release: v3.8.0 — thinking-desync response (session-health + thinking-block-sanitize) - #168
Merged
Conversation
…-block-sanitize) Bundles the warn-before half (session-health, #160) and the mitigate half (thinking-block-sanitize, #162) of the CC thinking-desync response (anthropics/claude-code#63147), plus the ttl-management thinking-block guard (#157/#159). package.json 3.7.1 → 3.8.0; CHANGELOG [Unreleased] → [3.8.0]. Full suite 906 green at this commit; npm pack --dry-run reviewed (62 files, both new extensions present, no test/docs/secret cruft). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
![vsits-codex-review-agent[bot]](https://github.githubassets.com/images/gravatars/gravatar-user-420.png){kind=avatar}
![vsits-codex-review-agent[bot]](https://avatars.githubusercontent.com/u/115404?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Codex review:
Approve for release.
- Validated the release payload at
121496bbefore the required review-artifact commits:git diff main...121496bcontained onlypackage.jsonandCHANGELOG.md. package.jsonis3.8.0;bootstrap-defensecorrectly remainsEXTENSION_VERSION="v3.7.1"because that extension is unchanged in this release.CHANGELOG.mdaccurately describes the shipped #160, #162, and #157/#159 scope without overstating defaults or env-lever behavior.npm pack --dry-run --jsonproducedclaude-code-cache-fix-3.8.0.tgz; the tarball includesproxy/extensions/session-health.mjs,proxy/extensions/thinking-block-sanitize.mjs, and a cleanproxy/extensions.json, with notest/ordocs/payload.node --testpassed906/906.
The only branch changes after 121496b are the required review artifacts in docs/code-reviews/.
vsits-codex-review-agent
Bot
added
the
approved-by-codex-agent
cnighswonger
approved these changes
May 29, 2026
cnighswonger
added
approved-by-lead
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release v3.8.0 — the thinking-desync response
Bundles both halves of the response to the CC thinking-desync wedge (upstream
anthropics/claude-code#63147), already reviewed + merged to main:session-healthearly-warning extension (directive: session-health early-warning (thinking-desync risk, v3.8.0) #160): per-session telemetry (context_tokens,thinking_block_count,thinking_block_max,first_seen,request_count,thinking_desync_risk) + token-gated one-time stderr warn. Read-only.thinking-block-sanitizeextension (directive: prior-turn thinking-block sanitize (mitigate #63147) #162), opt-in (CACHE_FIX_THINKING_SANITIZE=on): drops omitted thinking on the request path (all prior turns + the latest unless an active tool-continuation).ttl-managementnever injects ttl into thinking blocks (Defensive: guard TTL/normalize extensions against mutating thinking blocks #157/fix(proxy): ttl-management must not inject ttl into thinking blocks (#157) #159).Changes in this PR
package.json3.7.1 → 3.8.0CHANGELOG.md[Unreleased]→## [3.8.0] - 2026-05-29No code changes here — the implementations landed in #160/#162. This is the version/changelog cut.
Pre-release verification
npm pack --dry-runreviewed: 62 files, 193.8 kB; both new extensions present (session-health.mjs,thinking-block-sanitize.mjs); cleanextensions.json; no test/docs/secret cruft.Remaining publish steps (gated on review + approval)
npm publish+ git tagv3.8.0+ GitHub Release.CACHE_FIX_THINKING_SANITIZEto default-on; opt-in v1 ships in 3.8.0 without it.Requesting Codex release review + Lead approval.
— Proxy Builder