Talos CLI 0.1.6

Patch release: Auto mode uses a user-configured LLM permission judge instead of MiniMax POST /mavis/api/v1/permission/check.

Changes

Add /settings (aliases /options, /选项) LLM judge page: reuse a /model credential or enter a separate judge. Local PermissionEngine rules still run first.
Judge policy follows Claude Code HARD/SOFT (ordinary reads may auto-allow; credentials, pushes, and writes outside the workspace ask). A judge refusal becomes an ask card with Why, not a hard deny.
Parse thinking-model completions from reasoning_content when content is empty. Fail-closed to ask; do not label those failures as timeouts.
In Auto, local policy asks such as web_fetch go through the judge instead of a canned English Why.
Remove the MiniMax mavis permission-check production client.

Focused Vitest: permission-judge config, LLM judge client, permission facade (including Auto web_fetch), TUI judge settings.
pnpm typecheck, pnpm build, and pnpm verify --profile windows on the feature revision (Windows PR contract).
Live probes on a disposable workspace: SSH credential read asks in Chinese; win.ini ordinary read may auto-allow; Remove-Item stays a hard safety deny. No live judge in unit tests.
Pre-release upstream PR scan: upstream-pr-watch.md — release: proceed (2026-10-21).