This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Affected surfaces
Summary
AI summaryUpdates 🚢 Highlights, Packaging, and Z.ai across a mixed release.
Full changelog
This release adds GLM as a supported backend and ships a set of correctness and platform fixes.
🚢 Highlights
GLM backend
You can now run tasks on GLM (Z.ai) as both the implementation executor and the review supervisor. glm runs the Claude Code binary against GLM's Anthropic-compatible endpoint, so it works anywhere a Claude backend does — executor.cli, environment.yaml executor.default_cli / supervisor.default_cli, and the daemon --supervisor flag.
- Set your Z.ai token as
glm_api_keyindaemon.yaml(created with0600permissions). The token is used only in the executor/supervisor child process; it never appears on the command line or in run evidence. - If
glmis selected without a token, Galley fails fast with a clear configuration error instead of an opaque failure mid-run.
This enables a low-cost implementation model paired with a frontier review supervisor.
Fixed
- Tasks queued with a
.ymlextension are now executed instead of being silently ignored. task listandtask shownow resolve the running daemon's root the same way asqueue/requeue.- Supervisor
needs_revision/hard_stopverdicts are no longer discarded over a finding'sblocks_acceptanceflag. scope.forbidden_pathscan no longer be bypassed by letter case on case-insensitive filesystems, and preflight ignores.gitwhen detecting creator changes.- Windows: daemon stop/verification and interrupted-task recovery now work, and child process trees are terminated on timeout/cancel.
Packaging
- The Claude and Codex Galley plugins are now versioned
0.1.20, with task-authoring, setup, and profile guidance and bundled schemas updated for theglmbackend.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Galley
Local-first runtime for supervised AI coding tasks: isolated git worktrees, supervisor review against acceptance criteria, retry/escalate loops, on-disk run evidence, and PR handoff. Supports Codex CLI and Claude Code. Go, MIT.
Related context
Related tools
Beta — feedback welcome: [email protected]