<!-- Release notes generated using configuration in .github/release.yml at release/v0.18.1 -->
## 更新内容
* chore(release): v0.18.0 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/5050
* feat(daemon): 通过显式 opt-in 机制限制直接会话 Shell 访问 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5031
* fix(telemetry): 传递守护进程 ACP 跟踪上下文 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5047
* feat(core): 将超大的工具结果持久化到磁盘 (#4095 Phase 4) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5042
* fix(docs): 更新 Coding Plan 模型列表并修复开发者文档中的过时引用 by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/5054
* feat(core,cli): 将后台子代理的权限提示冒泡至父会话 by @qqqys in https://github.com/QwenLM/qwen-code/pull/4955
* feat(core): 使 grep 结果满足前置读取检查 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5043
* chore: 同步 package-lock.json 以匹配 packages/cli 的 ws 依赖 by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/5023
* feat(skills): 支持用户可调用的 frontmatter by @kkhomej33-netizen in https://github.com/QwenLM/qwen-code/pull/5037
* fix(daemon): 清理日志并对 MCP 重启进行类型处理 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5006
* fix(memory): 避免使用过时的工具 schema 进行回忆 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5058
* fix(core): 消除因 debugResponses 累积导致的内存溢出 (OOM) by @zzhenyao in https://github.com/QwenLM/qwen-code/pull/4982
* feat(serve): 通过 MCP 传递 A2UI 界面 — 桥接提取与操作端点 by @qqqys in https://github.com/QwenLM/qwen-code/pull/4961
* fix: 默认启用 fork 子代理 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/4963
* refactor(web-shell): 移除重复的代理面板,整合 SubAgent 视图 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5059
* feat(mcp): 项目 .mcp.json + 工作区审批门控及对齐的作用域优先级 (#4615) by @qqqys in https://github.com/QwenLM/qwen-code/pull/4713
* fix(core): 保留后台代理启动标志 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5061
* feat(web-shell): 守护进程 Web Shell 改进 — Token 用量、设置、重试、流式指标、隐藏命令 by @ytahdn in https://github.com/QwenLM/qwen-code/pull/5066
* feat(web-shell): 重构浮动待办面板交互 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5069
* fix(web-shell): 改善斜杠命令面板的层级布局 by @ytahdn in https://github.com/QwenLM/qwen-code/pull/5078
* feat(web-shell): 悬停时显示消息时间 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5079
* fix(serve): 添加提示词队列背压机制 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5033
* feat(core): 持久化定时任务 — 重启后仍可运行的 /loop 任务 by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/5004
* fix(cli): 门控失败时显示完整计划 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5077
* feat(web-shell): 在并行代理框和子代理工具中显示时间 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5084
* feat(sdk,serve): DaemonTransport 抽象化 + 符合 ACP 标准 by @chiga0 in https://github.com/QwenLM/qwen-code/pull/5040
* fix(cli): 流结束后提交快速工具结果 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5071
* feat(core): 工作流 P3 — agent({schema, agentType, model, isolation:'worktree'}) (#4721) by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/5034
* fix(cli): 在焦点导航中忽略已过期的实时代理 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5070
* fix(cli): 取消后丢弃工具调用 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5020
* fix(core): 持久化文件历史快照更新 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5057
* test(cli): 覆盖回退选择与确认流程 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5044
* fix(cli): 为 SSH 环境添加 OSC 52 剪贴板回退机制 by @zzhenyao in https://github.com/QwenLM/qwen-code/pull/4929
* fix(webui): 延迟 DaemonClient 销毁以兼容 React StrictMode by @wenshao in https://github.com/QwenLM/qwen-code/pull/5091
* feat(core): 将 Computer Use 迁移至 cua-driver(跨平台) by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/5051
* feat(web-shell): 展示完整工具详情并自动折叠已完成的工具 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5088
* fix(cli,core): 强化 OOM 防护 — 幂等压缩测试、显式 GC、调试日志默认配置 by @zzhenyao in https://github.com/QwenLM/qwen-code/pull/4914
* fix(cli): 自动换行长状态行 by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5093
* fix(acp): 添加内部 Kind.Agent,保持 ACP 协议线为 'other'(无回归) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5085
* feat(web-shell): 使输入快捷键可见且可点击 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5096
* fix(ci): 当运行在审查中途中止时使 PR 审查作业失败 by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/5053
* feat(cli,web-shell): 在守护进程转录事件中持久化目标状态 by @ytahdn in https://github.com/QwenLM/qwen-code/pull/5098
* fix(core): 将 GLM-5.2+ 及 GLM-6.x 及以上版本默认上下文设为 1M by @wenshao in https://github.com/QwenLM/qwen-code/pull/5103
* refactor(core): 统一重试延迟策略 by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/3827
* feat(acp): 通过 _meta.toolName 提供专用代理权限对话框(#5085 的后续) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5105
* fix(daemon): 避免重放被截断的会话差异 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5108
* feat(cli): 导入 Claude MCP 服务器 by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5095
* fix(core): 修复重复的工具调用 ID by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5107
* feat(cli): 优化 /copy 命令的 argumentHint 和描述 by @huww98 in https://github.com/QwenLM/qwen-code/pull/5110
* feat(web-shell): 支持可折叠的 TodoWrite 历史记录及状态差异 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5109
* test: 稳定简单 MCP 集成检查 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5072
* fix(core): 强制终止重复的相同工具调用 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5036
* fix(core): 在 Agent 轮次间保持 Token 升级预热 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5062
* fix(core): 限制硬救援压缩重试次数 by @Jerry2003826 in https://github.com/QwenLM/qwen-code/pull/4526
* fix(core): 限制前台 Shell 输出捕获 by @Jerry2003826 in https://github.com/QwenLM/qwen-code/pull/4524
* fix(core): 在使用元数据缺失时执行压缩 by @Jerry2003826 in https://github.com/QwenLM/qwen-code/pull/4528
* docs: 更新守护进程开发者文档 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/4412
* fix(core): 忽略没有活跃团队的 Agent 名称 by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5115
* fix(core): 在提示词估算中包含响应 Token by @Jerry2003826 in https://github.com/QwenLM/qwen-code/pull/4525
* fix(dual-output): 修复启动时无读取器连接导致 FIFO 阻塞的问题 by @chiga0 in https://github.com/QwenLM/qwen-code/pull/4894
* ci: 为过期 Bug 问题添加定时自动修复工作流 by @qqqys in https://github.com/QwenLM/qwen-code/pull/4989
* fix(core): 对确定性工具调用循环尊重 skipLoopDetection 设置 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5128
* docs: 重写 CLAUDE.md 以指向 AGENTS.md 作为权威来源 by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/5138
* feat(computer-use): 支持配置截图最大尺寸(设置项 + 环境变量) by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/5122
* fix(core): 限制活跃工具结果历史记录 by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5111
* fix(desktop): 将桌面端更新源与 CLI 发布隔离 by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/5139
* feat(web-shell): 在已完成的 Todo 中显示单任务 Token 与耗时详情 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5118
* fix(web-shell): 移除冗余的 sanitizeSvg,修复 Mermaid 渲染失败问题 by @ytahdn in https://github.com/QwenLM/qwen-code/pull/5123
* fix release integration env controls: 修复发布集成环境控制 by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/5121
* feat(web-shell): 将已完成的对话轮次折叠为提示词与最终答案 by @wenshao in https://github.com/QwenLM/qwen-code/pull/5125
* fix(core): 当历史记录无用户消息时跳过自动生成标题 by @yuanyuanAli in https://github.com/QwenLM/qwen-code/pull/5120
* feat(desktop): 在工作目录徽标中显示 Git 分支 by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5082
* feat(triage): 将 minimal-change 设为显式的 PR 审查检查项 by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/5146
* fix(release): 在独立发行版白名单中允许 cli-entry.js by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/5153
**完整更新日志**: https://github.com/QwenLM/qwen-code/compare/v0.18.0...v0.18.1
<!-- Release notes generated using configuration in .github/release.yml at release/v0.18.1 -->
## What's Changed
* chore(release): v0.18.0 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/5050
* feat(daemon): gate direct session shell behind explicit opt-in by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5031
* fix(telemetry): Propagate daemon ACP trace context by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5047
* feat(core): persist oversized tool results to disk (#4095 Phase 4) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5042
* fix(docs): update Coding Plan model list and fix stale references in developer docs by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/5054
* feat(core,cli): bubble background subagent permission prompts to the parent session by @qqqys in https://github.com/QwenLM/qwen-code/pull/4955
* feat(core): let grep results satisfy prior-read checks by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5043
* chore: sync package-lock.json with packages/cli ws dependencies by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/5023
* feat(skills): support user-invocable frontmatter by @kkhomej33-netizen in https://github.com/QwenLM/qwen-code/pull/5037
* fix(daemon): Sanitize logs and type MCP restarts by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5006
* fix(memory): avoid stale tool schema recall by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5058
* fix(core): eliminate OOM from debugResponses accumulation by @zzhenyao in https://github.com/QwenLM/qwen-code/pull/4982
* feat(serve): deliver A2UI surfaces over MCP — bridge extraction and action endpoint by @qqqys in https://github.com/QwenLM/qwen-code/pull/4961
* fix: enable fork subagents by default by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/4963
* refactor(web-shell): remove duplicate agents panel, contain SubAgent views by @wenshao in https://github.com/QwenLM/qwen-code/pull/5059
* feat(mcp): project .mcp.json + workspace approval gating with aligned scope precedence (#4615) by @qqqys in https://github.com/QwenLM/qwen-code/pull/4713
* fix(core): preserve background agent launch flags by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5061
* feat(web-shell): daemon web-shell improvements — token usage, settings, retry, streaming metrics, hidden commands by @ytahdn in https://github.com/QwenLM/qwen-code/pull/5066
* feat(web-shell): revamp floating todo panel interactions by @wenshao in https://github.com/QwenLM/qwen-code/pull/5069
* fix(web-shell): improve slash command panel layering by @ytahdn in https://github.com/QwenLM/qwen-code/pull/5078
* feat(web-shell): show message time on hover by @wenshao in https://github.com/QwenLM/qwen-code/pull/5079
* fix(serve): Add prompt queue backpressure by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5033
* feat(core): durable cron jobs — /loop tasks that survive restarts by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/5004
* fix(cli): show full plan for gate failures by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5077
* feat(web-shell): show time on parallel-agents box and sub-agent tools by @wenshao in https://github.com/QwenLM/qwen-code/pull/5084
* feat(sdk,serve): DaemonTransport abstraction + ACP standard compliance by @chiga0 in https://github.com/QwenLM/qwen-code/pull/5040
* fix(cli): submit fast tool results after stream end by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5071
* feat(core): Workflow P3 — agent({schema, agentType, model, isolation:'worktree'}) (#4721) by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/5034
* fix(cli): ignore expired live agents in focus navigation by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5070
* fix(cli): drop tool calls after cancellation by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5020
* fix(core): Persist file history snapshot updates by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5057
* test(cli): Cover rewind selection and confirm flow by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5044
* fix(cli): add OSC 52 clipboard fallback for SSH environments by @zzhenyao in https://github.com/QwenLM/qwen-code/pull/4929
* fix(webui): defer DaemonClient disposal to survive React StrictMode by @wenshao in https://github.com/QwenLM/qwen-code/pull/5091
* feat(core): migrate Computer Use to cua-driver (cross-platform) by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/5051
* feat(web-shell): reveal full tool detail and auto-collapse finished tools by @wenshao in https://github.com/QwenLM/qwen-code/pull/5088
* fix(cli,core): harden OOM prevention — idempotent compaction tests, explicit GC, debug log defaults by @zzhenyao in https://github.com/QwenLM/qwen-code/pull/4914
* fix(cli): wrap long status lines by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5093
* fix(acp): add internal Kind.Agent, keep ACP wire on 'other' (no-regression) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5085
* feat(web-shell): make input shortcuts discoverable and clickable by @wenshao in https://github.com/QwenLM/qwen-code/pull/5096
* fix(ci): fail PR review job when the run aborts mid-review by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/5053
* feat(cli,web-shell): persist goal status in daemon transcript events by @ytahdn in https://github.com/QwenLM/qwen-code/pull/5098
* fix(core): default GLM-5.2+ and GLM-6.x onward to 1M context by @wenshao in https://github.com/QwenLM/qwen-code/pull/5103
* refactor(core): unify retry delay policy by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/3827
* feat(acp): dedicated agent permission dialog via _meta.toolName (follow-up to #5085) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5105
* fix(daemon): Avoid replaying truncated session diffs by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5108
* feat(cli): import Claude MCP servers by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5095
* fix(core): Repair duplicate tool call IDs by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5107
* feat(cli): improve /copy command argumentHint and description by @huww98 in https://github.com/QwenLM/qwen-code/pull/5110
* feat(web-shell): collapsible TodoWrite history with status diff by @wenshao in https://github.com/QwenLM/qwen-code/pull/5109
* test: stabilize simple MCP integration check by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5072
* fix(core): hard-stop repeated identical tool calls by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5036
* fix(core): keep token escalation warm across agent rounds by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5062
* fix(core): bound hard rescue compression retries by @Jerry2003826 in https://github.com/QwenLM/qwen-code/pull/4526
* fix(core): bound foreground shell output capture by @Jerry2003826 in https://github.com/QwenLM/qwen-code/pull/4524
* fix(core): compress when usage metadata is missing by @Jerry2003826 in https://github.com/QwenLM/qwen-code/pull/4528
* docs: Refresh daemon developer docs by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/4412
* fix(core): ignore agent names without active teams by @he-yufeng in https://github.com/QwenLM/qwen-code/pull/5115
* fix(core): include response tokens in prompt estimate by @Jerry2003826 in https://github.com/QwenLM/qwen-code/pull/4525
* fix(dual-output): prevent FIFO blocking on startup when no reader connected by @chiga0 in https://github.com/QwenLM/qwen-code/pull/4894
* ci: add scheduled autofix workflow for stale bug issues by @qqqys in https://github.com/QwenLM/qwen-code/pull/4989
* fix(core): honor skipLoopDetection for the deterministic tool-call loop by @wenshao in https://github.com/QwenLM/qwen-code/pull/5128
* docs: rewrite CLAUDE.md to point to AGENTS.md as authoritative source by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/5138
* feat(computer-use): configurable screenshot max dimension (setting + env) by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/5122
* fix(core): Bound active tool result history by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/5111
* fix(desktop): isolate update feed from CLI releases by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/5139
* feat(web-shell): per-task token & time detail on completed todos by @wenshao in https://github.com/QwenLM/qwen-code/pull/5118
* fix(web-shell): remove redundant sanitizeSvg, fix mermaid render failure by @ytahdn in https://github.com/QwenLM/qwen-code/pull/5123
* fix release integration env controls by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/5121
* feat(web-shell): collapse completed turns to prompt + final answer by @wenshao in https://github.com/QwenLM/qwen-code/pull/5125
* fix(core): skip auto-title generation when history has no user message by @yuanyuanAli in https://github.com/QwenLM/qwen-code/pull/5120
* feat(desktop): show git branch in working directory badge by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/5082
* feat(triage): make minimal-change an explicit PR review check by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/5146
* fix(release): allow cli-entry.js in standalone dist allowlist by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/5153
**Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.18.0...v0.18.1