CHANGELOG.md

Changelog

Unreleased

• Changed model selection to fetch GET https://api.gonkagate.com/v1/models with the user's GonkaGate API key and use that live response as the source of truth.
• Changed --model to accept live model ids returned by /v1/models instead of checked-in model keys.
• Removed the runtime curated model registry from the installer flow.
• Made local alias package bootstrap publish without npm provenance because provenance requires a supported CI/OIDC provider.
• Made alias package publishing skip cleanly until @gonkagate/claude-code-setup is bootstrapped on npm, with an explicit override for the first package publish.
• Added @gonkagate/claude-code-setup as a setup-style alias for the existing Claude Code installer.
• Improved npm package metadata and README copy for better package-page clarity, discovery, and onboarding.
• Added a live model picker to the public installer flow.
• Added --model <model-id> and --model=<model-id> support for non-secret model selection.
• Kept the public Claude Code contract tight by limiting model selection to GonkaGate's live model response only.
• Updated docs and tests for model selection while preserving local git ignore protection and owner-only settings file permissions.
• Hardened local scope against symlinked .claude paths that could redirect secret writes outside the ignored settings path.
• Extended local git protection to ignore timestamped backup files for .claude/settings.local.json.
• Normalized backup permissions to owner-only mode so secret-bearing backups are not left world-readable.
• Hardened local scope so .claude/settings.local.json cannot keep tracking secrets in git before local setup proceeds.
• Replaced the tracked-local-settings hard stop with a recovery flow that can stop tracking the file or switch to user scope without rerunning setup.
• Hardened local scope against symlinked path components anywhere between the repo root and the target settings file.
• Pinned GitHub Actions workflows to immutable commit SHAs for release pipeline hardening.
• Restored automated npm publish dispatch after Release Please creates a new release tag.
• Made publish reruns skip versions that are already present on npm instead of failing with a duplicate-version error.

0.5.0 (2026-07-06)

Features

• fetch GonkaGate models dynamically (2e3b8d9)

0.4.1 (2026-06-09)

Bug Fixes

• align npm package metadata with canonical repository (cbddf8f)
• align npm package metadata with canonical repository (e392ac1)

0.4.0 (2026-05-29)

Features

• add another model to the then-curated registry (0c8f857)
• add another model to the then-curated registry (887de0a)

0.3.0 (2026-04-29)

Features

• add another model to the then-curated registry (f19cfc7)

Bug Fixes

• make the newest then-curated model the default (9a444e0)

0.2.1 (2026-04-13)

Bug Fixes

• allow alias publish bootstrap override (423e3b3)
• omit provenance for local alias bootstrap (9529587)
• skip alias publish before npm bootstrap (f4c4c2a)

0.2.0 (2026-04-13)

Features

• add Claude Code setup alias (3d411f5)
• add Claude Code setup alias (caa0711)

0.1.3 (2026-03-31)

Bug Fixes

• document release-please title requirements (5fce744)
• document release-please title requirements (145f9f7)

0.1.2 (2026-03-31)

Bug Fixes

• restore automated npm publishes (42bde87)
• restore automated npm publishes (52fcd8e)

0.1.1 (2026-03-31)

Bug Fixes

• stop duplicate npm publishes (1ac876a)
• stop duplicate npm publishes (58d022f)

0.1.0

• Initial public onboarding repo for connecting local Claude Code to GonkaGate.
• Added interactive Node CLI installer with hidden API key prompt.
• Added user and local Claude Code settings install scopes.
• Added JSON merge, backup, and validation behavior for Claude Code settings.
• Added public README plus troubleshooting, security, and how-it-works docs.