docs(release): credit late v0.8.29 bug-fix cherry-picks

CHANGELOG.md

@@ -9,7 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 A maintenance release anchored by a regression fix for the
 "scroll demon" (#1085 class, re-introduced by v0.8.27's flicker
-patch) and a wrong-project session-restore bug (#1395). Plus 12
+patch) and a wrong-project session-restore bug (#1395). Plus 16
 community PRs covering MCP transport, prompt steering, auto-routing
 language coverage, web-search SERP filtering, and broad test
 coverage additions.
@@ -49,6 +49,21 @@ coverage additions.
   malformed entries with a `tracing::debug!` instead of dropping
   the rest of the catalogue. Composes with the v0.8.x pagination
   loop landed for #1256.
+- **MCP SSE transport accepts CRLF-framed endpoint events** (#1309,
+  PR #1358 from **@reidliu41**). FastMCP / uvicorn-style SSE
+  streams using `\r\n\r\n` separators now discover the endpoint and
+  send initialization requests instead of timing out while waiting
+  for an LF-only event boundary.
+- **Composer ignores leaked SGR mouse-report bursts** (#1418,
+  PR #1421 from **@reidliu41**). Some SSH / IDE terminal chains
+  leak fragments like `[<35;44;18M` into stdin while mouse capture
+  is enabled; the composer now filters those bursts at the insertion
+  boundary without stripping ordinary coordinate-like typed text.
+- **Footer right-cluster chips can no longer crowd the left status
+  line** (#1357, PR #1417 from **@Wenjunyun123**). The footer now
+  reserves visible space for the left status before selecting cache /
+  aux chips, dropping oversized right-side chips instead of pushing
+  the row over the available terminal width.
 - **Web search drops spam-stuffed SERPs** (#964, PR #1396 from
   **@linzhiqin2003**). The Bing / DDG fallback paths now filter
   the SEO-farm domains that were poisoning quick lookups.
@@ -95,6 +110,11 @@ coverage additions.
   narrows the trigger from `on: [push]` to `on: push.branches:
   [main]` + `tags: ['v*']`. Feature branches no longer mirror to
   CNB; only `main` and tagged releases do.
+- **Post-exit resume hint avoids session-id taint.** The TUI now
+  checks whether a session exists separately from the constant
+  resume-hint text it prints after leaving the alt-screen, resolving
+  the `rust/cleartext-logging` CodeQL alert without reintroducing
+  scroll-demon stdout writes.
 
 ### Internal
 

README.md

@@ -228,7 +228,7 @@ deepseek --provider ollama --model deepseek-coder:1.3b
 ## What's New In v0.8.29
 
 A maintenance release anchored by a v0.8.27 / v0.8.28 regression fix
-plus 12 community PRs. [Full changelog](CHANGELOG.md).
+plus 16 community PRs. [Full changelog](CHANGELOG.md).
 
 - **Scroll demon, gone for good** (#1085 regression). Parallel sub-
   agents running `exec_shell` would scroll the alt-screen out from
@@ -255,6 +255,15 @@ plus 12 community PRs. [Full changelog](CHANGELOG.md).
   **@Liu-Vince**) — one bad tool / resource / prompt entry no
   longer drops the whole page; the malformed entry is skipped and
   the rest of the catalogue surfaces normally.
+- **MCP SSE accepts CRLF-framed endpoint events** (#1309, PR #1358
+  from **@reidliu41**) — FastMCP / uvicorn streams no longer time
+  out waiting for LF-only event separators.
+- **Composer ignores leaked mouse-report bytes** (#1418, PR #1421
+  from **@reidliu41**) — terminal chains that leak `[<35;44;18M`
+  style mouse reports into stdin no longer fill the input area.
+- **Footer chips respect the available width** (#1357, PR #1417 from
+  **@Wenjunyun123**) — long cache / aux chips drop before crowding
+  the left status line or composer area on narrow terminals.
 - **Note management commands** (PR #1407 from **@reidliu41**) —
   `/note add`, `/note list`, and friends for persistent maintainer
   notes inside the TUI.
@@ -284,8 +293,8 @@ plus 12 community PRs. [Full changelog](CHANGELOG.md).
   from **@linzhiqin2003**).
 
 Thanks to **@linzhiqin2003** (10 landings this cycle),
-**@reidliu41**, **@hlx98007**, **@Liu-Vince**, and
-**@shenxiaodaosanhua** for the bug report.
+**@reidliu41** (3 landings), **@Wenjunyun123**, **@hlx98007**,
+**@Liu-Vince**, and **@shenxiaodaosanhua** for the bug report.
 
 ---
 

README.zh-CN.md

@@ -196,7 +196,7 @@ deepseek --provider ollama --model deepseek-coder:1.3b
 
 维护版本，核心是修复 v0.8.27 / v0.8.28 引入的"滚动幽灵"回归
 （#1085 类问题）和 Ctrl+R 会话恢复跨项目泄漏的问题（#1395），
-外加 12 个社区 PR。[完整更新日志](CHANGELOG.md)。
+外加 16 个社区 PR。[完整更新日志](CHANGELOG.md)。
 
 - **"滚动幽灵"彻底修复**（#1085 回归）。并行子代理运行
   `exec_shell` 时，alt-screen 会被滚动出 ratatui 差分渲染器的
@@ -221,6 +221,15 @@ deepseek --provider ollama --model deepseek-coder:1.3b
 - **MCP 发现接受不规范条目**（PR #1410，来自 **@Liu-Vince**）—
   一个错误的 tool / resource / prompt 条目不再让整页丢失；
   错误条目被跳过，目录的其余部分正常返回。
+- **MCP SSE 接受 CRLF 分隔的 endpoint 事件**（#1309，PR #1358，
+  来自 **@reidliu41**）— FastMCP / uvicorn 风格的 SSE 流不再因
+  只等待 LF 分隔符而超时。
+- **输入框会忽略泄漏的鼠标报告字节**（#1418，PR #1421，来自
+  **@reidliu41**）— 某些 SSH / IDE 终端链路把 `[<35;44;18M`
+  这类鼠标报告泄漏到 stdin 时，不再把输入区域填满。
+- **Footer 芯片会遵守可用宽度**（#1357，PR #1417，来自
+  **@Wenjunyun123**）— 窄终端下，过长的 cache / aux 芯片会先
+  收起，而不是挤压左侧状态或 composer 区域。
 - **笔记管理斜杠命令**（PR #1407，来自 **@reidliu41**）—
   `/note add`、`/note list` 等命令在 TUI 内提供持久笔记功能。
 - **全局 `~/.deepseek/AGENTS.md` 与项目 AGENTS.md 合并**
@@ -242,9 +251,9 @@ deepseek --provider ollama --model deepseek-coder:1.3b
   `parse_pages_arg`、Web 搜索优先级、`sanitize_stream_chunk`
   控制字节过滤（PR #1403–#1406，来自 **@linzhiqin2003**）。
 
-感谢本周期落地 10 个 PR 的 **@linzhiqin2003**，以及
-**@reidliu41**、**@hlx98007**、**@Liu-Vince**，和报告 #1395
-的 **@shenxiaodaosanhua**。
+感谢本周期落地 10 个 PR 的 **@linzhiqin2003**、落地 3 个 PR 的
+**@reidliu41**，以及 **@Wenjunyun123**、**@hlx98007**、
+**@Liu-Vince**，和报告 #1395 的 **@shenxiaodaosanhua**。
 
 ---