What's Changed
- fix(core): align Code Mode text with lazy tool discovery by @tanzhenxin in #12990
- fix(permissions): honor approved cross-directory tool calls by @tanzhenxin in #12987
- fix(cli): stop swallowing Enter while completion suggestions load (#13015) by @qwen-code-dev-bot in #13021
- fix(cli): isolate daemon extension settings loads from shared process state by @yiliang114 in #13022
- test(managed-agent): record Hosted latency baseline by @wenshao in #12945
- feat(agents): add local workspace-agent collaboration by @yiliang114 in #11206
- feat(serve): implement generic Broker provider controls by @wenshao in #12868
- feat(managed-agent): enable G0 public Workspace file turns by @wenshao in #12955
- fix(serve): upload session attachments in 512 KiB chunks by @doudouOUC in #12923
- test(managed-agent): Pin M4 close anchors and the published definition (M4 follow-up) by @wenshao in #12995
- fix(cli): Bound how long a relaunched child outlives its supervisor by @wenshao in #13036
- test(managed-agent): gate provider retries and release ordering by @wenshao in #13061
- test(managed-agent): stop racing the recovery scanner in turn-claim tests by @wenshao in #13032
- fix(core): honor NO_PROXY for usage-statistics RUM uploads by @yiliang114 in #13023
- fix(runtime-broker): answer a refused provider start as unknown instead of prepared by @wenshao in #13064
- fix(runtime-broker): keep the UNKNOWN answer when the original Runtime cannot answer by @wenshao in #13069
- feat(sdk-java): Add audited Hosted Workspace operator recovery by @doudouOUC in #12977
- fix(workflow): reject unsupported scripts and oversized batches early by @qqqys in #13012
- fix(hooks): deliver pre-tool and ACP failure context to the model by @qqqys in #13006
- fix(core): keep delivered notification turns out of ACP rewind ordinals by @yiliang114 in #13029
- fix(core): honor usage-statistics opt-out for extension lifecycle events by @yiliang114 in #12789
- feat(memory): bundle Mem0 with the main CLI by @yiliang114 in #12891
- feat(agents): add A2A access and sharing for workspace agents by @yiliang114 in #12851
- feat(managed-agent): ask for Hosted tool approvals (D6a) by @wenshao in #13071
- fix(web-shell): prevent stats header overlap and raw JSON output by @qqqys in #13091
- fix(managed-agent): Settle task event and cancel semantics by @wenshao in #12998
- fix(managed-agent): guard queued Hosted approval expiry by @wenshao in #13098
- feat(managed-agent): Add durable remote Shell result delivery by @doudouOUC in #12894
- feat(managed-agent): Implement private Hosted MCP runtime (H1) by @wenshao in #12946
- perf(sdk-java): Serialize runtime broker JSON directly to bytes by @wenshao in #13108
- test(cli): give the settlement retry waitFors an explicit timeout (#13034) by @qwen-code-dev-bot in #13058
- test(managed-agent): state which coordinator refusal paths are real by @yiliang114 in #13099
- docs(managed-agent): name the real worker entry in the E2E README by @yiliang114 in #13093
- feat(managed-agent): Serve durable permission Actions (D6b) by @wenshao in #13101
- test(managed-agent): close the G0 admission follow-ups by @yiliang114 in #13095
- fix(web-shell): preserve large context usage snapshots by @qqqys in #13097
- fix(managed-agent): Complete tenant scope 403 contract by @yiliang114 in #13117
- feat(managed-agent): add verified W1a workspace cold restore by @doudouOUC in #13088
- feat(web-shell): add a collapsible trajectory waterfall by @qqqys in #13081
Full Changelog: v0.24.7...v0.24.7-nightly.20260930.57e720bc97