chore(main): release 1.288.0

[coreplane-infra]

🤖 I have created a release beep boop

1.288.0 (2026-10-06)

Features

• resident: onboard repositories without a resident (#2798) (b6f3138)
• runs: diagnose incomplete pull-owner scans (#2811) (bb20149)

Bug fixes

• harness: preserve typed outcomes and original operation bounds (#2801) (a8d347d)
• sandbox: publish rewrites when the default branch advances (#2808) (6143d6b)

---

This PR was generated with Release Please. See documentation.

Polylane reviews this pull request when you ask:

[github-actions]

What merging this release deploys

Deploy targets for f0cf5a5: 4 of 4 Workers — memory, bot, resident, sandbox

Worker	Decision	Judged against	Why
memory	deploy	live 9dbcc7d	deploy/cloudflare-memory/worker.ts src/core/authz/grantSets.ts (imported by deploy/cloudflare-memory/worker.ts) src/core/authz/grants.ts (imported by deploy/cloudflare-memory/worker.ts) src/core/authz/types.ts (imported by deploy/cloudflare-memory/worker.ts) src/core/coordinator/contract.ts (imported by deploy/cloudflare-memory/worker.ts) src/core/coordinator/historicalNativeAudit.ts (imported by deploy/cloudflare-memory/worker.ts) src/core/coordinator/instanceStore.ts (imported by deploy/cloudflare-memory/worker.ts) src/core/coordinator/pullOwnership.ts (imported by deploy/cloudflare-memory/worker.ts) … +17 more
bot	deploy	live 9dbcc7d	Dockerfile package-lock.json: dependencies of the root package changed — @earendil-works/pi-ai 0.87.0 → 0.87.1, @earendil-works/pi-coding-agent 0.87.0 → 0.87.1, @earendil-works/chord 0.87.0 → 0.87.1, @earendil-works/pi-agent-core 0.87.0 → 0.87.1, @earendil-works/pi-ai 0.87.0 → 0.87.1, @earendil-works/pi-telemetry 0.87.0 → 0.87.1, @earendil-works/pi-tui 0.87.0 → 0.87.1, @earendil-works/pi-telemetry 0.87.0 → 0.87.1, @opencode/cli 2.0.12 → 2.0.18, @opencode/cli-darwin-arm64 2.0.12 → 2.0.18, @opencode/cli-darwin-x64 2.0.12 → 2.0.18, @opencode/cli-darwin-x64-baseline 2.0.12 → 2.0.18, @opencode/cli-linux-arm64 2.0.12 → 2.0.18, @opencode/cli-linux-arm64-musl 2.0.12 → 2.0.18, @opencode/cli-linux-x64 2.0.12 → 2.0.18, @opencode/cli-linux-x64-baseline 2.0.12 → 2.0.18, @opencode/cli-linux-x64-baseline-musl 2.0.12 → 2.0.18, @opencode/cli-linux-x64-musl 2.0.12 → 2.0.18, @opencode/cli-windows-arm64 2.0.12 → 2.0.18, @opencode/cli-windows-x64 2.0.12 → 2.0.18, @opencode/cli-windows-x64-baseline 2.0.12 → 2.0.18, @opencode/protocol 2.0.12 → 2.0.18, @opencode/schema 2.0.12 → 2.0.18, @oxc-project/types 0.148.0 → 0.151.0, @rolldown/binding-android-arm-eabi 1.2.7 → 1.2.11, @rolldown/binding-android-arm64 1.2.7 → 1.2.11, @rolldown/binding-darwin-arm64 1.2.7 → 1.2.11, @rolldown/binding-darwin-x64 1.2.7 → 1.2.11, @rolldown/binding-freebsd-x64 1.2.7 → 1.2.11, @rolldown/binding-linux-arm-gnueabihf 1.2.7 → 1.2.11, @rolldown/binding-linux-arm64-gnu 1.2.7 → 1.2.11, @rolldown/binding-linux-arm64-musl 1.2.7 → 1.2.11, @rolldown/binding-linux-ppc64-gnu 1.2.7 → 1.2.11, @rolldown/binding-linux-s390x-gnu 1.2.7 → 1.2.11, @rolldown/binding-linux-x64-gnu 1.2.7 → 1.2.11, @rolldown/binding-linux-x64-musl 1.2.7 → 1.2.11, @rolldown/binding-openharmony-arm64 1.2.7 → 1.2.11, @rolldown/binding-win32-arm64-msvc 1.2.7 → 1.2.11, @rolldown/binding-win32-x64-msvc 1.2.7 → 1.2.11, @types/node 24.13.6 → 24.19.0, @typescript-eslint/eslint-plugin 8.70.1 → 8.71.0, @typescript-eslint/parser 8.70.1 → 8.71.0, @typescript-eslint/project-service 8.70.1 → 8.71.0, @typescript-eslint/scope-manager 8.70.1 → 8.71.0, @typescript-eslint/tsconfig-utils 8.70.1 → 8.71.0, @typescript-eslint/type-utils 8.70.1 → 8.71.0, @typescript-eslint/types 8.70.1 → 8.71.0, @typescript-eslint/typescript-estree 8.70.1 → 8.71.0, @typescript-eslint/utils 8.70.1 → 8.71.0, @typescript-eslint/visitor-keys 8.70.1 → 8.71.0, eslint-plugin-vue 10.11.0 → 10.11.1, magic-string 1.2.3 → 1.4.2, prettier 3.9.8 → 3.9.9, proxy-addr 2.0.7 → 2.0.8, rolldown 1.2.7 → 1.2.11, source-map-js 1.2.1 → 1.2.2, typescript-eslint 8.70.1 → 8.71.0, undici 8.10.2 → 8.11.2, undici-types 7.18.2 → 7.24.6, vite 8.3.0 → 8.3.1 package-lock.json: dependencies of web changed — @iconify-json/lucide 1.2.135 → 1.2.137, @iconify-json/simple-icons 1.2.97 → 1.2.98, @iconify/vue 5.0.1 → 5.0.3, @nuxt/ui 4.11.1 → 4.11.2, @oxc-project/types 0.148.0 → 0.151.0, @pierre/diffs 1.4.3 → 1.5.1, @rolldown/binding-android-arm-eabi 1.2.7 → 1.2.11, @rolldown/binding-android-arm64 1.2.7 → 1.2.11, @rolldown/binding-darwin-arm64 1.2.7 → 1.2.11, @rolldown/binding-darwin-x64 1.2.7 → 1.2.11, @rolldown/binding-freebsd-x64 1.2.7 → 1.2.11, @rolldown/binding-linux-arm-gnueabihf 1.2.7 → 1.2.11, @rolldown/binding-linux-arm64-gnu 1.2.7 → 1.2.11, @rolldown/binding-linux-arm64-musl 1.2.7 → 1.2.11, @rolldown/binding-linux-ppc64-gnu 1.2.7 → 1.2.11, @rolldown/binding-linux-s390x-gnu 1.2.7 → 1.2.11, @rolldown/binding-linux-x64-gnu 1.2.7 → 1.2.11, @rolldown/binding-linux-x64-musl 1.2.7 → 1.2.11, @rolldown/binding-openharmony-arm64 1.2.7 → 1.2.11, @rolldown/binding-win32-arm64-msvc 1.2.7 → 1.2.11, @rolldown/binding-win32-x64-msvc 1.2.7 → 1.2.11, @tanstack/virtual-core 3.17.9 → 3.17.11, @tanstack/vue-virtual 3.13.37 → 3.13.39, @types/node 24.13.6 → 24.19.0, @unhead/bundler 3.4.0 → 3.4.1, @unhead/vue 3.4.0 → 3.4.1, framer-motion 13.2.0 → 13.4.4, hookable 6.1.1 → 6.1.2, magic-string 1.2.3 → 1.4.2, motion-dom 13.2.0 → 13.4.4, motion-utils 13.0.0 → 13.3.0, motion-v 2.4.2 → 2.5.1, rolldown 1.2.7 → 1.2.11, source-map-js 1.2.1 → 1.2.2, tailwind-merge 3.6.0 → 3.7.0, undici 8.10.2 → 8.11.2, undici-types 7.18.2 → 7.24.6, unhead 3.4.0 → 3.4.1, unplugin 3.3.0 → 3.4.0, vite 8.3.0 → 8.3.1 package.json src/channels/adminCoordinator.ts src/config.ts src/core/authz/authorize.ts src/core/authz/grantSets.ts … +60 more
resident	deploy	live 395d201	deploy/cloudflare-resident/Dockerfile deploy/cloudflare-resident/rootOutcome.ts deploy/cloudflare-resident/worker.ts src/core/authz/grantSets.ts (imported by deploy/cloudflare-resident/worker.ts) src/core/authz/grants.ts (imported by deploy/cloudflare-resident/worker.ts) src/core/authz/types.ts (imported by deploy/cloudflare-resident/worker.ts) src/core/branchIdentityBaseline.ts (imported by deploy/cloudflare-resident/worker.ts) src/core/branchStartState.ts (imported by deploy/cloudflare-resident/worker.ts) … +27 more
sandbox	deploy	live 395d201	deploy/cloudflare-sandbox/Dockerfile deploy/cloudflare-sandbox/worker.ts src/core/trace/attrs.ts (imported by deploy/cloudflare-sandbox/worker.ts) src/execution/coldPublication.ts (imported by deploy/cloudflare-sandbox/worker.ts) src/execution/sandboxCheckpoint.ts (imported by deploy/cloudflare-sandbox/worker.ts) unsure: unclassified path attachments/screenshot-check/before-final-repeat.sha256 — no rule claims it (src/deploy/affected.ts) unsure: unclassified path attachments/screenshot-check/before-repeat.sha256 — no rule claims it (src/deploy/affected.ts) unsure: unclassified path attachments/screenshot-check/comparison-1.png — no rule claims it (src/deploy/affected.ts) … +12 more

Unclassified paths (every Worker deploys): attachments/screenshot-check/before-final-repeat.sha256, attachments/screenshot-check/before-repeat.sha256, attachments/screenshot-check/comparison-1.png, attachments/screenshot-check/comparison-2.png, attachments/screenshot-check/comparison-3.png, attachments/screenshot-check/comparison-4.png, attachments/screenshot-check/comparison-5.png, attachments/screenshot-check/comparison-6.png, attachments/screenshot-check/comparison-7.png, attachments/screenshot-check/comparison-8.png, attachments/screenshot-check/final-repeat.log, attachments/screenshot-check/generation.log, attachments/screenshot-check/home-empty-before.png, attachments/screenshot-check/pixel-comparison.json, attachments/screenshot-check/repeat-generation.log — add a rule in src/deploy/affected.ts.

Judged per Worker against the commit it is serving right now. Re-rendered by the release-please workflow on every merge to main; merging this PR runs deploy all --affected and deploys exactly the Workers marked deploy.

[coreplane-infra]

🤖 Created releases:

• v1.288.0

🌻