Release v0.3.7: bump package + plugin to 0.3.7

[ashwin-agami]

Summary

Cuts v0.3.7. Bumps the version-of-truth in all four files (packages/agami-core/pyproject.toml, .claude-plugin/marketplace.json ×2, plugins/agami/.claude-plugin/plugin.json) and rolls [Unreleased] → [0.3.7] in the changelog. Merging this + creating the GitHub Release triggers the GHCR image + PyPI publishes.

What's in this release (all already merged to main)

Fixed

• list_datasources returned empty on every self-hosted server (Fix: list_datasources returns empty on every self-hosted / served deployment #86) — it read only the local credentials file, which never ships to a served container; it now enumerates the deployed models from the store. (This is the fix the self-hoster reported.)

Security

• Read-only execute_sql guard hardening (security: harden read-only execute_sql guard at the shared executor #84, security: close dollar-quote stacking bypass in the read-only SQL guard (fast-follow to #84) #85) — single guard at the shared executor (stdio + HTTP + skills + cron); closed a dollar-quote statement-stacking bypass, refuse dialect-ambiguous MySQL comment forms, block sequence/replication-control functions, and packaged sql_guard in the wheel (was missing from py-modules — would have broken import sql_guard in the container).

Added

• Read-only DB user guidance (docs(agami): nudge users to connect with a read-only DB user #82) — /agami-connect + /agami-deploy recommend a read-only user, with copy-paste GRANT SELECT per dialect.

Changed

• Serverless least-privilege runtime-identity docs (docs: scope the serverless runtime identity to least privilege #83).
• Compose caps container log growth (Cap per-container log growth in the deploy compose #81) — json-file 10m×3 per service; silenced the CLOUDFLARE_TUNNEL_TOKEN warning.

Checklist

• Version bumped in all 4 files to 0.3.7
• [Unreleased] rolled to [0.3.7] + compare link added
• Full gate green (1306 passed)

After merge

Create the GitHub Release v0.3.7 → release-image.yml publishes ghcr.io/agamiai/agami-core:0.3.7 / :0.3 / :latest and release-pypi.yml publishes to PyPI. Then self-hosters on the default AGAMI_IMAGE_TAG=latest just re-run ./deploy.sh (pull + up) to get the fix.

[Copilot]

Pull request overview

Cuts the v0.3.7 release by updating the repository’s version-of-truth fields and rolling the changelog forward so downstream release automation (GHCR/PyPI) can publish the new artifacts.

Changes:

• Bump package version to 0.3.7 in packages/agami-core/pyproject.toml.
• Bump Claude plugin/marketplace versions to 0.3.7 in both plugin manifests.
• Roll CHANGELOG.md from [Unreleased] to [0.3.7] (dated 2026-07-06) and add the v0.3.6...v0.3.7 compare link.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
packages/agami-core/pyproject.toml	Bumps the Python package version to 0.3.7.
plugins/agami/.claude-plugin/plugin.json	Bumps the plugin manifest version to 0.3.7.
.claude-plugin/marketplace.json	Bumps marketplace metadata + plugin entry version to 0.3.7.
CHANGELOG.md	Rolls release notes to [0.3.7] and adds the compare link.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[ashwin-agami]

Intentionally not keeping an empty [Unreleased] here — it doesn't match this repo's changelog convention. At every prior release (v0.3.6, v0.3.5, v0.3.4 …) the top section is the just-cut version directly, with no persistent [Unreleased] header and no [Unreleased] compare link; the section is only added when there's pending unreleased work. Rolling [Unreleased] → [0.3.7] keeps that consistent, so leaving this as-is.