Skip to content

Galley

v0.9.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 19d AI Coding Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-workflow ai-coding claude-code code-review codex coding-agents
+8 more
daemon developer-tools glm grok openai orchestration task-runner workflow-automation

Affected surfaces

auth rbac

Summary

AI summary

Updates 🚢 Highlights, Packaging, and Z.ai across a mixed release.

Full changelog

This release adds GLM as a supported backend and ships a set of correctness and platform fixes.

🚢 Highlights

GLM backend

You can now run tasks on GLM (Z.ai) as both the implementation executor and the review supervisor. glm runs the Claude Code binary against GLM's Anthropic-compatible endpoint, so it works anywhere a Claude backend does — executor.cli, environment.yaml executor.default_cli / supervisor.default_cli, and the daemon --supervisor flag.

  • Set your Z.ai token as glm_api_key in daemon.yaml (created with 0600 permissions). The token is used only in the executor/supervisor child process; it never appears on the command line or in run evidence.
  • If glm is selected without a token, Galley fails fast with a clear configuration error instead of an opaque failure mid-run.

This enables a low-cost implementation model paired with a frontier review supervisor.

Fixed

  • Tasks queued with a .yml extension are now executed instead of being silently ignored.
  • task list and task show now resolve the running daemon's root the same way as queue / requeue.
  • Supervisor needs_revision / hard_stop verdicts are no longer discarded over a finding's blocks_acceptance flag.
  • scope.forbidden_paths can no longer be bypassed by letter case on case-insensitive filesystems, and preflight ignores .git when detecting creator changes.
  • Windows: daemon stop/verification and interrupted-task recovery now work, and child process trees are terminated on timeout/cancel.

Packaging

  • The Claude and Codex Galley plugins are now versioned 0.1.20, with task-authoring, setup, and profile guidance and bundled schemas updated for the glm backend.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Galley

Get notified when new releases ship.

Sign up free

About Galley

Local-first runtime for supervised AI coding tasks: isolated git worktrees, supervisor review against acceptance criteria, retry/escalate loops, on-disk run evidence, and PR handoff. Supports Codex CLI and Claude Code. Go, MIT.

All releases →

Beta — feedback welcome: [email protected]