@qwen-code/qwen-code 0.24.3

Release v0.24.3

on Node.js NPM

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Web Shell

Web Shell gains structured shell results, optional trajectory metrics, host settings allowlists, and mobile navigation fixes.

• Web Shell now presents structured shell execution results with command, output, execution details, elapsed time, and scrollable content. (#12311)
  
  
• Adds an opt-in trajectory table tab in Web Shell showing per-turn durations, time to first token, token counts, and tool timing. (#12388)
  
  
• web-shell: support host settings item allowlists (#12328)
• web-shell: restore mobile history navigation (#12362)
  
  
• web-shell: stop the header title from showing the new-session placeholder (#12379)
  
  

Live Voice

Live Voice capture moves to AudioWorklet with a fallback, improves failure reporting, and supports shared-screen requests.

• Live Voice microphone capture now uses an AudioWorklet with the old ScriptProcessorNode kept as fallback, reducing main-thread work while preserving level metering and call gating. (#12338)
• live: report the cause when Live Voice fails to start with a non-Error (#12377)
• live: let a browser Host answer a screen request from a shared screen (#12378)

Runtime and sessions

Runtime foundations add managed state, session records, JDBC persistence, and broader serve channel restoration.

• java: Add managed runtime state foundation (#12301)
• core: Add managed session record foundation (#12302)
• Adds JDBC persistence for Runtime bindings and sessions, enabling shared state across broker processes and restart-safe ownership. (#12390)
• qwen serve now restores serve.channels from every trusted workspace at boot, not just the primary workspace. (#12385)

Review workflow

Review behavior becomes more focused with critical fix-audit rounds and safer base-tree reuse.

• review: swap re-review rounds to a fix-audit shape under the critical posture (#10136)
• Fixes review base-tree reuse by storing merge-base evidence outside the mounted sandbox, so stale or conflicting anchors are rejected based on trusted host-side lease state. (#11540)

Chrome extension

Chrome extension release packaging and privacy documentation are now in place.

• Adds Chrome Web Store packaging and a release workflow that can build, scan, upload, and optionally publish the Chrome extension during stable releases or manual dispatch. (#12329)
• chrome: disclose browser data handling and limited use (#12330)

Desktop and CLI

macOS gets a native integrated title bar, CLI startup is more resilient, and history retry states are clearer.

• macOS desktop now uses an integrated native title bar with content painted behind traffic-light controls and a dedicated drag region. (#12393)
• CLI startup no longer crashes when the output-language file cannot be written; it continues without the file. (#10455)
• History entries that cannot be retried now expose argsUnavailable so clients can accurately reflect retry limitations. (#12349)

Performance and execution

Headless execution is leaner and duplicate workspace-provider requests are coalesced.

• One-shot headless execution now defaults to a pipe-based shell backend and optimizes relaunch behavior for lower overhead. (#12340)
• Concurrent workspace-providers requests for the same resolved URL now share one in-flight request, reducing duplicate network calls without adding caching or TTL behavior. (#12327)

Other Changes

• core: Route runtime tools through bwrap (#12269)
• workflows: write a resumed run's checkpoint before it registers (#12347)
• core: reject broadcast-capable hook PIDs (#12344)
• E2E CI install steps now retry transient npm ci failures up to three times before failing, reducing flaky workflow breaks. (#11731)
• Release standalone archive downloads now use timeouts and retries with checksum verification inside the retry loop, improving resilience to transient network failures. (#11879)
• Channel grouping can now accept an ownership hint to resolve ambiguous channel names and skip tolerated names while preserving existing behavior. (#12383)
• Updates SDK E2E integration assertions to recognize deferred MCP tool calls while still accepting direct MCP tool-use blocks. (#12365)
• Defines a versioned private protocol foundation for Hosted Harness, including capability envelope, boot fence, and request validation. (#12409)
• test(cli): keep an ambient GIT_CONFIG_GLOBAL from hijacking withHome (#12407)
• release: resume automated web-shell publishing (#12387)

中文摘要

Web Shell

Web Shell 新增结构化 shell 结果、可选 trajectory 指标、主机设置白名单，并修复移动端历史导航。

• Web Shell 现在以结构化方式展示 shell 执行结果，包含命令、输出、执行详情、耗时和可滚动内容区域。 (#12311)
• Web Shell 新增可选的 trajectory 表格页签，展示每轮耗时、首 token 时间、token 数量和工具调用耗时。 (#12388)
• 新增可选 settings.includeItems 白名单，主机可仅显示指定设置和内置块；excludeItems 优先，空白名单显示空状态。 (#12328)
• web-shell: restore mobile history navigation (#12362)
• web-shell: stop the header title from showing the new-session placeholder (#12379)

Live Voice

Live Voice 麦克风采集改用 AudioWorklet 并保留回退，改进启动失败原因展示，并支持从共享屏幕响应请求。

• Live Voice 麦克风采集改用 AudioWorklet，并保留旧 ScriptProcessorNode 作为回退，减少主线程负担，同时保持电平表和通话控制行为不变。 (#12338)
• live: report the cause when Live Voice fails to start with a non-Error (#12377)
• live: let a browser Host answer a screen request from a shared screen (#12378)

运行时与会话

运行时基础新增托管状态、会话记录、JDBC 持久化，并在启动时恢复更多受信任 workspace 的 serve.channels。

• java: Add managed runtime state foundation (#12301)
• core: Add managed session record foundation (#12302)
• 为 Runtime bindings 和 sessions 添加 JDBC 持久化，支持跨 broker 进程共享状态及重启后保留所有权。 (#12390)
• qwen serve 现在在启动时会恢复所有受信任 workspace 的 serve.channels，而不仅是主 workspace。 (#12385)

审查工作流

审查行为更聚焦：critical 多轮审查改用 fix-audit 形态，并修复基础树复用的锚点校验。

• 当多轮 /review 明确进入仅发布 critical 的模式且存在增量锚点时，改用更窄的 fix-audit 形态，而不是重复完整首轮审查。 (#10136)
• 修复 review 基础树复用问题：将合并基准证据移出挂载沙箱，基于主机侧租约状态拒绝过期或冲突的锚点。 (#11540)

Chrome 扩展

Chrome extension 新增打包与发布工作流，并补充浏览器数据处理与隐私说明。

• 新增 Chrome Web Store 打包与发布工作流，可在稳定版发布或手动触发时构建、扫描、上传并可选发布 Chrome extension。 (#12329)
• 更新隐私文档，披露浏览器数据处理、extension 权限、本地 token 存储、模型提供方传输、保留控制和 Limited Use 承诺。 (#12330)

桌面端与 CLI

macOS 使用集成原生标题栏，CLI 启动更稳健，历史记录重试限制展示更准确。

• macOS 桌面端现在使用集成的原生标题栏，内容延伸至窗口控制按钮后方，并保留专用拖拽区域。 (#12393)
• 当 output-language 文件无法写入时，CLI 启动不再崩溃，而是继续运行。 (#10455)
• 无法重试的历史记录现在会标记 argsUnavailable，使客户端能准确反映重试限制。 (#12349)

性能与执行

一次性 headless 执行开销更低，相同 workspace-providers URL 的并发请求会合并。

• 一次性 headless 执行现在默认使用基于 pipe 的 shell 后端，并优化重启行为以降低开销。 (#12340)
• 针对同一已解析 URL 的并发 workspace-providers 请求现在会共享同一个进行中的请求，减少重复网络调用，且不引入缓存或 TTL。 (#12327)

其他变更

• 新增内部运行时支持，为各工具启用 bwrap 隔离并应用不可变工作区策略，同时禁用不受支持的主机副作用路径，本阶段暂不公开设置。 (#12269)
• workflows: write a resumed run's checkpoint before it registers (#12347)
• core: reject broadcast-capable hook PIDs (#12344)
• E2E CI 安装步骤现在会对瞬时 npm ci 失败最多重试三次后再失败，减少工作流误报。 (#11731)
• 发布流程中的 standalone 归档下载现在使用超时与重试，并在重试循环内校验 checksum，提高对瞬时网络故障的容错能力。 (#11879)
• channel 分组现在可接受 ownership hint，以解析歧义 channel 名称并跳过可容忍名称，同时保持现有行为。 (#12383)
• 更新 SDK E2E 集成断言，使其能识别延迟 MCP 工具调用，同时继续支持直接 MCP 工具调用。 (#12365)
• 为 Hosted Harness 定义版本化私有协议基础，包含能力封装、启动防护和请求校验。 (#12409)
• test(cli): keep an ambient GIT_CONFIG_GLOBAL from hijacking withHome (#12407)
• release: resume automated web-shell publishing (#12387)

Full Changelog: v0.24.2...v0.24.3