v0.18.5

Highlights

• Auto and YOLO are now full pass-through modes. auto runs fully unattended — every tool operation is approved and the agent never stops to ask you anything. yolo approves every tool operation too, but still brings its questions and plan reviews to you, so the decisions stay in your hands.
• Dangerous-command warnings are more precise. The warning prompt again offers a session grant, and that grant only silences the warning for the exact command rule it approved — a blanket grant or a family template can no longer hide a hazard such as a force push.
• Cancelling a turn now settles pending approvals. Interrupting a turn resolves any approval it was waiting on and clears the approval and question panels immediately, instead of parking the turn until the approval timeout.
• Maintenance. Package exports now resolve from source (config aligned with the rest of the workspace), the declaration pipeline picks up config and drops dead entries, the import-boundary guard catches relative-path imports into the core package, and the lint warning budget is locked at 670. All workspace packages bump to 0.18.5.

Package versions

All packages bumped to 0.18.5.

中文补充

• auto 与 yolo 升级为完全放行模式：auto 完全无人值守——一切工具操作自动批准、不再向你提问；yolo 同样放行一切工具操作，但提问与计划评审仍会来找你，决策权留在你手里。
• 危险命令警告更精准：提示重新提供"批准（当前会话）"，且该授权只对同一条命令规则生效——笼统授权或家族模板再也无法掩盖强制推送这类危险动作。
• 取消回合即结算审批：中断时立即结算它正在等待的审批并清掉审批/提问面板，不再把回合挂到审批超时。
• 维护：包导出改为源码解析（config 与其余工作区包对齐）、声明产物管线适配并清理死配置、边界守卫可捕获相对路径穿透、lint 警告预算锁定 670；全部包版本升至 0.18.5。