<!-- Release notes generated using configuration in .github/release.yml at release/v0.25.0-nightly.20261007.8003d28042 -->
## What's Changed
* fix(agents): replace selected remote Hosts without losing bindings by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13430
* test(core): close #12693 post-merge review test and hygiene gaps by @wenshao in https://github.com/QwenLM/qwen-code/pull/13341
* test(integration): make the /hooks dialog E2E witness the rendered dialog (#13425) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13427
* fix(ci): wait 60s before the E2E build artifact download retry (#13284) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13292
* fix(ci): fail yamllint and shellcheck lanes loudly on an empty git file list by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12650
* fix(managed-agent): serve SSE subscribers from a Condition instead of pinning carriers (#13388 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13402
* test(cli): give the hosted tool-turn requested() waitFor an explicit timeout (#13397) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13399
* fix(managed-agent): single-flight Hosted Harness attachment creation off the CHM bin monitor by @wenshao in https://github.com/QwenLM/qwen-code/pull/13403
* perf(core): load extension directories in bounded batches by @callmeYe in https://github.com/QwenLM/qwen-code/pull/13379
* fix(cli): keep /context detail MCP rows within the MCP tools row by @Shizoqua in https://github.com/QwenLM/qwen-code/pull/13390
* test(integration): make the utf-bom defaultFileEncoding test deterministic by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13196
* feat(mobile): restore scoped connections after Activity recreation by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12247
* feat(mobile): improve profile screen accessibility (Phase 2) by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12129
* fix(memory): preserve complete index entries in prompts by @beibeihk in https://github.com/QwenLM/qwen-code/pull/13315
* fix(cli): make vim-mode clipboard paste work on Windows by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13198
* fix(core): stop memory discovery at Git root by @agammann in https://github.com/QwenLM/qwen-code/pull/13381
* feat(runtime): add experimental Kubernetes CSI runtime and durable worker ACK by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13289
* feat(managed-agent): H3 background Shell and Monitor runtime by @wenshao in https://github.com/QwenLM/qwen-code/pull/13265
* feat(web-shell): support side tasks in secondary workspaces by @wenshao in https://github.com/QwenLM/qwen-code/pull/13468
* feat(core): defer agent and goal declarations by default by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13033
* fix(core): pin GIT_TERMINAL_PROMPT in the extension git client by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13454
* fix(cli): preserve permissions when replacing settings by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13293
* feat(managed-agent): Make local Runtime tool outcomes durable (M5b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13291
* feat(managed-agent): read bounded approval input previews by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13400
* fix(channel-weixin): send iLink headers when minting the login QR code by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13482
* fix(core): recognize llama.cpp context-overflow wording so compaction runs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13421
* feat(managed-agent): let creators change a bound Session's directory (W2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13247
* fix(core): recover function-style XML tool calls by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13437
* fix(core): honor memory.agentMaxTurns in the user-scoped memory dream by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13462
* fix(core): stop MCP server rules from authorizing a colliding server by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12531
* docs(managed-agent): Stage H4/H5/H6 slice designs by @wenshao in https://github.com/QwenLM/qwen-code/pull/13499
* feat(managed-agent): admit glob in new hosted-workspace /2 profiles by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13166
* fix(web-shell): managed session UI correctness from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13342
* feat(managed-agent): Stage H5 channel contracts and persistence by @wenshao in https://github.com/QwenLM/qwen-code/pull/13497
* docs(managed-agent): cross-node EventTransport design by @wenshao in https://github.com/QwenLM/qwen-code/pull/13500
* fix(ci): rerun infrastructure-only main CI failures instead of filing (#13510) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13512
* fix(core): keep nested tool_call arguments open on Responses; name the target in bridged validation errors by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12901
* docs(managed-agent): repair the R2 review's doc findings on #12692 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13343
* fix(cli): never honor memory agent budgets from workspace scope by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13508
* fix(core): keep an XML tool call quoted in a parameter value inert by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13515
* fix(ci): raise the Hosted verify step ceiling above its failsafe fork timeout (#13503) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13504
* fix(ci): sweep stale pool residue before sdk-java checkouts by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13507
* fix(managed-agent): check the replay before publishing a domain record by @wenshao in https://github.com/QwenLM/qwen-code/pull/13376
* feat(web-shell): take back a cancelled prompt that produced nothing by @wenshao in https://github.com/QwenLM/qwen-code/pull/13488
* test(managed-agent): pin untested contracts from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13348
* fix(core): key the models.dev catalog under dotted as well as dashed ids by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13299
* fix(mobile): resolve document providers once per selection by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/13147
* fix(managed-agent): close the three Critical H0c follow-ups from #13300 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13355
* feat(hosted): show captured inputs in native approval cards by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13407
* test(integration): let the headless workflow-skill E2E inherit the suite timeout (#13518) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13520
* fix(core): stop advertising unsupported LSP dynamic registration by @shenyankm in https://github.com/QwenLM/qwen-code/pull/13494
* fix(core): stop JSONL prefix reads when their budget is met by @GoldArowana in https://github.com/QwenLM/qwen-code/pull/13486
* test(managed-agent): commit authority-valid deltas in the restore byte-budget test by @wenshao in https://github.com/QwenLM/qwen-code/pull/13551
* feat(managed-agent): EventTransport message-envelope contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13498
* feat(managed-agent): adopt the next Hosted Harness generation (G3) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13174
* fix(web-shell): escape control characters in the managed approval args preview by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13549
* test(core): pin the limit-less alias shape the models.dev projection ships by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13539
* fix(core): budget side-query output tokens against the resolved context window by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13244
* feat(managed-agent): enumerate the public and WebShell surface with an admission gate by @wenshao in https://github.com/QwenLM/qwen-code/pull/13543
* fix(agent): enforce per-model concurrency cap on foreground sub-agents by @Andrea-Bruno in https://github.com/QwenLM/qwen-code/pull/12461
* docs(serve): fix stale permission-route note and document pending-prompt events by @LUOSENGWA in https://github.com/QwenLM/qwen-code/pull/13281
* test(integration): require a successful monitor tool call by @GoldArowana in https://github.com/QwenLM/qwen-code/pull/13452
* docs(managed-agent): add the delivery ledger for #12380 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13565
* fix(runtime-broker): keep the HTTP exchange cancel off the deadline completion path by @wenshao in https://github.com/QwenLM/qwen-code/pull/13562
* fix(ci): skip millisecond latency budgets on the release ECS pool (#13541) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13547
* docs(troubleshooting): add a "connection resets on some networks" entry (TLS-stack-selective middleboxes) by @LUOSENGWA in https://github.com/QwenLM/qwen-code/pull/13235
* feat(managed-agent): H4a child agent and child acceptance record contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13505
* feat(managed-agent): give Hosted turns the Workspace's project context by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13168
* feat(managed-agent): H6a schedule and automation run record contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13536
* feat(managed-agent): H5a channel route and delivery record contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13548
* fix(docs): apply Prettier formatting to the daemon event schema (#13573) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13580
* docs(managed-agent): bring the delivery ledger up to main d0ddd020c8 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13593
* docs(serve): fix Prettier formatting in the daemon event schema (#13585) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13587
* feat(web-shell): Add fullscreen viewing for history tables by @wenshao in https://github.com/QwenLM/qwen-code/pull/13589
* fix(acp): preserve branch checkpoints after Code Mode turns by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13574
* feat(managed-agent): prove Shell process-group stops with a worker ledger (M5c) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13352
* feat(managed-agent): add W1c offline workspace migration by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13260
* fix(web-shell): allow deleting queued prompts during admission by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13594
* fix(serve): invalidate the Hosted Workspace context on instruction-file changes by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13605
* fix(web-shell): follow an accepted approval answer to its terminal operation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13609
* fix(managed-agent): commit oversized message records as inline chunks by @wenshao in https://github.com/QwenLM/qwen-code/pull/13375
* test(managed-agent): harden pinning witnesses and add renewal-arm pinning witness (#13388 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13401
* test(integration): share the Hosted proxy header filter across all store relays by @wenshao in https://github.com/QwenLM/qwen-code/pull/13431
## New Contributors
* @beibeihk made their first contribution in https://github.com/QwenLM/qwen-code/pull/13315
* @agammann made their first contribution in https://github.com/QwenLM/qwen-code/pull/13381
* @GoldArowana made their first contribution in https://github.com/QwenLM/qwen-code/pull/13486
* @LUOSENGWA made their first contribution in https://github.com/QwenLM/qwen-code/pull/13281
**Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.25.0...v0.25.0-nightly.20261007.8003d28042