v0.3.18

Highlights

• Fixes cc upgrade --yes human output after cache-symlink refresh; the JSON path already worked, and the human path now reports the symlink step cleanly instead of crashing.
• Treats explicit trusted unattended mode (--bypass-permissions, --dangerously-skip-permissions, or --permission-mode bypassPermissions) as sufficient authorization for the plugin privacy acknowledgement on fresh Claude sessions.
• Updates fresh-session wrapper skills so Codex may include --yes with explicit bypass mode and keep work inside cc job tracking instead of falling back to native claude.
• Keeps --yes scoped to plugin privacy acknowledgement only; it still does not approve Claude Code permission prompts, workflow gates, Chrome browser selection, passkeys, or other local user-gesture prompts.

Verification

• Local lint, typecheck, format check, marketplace package check passed.
• Focused dispatcher regression tests passed for cc upgrade --yes, no---yes bypass delegation, and adversarial-review passthrough.
• CI matrix passed on Ubuntu/macOS with Node 20/22.