v0.18.0

0.18.0 (2026-11-02)

Features

• mobile: plugin panel renderer for ui:1 views (plugins wave C, PC3) (#790) (9f58b44)
• mobile: reveal elided heredoc bodies on the permission card and the tool row (reveal step 5) (#818) (73123c5)
• mobile: steward review rows, review screen, permission rule line and read-only policy screen (S3b) (#801) (53313b9)
• permissions: elide heredoc bodies from permission details and tool_call events (reveal step 2) (#810) (5c60c67)
• permissions: human-only heredoc reveal RPCs, audit rows and smind permission show --reveal (reveal step 3) (#813) (9a1c526)
• permissions: scrub echoed heredoc bodies from tool results at the client boundary (reveal F1) (#816) (5228e09)
• plugins: plugin-contributed ACP providers, manifest and registry (Wave D PD1) (#812) (201b28c)
• plugins: scrubbed, confined launch of plugin providers (Wave D PD2a) (#815) (940f46e)
• web: demo mode, the real UI against a scripted in-browser daemon (ADR-0051) (#797) (2e26909)
• web: reveal elided heredoc bodies on the approval card and the timeline tool card (reveal step 4) (#814) (723e3c6)
• web: the demo tells the landing hero's nine tasks (scenario v2) (#799) (aff5166)

Bug Fixes

• permissions: a heredoc reveal is refused when its audit row cannot be written (#817) (ddf8e8b)
• permpolicy: elide heredoc bodies inside nested scans from Normalized and Raw (#804) (e24d260)
• permpolicy: heredoc elision keeps a newline so the card never glues tokens (#803) (bce96c8)
• qaframes: the scratch daemon never downloads a Go toolchain into its temp HOME (#811) (373c4a3)
• steward: real seat cost in the review row, verdict param renamed to submission with caps in the schema (#807) (2178979)