chore(main): release engine-and-dependents libraries

[JSONbored]

🤖 I have created a release beep boop

contract: 3.17.0

3.17.0 (2026-07-29)

Features

• ams: migrate the AMS miner MCP server to @loopover/contract (#9542) (9713f26), closes #9536
• contract: add @loopover/contract, the single zod source for tool and API schemas (#9530) (95f1524)
• contract: give the request schemas, the control plane, and the self-host endpoints one contract (#9750) (#9757) (5220a35)
• contract: migrate every remote MCP tool contract to @loopover/contract (#9518) (#9559) (968c731)
• gate: choose provider, model, effort and self-consistency runs — per repo, and escalated on guarded paths (#9821) (a65655c)
• mcp: discovery surfaces, registry publish, and the stdio gateway (#9526) (#9735) (983ea31)
• mcp: generate every tool, CLI, client, and docs surface from the contract (#9521) (#9590) (bd139a5)
• mcp: migrate the stdio MCP server's 102 tools to @loopover/contract (#9537) (#9565) (d5a5a8f)
• mcp: one registry-driven telemetry contract at all three dispatch chokepoints (#9525) (#9579) (06a090f)
• stats: publish a fleet accuracy trend, so the weekly table means something again (#9775) (47842ec), closes #9676

Fixes

• contract: close the last duplications and make the .shape trap impossible (#9762) (#9765) (edbdb58)
• contract: regenerate api-schemas for #9813's ignoredCheckRuns (#9837) (8659503), closes #9836
• release: publish @loopover/contract, and catch this class of break before it ships (#9749) (#9763) (6dd5791)

engine: 3.17.0

3.17.0 (2026-07-29)

Features

• benchmark: anti-overfit controls — repo-level seeded split, caps, rotation (#9263) (#9600) (9942512)
• benchmark: maintainer action-space schema and proposal validator (#9260) (#9595) (b543e1e)
• benchmark: multi-class proposal scorer on the shared primitives (#9262) (#9599) (534dfd5)
• benchmark: reversal-aware realized-history ground truth (#9261) (#9598) (1819298)
• benchmark: untrusted candidate sandbox policy and fail-closed run verdict (#9264) (#9606) (3200abc)
• gate: choose provider, model, effort and self-consistency runs — per repo, and escalated on guarded paths (#9821) (a65655c)
• gate: gate.ignoredCheckRuns — exclude a third-party check from CI resolution entirely (#9813) (84c2462)
• proof: public per-repo proof summary, endpoint and README badge (#9569) (#9608) (7ffb51e)

Fixes

• ci: normalize committed CRLF to LF and name the failure for what it is (#9799) (ee98373)
• engine: accept the { kind: 'existing', repo } IdeaTarget shape in validateIdeaSubmission (#9634) (c086363)
• engine: drop opportunity-metadata's blanket v8-ignore directives and branch-cover the scoring logic they hid (#9635) (61ab43e), closes #9616
• engine: guard benchmark ground-truth against invalid window and duplicate roster (#9882) (300c381), closes #9644
• engine: isolate getTenantConfig reads and normalize tenant config (#9614) (#9627) (676ba3c)
• engine: keep renderRepoMap's output within maxOutputChars including the marker (#9633) (d997bac)
• engine: share governor-ledger's repo-segment guard with the three normalizers that skipped it (#9625) (8e3e4f5), closes #9610
• engine: surface discovery-index contract-version skew and actually send the version on the query wire (#9631) (80827df), closes #9615
• engine: validate the repo and PR number behind buildResultsPayload's customer link (#9611) (#9632) (5aa94b7)
• eval: commit each published score to the corpus a reader can download (#9811) (bcdd2f8), closes #9805
• eval: stamp the in-Worker threshold backtest with its corpus freeze point (#9804) (2755994)
• openapi: declare the predictedGate/dataQuality fields branch-analysis actually returns (#9531) (#9587) (a858cbc)
• routing: impose a total order on the reviewer-vote read so latest-vote-wins is deterministic (#9885) (e3247ed), closes #9638
• signals: unify the test-evidence code-path predicate as isTestableCodePath (#9906) (cb167ba), closes #9696

mcp: 3.17.0

3.17.0 (2026-07-29)

Features

• contract: add @loopover/contract, the single zod source for tool and API schemas (#9530) (95f1524)
• contract: migrate every remote MCP tool contract to @loopover/contract (#9518) (#9559) (968c731)
• mcp: add validate:mcp, the contract validator that enforces all three servers (#9520) (#9575) (0e990a3)
• mcp: discovery surfaces, registry publish, and the stdio gateway (#9526) (#9735) (983ea31)
• mcp: generate every tool, CLI, client, and docs surface from the contract (#9521) (#9590) (bd139a5)
• mcp: migrate the stdio MCP server's 102 tools to @loopover/contract (#9537) (#9565) (d5a5a8f)
• mcp: one registry-driven telemetry contract at all three dispatch chokepoints (#9525) (#9579) (06a090f)

Fixes

• contract: close the last duplications and make the .shape trap impossible (#9762) (#9765) (edbdb58)
• mcp: await PostHog flush via unit-tested stdio wrapper (#8738) (7ee07cc), closes #8690
• mcp: correct loopover_check_issue_slop description and drop the dead issue-slop rubric (#8959) (fcecf0c), closes #8907
• mcp: exit the CLI cleanly on a broken-pipe stdout/stderr error (#8731) (2fc27bc), closes #8691
• mcp: mirror loopover_clear_selftune_override in the CLI stdio package (#9300) (#9361) (09eb223)
• mcp: stop --json=false and --exit-code=false enabling the flag they disable (#8725) (60f9f8f)
• security: close two open GitHub Security Advisories (#9281) (29591ca)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @loopover/contract bumped from ^0.1.0 to ^3.17.0
    • @loopover/engine bumped from ^3.16.0 to ^3.17.0

miner: 3.17.0

3.17.0 (2026-07-29)

Features

• ams: migrate the AMS miner MCP server to @loopover/contract (#9542) (9713f26), closes #9536
• contract: give the request schemas, the control plane, and the self-host endpoints one contract (#9750) (#9757) (5220a35)
• mcp: discovery surfaces, registry publish, and the stdio gateway (#9526) (#9735) (983ea31)
• mcp: generate every tool, CLI, client, and docs surface from the contract (#9521) (#9590) (bd139a5)
• mcp: migrate the stdio MCP server's 102 tools to @loopover/contract (#9537) (#9565) (d5a5a8f)
• mcp: one registry-driven telemetry contract at all three dispatch chokepoints (#9525) (#9579) (06a090f)
• miner: add a claim reclaim CLI to expire orphaned soft-claims (#9717) (edf0883), closes #9686
• miner: run the target repo's own test/lint/build commands before opening a PR (#8819) (e10abf2)
• miner: wire deny-hook synthesis to a live consumer and give it an operator CLI (#8806) (#8817) (33bacda)
• orb: salvageability axis — hold fixable, well-authored PRs instead of one-shot-closing (#8986) (7fd84ff)
• selfhost: PostHog AI observability across ORB and AMS (#8623) (a9d9c0e)

Fixes

• engine: surface discovery-index contract-version skew and actually send the version on the query wire (#9631) (80827df), closes #9615
• engine: treat an Infinity WIP cap as uncapped, not collapsed to 0 (#8945) (6aaea39)
• eval: commit each published score to the corpus a reader can download (#9811) (bcdd2f8), closes #9805
• miner: a rejecting captureError must not skip runCleanup()/exit in the crash handlers (#9688) (#9902) (36dd1c8)
• miner: add blocked_own_open_pr to the AttemptCliResult union (#9384) (42e1015)
• miner: AmsPolicySpec parse warnings are computed but never surfaced to the operator (#8978) (3369ebc), closes #8853
• miner: carry assignees through normalizeCandidate in opportunity-ranker (#9343) (b554957)
• miner: check out baseBranch on the fresh-clone path so the first attempt succeeds (#9682) (#9904) (25dcdd8)
• miner: compare-and-set the orphan reclaim so a stale probe cannot free a live re-acquired slot (#8992) (8444812)
• miner: delete the orphaned portfolio chat-action duplicate (#8662) (1cc2146)
• miner: drift-guard doctor store-integrity list against migrate STORES (#9689) (#9899) (49a3b17)
• miner: drop discovery-index candidates whose repo bans AI contributions (#9680) (#9908) (93e80ac)
• miner: drop stale ProcessEnv casts on resolveReplaySnapshotDbPath (#8768) (7b2104d), closes #8642
• miner: fail acquire() on an attempt_id/repo mismatch (#8964) (266b07d)
• miner: fall back to global config.apiUrl in loopoverApiUrl (#8937) (4dfe15d)
• miner: governor reputation-history read-modify-write is unguarded, unlike sibling scalar-state writes (#8988) (62e6d25), closes #8855
• miner: governor-chokepoint-persisted's load-evaluate-save cycle isn't atomic (#8993) (49a27c2), closes #8856
• miner: guard runAttempt's worktree cleanup and hosted claim release in the finally block (#9677) (#9912) (84553fc)
• miner: include laptop-state in doctor integrity and migrate store lists (#8749) (713145f), closes #8641
• miner: index-parse deny-hooks --history and route failures through the shared CLI error contract (#9886) (3bee8cc)
• miner: log discovery-index query failures before failing open (#9346) (ab6a44d)
• miner: make governor-run-halt's ledger recording a genuine transition detector (#9367) (6c220b3)
• miner: printHelp() omits the working deny-hooks subcommand (#8933) (1eeaae1), closes #8851
• miner: re-entry must transition the dequeued repo's run-state, and no-op on an empty queue (#9887) (027e797)
• miner: reclaim orphaned worktree allocations on every acquire() (#8918) (eab6ecf)
• miner: refuse a duplicate attempt when this miner already has an open PR for the exact issue (#8808) (#8815) (d5ec15a)
• miner: reject a portfolio-queue identifier containing the '::' composite-id separator (#8925) (32ee72e)
• miner: replace never-registered run with loop in fleet-mode manifests (#9524) (6bb8588)
• miner: self-review-context never supplies recent-merged-PR history, contradicting its own "same fidelity" claim (#8969) (987f7ce), closes #8852
• miner: surface verification payload in attempt-cli JSON for verification_failed (#9372) (a58ce3d)
• miner: treat an absent x-ratelimit-remaining header as unknown, not a 0 budget (#9678) (#9897) (dcd70b9)
• miner: wire AMS policy resolver to the documented discovery order (#9106) (f2f32cc), closes #8863
• miner: wire isValidRepoSegment into the seven remaining owner/repo parsers (#9911) (e150198)
• orb: webhook redelivery, reputation cadence, DB retention, and gate severity fidelity (#9237) (d2c8d27)
• packaging: ship the LICENSE @loopover/miner declares, and assert it everywhere (#9787) (122a283)
• review: auto-clear stale manual-review lock-contention hold; sync engine gate-decision twin (#9107) (6aacf08)
• review: default cross-issue copycat/reward-farming dedupe on for reward-eligible repos (#9226) (b251912)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @loopover/contract bumped from ^0.1.0 to ^3.17.0
    • @loopover/engine bumped from ^3.16.0 to ^3.17.0

---

This PR was generated with Release Please. See documentation.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
🔵 In progress View logs	loopover-ui	53a655c	Jul 29 2026, 10:26 PM

[loopover-orb]

Important

🟨🟨🟨🟨🟨🟨🟨🟨🟨🟨🟨🟨

⏳ LoopOver is waiting…

LoopOver has seen this pull request and is waiting on CI checks to finish before reviewing it. This comment will update once the review runs.

_{🟩 Safe / merged · 🟦 Advisory · 🟨 Held for review · 🟥 Blocked / closed · 🟨 Waiting}

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.

[codecov]

Bundle Report

Bundle size has no change ✅

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.76%. Comparing base (36dd1c8) to head (60b82bd).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #9883   +/-   ##
=======================================
  Coverage   91.76%   91.76%           
=======================================
  Files         921      921           
  Lines      113203   113203           
  Branches    27253    27253           
=======================================
  Hits       103884   103884           
  Misses       8034     8034           
  Partials     1285     1285           

Flag	Coverage Δ
backend	95.68% <ø> (ø)
engine	71.87% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.