Release v0.18.1

What's Changed

• chore(release): v0.18.0 by @qwen-code-ci-bot in #5050
• feat(daemon): gate direct session shell behind explicit opt-in by @doudouOUC in #5031
• fix(telemetry): Propagate daemon ACP trace context by @doudouOUC in #5047
• feat(core): persist oversized tool results to disk (#4095 Phase 4) by @doudouOUC in #5042
• fix(docs): update Coding Plan model list and fix stale references in developer docs by @DragonnZhang in #5054
• feat(core,cli): bubble background subagent permission prompts to the parent session by @qqqys in #4955
• feat(core): let grep results satisfy prior-read checks by @he-yufeng in #5043
• chore: sync package-lock.json with packages/cli ws dependencies by @tanzhenxin in #5023
• feat(skills): support user-invocable frontmatter by @kkhomej33-netizen in #5037
• fix(daemon): Sanitize logs and type MCP restarts by @doudouOUC in #5006
• fix(memory): avoid stale tool schema recall by @he-yufeng in #5058
• fix(core): eliminate OOM from debugResponses accumulation by @zzhenyao in #4982
• feat(serve): deliver A2UI surfaces over MCP — bridge extraction and action endpoint by @qqqys in #4961
• fix: enable fork subagents by default by @he-yufeng in #4963
• refactor(web-shell): remove duplicate agents panel, contain SubAgent views by @wenshao in #5059
• feat(mcp): project .mcp.json + workspace approval gating with aligned scope precedence (#4615) by @qqqys in #4713
• fix(core): preserve background agent launch flags by @he-yufeng in #5061
• feat(web-shell): daemon web-shell improvements — token usage, settings, retry, streaming metrics, hidden commands by @ytahdn in #5066
• feat(web-shell): revamp floating todo panel interactions by @wenshao in #5069
• fix(web-shell): improve slash command panel layering by @ytahdn in #5078
• feat(web-shell): show message time on hover by @wenshao in #5079
• fix(serve): Add prompt queue backpressure by @doudouOUC in #5033
• feat(core): durable cron jobs — /loop tasks that survive restarts by @tanzhenxin in #5004
• fix(cli): show full plan for gate failures by @he-yufeng in #5077
• feat(web-shell): show time on parallel-agents box and sub-agent tools by @wenshao in #5084
• feat(sdk,serve): DaemonTransport abstraction + ACP standard compliance by @chiga0 in #5040
• fix(cli): submit fast tool results after stream end by @he-yufeng in #5071
• feat(core): Workflow P3 — agent({schema, agentType, model, isolation:'worktree'}) (#4721) by @LaZzyMan in #5034
• fix(cli): ignore expired live agents in focus navigation by @he-yufeng in #5070
• fix(cli): drop tool calls after cancellation by @he-yufeng in #5020
• fix(core): Persist file history snapshot updates by @doudouOUC in #5057
• test(cli): Cover rewind selection and confirm flow by @doudouOUC in #5044
• fix(cli): add OSC 52 clipboard fallback for SSH environments by @zzhenyao in #4929
• fix(webui): defer DaemonClient disposal to survive React StrictMode by @wenshao in #5091
• feat(core): migrate Computer Use to cua-driver (cross-platform) by @LaZzyMan in #5051
• feat(web-shell): reveal full tool detail and auto-collapse finished tools by @wenshao in #5088
• fix(cli,core): harden OOM prevention — idempotent compaction tests, explicit GC, debug log defaults by @zzhenyao in #4914
• fix(cli): wrap long status lines by @tt-a1i in #5093
• fix(acp): add internal Kind.Agent, keep ACP wire on 'other' (no-regression) by @doudouOUC in #5085
• feat(web-shell): make input shortcuts discoverable and clickable by @wenshao in #5096
• fix(ci): fail PR review job when the run aborts mid-review by @yiliang114 in #5053
• feat(cli,web-shell): persist goal status in daemon transcript events by @ytahdn in #5098
• fix(core): default GLM-5.2+ and GLM-6.x onward to 1M context by @wenshao in #5103
• refactor(core): unify retry delay policy by @yiliang114 in #3827
• feat(acp): dedicated agent permission dialog via _meta.toolName (follow-up to #5085) by @doudouOUC in #5105
• fix(daemon): Avoid replaying truncated session diffs by @doudouOUC in #5108
• feat(cli): import Claude MCP servers by @tt-a1i in #5095
• fix(core): Repair duplicate tool call IDs by @doudouOUC in #5107
• feat(cli): improve /copy command argumentHint and description by @huww98 in #5110
• feat(web-shell): collapsible TodoWrite history with status diff by @wenshao in #5109
• test: stabilize simple MCP integration check by @he-yufeng in #5072
• fix(core): hard-stop repeated identical tool calls by @he-yufeng in #5036
• fix(core): keep token escalation warm across agent rounds by @he-yufeng in #5062
• fix(core): bound hard rescue compression retries by @Jerry2003826 in #4526
• fix(core): bound foreground shell output capture by @Jerry2003826 in #4524
• fix(core): compress when usage metadata is missing by @Jerry2003826 in #4528
• docs: Refresh daemon developer docs by @doudouOUC in #4412
• fix(core): ignore agent names without active teams by @he-yufeng in #5115
• fix(core): include response tokens in prompt estimate by @Jerry2003826 in #4525
• fix(dual-output): prevent FIFO blocking on startup when no reader connected by @chiga0 in #4894
• ci: add scheduled autofix workflow for stale bug issues by @qqqys in #4989
• fix(core): honor skipLoopDetection for the deterministic tool-call loop by @wenshao in #5128
• docs: rewrite CLAUDE.md to point to AGENTS.md as authoritative source by @pomelo-nwu in #5138
• feat(computer-use): configurable screenshot max dimension (setting + env) by @LaZzyMan in #5122
• fix(core): Bound active tool result history by @doudouOUC in #5111
• fix(desktop): isolate update feed from CLI releases by @DragonnZhang in #5139
• feat(web-shell): per-task token & time detail on completed todos by @wenshao in #5118
• fix(web-shell): remove redundant sanitizeSvg, fix mermaid render failure by @ytahdn in #5123
• fix release integration env controls by @yiliang114 in #5121
• feat(web-shell): collapse completed turns to prompt + final answer by @wenshao in #5125
• fix(core): skip auto-title generation when history has no user message by @yuanyuanAli in #5120
• feat(desktop): show git branch in working directory badge by @tt-a1i in #5082
• feat(triage): make minimal-change an explicit PR review check by @yiliang114 in #5146
• fix(release): allow cli-entry.js in standalone dist allowlist by @yiliang114 in #5153

Full Changelog: v0.18.0...v0.18.1