
+
+# [0.16.0](https://github.com/jwulf/urban-pr-review/compare/v0.15.0...v0.16.0) (2026-08-07)
+
+
+### Features
+
+* **coordination:** epic blackboard — Tier 2 midflight coordination ([#54](https://github.com/jwulf/urban-pr-review/issues/54)) ([c873b63](https://github.com/jwulf/urban-pr-review/commit/c873b6309721d0e66d5be5c87d2a6df9896bf391)), closes [#52](https://github.com/jwulf/urban-pr-review/issues/52) [51/#53](https://github.com/jwulf/urban-pr-review/issues/53) [#42](https://github.com/jwulf/urban-pr-review/issues/42) [#53](https://github.com/jwulf/urban-pr-review/issues/53)
+
+# [0.15.0](https://github.com/jwulf/urban-pr-review/compare/v0.14.3...v0.15.0) (2026-08-07)
+
+
+### Features
+
+* **coordination:** epic blackboard — Tier 1 dispatch/resume channel ([#53](https://github.com/jwulf/urban-pr-review/issues/53)) ([2dcfb8a](https://github.com/jwulf/urban-pr-review/commit/2dcfb8a5e1bd7beb89d174e646d40d610462365a)), closes [#51](https://github.com/jwulf/urban-pr-review/issues/51) [#49](https://github.com/jwulf/urban-pr-review/issues/49) [Magikcraft/nano-bpm#614](https://github.com/Magikcraft/nano-bpm/issues/614) [#52](https://github.com/jwulf/urban-pr-review/issues/52)
+
+## [0.14.3](https://github.com/jwulf/urban-pr-review/compare/v0.14.2...v0.14.3) (2026-08-07)
+
+
+### Bug Fixes
+
+* **merge-loop:** add senior:rebase remediation arm ([#42](https://github.com/jwulf/urban-pr-review/issues/42)) ([#50](https://github.com/jwulf/urban-pr-review/issues/50)) ([a8195a4](https://github.com/jwulf/urban-pr-review/commit/a8195a49dae77868e1eb31a17aa32e2dfc3bc0a1))
+
+## [0.14.2](https://github.com/jwulf/urban-pr-review/compare/v0.14.1...v0.14.2) (2026-08-06)
+
+
+### Bug Fixes
+
+* **review-round:** idempotent, non-destructive review re-request (unwedges [#35](https://github.com/jwulf/urban-pr-review/issues/35) class) ([#47](https://github.com/jwulf/urban-pr-review/issues/47)) ([7b9a391](https://github.com/jwulf/urban-pr-review/commit/7b9a391119be748344852ebb562cee39be6da8c9)), closes [#48](https://github.com/jwulf/urban-pr-review/issues/48)
+
+## [0.14.1](https://github.com/jwulf/urban-pr-review/compare/v0.14.0...v0.14.1) (2026-08-06)
+
+
+### Bug Fixes
+
+* **plan-fanout:** keep template tokens out of XML comments ([#40](https://github.com/jwulf/urban-pr-review/issues/40)) ([46cad5a](https://github.com/jwulf/urban-pr-review/commit/46cad5a97dfb2fec0efbadf1514fe3cc75121775))
+* **review:** give agents the exact Copilot review-request command ([#45](https://github.com/jwulf/urban-pr-review/issues/45)) ([2fda65c](https://github.com/jwulf/urban-pr-review/commit/2fda65c7bf924d8273c1104453f5b5512afb4e05)), closes [Magikcraft/nano-bpm#610](https://github.com/Magikcraft/nano-bpm/issues/610)
+
+# [0.14.0](https://github.com/jwulf/urban-pr-review/compare/v0.13.0...v0.14.0) (2026-08-06)
+
+
+### Features
+
+* **merge:** execute a per-repo merge protocol (fresh head run + [@mergifyio](https://github.com/mergifyio) queue) ([#44](https://github.com/jwulf/urban-pr-review/issues/44)) ([712a0eb](https://github.com/jwulf/urban-pr-review/commit/712a0eb212616152a13a23b2306bebc19349746d)), closes [#43](https://github.com/jwulf/urban-pr-review/issues/43)
+
+# [0.13.0](https://github.com/jwulf/urban-pr-review/compare/v0.12.4...v0.13.0) (2026-08-06)
+
+
+### Features
+
+* **pages:** make the pull-request list collapsible, remembered across sessions ([#41](https://github.com/jwulf/urban-pr-review/issues/41)) ([62e9249](https://github.com/jwulf/urban-pr-review/commit/62e924949b109f14657d103f1b69c9535ce3f205))
+
+## [0.12.4](https://github.com/jwulf/urban-pr-review/compare/v0.12.3...v0.12.4) (2026-08-06)
+
+
+### Bug Fixes
+
+* **escalation:** make no-result rounds recoverable from the UI ([#38](https://github.com/jwulf/urban-pr-review/issues/38)) ([b7259a0](https://github.com/jwulf/urban-pr-review/commit/b7259a042fddfeee4f6bce90461e171afda5dc9f)), closes [597/#599](https://github.com/jwulf/urban-pr-review/issues/599)
+
+## [0.12.3](https://github.com/jwulf/urban-pr-review/compare/v0.12.2...v0.12.3) (2026-08-06)
+
+
+### Bug Fixes
+
+* **prompts:** deliver agent base prompts as a variable bridge (unblock review resubmit) ([#37](https://github.com/jwulf/urban-pr-review/issues/37)) ([6ae1c05](https://github.com/jwulf/urban-pr-review/commit/6ae1c057c947b4251d5f390fb3beed4ffa61125f)), closes [#36](https://github.com/jwulf/urban-pr-review/issues/36) [#31](https://github.com/jwulf/urban-pr-review/issues/31) [597/#599](https://github.com/jwulf/urban-pr-review/issues/599) [#36](https://github.com/jwulf/urban-pr-review/issues/36)
+
+## [0.12.2](https://github.com/jwulf/urban-pr-review/compare/v0.12.1...v0.12.2) (2026-08-06)
+
+
+### Bug Fixes
+
+* adopt urban 0.22 for {{template}} substitution + guard prompt-less agents ([#35](https://github.com/jwulf/urban-pr-review/issues/35)) ([6ad92c1](https://github.com/jwulf/urban-pr-review/commit/6ad92c1d1c73c87e43efc49958a5b9a41debfb13)), closes [#34](https://github.com/jwulf/urban-pr-review/issues/34) [#597](https://github.com/jwulf/urban-pr-review/issues/597) [#599](https://github.com/jwulf/urban-pr-review/issues/599) [#31](https://github.com/jwulf/urban-pr-review/issues/31) [#106](https://github.com/jwulf/urban-pr-review/issues/106) [jwulf/urban-pr-review#34](https://github.com/jwulf/urban-pr-review/issues/34)
+
+## [0.12.1](https://github.com/jwulf/urban-pr-review/compare/v0.12.0...v0.12.1) (2026-08-05)
+
+
+### Bug Fixes
+
+* adopt @nanobpm/urban 0.21.0 (grid row-detail collapse) + add Renovate ([#33](https://github.com/jwulf/urban-pr-review/issues/33)) ([7d75b46](https://github.com/jwulf/urban-pr-review/commit/7d75b46c443e75477aab78ee576ef94c02d182ce))
+
+# [0.12.0](https://github.com/jwulf/urban-pr-review/compare/v0.11.0...v0.12.0) (2026-08-05)
+
+
+### Features
+
+* harden review-wait against permanent stalls ([#32](https://github.com/jwulf/urban-pr-review/issues/32)) ([8303357](https://github.com/jwulf/urban-pr-review/commit/83033579a382e7d235dc8f248c821150a29ea121))
+
+# [0.11.0](https://github.com/jwulf/urban-pr-review/compare/v0.10.0...v0.11.0) (2026-08-05)
+
+
+### Features
+
+* model-authored template-header prompts + senior:fix-ci auto-fix loop ([#31](https://github.com/jwulf/urban-pr-review/issues/31)) ([761213a](https://github.com/jwulf/urban-pr-review/commit/761213ae65a26e29594bca8ad0e78a48c435d8c0)), closes [nano-ide#106](https://github.com/nano-ide/issues/106) [jwulf/urban-pr-review#29](https://github.com/jwulf/urban-pr-review/issues/29)
+
+# [0.10.0](https://github.com/jwulf/urban-pr-review/compare/v0.9.0...v0.10.0) (2026-08-05)
+
+
+### Features
+
+* gate a wave's implementation on the prior wave merging ([#30](https://github.com/jwulf/urban-pr-review/issues/30)) ([6f07fc4](https://github.com/jwulf/urban-pr-review/commit/6f07fc4771fc797ea5d61cd1c17aafce9f1c2dda))
+
+# [0.9.0](https://github.com/jwulf/urban-pr-review/compare/v0.8.0...v0.9.0) (2026-08-05)
+
+
+### Features
+
+* configurable review-round cap (default 20) + submit-form field ([#27](https://github.com/jwulf/urban-pr-review/issues/27)) ([ee8e314](https://github.com/jwulf/urban-pr-review/commit/ee8e3140b15b02cf0a8a1f268187f539debfe211))
+
+# [0.8.0](https://github.com/jwulf/urban-pr-review/compare/v0.7.0...v0.8.0) (2026-08-05)
+
+
+### Features
+
+* adversarial plan-review gate before fan-out dispatch ([#26](https://github.com/jwulf/urban-pr-review/issues/26)) ([1634c80](https://github.com/jwulf/urban-pr-review/commit/1634c80dfe0953f9a6739b8690ad0c5b7a990c74))
+
+# [0.7.0](https://github.com/jwulf/urban-pr-review/compare/v0.6.0...v0.7.0) (2026-08-04)
+
+
+### Features
+
+* mixed sequential + parallel plan fan-out via dependency waves ([#21](https://github.com/jwulf/urban-pr-review/issues/21)) ([ee67032](https://github.com/jwulf/urban-pr-review/commit/ee6703235e081a8c20f2e8b7d76ebc2282450f51)), closes [#20](https://github.com/jwulf/urban-pr-review/issues/20) [#20](https://github.com/jwulf/urban-pr-review/issues/20)
+
+# [0.6.0](https://github.com/jwulf/urban-pr-review/compare/v0.5.0...v0.6.0) (2026-08-04)
+
+
+### Features
+
+* make PR list entries clickable new-tab links ([#19](https://github.com/jwulf/urban-pr-review/issues/19)) ([cd73a02](https://github.com/jwulf/urban-pr-review/commit/cd73a0276f33ccafdd6e2f28d0d55bd40abc6b90))
+
+# [0.5.0](https://github.com/jwulf/urban-pr-review/compare/v0.4.0...v0.5.0) (2026-08-04)
+
+
+### Features
+
+* plan-fanout — decompose an issue into a fleet of PRs ([#14](https://github.com/jwulf/urban-pr-review/issues/14)) ([#17](https://github.com/jwulf/urban-pr-review/issues/17)) ([462a8d7](https://github.com/jwulf/urban-pr-review/commit/462a8d7fd1360db8a1f5f7ae65dd2ff86dfc8b5a))
+
+# [0.4.0](https://github.com/jwulf/urban-pr-review/compare/v0.3.1...v0.4.0) (2026-08-03)
+
+
+### Features
+
+* GET /app/status + cancel-by-prKey affordances ([#12](https://github.com/jwulf/urban-pr-review/issues/12)) ([9fbe066](https://github.com/jwulf/urban-pr-review/commit/9fbe066992b18529b485324b476ef031b4814565))
+
+## [0.3.1](https://github.com/jwulf/urban-pr-review/compare/v0.3.0...v0.3.1) (2026-08-03)
+
+
+### Bug Fixes
+
+* **deps:** bump @nanobpm/urban to ^0.17.1 ([#11](https://github.com/jwulf/urban-pr-review/issues/11)) ([00d6a68](https://github.com/jwulf/urban-pr-review/commit/00d6a68e39d01369bd50784c846e97651a0022ac))
+
+# [0.3.0](https://github.com/jwulf/urban-pr-review/compare/v0.2.1...v0.3.0) (2026-08-03)
+
+
+### Features
+
+* **poller:** read GitHub reviews via the host `gh` CLI ([#10](https://github.com/jwulf/urban-pr-review/issues/10)) ([d04c12e](https://github.com/jwulf/urban-pr-review/commit/d04c12e9de30276d2d6cae2405330146f2e9540f))
+
+## [0.2.1](https://github.com/jwulf/urban-pr-review/compare/v0.2.0...v0.2.1) (2026-07-31)
+
+
+### Bug Fixes
+
+* add license, repository metadata, and marketplace manifest ([3382cfb](https://github.com/jwulf/urban-pr-review/commit/3382cfb404d5a76d8eec2f7cb1abd36cb889ef14))