Gajae-Code Files

What's Changed

• fix(ai): separate API-key and OAuth Anthropic beta headers by @chlee1001 in https://github.com/Yeachan-Heo/gajae-code/pull/6503
• fix(session): bound shared GC inventory traversal per inspection by @snowykr in https://github.com/Yeachan-Heo/gajae-code/pull/6504
• test(model): drop the duplicate markUserModelSelection stub by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6505
• fix: allow release-consumed fragments in backmerge and retry transient hash failures by @clawdbot in https://github.com/Yeachan-Heo/gajae-code/commit/7c1c0e9e3d
• fix: skip temporary roots check for paths under current working directory by @clawdbot in https://github.com/Yeachan-Heo/gajae-code/commit/25ef1abedb
• fix(release): prove consumed fragments by release tag; open backmerge PRs via an injected opener by Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/commit/efbc25e326
• fix(python): enroll original invocation before tracking callbacks by @snowykr in https://github.com/Yeachan-Heo/gajae-code/pull/6509
• fix(cli): fence profile recovery against user model changes by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6443
• fix(session): contain async event subscriber rejections by @Dayoooun in https://github.com/Yeachan-Heo/gajae-code/pull/6514
• fix(ast-edit): refuse auto-generated files on apply by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6515
• fix(release,plugins): reopen a backmerge PR on rerun; restore the temp-root launcher boundary by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6510
• feat(skills): allow user-level skill symlinks outside scan root when trustUserSkills is enabled by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6437
• docs(env): document GJC_NO_TMUX, GJC_SKIP_NOFILE_CHECK, GJC_CLEANUP_DEADLINE_MS, GJC_TUI_WIDTH_SETTLE_MS by @cynkai in https://github.com/Yeachan-Heo/gajae-code/pull/6517
• fix(python): retain created resources and preserve cleanup failures by @snowykr in https://github.com/Yeachan-Heo/gajae-code/pull/6518
• fix(acp): keep incomplete Codex timeout terminals deliverable by @probepark in https://github.com/Yeachan-Heo/gajae-code/pull/6478
• fix(session): preserve descriptor-read errors over close failures by @snowykr in https://github.com/Yeachan-Heo/gajae-code/pull/6520
• fix(async): enroll original delivery futures before reentrant callbacks by @snowykr in https://github.com/Yeachan-Heo/gajae-code/pull/6521
• fix(tui): preserve scrollback frontier on frame contraction by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6511
• fix(ai): keep remaining Claude Code markers off Anthropic API-key requests by @nijuyr in https://github.com/Yeachan-Heo/gajae-code/pull/6522
• fix(sdk): restore managed empty-stop fallback and nonzero boundary by @probepark in https://github.com/Yeachan-Heo/gajae-code/pull/6469
• fix(dirs): normalize Windows path casing for consistent session keying (Fixes [#6446]) by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6453
• fix(plugins): deny CGNAT addresses in the MCP policy by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6524
• fix(python): recheck the tool bridge registration after the body arrives by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6526
• fix(ai): do not follow auth broker credential redirects by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6525
• fix(mcp): guard OAuth registration metadata fetches by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6523
• fix(mcp): honor the connection roots handler for modern input by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6527
• fix(memories): size the phase2 response budget for reasoning models and report truncation by @pgkim42 in https://github.com/Yeachan-Heo/gajae-code/pull/6529
• fix(browser): refuse a non-loopback app.cdp_url by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6533
• fix(utils): ignore project dotenv for the GitHub cache database by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6532
• fix(session): keep zero-usage empty stops on the overflow promotion path by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6531
• fix(monitor): apply the planning mutation guard to monitor commands by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6540
• fix(runtime): ignore project dotenv for the sidecar signing bootstrap by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6541
• fix(export): make HTML session export owner-only by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6542
• fix(ai): ignore project dotenv for Foundry TLS material by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6545
• fix(runtime): ignore project dotenv for the tmux binary by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6546
• fix: ignore project dotenv for the external editor and the bash shell by @10kH in https://github.com/Yeachan-Heo/gajae-code/pull/6547
• fix(ai): redact Google and Cloudflare auth headers in HTTP dumps by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6548
• fix(github): gate side-effect ops behind approval and planning by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6553
• fix(worktree): refuse to drop diverged detached launch commits by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6549
• fix(mcp): refuse cross-origin HTTP redirects by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6554
• fix(task): stop isolation setup from deleting another session's worktree by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6551
• fix(utils): never take NODE_TLS_REJECT_UNAUTHORIZED from the project dotenv by @10kH in https://github.com/Yeachan-Heo/gajae-code/commit/9564e3d837
• feat(sdk): add attach-only client mode for supervised brokers by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6557
• fix(workflow): keep the planning block when mode-state is forged by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6558
• feat(sdk): add gjc sdk broker run for supervised foreground brokers by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6560
• fix(mcp): keep project config from running host shell or copying secrets by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6561
• fix(file-lock): reclaim old empty lock directories on Windows (issue [#6008]) by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6014
• feat(tui): copy original Markdown on mouse drag by @chlee1001 in https://github.com/Yeachan-Heo/gajae-code/pull/6519
• fix(test): add retry backoff for Windows task-cache-key temp cleanup by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6566
• fix(session): release managed sidecar cache on Windows closeStrict to prevent handle leaks by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6568
• fix(sdk): make managed empty-stop fallback replay-safe by @probepark in https://github.com/Yeachan-Heo/gajae-code/pull/6493
• fix(session): create explicit fork transcripts and drafts owner-only by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6577
• fix(ai): ignore project dotenv for Foundry request headers by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6574
• fix(utils): keep planted dotenv quotes out of the agent directory by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6573
• fix(worktree): ignore project dotenv for the launch worktree bucket by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6575
• fix(debug): resolve DAP adapters with the trusted command rule by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6579
• test(mcp): use safeRmSync in mcp-project-host-values cleanup by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6582
• fix(session): report retained-binding change instead of symlink error in descendant store by @Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/pull/6581
• fix(ai): pin tokenless auth gateway requests to the loopback host by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6516
• fix(mcp): keep the user tool when a plugin bundle normalizes to the same name by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6565
• fix(shell): count characters, not bytes, for ${#var} and substring bounds by @theluckystrike in https://github.com/Yeachan-Heo/gajae-code/pull/6567
• fix(mcp): do not GET a non-public OAuth authorization URL while probing for client_id by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6550
• fix(ast-edit): block .gjc writes through directory symlinks by @Oreochococukie in https://github.com/Yeachan-Heo/gajae-code/pull/6535
• revert(mcp): back out plugin MCP name filter (#6565) for v0.18.9 by Yeachan-Heo in https://github.com/Yeachan-Heo/gajae-code/commit/12af1421c7

New Contributors

• @theluckystrike made their first contribution in https://github.com/Yeachan-Heo/gajae-code/pull/6567

Full Changelog: https://github.com/Yeachan-Heo/gajae-code/compare/v0.18.8...v0.18.9