[alexshapalov]

Release PGX v0.1.2

Ships PR #35 (938f7fa89f): every Claude Code subagent automatically gets its own Postgres branch. No feature code changes in this PR.

Version changes

• crates/bin/pgx/Cargo.toml and the pgx entry in Cargo.lock: 0.1.1 → 0.1.2 (cargo build --locked verified; dependency crates that happen to be at 0.1.1 are untouched).
• dist/npm/package.json (pgxdb), plugins/pgx/.claude-plugin/plugin.json, Skill metadata.version: 0.1.2. plugins/sync.sh --check clean.

Version compatibility

• The Skill's minimum is now 0.1.2. scripts/check-pgx.sh refuses 0.1.1 (exit 2, hint: "isolates sessions only: Claude Code subagents would share the parent's branch; upgrade…") and older (hint: "has no pgx agent"); PGX_MIN_VERSION still overrides. The Skill therefore never promises subagent isolation with a 0.1.1 binary and fails closed instead.
• Tests: skills/tests/pgx/check-pgx.test.sh covers missing, 0.1.0, 0.1.1, 0.1.2, 0.2.0, CI builds, malformed/empty output and the override; skills/tests/pgx/run.sh asserts SKILL.md gates on 0.1.2.
• SKILL.md, references/installation.md, README, docs/pgx/local-dev/agents.md and the plugin docs state what 0.1.1 (sessions) and 0.1.2 (subagents) each deliver. Manual pgx CLI workflows are unchanged.

Release notes

dist/release-notes.md gains the PGX v0.1.2 — Every AI Subagent Gets Its Own Postgres section with the verified live results (20/20 branches, zero contamination, 37 s, 92 MB peak RSS, template unchanged, killed-agent transaction aborted within the 5 s guard, storage reclaimed), the provisioning figures (p50 1,231 ms / p95 1,371 ms) explained as 20-way-concurrent hook time rather than clone latency, and the known limitations.

Test results (this branch, release build)

• unit 132/132; agent 16, agent_hook 11, agent_exec 8, agent_install 12, agent_subagent 12, doctor 7: all pass
• cargo fmt --check clean, cargo clippy --all-targets -- -D warnings clean
• Skill tests, check-pgx tests, plugin tests, npm wrapper tests (21/21): pass
• gitleaks on plugins, .claude-plugin, skills: no leaks

Known limitations (also in the release notes)

1. Claude Code evaluates permissions (and the auto-mode classifier) on the rewritten Bash command; some subagent commands may need approval.
2. No broad Bash(pgx agent exec:*) allow rules on an agent's say-so.
3. TaskStop does not always produce SubagentStop; the idle TTL and the server-side guards cover it.
4. Server-side cancellation is a bounded guard, not an unconditional guarantee.
5. Cursor and Codex subagent auto-isolation is not live-verified.

After merge

Tag v0.1.2 on the merge commit → release.yml builds linux-amd64, linux-arm64, darwin-arm64 with checksums and a draft release → publishing the draft (human gate) triggers npm-publish.yml (staged, second human gate).

🤖 Generated with Claude Code