Release v0.3.28: the Agent abstraction reaches users #2543

What is needed

Publish v0.3.28: a version-bump pull request, then an annotated tag, then verification that the Release is published and Latest.

Baseline, measured on this checkout

• Latest published Release is v0.3.27 — 11 assets, published 2026-10-23T03:07:03Z, not a draft, not a prerelease.
• master tip is 22e01111, and that commit's Test run concluded success.
• 13 commits are on master and in no Release: emrg: a suite that could not run is not a suite that failed #2516 emrg: a size or an offset in the Win32 ABI is measured from its struct #2518 emrg: an Agent is the directory a session runs in #2520 emrg: the agent registry is agents.yml, migrated in place #2522 emrg: the ios-app template fixes what the app's repository is #2524 emrg: the rotation bookmark's reading cycle is read and reported #2526 emrg: the register is written at session creation, and a directory is registered as itself #2528 emrg: the open-source template says how a publish credential is held #2530 emrg: a task record names its agent with config.agent, migrated in place #2532 emrg: a rant record names its agent, and the old name leaves the tree #2534 emrg: one rant is one issue is one PR #2536 emrg: the cycle id names a run, not a file #2538 emrg: a cross-reference names a symbol the tree has #2540.
• The tree declares 0.3.27 in all 8 version sources (scripts/bump-version.py --check 0.3.27 reads OK).
• Tag v0.3.28 is free; the newest tag is v0.3.27.

Why this version is worth publishing rather than waiting

Its user-visible body is the Agent abstraction: projects.yml becomes agents.yml, the TUI and the GUI rename their selectors and copy to Agent throughout, and any directory a session is opened in registers itself. The remaining commits are prompts, guards and tests. After this release the word "project" no longer exists in configuration, in data records or in the interface — and until it ships, two vocabularies are live on every host at once.

Acceptance

1. All 8 version sources agree on 0.3.28: scripts/bump-version.py --check 0.3.28 reads clean and tests/test_version_sync.py is green.
2. The bump commit carries an annotated tag v0.3.28; the tag is the only trigger of the release build.
3. The build is green across the platform matrix.
4. The Release is published as Latest — not a draft, not a prerelease — with 11 assets, including the two .zsync files and macos-arm64.pkg.
5. The macOS leg is notarized, evidenced by macos-arm64.pkg being among the assets.
6. The GUI leg rebuilds app.asar for real with npm run dist, and the artifact is newer than the bump commit.
7. First launch migrates in place with nothing lost: projects.yml → agents.yml, tasks.yml's config.project → config.agent, and rants.jsonl's project field → agent.
8. If the tag build fails, it is closed out in the same cycle — rerun it, or record a decision not to publish. No orphan tag is left behind.

The bump pull request takes three approvals from different cycles and is not merged by the cycle that opens it.