v0.6.1

Full Changelog: v0.5.0...v0.6.1

v0.5.0 - Codex Delegation Plugin

Highlights

• Renames the project from cc-plugin-codex to codex-delegation-plugin.
• Changes the Codex plugin ID to delegate and the marketplace ID to codex-delegation-plugin.
• Adds full Google Antigravity agy CLI delegation, setup, status, wait, result, and stop skills.
• Keeps Claude Code delegation, follow-up, review, workflow, and research capabilities under the new identity.
• Moves runtime state to ~/.codex/codex-delegation-plugin and environment settings to the CODEX_DELEGATION_* prefix.
• Fixes PTY detach cleanup and refreshes the dependency lock with zero known audit vulnerabilities.

This is a hard rename with no backward-compatibility aliases. Remove the old marketplace/plugin before installing this release.

Install

codex plugin marketplace add https://github.com/wu-hongjun/codex-delegation-plugin
codex plugin add delegate@codex-delegation-plugin

cc-plugin-codex v0.4.1

Changes

• Bind every Antigravity job to the current Codex workspace with a deduplicated --add-dir.
• Mark exit-zero Antigravity print jobs as failed when a headless permission request was auto-denied.
• Document narrow permissions.allow, explicit trusted bypass, and --sandbox behavior.
• Add driver and dispatcher regressions for workspace binding and permission-denial classification.

Verification

• Node 22 local release gate: packaging, lint, typecheck, format, full tests, attach tests, and benchmark tests.
• Isolated Codex marketplace install and cached-dispatcher smoke.
• GitHub Actions: Ubuntu/macOS on Node 20/22.

v0.4.0

Antigravity support

• Add Google Antigravity agy as a first-class delegation provider alongside Claude Code.
• Add supervised agy --print lifecycle handling for delegate, status, wait, result, stop, logs, model and agent selection, project options, sandboxing, and edit modes.
• Add $agy-setup, $agy-delegate, $agy-status, $agy-wait, $agy-result, and $agy-stop skills.
• Add --provider claude|agy|auto; the default remains Claude-compatible, while auto prefers a ready agy installation.
• Generalize runtime job and session handling while preserving legacy Claude job records and existing Claude workflows.
• Scope privacy acknowledgement by workspace and provider.

Antigravity print mode does not expose a stable conversation identifier, so agy jobs are single-turn. The plugin intentionally does not use global agy --continue state.

Verification

• Local Node 22 release gate: packaging, lint, typecheck, formatting, 1,860 main tests, PTY attach tests, and 258 benchmark-harness tests.
• Isolated Codex marketplace install and cached-dispatcher smoke at version 0.4.0.
• Packaged agy delegate/wait/result lifecycle smoke using the deterministic mock CLI.
• Four-leg GitHub Actions matrix passed on Ubuntu and macOS with Node 20 and 22: https://github.com/wu-hongjun/cc-plugin-codex/actions/runs/29543934545

v0.3.22

Fixes

• Suppress stale waitingFor / waiting metadata in compact and human status output unless a job is actually needs_input.
• Prevent stopped/completed jobs with retained Claude metadata from looking like active manual-input blockers.
• Add dispatcher regressions for terminal jobs with stale waiting metadata.

Verification

• npm run lint
• npm run typecheck
• npm run format
• npm test (1,278 tests)
• node tools/package-marketplace.mjs --check
• node tools/smoke-marketplace.mjs --marketplace-root /Users/hongjunwu/Documents/Git/cc-plugin-codex/marketplace automated checks

v0.3.21

What's Changed

• Add cc doctor and -doctor for read-only preflight before long delegated jobs.
• Surface Claude Code CLI auth, model-access, workspace, real Chrome readiness, and permission-mode checks as structured JSON.
• Treat --real as a doctor-only alias for validating future --chrome browser-backed runs, with clear warnings about profile/session auth and attach-only choices.
• Reject --real and --claude-access on non-doctor commands with actionable usage errors.
• Update README, release docs, marketplace packaging, and skill discovery to include the new doctor workflow.

Verification

• Local: format, lint, typecheck, package-marketplace check, npm test, test:attach, test:bench.
• CI: https://github.com/wu-hongjun/cc-plugin-codex/actions/runs/28102479393

v0.3.19

Changes

• Launch bypass aliases with Claude Code's literal --dangerously-skip-permissions flag.
• Add a prompt -- delimiter before delegated prompts so variadic startup flags such as --add-dir cannot consume prompt text.
• Expose launch-policy metadata in job/status JSON and fail fast when an unattended bypass launch immediately needs interactive input.

Verification

• Local npm test, npm run lint, npm run typecheck, npm run format, and marketplace package checks passed.
• GitHub Actions CI passed on Ubuntu/macOS with Node 20 and 22.

v0.3.18

Highlights

• Fixes cc upgrade --yes human output after cache-symlink refresh; the JSON path already worked, and the human path now reports the symlink step cleanly instead of crashing.
• Treats explicit trusted unattended mode (--bypass-permissions, --dangerously-skip-permissions, or --permission-mode bypassPermissions) as sufficient authorization for the plugin privacy acknowledgement on fresh Claude sessions.
• Updates fresh-session wrapper skills so Codex may include --yes with explicit bypass mode and keep work inside cc job tracking instead of falling back to native claude.
• Keeps --yes scoped to plugin privacy acknowledgement only; it still does not approve Claude Code permission prompts, workflow gates, Chrome browser selection, passkeys, or other local user-gesture prompts.

Verification

• Local lint, typecheck, format check, marketplace package check passed.
• Focused dispatcher regression tests passed for cc upgrade --yes, no---yes bypass delegation, and adversarial-review passthrough.
• CI matrix passed on Ubuntu/macOS with Node 20/22.

v0.3.17

Highlights

• Adds a claude-model-access setup probe so $claude-setup catches Claude Code subscription/API-key model-access failures before delegation.
• Keeps the 0.3.16 operator UX improvements: cc wait, permission/Chrome blocked-state hints, --bypass-permissions, cc restart, and blocked cleanup commands.
• Preserves the 0.3.16 CI hardening for attach polling and legacy short session IDs.

Verification

• Local lint, typecheck, format check, marketplace check, and full npm test passed.
• CI matrix passed on Ubuntu/macOS with Node 20/22.

v0.3.16

Highlights

• Adds -wait / cc wait for bounded waiting with JSON-friendly output.
• Improves permission-blocked and Chrome-selection status with operatorState, blockedOn, exact action hints, restart-with-bypass guidance, and blocked cleanup.
• Adds --bypass-permissions as the preferred explicit alias for trusted unattended runs, while preserving --dangerously-skip-permissions.
• Adds cc restart and cc stop --all-needs-input / --all-blocked.
• Hardens TTY permission prompt timeout handling and mock attach polling.
• Fixes legacy Claude short-ID parsing for all-letter 6-hex mock/session IDs.

Verification

• Local lint, typecheck, format check, marketplace check, and full npm test passed.
• CI matrix passed on Ubuntu/macOS with Node 20/22.