What's Changed
- fix(core): align Code Mode text with lazy tool discovery by @tanzhenxin in #12990
- fix(permissions): honor approved cross-directory tool calls by @tanzhenxin in #12987
- fix(cli): stop swallowing Enter while completion suggestions load (#13015) by @qwen-code-dev-bot in #13021
- fix(cli): isolate daemon extension settings loads from shared process state by @yiliang114 in #13022
- test(managed-agent): record Hosted latency baseline by @wenshao in #12945
- feat(agents): add local workspace-agent collaboration by @yiliang114 in #11206
- feat(serve): implement generic Broker provider controls by @wenshao in #12868
- feat(managed-agent): enable G0 public Workspace file turns by @wenshao in #12955
- fix(serve): upload session attachments in 512 KiB chunks by @doudouOUC in #12923
- test(managed-agent): Pin M4 close anchors and the published definition (M4 follow-up) by @wenshao in #12995
- fix(cli): Bound how long a relaunched child outlives its supervisor by @wenshao in #13036
- test(managed-agent): gate provider retries and release ordering by @wenshao in #13061
- test(managed-agent): stop racing the recovery scanner in turn-claim tests by @wenshao in #13032
- fix(core): honor NO_PROXY for usage-statistics RUM uploads by @yiliang114 in #13023
- fix(runtime-broker): answer a refused provider start as unknown instead of prepared by @wenshao in #13064
- fix(runtime-broker): keep the UNKNOWN answer when the original Runtime cannot answer by @wenshao in #13069
- feat(sdk-java): Add audited Hosted Workspace operator recovery by @doudouOUC in #12977
- fix(workflow): reject unsupported scripts and oversized batches early by @qqqys in #13012
- fix(hooks): deliver pre-tool and ACP failure context to the model by @qqqys in #13006
- fix(core): keep delivered notification turns out of ACP rewind ordinals by @yiliang114 in #13029
- fix(core): honor usage-statistics opt-out for extension lifecycle events by @yiliang114 in #12789
- feat(memory): bundle Mem0 with the main CLI by @yiliang114 in #12891
- feat(agents): add A2A access and sharing for workspace agents by @yiliang114 in #12851
- feat(managed-agent): ask for Hosted tool approvals (D6a) by @wenshao in #13071
- fix(web-shell): prevent stats header overlap and raw JSON output by @qqqys in #13091
- fix(managed-agent): Settle task event and cancel semantics by @wenshao in #12998
- fix(managed-agent): guard queued Hosted approval expiry by @wenshao in #13098
- feat(managed-agent): Add durable remote Shell result delivery by @doudouOUC in #12894
- feat(managed-agent): Implement private Hosted MCP runtime (H1) by @wenshao in #12946
- perf(sdk-java): Serialize runtime broker JSON directly to bytes by @wenshao in #13108
- test(cli): give the settlement retry waitFors an explicit timeout (#13034) by @qwen-code-dev-bot in #13058
- test(managed-agent): state which coordinator refusal paths are real by @yiliang114 in #13099
- docs(managed-agent): name the real worker entry in the E2E README by @yiliang114 in #13093
- feat(managed-agent): Serve durable permission Actions (D6b) by @wenshao in #13101
- test(managed-agent): close the G0 admission follow-ups by @yiliang114 in #13095
- fix(web-shell): preserve large context usage snapshots by @qqqys in #13097
- fix(managed-agent): Complete tenant scope 403 contract by @yiliang114 in #13117
- feat(managed-agent): add verified W1a workspace cold restore by @doudouOUC in #13088
- feat(web-shell): add a collapsible trajectory waterfall by @qqqys in #13081
- test(managed-agent): Pin provider control refusal guards by @yiliang114 in #13118
- fix(managed-agent): Recover Hosted MCP release retries by @wenshao in #13109
- fix(managed-agent): Recover publication expiry with bounded verification by @doudouOUC in #13114
- test(core): compress the Core test suite without removing tests by @tanzhenxin in #13007
- fix(cli): Publish settings without a missing-file window by @doudouOUC in #13119
- fix(web-shell): keep inline chip annotations on the chip's real range by @yiliang114 in #12992
- fix(cli): persist scheduled cron prompts by @XIQIXIQIXIQI in #8838
- test(managed-agent): Cover G0 startup and cached refusals by @yiliang114 in #13116
- test(managed-agent): finish actor-scope failure diagnostics by @yiliang114 in #13127
- feat(managed-agent): project durable tool results to WebShell by @doudouOUC in #13037
- test(core): treat GitHub-hosted lanes as shared in the recall scan latency gate by @yiliang114 in #13094
- feat(managed-agent): Host Managed sessions in a private ACP child (M2) by @wenshao in #13131
- feat(managed-agent): Add hosted file history and undo by @wenshao in #13110
- fix(runtime-broker): renew the recovery claim through lost cleanup (#13017) by @wenshao in #13115
- test(integration): deflake the monitor tool call E2E against provider latency (#13001) by @qwen-code-dev-bot in #13005
- test(integration): subscribe to the session event stream before SIGKILLing the ACP child (#12925) by @qwen-code-dev-bot in #12930
- test(integration): disable managed auto-memory by default in E2E harnesses (#13009) by @qwen-code-dev-bot in #13013
- test(managed-agent): Close H0b record fixture gaps by @yiliang114 in #13120
- fix(core,cli): budget the bundled skill listing; drop OpenTUI's category heading without a provider total by @yiliang114 in #13159
- feat(web-shell): show and answer Hosted tool approvals in the Managed panel by @yiliang114 in #13107
- fix(core): deferred-tool selection rules in the reminder line and a reviewed-schema gate for tool_call by @yiliang114 in #13020
- feat(managed-agent): Hosted Turn takeover and G1 failover E2E by @wenshao in #13083
- feat(core): support Freeform input in Code Mode by @tanzhenxin in #13150
- fix(core): align exec output with Codex by @tanzhenxin in #13153
- feat(managed-agent): implement durable Hosted Hooks (H2) by @wenshao in #13129
- feat(core): allow concurrent Bash calls in Code Mode by @tanzhenxin in #13151
- fix(managed-hooks): bound Hook admission and cold restore cost by @wenshao in #13136
- chore: drop the unanchored workspace/ ignore rule that hides web-shell sources by @yiliang114 in #13155
- feat(managed-agent): Protect Session-owned tool output retirement by @doudouOUC in #13084
- fix(serve): Report Hosted Hook denials and conflicts accurately by @wenshao in #13137
- fix(managed-agent): Validate undo receipts and disclose backup limits by @wenshao in #13144
- fix(ci): stabilize hosted browser smoke gates by @yiliang114 in #13172
- ci(sdk-java): guard Flyway version uniqueness and watch red main runs by @wenshao in #12965
- feat(managed-agent): Add offline W1b recovery bundles by @doudouOUC in #13138
- fix(web-shell): stop the memory panel replacing a global QWEN.md it could not read by @yiliang114 in #13154
- feat(managed-agent): reliably close workspace-bound sessions by @doudouOUC in #13135
- fix(managed-agent): renumber session-close migration to V32 by @wenshao in #13223
- fix(web): pin fast model to the selected provider endpoint by @yiliang114 in #13227
- feat(core): resolve model limits and modalities from a models.dev catalog by @yiliang114 in #11959
- fix(web-shell): stop offering a Managed approval the viewer cannot answer by @yiliang114 in #13165
- feat(agents): add isolated remote Qwen runtime hosts by @yiliang114 in #12582
- feat(managed-agent): store immutable AgentDefinition revisions (Stage D8a) by @yiliang114 in #13142
- test(managed-agent): Disable MockMvc result printing in ManagedEventReplayTest by @wenshao in #13229
- fix(web-shell): preserve authentication fragment on offline retry by @jabrailkhalil in #13176
- fix(core): allow leading comments before workflow meta declaration (#12217) by @holny in #12651
- fix(cli): use Linux-specific unavailable message for clipboard paste (#12504) by @holny in #12507
- feat(managed-agent): archive and delete closed workspace sessions by @doudouOUC in #13194
- fix(core): stop misdiagnosing malformed tool-call args as max_tokens truncation by @yiliang114 in #12982
- test(core): pin CodeModeOnly bridge behavior at unit level by @waybarrios in #12497
- fix(serve): release only load-owned Hook Runtimes by @wenshao in #13195
- fix(core): recover a failed reminder-less notification turn as interrupted_prompt by @yiliang114 in #13126
- feat(qqbot): Accept inbound images and videos by @Eric-GoodBoy-Tech in #12850
- fix(acp): preserve configured OpenAI auth choice on model switches by @tanzhenxin in #13152
- fix(core): swap extension artifacts by copy when Windows locks the directory by @niheaven in #11889
- feat(managed-agent): Restore safe retired tool output collection by @doudouOUC in #13225
- fix(memory): preserve Markdown emphasis style during extraction by @yiliang114 in #13240
- feat(managed-agent): let a Workspace-bound Session's creator submit, cancel and rename by @yiliang114 in #13112
- test(managed-agent): Add tool output collection deployment gates by @doudouOUC in #13090
- feat(channels): add IMAP and SMTP email channel by @destire-mio in #12939
- feat(sdk-java): add SpotBugs high-confidence gate, CodeQL Java scan, Maven dependabot by @wenshao in #13216
- fix(managed-agent): Preserve writer and publication epoch deadlines by @yiliang114 in #13192
- feat(managed-agent): default durable local-process and trusted reboot recovery on by @wenshao in #13211
- fix(web-shell): skip corrupt managed SSE frames and merge gap resyncs by @wenshao in #13206
- feat(mobile): add scoped microphone consent (Phase 2) by @jabrailkhalil in #12127
- perf(extensions): load list metadata before selected details by @callmeYe in #12640
- test(feishu): isolate media dispatch coverage from external APIs by @jabrailkhalil in #13170
- feat(managed-agent): Run Managed session tools in a Runtime worker (M5a) by @wenshao in #13167
- fix(managed-agent): adopt the Runtime Session on a passive takeover by @wenshao in #13173
- fix(memory): keep MEMORY.md index link targets resolvable by @yiliang114 in #13156
- fix(cli): Harden settings failures and sandbox command streams by @doudouOUC in #13140
- fix(channels): clean up owned workers after config loss by @XIQIXIQIXIQI in #11071
- test(web-shell): pin the single-skip resync boundary and the stall threshold by @wenshao in #13277
- fix(ci): raise serve-ab handshake budget, report dead CodeQL nightlies, route trusted PR lanes to ECS by @yiliang114 in #13270
- fix(workflow): distinguish transport retry waits from stalls by @qqqys in #13274
- fix(core): cap the main-turn output clamp floor by the remaining window by @yiliang114 in #13286
- test(managed-agent): repair real-model mode of the managed-agent-server E2E runner by @wenshao in #13263
- fix(channels): pin channel-email on channel-base 0.24.7 by @wenshao in #13305
- fix(ci): sparse-check out the owner scripts as a cone directory by @wenshao in #13306
- fix(ci): assign PR owners through the REST assignees endpoint by @wenshao in #13310
- fix(serve): keep Hosted Sessions available across Shell publisher drain and lost acknowledgements by @wenshao in #13304
- fix(managed-agent): surface the named load refusal from mixed-version takeovers by @wenshao in #13349
- fix(managed-agent): retract the published prefix when a midstream retry replays by @wenshao in #13351
- fix(managed-agent): settle a deadline-exceeded hosted Turn as a classified failure by @wenshao in #13359
- fix(web-shell): restore the Managed approval retry budget on reload by @yiliang114 in #13294
- fix(cli): make the Hosted takeover load idempotent after a lost reply by @wenshao in #13350
- feat(managed-agent): persist Workspace session tool profiles by @yiliang114 in #13301
- fix(agents): distinguish accepted Host results from terminal runs by @yiliang114 in #13241
- fix(serve): queue a Workspace-bound hosted turn on a definite busy refusal by @wenshao in #13366
- test(core): wait for reap in supervisor-stopped hook case (#13356) by @wenshao in #13357
- feat(prompt): answer from conversation history before investigating by @Andrea-Bruno in #12580
- feat(memory): Opt-in selector skip for a unique new recall hit by @yiliang114 in #13158
- test(core): bound Hook history fixture for CI by @yiliang114 in #13382
- fix(cli): keep the /context estimate within the context window by @Shizoqua in #13246
- fix(managed-agent): stop gap-locked replay probes deadlocking same-tenant admission bursts by @wenshao in #13365
- fix(serve): let Web Shell trust a workspace without a terminal by @yiliang114 in #13146
- chore(managed-agent): swap JDBC pool from HikariCP to Druid by @wenshao in #13363
- fix(mobile): allow bracketed IPv6 loopback cleartext by @jabrailkhalil in #12963
- docs(cli): correct Hosted Runtime Broker option help by @Shxiao101 in #13141
- test(core): pin executionStatus for cancelled Shell result carrying error by @Shxiao101 in #13212
- feat(review): capture-tui — rendering claims get pixels, not prose by @wenshao in #9273
- fix(runtime-broker): close cross-process release race and harden scheduling by @wenshao in #13214
- test(integration): recognize sealed writer renewals in crash gate by @yiliang114 in #13385
- fix(web-shell): defer composer tag root unmount at all three sites by @yiliang114 in #13262
- test(web-shell): close the R2 review's managed-session test gaps on #12692 by @wenshao in #13346
- fix(managed-agent): stop database amplification on session hot paths by @wenshao in #13217
- feat(managed-agent): Add dev:managed-agent one-shot dev launcher by @wenshao in #13218
- fix(managed-agent): stop virtual-thread carrier pinning in the Hosted Harness stream and the Runtime Broker guards by @wenshao in #13388
- test(core): remove redundant tool registry override in resume matrix by @Shxiao101 in #13213
- fix(core): preserve original Code Mode Goal evidence by @yiliang114 in #13324
- fix(managed-agent): Close the H0c review follow-ups R3-6, R3-9, R3-10 and R3-11 by @wenshao in #13347
- test: fix hosted crash fencing and approval waits by @yiliang114 in #13380
- test(cli): give the unknown Hook fence waitFor an explicit timeout (#13316) by @qwen-code-dev-bot in #13323
New Contributors
- @waybarrios made their first contribution in #12497
- @niheaven made their first contribution in #11889
- @Andrea-Bruno made their first contribution in #12580
- @Shizoqua made their first contribution in #13246
- @Shxiao101 made their first contribution in #13141
Full Changelog: v0.24.7...v0.24.7-nightly.20261004.9915c7ff8f