diff --git a/.github/.release-please-manifest.json b/.github/.release-please-manifest.json
index 305c1509..1c861e15 100644
--- a/.github/.release-please-manifest.json
+++ b/.github/.release-please-manifest.json
@@ -1 +1 @@
-{".":"0.2.0"}
+{".":"0.3.0"}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d9fc32d..c0ae01e8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,28 @@
 # Changelog
 
+## [0.3.0](https://github.com/duyet/agentstate/compare/v0.2.0...v0.3.0) (2026-10-26)
+
+
+### ✨ Features
+
+* **ci:** publish Python SDK to PyPI via trusted publishing ([#454](https://github.com/duyet/agentstate/issues/454)) ([1540cd5](https://github.com/duyet/agentstate/commit/1540cd5844aeb840bb648be07db1da263a270f76)), closes [#374](https://github.com/duyet/agentstate/issues/374)
+* **dashboard:** states browser page for coordination primitives ([#461](https://github.com/duyet/agentstate/issues/461)) ([6594158](https://github.com/duyet/agentstate/commit/6594158e5587b1768a9eaf06b90c6c76eec7728e))
+
+
+### 🐛 Bug Fixes
+
+* **api:** bound message writes across REST and MCP ([#445](https://github.com/duyet/agentstate/issues/445)) ([f8f053a](https://github.com/duyet/agentstate/commit/f8f053a988eb13437e4e6c729d94da9864f3712c)), closes [#435](https://github.com/duyet/agentstate/issues/435)
+* **api:** buffer live events during SSE backlog replay for ordered delivery ([#449](https://github.com/duyet/agentstate/issues/449)) ([4f46848](https://github.com/duyet/agentstate/commit/4f468480d260e9c6579fe22184bb1801c63d197e))
+* **api:** default capability tokens to 30-day expiry ([#444](https://github.com/duyet/agentstate/issues/444)) ([eb45e77](https://github.com/duyet/agentstate/commit/eb45e778276933a28631a67a966ca94f145caddf))
+* **api:** make multi-row D1 writes atomic via db.batch ([#453](https://github.com/duyet/agentstate/issues/453)) ([095f874](https://github.com/duyet/agentstate/commit/095f874b03bacd68efe2a048c489adb604cad872))
+* **api:** reclaim stale domain claims with neutral conflicts ([#446](https://github.com/duyet/agentstate/issues/446)) ([bd35c47](https://github.com/duyet/agentstate/commit/bd35c477c3f76580b5b6d356ca92f1bc40134310))
+* **api:** restrict JSON paths to safe own properties ([#441](https://github.com/duyet/agentstate/issues/441)) ([99aa710](https://github.com/duyet/agentstate/commit/99aa71012ccf61f9a72d2f6209e7e0b036285add))
+* **api:** throttle OAuth token requests by IP ([#443](https://github.com/duyet/agentstate/issues/443)) ([b6d3f81](https://github.com/duyet/agentstate/commit/b6d3f81c02f61cc27a8d779a7c084a991563e8da)), closes [#433](https://github.com/duyet/agentstate/issues/433)
+* **api:** unblock SSE watch backlog replay ([#448](https://github.com/duyet/agentstate/issues/448)) ([894e1ef](https://github.com/duyet/agentstate/commit/894e1ef0434963492dc6592d2f1e7fbf0ed975b4)), closes [#360](https://github.com/duyet/agentstate/issues/360)
+* **deps:** update dependency motion to v14 ([#463](https://github.com/duyet/agentstate/issues/463)) ([0f1e7ee](https://github.com/duyet/agentstate/commit/0f1e7eeeb414f03688fcada2611b5885a3631ebc))
+* persist tenant identity and preserve Personal workspace access ([#447](https://github.com/duyet/agentstate/issues/447)) ([8f76140](https://github.com/duyet/agentstate/commit/8f76140152c0a809d42d9872b264c057874e6b67))
+* **sdk:** surface non-JSON error bodies in TS and Python SDKs ([#452](https://github.com/duyet/agentstate/issues/452)) ([512fc7a](https://github.com/duyet/agentstate/commit/512fc7ac6d09a5299b654768c710c0d70e98a910))
+
 ## [0.2.0](https://github.com/duyet/agentstate/compare/v0.1.4...v0.2.0) (2026-09-16)
 
 
diff --git a/packages/api/src/lib/version.ts b/packages/api/src/lib/version.ts
index eb4ce137..dca54d1c 100644
--- a/packages/api/src/lib/version.ts
+++ b/packages/api/src/lib/version.ts
@@ -2,4 +2,4 @@
  * Product semver. release-please rewrites this on each release PR.
  * Do not bump by hand — merge the standing `chore(main): release X.Y.Z` PR.
  */
-export const VERSION = "0.2.0"; // x-release-please-version
+export const VERSION = "0.3.0"; // x-release-please-version
diff --git a/packages/dashboard/package.json b/packages/dashboard/package.json
index 995b7f05..5cc11bd3 100644
--- a/packages/dashboard/package.json
+++ b/packages/dashboard/package.json
@@ -1,6 +1,6 @@
 {
   "name": "dashboard",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/packages/mcp/package.json b/packages/mcp/package.json
index 6e5256ba..ee61c8a7 100644
--- a/packages/mcp/package.json
+++ b/packages/mcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@agentstate/mcp",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "MCP server for AgentState — expose conversation history, state, leases, claims, and capability tokens as MCP tools",
   "type": "module",
   "bin": {
diff --git a/packages/mcp/src/index.ts b/packages/mcp/src/index.ts
index 10d3d67a..f32d6763 100644
--- a/packages/mcp/src/index.ts
+++ b/packages/mcp/src/index.ts
@@ -153,7 +153,7 @@ const claimEvidenceSchema = z.discriminatedUnion("kind", [
 // ---------------------------------------------------------------------------
 
 const server = new McpServer(
-  { name: "agentstate", version: "0.2.0" }, // x-release-please-version
+  { name: "agentstate", version: "0.3.0" }, // x-release-please-version
   { capabilities: { tools: {} } },
 );
 
diff --git a/version.txt b/version.txt
index 0ea3a944..0d91a54c 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-0.2.0
+0.3.0