Qwen Code v0.24.7-nightly.20261001.a7deb01bcb

## 变更内容 * fix(core)：使代码模式文本与工具的延迟发现机制保持一致，由 @tanzhenxin 在 https://github.com/QwenLM/qwen-code/pull/12990 中提交 * fix(permissions)：正确处理已批准的跨目录工具调用，由 @tanzhenxin 在 https://github.com/QwenLM/qwen-code/pull/12987 中提交 * fix(cli)：补全建议加载期间不再吞掉 Enter 键输入（#13015），由 @qwen-code-dev-bot 在 https://github.com/QwenLM/qwen-code/pull/13021 中提交 * fix(cli)：将守护进程扩展设置的加载与共享进程状态隔离，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13022 中提交 * test(managed-agent)：记录 Hosted 延迟基准，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/12945 中提交 * feat(agents)：添加本地工作区智能体协作功能，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/11206 中提交 * feat(serve)：实现通用 Broker 提供方控制，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/12868 中提交 * feat(managed-agent)：启用 G0 公共 Workspace 文件轮次，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/12955 中提交 * fix(serve)：以 512 KiB 分块上传会话附件，由 @doudouOUC 在 https://github.com/QwenLM/qwen-code/pull/12923 中提交 * test(managed-agent)：固定 M4 关闭锚点和已发布定义（M4 后续），由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/12995 中提交 * fix(cli)：限制重新启动的子进程在其监管进程退出后的存活时长，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13036 中提交 * test(managed-agent)：对提供方重试和发布顺序设置门控，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13061 中提交 * test(managed-agent)：在轮次认领测试中避免与恢复扫描器产生竞态，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13032 中提交 * fix(core)：用量统计 RUM 上传遵循 NO_PROXY 设置，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13023 中提交 * fix(runtime-broker)：当提供方拒绝启动时返回 unknown，而非 prepared，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13064 中提交 * fix(runtime-broker)：当原始 Runtime 无法回答时，保留 UNKNOWN 响应，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13069 中提交 * feat(sdk-java)：添加经过审计的 Hosted Workspace 操作员恢复机制，由 @doudouOUC 在 https://github.com/QwenLM/qwen-code/pull/12977 中提交 * fix(workflow)：提前拒绝不受支持的脚本和过大的批次，由 @qqqys 在 https://github.com/QwenLM/qwen-code/pull/13012 中提交 * fix(hooks)：将工具执行前和 ACP 失败上下文传递给模型，由 @qqqys 在 https://github.com/QwenLM/qwen-code/pull/13006 中提交 * fix(core)：不将已送达的通知轮次计入 ACP 回退序号，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13029 中提交 * fix(core)：扩展生命周期事件遵循用量统计退出设置，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/12789 中提交 * feat(memory)：将 Mem0 与主 CLI 捆绑，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/12891 中提交 * feat(agents)：为工作区智能体添加 A2A 访问和共享功能，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/12851 中提交 * feat(managed-agent)：请求 Hosted 工具审批（D6a），由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13071 中提交 * fix(web-shell)：防止统计信息标题重叠和原始 JSON 输出，由 @qqqys 在 https://github.com/QwenLM/qwen-code/pull/13091 中提交 * fix(managed-agent)：明确任务事件和取消语义，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/12998 中提交 * fix(managed-agent)：保护排队中的 Hosted 审批免于过期问题，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13098 中提交 * feat(managed-agent)：添加持久化的远程 Shell 结果交付功能，由 @doudouOUC 在 https://github.com/QwenLM/qwen-code/pull/12894 中提交 * feat(managed-agent)：实现私有 Hosted MCP 运行时（H1），由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/12946 中提交 * perf(sdk-java)：将运行时 Broker JSON 直接序列化为字节，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13108 中提交 * test(cli)：为结算重试的 waitFor 设置显式超时（#13034），由 @qwen-code-dev-bot 在 https://github.com/QwenLM/qwen-code/pull/13058 中提交 * test(managed-agent)：明确哪些协调器拒绝路径是真实路径，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13099 中提交 * docs(managed-agent)：在 E2E README 中标明实际的工作进程入口，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13093 中提交 * feat(managed-agent)：提供持久化权限操作（D6b），由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13101 中提交 * test(managed-agent)：完成 G0 准入相关后续工作，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13095 中提交 * fix(web-shell)：保留大型上下文用量快照，由 @qqqys 在 https://github.com/QwenLM/qwen-code/pull/13097 中提交 * fix(managed-agent)：完善租户作用域的 403 契约，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13117 中提交 * feat(managed-agent)：添加经过验证的 W1a 工作区冷恢复功能，由 @doudouOUC 在 https://github.com/QwenLM/qwen-code/pull/13088 中提交 * feat(web-shell)：添加可折叠的轨迹瀑布图，由 @qqqys 在 https://github.com/QwenLM/qwen-code/pull/13081 中提交 * test(managed-agent)：固定提供方控制拒绝防护逻辑，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13118 中提交 * fix(managed-agent)：恢复 Hosted MCP 发布重试机制，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13109 中提交 * fix(managed-agent)：通过有界验证恢复发布过期状态，由 @doudouOUC 在 https://github.com/QwenLM/qwen-code/pull/13114 中提交 * test(core)：在不移除测试的情况下压缩 Core 测试套件，由 @tanzhenxin 在 https://github.com/QwenLM/qwen-code/pull/13007 中提交 * fix(cli)：发布设置时避免出现文件暂时缺失的时间窗口，由 @doudouOUC 在 https://github.com/QwenLM/qwen-code/pull/13119 中提交 * fix(web-shell)：确保内联标签注释位于标签的实际范围内，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/12992 中提交 * fix(cli)：持久化计划执行的 cron 提示词，由 @XIQIXIQIXIQI 在 https://github.com/QwenLM/qwen-code/pull/8838 中提交 * test(managed-agent)：覆盖 G0 启动和缓存拒绝场景，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13116 中提交 * test(managed-agent)：完善参与者作用域失败诊断，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13127 中提交 * feat(managed-agent)：将持久化工具结果投射到 WebShell，由 @doudouOUC 在 https://github.com/QwenLM/qwen-code/pull/13037 中提交 * test(core)：在召回扫描延迟门控中，将 GitHub 托管的通道视为共享通道，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13094 中提交 * feat(managed-agent)：在私有 ACP 子进程中托管 Managed 会话（M2），由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13131 中提交 * feat(managed-agent)：添加托管文件历史记录和撤销功能，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13110 中提交 * fix(runtime-broker)：在丢失清理期间续期恢复认领（#13017），由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13115 中提交 * test(integration)：消除监控工具调用 E2E 测试因提供方延迟产生的不稳定性（#13001），由 @qwen-code-dev-bot 在 https://github.com/QwenLM/qwen-code/pull/13005 中提交 * test(integration)：在向 ACP 子进程发送 SIGKILL 前订阅会话事件流（#12925），由 @qwen-code-dev-bot 在 https://github.com/QwenLM/qwen-code/pull/12930 中提交 * test(integration)：在 E2E 测试框架中默认禁用托管自动记忆（#13009），由 @qwen-code-dev-bot 在 https://github.com/QwenLM/qwen-code/pull/13013 中提交 * test(managed-agent)：补齐 H0b 记录固件的缺口，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13120 中提交 * fix(core,cli)：限制捆绑技能列表的容量；当没有提供方总数时移除 OpenTUI 的类别标题，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13159 中提交 * feat(web-shell)：在 Managed 面板中显示并响应 Hosted 工具审批，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13107 中提交 * fix(core)：修正提醒行中的延迟工具选择规则，并为 tool_call 添加已审核模式门控，由 @yiliang114 在 https://github.com/QwenLM/qwen-code/pull/13020 中提交 * feat(managed-agent)：添加 Hosted 轮次接管和 G1 故障转移 E2E 测试，由 @wenshao 在 https://github.com/QwenLM/qwen-code/pull/13083 中提交 **完整变更日志**：https://github.com/QwenLM/qwen-code/compare/v0.24.7...v0.24.7-nightly.20261001.a7deb01bcb

## What's Changed * fix(core): align Code Mode text with lazy tool discovery by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12990 * fix(permissions): honor approved cross-directory tool calls by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12987 * fix(cli): stop swallowing Enter while completion suggestions load (#13015) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13021 * fix(cli): isolate daemon extension settings loads from shared process state by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13022 * test(managed-agent): record Hosted latency baseline by @wenshao in https://github.com/QwenLM/qwen-code/pull/12945 * feat(agents): add local workspace-agent collaboration by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11206 * feat(serve): implement generic Broker provider controls by @wenshao in https://github.com/QwenLM/qwen-code/pull/12868 * feat(managed-agent): enable G0 public Workspace file turns by @wenshao in https://github.com/QwenLM/qwen-code/pull/12955 * fix(serve): upload session attachments in 512 KiB chunks by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12923 * test(managed-agent): Pin M4 close anchors and the published definition (M4 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12995 * fix(cli): Bound how long a relaunched child outlives its supervisor by @wenshao in https://github.com/QwenLM/qwen-code/pull/13036 * test(managed-agent): gate provider retries and release ordering by @wenshao in https://github.com/QwenLM/qwen-code/pull/13061 * test(managed-agent): stop racing the recovery scanner in turn-claim tests by @wenshao in https://github.com/QwenLM/qwen-code/pull/13032 * fix(core): honor NO_PROXY for usage-statistics RUM uploads by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13023 * fix(runtime-broker): answer a refused provider start as unknown instead of prepared by @wenshao in https://github.com/QwenLM/qwen-code/pull/13064 * fix(runtime-broker): keep the UNKNOWN answer when the original Runtime cannot answer by @wenshao in https://github.com/QwenLM/qwen-code/pull/13069 * feat(sdk-java): Add audited Hosted Workspace operator recovery by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12977 * fix(workflow): reject unsupported scripts and oversized batches early by @qqqys in https://github.com/QwenLM/qwen-code/pull/13012 * fix(hooks): deliver pre-tool and ACP failure context to the model by @qqqys in https://github.com/QwenLM/qwen-code/pull/13006 * fix(core): keep delivered notification turns out of ACP rewind ordinals by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13029 * fix(core): honor usage-statistics opt-out for extension lifecycle events by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12789 * feat(memory): bundle Mem0 with the main CLI by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12891 * feat(agents): add A2A access and sharing for workspace agents by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12851 * feat(managed-agent): ask for Hosted tool approvals (D6a) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13071 * fix(web-shell): prevent stats header overlap and raw JSON output by @qqqys in https://github.com/QwenLM/qwen-code/pull/13091 * fix(managed-agent): Settle task event and cancel semantics by @wenshao in https://github.com/QwenLM/qwen-code/pull/12998 * fix(managed-agent): guard queued Hosted approval expiry by @wenshao in https://github.com/QwenLM/qwen-code/pull/13098 * feat(managed-agent): Add durable remote Shell result delivery by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12894 * feat(managed-agent): Implement private Hosted MCP runtime (H1) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12946 * perf(sdk-java): Serialize runtime broker JSON directly to bytes by @wenshao in https://github.com/QwenLM/qwen-code/pull/13108 * test(cli): give the settlement retry waitFors an explicit timeout (#13034) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13058 * test(managed-agent): state which coordinator refusal paths are real by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13099 * docs(managed-agent): name the real worker entry in the E2E README by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13093 * feat(managed-agent): Serve durable permission Actions (D6b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13101 * test(managed-agent): close the G0 admission follow-ups by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13095 * fix(web-shell): preserve large context usage snapshots by @qqqys in https://github.com/QwenLM/qwen-code/pull/13097 * fix(managed-agent): Complete tenant scope 403 contract by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13117 * feat(managed-agent): add verified W1a workspace cold restore by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13088 * feat(web-shell): add a collapsible trajectory waterfall by @qqqys in https://github.com/QwenLM/qwen-code/pull/13081 * test(managed-agent): Pin provider control refusal guards by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13118 * fix(managed-agent): Recover Hosted MCP release retries by @wenshao in https://github.com/QwenLM/qwen-code/pull/13109 * fix(managed-agent): Recover publication expiry with bounded verification by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13114 * test(core): compress the Core test suite without removing tests by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13007 * fix(cli): Publish settings without a missing-file window by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13119 * fix(web-shell): keep inline chip annotations on the chip's real range by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12992 * fix(cli): persist scheduled cron prompts by @XIQIXIQIXIQI in https://github.com/QwenLM/qwen-code/pull/8838 * test(managed-agent): Cover G0 startup and cached refusals by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13116 * test(managed-agent): finish actor-scope failure diagnostics by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13127 * feat(managed-agent): project durable tool results to WebShell by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13037 * test(core): treat GitHub-hosted lanes as shared in the recall scan latency gate by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13094 * feat(managed-agent): Host Managed sessions in a private ACP child (M2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13131 * feat(managed-agent): Add hosted file history and undo by @wenshao in https://github.com/QwenLM/qwen-code/pull/13110 * fix(runtime-broker): renew the recovery claim through lost cleanup (#13017) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13115 * test(integration): deflake the monitor tool call E2E against provider latency (#13001) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13005 * test(integration): subscribe to the session event stream before SIGKILLing the ACP child (#12925) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12930 * test(integration): disable managed auto-memory by default in E2E harnesses (#13009) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13013 * test(managed-agent): Close H0b record fixture gaps by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13120 * fix(core,cli): budget the bundled skill listing; drop OpenTUI's category heading without a provider total by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13159 * feat(web-shell): show and answer Hosted tool approvals in the Managed panel by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13107 * fix(core): deferred-tool selection rules in the reminder line and a reviewed-schema gate for tool_call by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13020 * feat(managed-agent): Hosted Turn takeover and G1 failover E2E by @wenshao in https://github.com/QwenLM/qwen-code/pull/13083 **Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.24.7...v0.24.7-nightly.20261001.a7deb01bcb

Qwen Code v0.24.7-nightly.20261001.a7deb01bcb 预发布