GJC 0.18.7

What's Changed

• fix(ssh): reject malformed ports in ssh.json host entries by @cynkai in #6136
• fix(kiro): correct OAuth CodeWhisperer wire protocol headers and payload structure by Gajae Bot in 144c7adc8d
• fix(kiro): address PR review findings - case-insensitive header merge, ID-less fragments, test cleanup by Gajae Bot in 54bd30595e
• fix(kiro): correct OAuth CodeWhisperer wire protocol (#6164) by @Yeachan-Heo in #6165
• fix(session): retry content-free Codex server error events by @probepark in #6209
• fix(ai): emit strict false for Responses tools by @probepark in #6255
• fix(ai): salvage complete Codex calls after reasoning opens by @probepark in #6256
• docs(rust-porting): sync phase log, applyPatch note and tty waiver figures with the evidence by Yeachan-Heo in 27f4d3635b
• fix(bench): make the resident-memory RSS harness runnable and fail closed by Yeachan-Heo in 97f67d8282
• test(acp): assert /model builtin session state and output by @probepark in #6258
• perf(cli): defer the per-path modules out of the eager cli-main graph by @Yeachan-Heo in #6267
• fix(bench): make the resident-memory RSS harness runnable and fail closed by @Yeachan-Heo in #6266
• ci(dev): add advisory RSS checkpoint compare for RSS-relevant changes by @Yeachan-Heo in #6268
• docs(retry): list Codex server_error/internal_error bare-default admissions by GJC Multisession in 2349634302
• fix(acp): settle prompts when session host exits by @probepark in #6264
• fix(sdk): retire stale lifecycle ready markers so session.resume does not EEXIST (#6261) by @probepark in 58a2b665d2
• ci(dev): keep the RSS checkpoint compare advisory with release-drift labeling by GJC Multisession in 4be516a859
• fix(sdk): decouple checkpoint from broker heartbeat by @probepark in #6269
• fix(sdk): session host removes own ready/endpoint markers on SIGTERM (#6261) by @probepark in e4777bcd51
• fix(mcp): wire owned-session form input handling by @Dayoooun in #6271
• fix(sdk): bind launch-local marker retirement to the observed exited owner (#6261) by @probepark in 76acbe3b0d
• test(sdk): regression tests for launch-local marker retirement owner binding (#6261) by @probepark in 27bc3b2fab
• test(sdk): make owner-binding race test publish once after observation (#6261) by @probepark in 7efeda1309
• test(codex): stabilize resilient retry veto cases by @probepark in #6272
• fix(sdk): retire stale lifecycle ready markers so session.resume does not EEXIST (#6261) by @probepark in #6265
• fix(ai): salvage Codex calls past empty message items by @probepark in #6274
• fix(acp): advertise model-specific thinking levels by @probepark in #6275
• fix(session): retry Codex overloads after empty unsigned thinking by @probepark in #6276
• fix(natives): prepare strict native checks for task admission stack by @snowykr in #6277
• fix(sdk-broker): stop checkpointing heartbeats and full-replaying the index on every readiness poll by @probepark in 5c93d58744
• fix(hindsight): accept only plain digits for numeric HINDSIGHT_* env vars by @cynkai in 636977e644
• test(sdk-broker): make readiness poll cost regression reach the index lookup by @probepark in 7486cb1014
• feat(settings): add readonly target scope snapshots by @snowykr in #6281
• refactor(session): separate retention orchestration from storage by @snowykr in #6282
• test(codex): pin SSE at provider-call boundary under WebSocket env opt-in by @probepark in 4880844365
• feat(session): add immutable task owner protocol codecs by @snowykr in #6283
• fix(ai): salvage finalized Codex calls on EOF by @probepark in #6284
• feat(ai): add Gemini first-event diagnostics by @probepark in #6285
• test(sdk): expect retired ready marker after shared owner close by @Yeachan-Heo in #6287
• fix(test): bound trailing persistence await by @probepark in #6288
• fix(ai): salvage first-turn Codex tool call after request_timeout stall (G6) by @probepark in #6291
• fix(ai): accept OpenCodex 2.75 health identity by @probepark in #6297
• feat(sdk): validate strict task owner cleanup wire evidence by @snowykr in #6296
• fix(sdk-mcp): negotiate initialize protocol version by @probepark in #6300
• Fix Codex request_timeout salvage diagnostics by @probepark in #6302
• feat(session): add fenced durable task-owner provisioning API by @snowykr in #6303
• fix(config): redact camelCase secret setting keys such as notifications.slack.appToken by @nahyeongjin1 in f11efe460c
• fix(sdk): stop Slack/Discord chat daemons from publishing lean finals twice by @nahyeongjin1 in 3a03f30c6f
• feat(session): preserve exact task owner retirement authority by @snowykr in #6306
• chore(sdk): bump Slack/Discord chat daemon generations for router capability change by @nahyeongjin1 in ca9187525b
• feat(session): decode task owner locators from transcript replay by @snowykr in #6307
• docs(changelog): drop the duplicate ACP thinking-control fragment by Yeachan-Heo in a808f53752

Full Changelog: v0.18.6...v0.18.7