<!-- Release notes generated using configuration in .github/release.yml at release/v0.24.7-nightly.20261002.a011f66944 -->
## What's Changed
* fix(core): align Code Mode text with lazy tool discovery by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12990
* fix(permissions): honor approved cross-directory tool calls by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12987
* fix(cli): stop swallowing Enter while completion suggestions load (#13015) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13021
* fix(cli): isolate daemon extension settings loads from shared process state by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13022
* test(managed-agent): record Hosted latency baseline by @wenshao in https://github.com/QwenLM/qwen-code/pull/12945
* feat(agents): add local workspace-agent collaboration by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11206
* feat(serve): implement generic Broker provider controls by @wenshao in https://github.com/QwenLM/qwen-code/pull/12868
* feat(managed-agent): enable G0 public Workspace file turns by @wenshao in https://github.com/QwenLM/qwen-code/pull/12955
* fix(serve): upload session attachments in 512 KiB chunks by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12923
* test(managed-agent): Pin M4 close anchors and the published definition (M4 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12995
* fix(cli): Bound how long a relaunched child outlives its supervisor by @wenshao in https://github.com/QwenLM/qwen-code/pull/13036
* test(managed-agent): gate provider retries and release ordering by @wenshao in https://github.com/QwenLM/qwen-code/pull/13061
* test(managed-agent): stop racing the recovery scanner in turn-claim tests by @wenshao in https://github.com/QwenLM/qwen-code/pull/13032
* fix(core): honor NO_PROXY for usage-statistics RUM uploads by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13023
* fix(runtime-broker): answer a refused provider start as unknown instead of prepared by @wenshao in https://github.com/QwenLM/qwen-code/pull/13064
* fix(runtime-broker): keep the UNKNOWN answer when the original Runtime cannot answer by @wenshao in https://github.com/QwenLM/qwen-code/pull/13069
* feat(sdk-java): Add audited Hosted Workspace operator recovery by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12977
* fix(workflow): reject unsupported scripts and oversized batches early by @qqqys in https://github.com/QwenLM/qwen-code/pull/13012
* fix(hooks): deliver pre-tool and ACP failure context to the model by @qqqys in https://github.com/QwenLM/qwen-code/pull/13006
* fix(core): keep delivered notification turns out of ACP rewind ordinals by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13029
* fix(core): honor usage-statistics opt-out for extension lifecycle events by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12789
* feat(memory): bundle Mem0 with the main CLI by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12891
* feat(agents): add A2A access and sharing for workspace agents by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12851
* feat(managed-agent): ask for Hosted tool approvals (D6a) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13071
* fix(web-shell): prevent stats header overlap and raw JSON output by @qqqys in https://github.com/QwenLM/qwen-code/pull/13091
* fix(managed-agent): Settle task event and cancel semantics by @wenshao in https://github.com/QwenLM/qwen-code/pull/12998
* fix(managed-agent): guard queued Hosted approval expiry by @wenshao in https://github.com/QwenLM/qwen-code/pull/13098
* feat(managed-agent): Add durable remote Shell result delivery by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12894
* feat(managed-agent): Implement private Hosted MCP runtime (H1) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12946
* perf(sdk-java): Serialize runtime broker JSON directly to bytes by @wenshao in https://github.com/QwenLM/qwen-code/pull/13108
* test(cli): give the settlement retry waitFors an explicit timeout (#13034) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13058
* test(managed-agent): state which coordinator refusal paths are real by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13099
* docs(managed-agent): name the real worker entry in the E2E README by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13093
* feat(managed-agent): Serve durable permission Actions (D6b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13101
* test(managed-agent): close the G0 admission follow-ups by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13095
* fix(web-shell): preserve large context usage snapshots by @qqqys in https://github.com/QwenLM/qwen-code/pull/13097
* fix(managed-agent): Complete tenant scope 403 contract by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13117
* feat(managed-agent): add verified W1a workspace cold restore by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13088
* feat(web-shell): add a collapsible trajectory waterfall by @qqqys in https://github.com/QwenLM/qwen-code/pull/13081
* test(managed-agent): Pin provider control refusal guards by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13118
* fix(managed-agent): Recover Hosted MCP release retries by @wenshao in https://github.com/QwenLM/qwen-code/pull/13109
* fix(managed-agent): Recover publication expiry with bounded verification by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13114
* test(core): compress the Core test suite without removing tests by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13007
* fix(cli): Publish settings without a missing-file window by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13119
* fix(web-shell): keep inline chip annotations on the chip's real range by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12992
* fix(cli): persist scheduled cron prompts by @XIQIXIQIXIQI in https://github.com/QwenLM/qwen-code/pull/8838
* test(managed-agent): Cover G0 startup and cached refusals by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13116
* test(managed-agent): finish actor-scope failure diagnostics by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13127
* feat(managed-agent): project durable tool results to WebShell by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13037
* test(core): treat GitHub-hosted lanes as shared in the recall scan latency gate by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13094
* feat(managed-agent): Host Managed sessions in a private ACP child (M2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13131
* feat(managed-agent): Add hosted file history and undo by @wenshao in https://github.com/QwenLM/qwen-code/pull/13110
* fix(runtime-broker): renew the recovery claim through lost cleanup (#13017) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13115
* test(integration): deflake the monitor tool call E2E against provider latency (#13001) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13005
* test(integration): subscribe to the session event stream before SIGKILLing the ACP child (#12925) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12930
* test(integration): disable managed auto-memory by default in E2E harnesses (#13009) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13013
* test(managed-agent): Close H0b record fixture gaps by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13120
* fix(core,cli): budget the bundled skill listing; drop OpenTUI's category heading without a provider total by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13159
* feat(web-shell): show and answer Hosted tool approvals in the Managed panel by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13107
* fix(core): deferred-tool selection rules in the reminder line and a reviewed-schema gate for tool_call by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13020
* feat(managed-agent): Hosted Turn takeover and G1 failover E2E by @wenshao in https://github.com/QwenLM/qwen-code/pull/13083
* feat(core): support Freeform input in Code Mode by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13150
* fix(core): align exec output with Codex by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13153
* feat(managed-agent): implement durable Hosted Hooks (H2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13129
* feat(core): allow concurrent Bash calls in Code Mode by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13151
* fix(managed-hooks): bound Hook admission and cold restore cost by @wenshao in https://github.com/QwenLM/qwen-code/pull/13136
* chore: drop the unanchored workspace/ ignore rule that hides web-shell sources by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13155
* feat(managed-agent): Protect Session-owned tool output retirement by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13084
* fix(serve): Report Hosted Hook denials and conflicts accurately by @wenshao in https://github.com/QwenLM/qwen-code/pull/13137
* fix(managed-agent): Validate undo receipts and disclose backup limits by @wenshao in https://github.com/QwenLM/qwen-code/pull/13144
* fix(ci): stabilize hosted browser smoke gates by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13172
* ci(sdk-java): guard Flyway version uniqueness and watch red main runs by @wenshao in https://github.com/QwenLM/qwen-code/pull/12965
* feat(managed-agent): Add offline W1b recovery bundles by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13138
* fix(web-shell): stop the memory panel replacing a global QWEN.md it could not read by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13154
* feat(managed-agent): reliably close workspace-bound sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13135
* fix(managed-agent): renumber session-close migration to V32 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13223
* fix(web): pin fast model to the selected provider endpoint by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13227
* feat(core): resolve model limits and modalities from a models.dev catalog by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11959
* fix(web-shell): stop offering a Managed approval the viewer cannot answer by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13165
* feat(agents): add isolated remote Qwen runtime hosts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12582
* feat(managed-agent): store immutable AgentDefinition revisions (Stage D8a) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13142
* test(managed-agent): Disable MockMvc result printing in ManagedEventReplayTest by @wenshao in https://github.com/QwenLM/qwen-code/pull/13229
* fix(web-shell): preserve authentication fragment on offline retry by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/13176
* fix(core): allow leading comments before workflow meta declaration (#12217) by @holny in https://github.com/QwenLM/qwen-code/pull/12651
* fix(cli): use Linux-specific unavailable message for clipboard paste (#12504) by @holny in https://github.com/QwenLM/qwen-code/pull/12507
* feat(managed-agent): archive and delete closed workspace sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13194
* fix(core): stop misdiagnosing malformed tool-call args as max_tokens truncation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12982
* test(core): pin CodeModeOnly bridge behavior at unit level by @waybarrios in https://github.com/QwenLM/qwen-code/pull/12497
## New Contributors
* @waybarrios made their first contribution in https://github.com/QwenLM/qwen-code/pull/12497
**Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.24.7...v0.24.7-nightly.20261002.a011f66944