Qwen Code v0.25.3-nightly.20261019.5dcf7c7cb1

## 更新内容 * feat(daemon)：支持按会话定向刷新 Skill 和 Extension，由 @callmeYe 提交，见 https://github.com/QwenLM/qwen-code/pull/14050 * fix(managed-agent)：限制初始发布防护的等待时间，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14563 * feat(runtime-broker)：为工作区隔离的绑定会话进行会话创建预热，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14599 * test(cli)：为轮次稳定等待提供慢速主机时间预算，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14598 * feat(managed-agent)：在参考发行版中提供配置模板，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14631 * feat(serve)：通过 Hosted Harness 运行私有 CSI 文件轮次，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14487 * test(cli)：在 Hosted Harness 拆卸过程中重试 ENOTEMPTY，由 @ZedingZhang 提交，见 https://github.com/QwenLM/qwen-code/pull/14636 * feat(managed-agent)：支持本地和 SSH 工作区文件引用，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14639 * test(cli)：为托管探针启动防护提供调度时间预算，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14662 * fix(managed-agent)：写入方丢失后恢复已提交的唤醒，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14603 * feat(managed-agent)：添加只读的 `--check` 预检，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14632 * fix(sdk)：根据守护进程的会话预算确定会话创建规模，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14588 * fix(serve)：将托管的 stdio MCP 服务器限制在一个进程组中（#14503），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14640 * test(managed-agent)：在 DELETE 的生命周期 Hook 之前排空被挂起的异步 Hook，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14638 * feat(serve)：恢复回执已完成的私有 CSI 文件轮次，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14523 * docs(managed-agent)：提议对会话状态实施有界保留，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14659 * feat(managed-agent)：将附件输入预算提高到 8 MiB，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14628 * fix(managed-agent)：写入方租约过期后恢复日志，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14570 * perf(managed-agent)：按执行调用为工具回执建立索引，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14660 * fix(managed-agent)：避免被拒绝的 PreToolUse 替换项进入托管的 after Hook，由 @qqqys 提交，见 https://github.com/QwenLM/qwen-code/pull/14650 * test(managed-agent)：为自动化设置 Spring 崩溃和扫描器租约门控（FG11c 第 2 部分），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14649 * feat(serve)：从 Broker 读取轮次恢复证据（D7-2），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14669 * fix(ci)：修复 Java 门控并报告 PR 中的失败，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14522 * fix(hosted)：继续执行已恢复的后台唤醒轮次，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14679 * test(web-shell)：为共享 CI 主机放宽 Playwright 等待时间预算，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14643 * perf(web-shell)：以增量方式投影托管会话消息，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14562 * feat(managed-agent)：为单主机拓扑提供 systemd 单元，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14633 * refactor(managed-agent)：共享 CSI 运行时标记读取逻辑，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14571 * fix(managed-agent)：展开时加载已保存的工具详细信息，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14604 * feat(managed-agent)：当运行时证据持续未知时，暂存轮次（D7-2），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14681 * test(managed-agent)：在注册前丢弃 FG13a Hook 目录回复，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14668 * fix(web-shell)：轨迹执行视图消失时保留焦点，由 @qqqys 提交，见 https://github.com/QwenLM/qwen-code/pull/14641 * feat(artifacts)：记录代理创建或编辑的文件，由 @zjgzx1988 提交，见 https://github.com/QwenLM/qwen-code/pull/14292 * fix(cli)：协调托管恢复失败原因，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14567 * test(managed-agent)：断言 G3 审批身份并固定漂移，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14673 * fix(hooks)：Hook 工作进程终止时回收其命令单元（#14502），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14675 * test(managed-agent)：在请求发出后丢弃 FG13a HTTP Hook 回复，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14692 * test(managed-agent)：限定 FG11c 崩溃断言的作用域并修复竞态测试夹具，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14682 * perf(managed-agent)：限制被挂起运行时清单的读取成本（#13930），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14691 * fix(config)：允许托管主机恢复其自己的会话，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14688 * test(integration)：放宽工作流完成回复的时间预算，使其能够容忍高负载分片停顿（#14191），由 @qwen-code-dev-bot 提交，见 https://github.com/QwenLM/qwen-code/pull/14202 * feat(managed-agent)：引导初始化共享部署凭据，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14634 * feat(runtime)：完成私有 CSI 冷恢复，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14695 * fix(managed-agent)：绝不因恢复而使待处理的取消操作失败（D7-2），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14694 * test(managed-agent)：在发布线上固定排空标志（#13930），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14712 * test(core)：固定 Goal 记录的类型/子类型门控，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14705 * test(web-shell)：移除固定的转录包大小上限，由 @ytahdn 提交，见 https://github.com/QwenLM/qwen-code/pull/14703 * fix(managed-agent)：限制发布放置的等待时间，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14542 * fix(managed-agent)：使图像附件格式与 Qwen Code 保持一致，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14704 * feat(extensions)：添加有界的已生成 HTML 和 JavaScript 视图，由 @qqqys 提交，见 https://github.com/QwenLM/qwen-code/pull/14338 * docs(vscode)：解释为什么 Webview 无法使用同源例外，由 @Jun516 提交，见 https://github.com/QwenLM/qwen-code/pull/14684 * refactor(managed-agent)：按职责组织服务器软件包，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14710 * test(managed-agent)：稳定 FG12b 已释放存储故障门控（#14697），由 @qwen-code-dev-bot 提交，见 https://github.com/QwenLM/qwen-code/pull/14711 * test(managed-agent)：添加 G3 审批故障点端到端测试分支，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14687 * test(core)：同步调度器释放故障注入，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14727 * fix(ci)：允许在拉取请求中显示 Java 失败摘要，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14717 * fix(managed-agent)：在 `--check` 中拒绝不完整的工作区工具路径，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14635 * feat(workflow)：授权守护进程祖先工作流，由 @qqqys 提交，见 https://github.com/QwenLM/qwen-code/pull/14646 * fix(cli)：暂存运行时启动前的 `/acp` WebSocket 升级，而不是直接返回 406（#13995），由 @qwen-code-dev-bot 提交，见 https://github.com/QwenLM/qwen-code/pull/13997 * test(managed-agent)：回复丢失后重放被拒绝的 Hook 决策，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14701 * fix：统一官方路由与 MaaS 路由中的 DeepSeek 推理控制，由 @qqqys 提交，见 https://github.com/QwenLM/qwen-code/pull/14689 * fix(web-shell)：在审查制品查看器中显示修复见证，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14725 * feat(web-shell)：在 Token Usage 中显示各模型的 TTFT 和输出速度，由 @qqqys 提交，见 https://github.com/QwenLM/qwen-code/pull/14728 * fix(managed-agent)：使故障门控与未稳定追加的恢复保持一致，由 @yiliang114 提交，见 https://github.com/QwenLM/qwen-code/pull/14716 * test(cli)：在单元测试中固定 FG13d 分派前取消，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14735 * test(managed-agent)：验证跨两个系列的持久挂起扫描（#13930），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14719 * test(managed-agent)：放宽托管恢复和 Hook 取消门控的时间窗口（#14729），由 @qwen-code-dev-bot 提交，见 https://github.com/QwenLM/qwen-code/pull/14741 * feat(runtime)：添加原始 CSI 应用退役功能，由 @doudouOUC 提交，见 https://github.com/QwenLM/qwen-code/pull/14698 * feat(telemetry)：在 LLM span 中记录推理投入程度，由 @zonemeen 提交，见 https://github.com/QwenLM/qwen-code/pull/14718 * test(managed-agent)：为已禁用的自动化 span 设置门控（FG11d），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14731 * test(managed-agent)：完成 FG13f 决策交付测试分支，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14736 * test(managed-agent)：在 Harness 被终止后使 v2 执行保持未知状态（D7-2），由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14750 * docs(managed-agent)：命名分派前提交侦测断言，由 @wenshao 提交，见 https://github.com/QwenLM/qwen-code/pull/14756 ## 新贡献者 * @Jun516 在 https://github.com/QwenLM/qwen-code/pull/14684 中完成了首次贡献 **完整变更日志**：https://github.com/QwenLM/qwen-code/compare/v0.25.3...v0.25.3-nightly.20261019.5dcf7c7cb1

## What's Changed * feat(daemon): support session-targeted Skill and Extension refresh by @callmeYe in https://github.com/QwenLM/qwen-code/pull/14050 * fix(managed-agent): bound initial publication guard waits by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14563 * feat(runtime-broker): Session-create warm for Workspace-isolated bound Sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14599 * test(cli): give turn-settling waits the slow-host budget by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14598 * feat(managed-agent): ship a configuration template in the reference distribution by @wenshao in https://github.com/QwenLM/qwen-code/pull/14631 * feat(serve): run private CSI file turns through Hosted Harness by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14487 * test(cli): retry ENOTEMPTY in hosted harness teardowns by @ZedingZhang in https://github.com/QwenLM/qwen-code/pull/14636 * feat(managed-agent): support local and SSH workspace file references by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14639 * test(cli): give the hosted probe-start guards a scheduling budget by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14662 * fix(managed-agent): recover committed wakes after writer loss by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14603 * feat(managed-agent): add a read-only --check preflight by @wenshao in https://github.com/QwenLM/qwen-code/pull/14632 * fix(sdk): size session create from the daemon session budget by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14588 * fix(serve): contain Hosted stdio MCP servers in a process group (#14503) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14640 * test(managed-agent): drain a held async Hook before the lifecycle Hooks on DELETE by @wenshao in https://github.com/QwenLM/qwen-code/pull/14638 * feat(serve): recover receipt-complete private CSI file turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14523 * docs(managed-agent): propose bounded retention for session state by @wenshao in https://github.com/QwenLM/qwen-code/pull/14659 * feat(managed-agent): raise attachment input budget to 8 MiB by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14628 * fix(managed-agent): recover the journal after a lapsed writer lease by @wenshao in https://github.com/QwenLM/qwen-code/pull/14570 * perf(managed-agent): index tool receipts by execution call by @wenshao in https://github.com/QwenLM/qwen-code/pull/14660 * fix(managed-agent): keep refused PreToolUse replacements out of Hosted after Hooks by @qqqys in https://github.com/QwenLM/qwen-code/pull/14650 * test(managed-agent): gate Spring crashes and the scanner lease for automation (FG11c slice 2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14649 * feat(serve): read Turn recovery evidence from the Broker (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14669 * fix(ci): repair Java gates and report failures on PRs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14522 * fix(hosted): continue recovered background wake turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14679 * test(web-shell): widen Playwright wait budgets for shared CI hosts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14643 * perf(web-shell): incrementally project managed session messages by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14562 * feat(managed-agent): ship systemd units for the single-host topology by @wenshao in https://github.com/QwenLM/qwen-code/pull/14633 * refactor(managed-agent): share CSI runtime marker reads by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14571 * fix(managed-agent): load saved tool details on expansion by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14604 * feat(managed-agent): park a Turn whose Runtime evidence stays unknown (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14681 * test(managed-agent): drop the FG13a hook-catalog reply before registration by @wenshao in https://github.com/QwenLM/qwen-code/pull/14668 * fix(web-shell): preserve focus when trajectory execution views disappear by @qqqys in https://github.com/QwenLM/qwen-code/pull/14641 * feat(artifacts): record files the agent creates or edits by @zjgzx1988 in https://github.com/QwenLM/qwen-code/pull/14292 * fix(cli): reconcile managed recovery failure reasons by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14567 * test(managed-agent): assert G3 approval identities and pin drift by @wenshao in https://github.com/QwenLM/qwen-code/pull/14673 * fix(hooks): reap a Hook command unit when its worker dies (#14502) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14675 * test(managed-agent): drop the FG13a HTTP Hook reply after the request by @wenshao in https://github.com/QwenLM/qwen-code/pull/14692 * test(managed-agent): scope the FG11c crash assertions and fix the race fixture by @wenshao in https://github.com/QwenLM/qwen-code/pull/14682 * perf(managed-agent): bound the held-Runtime inventory read cost (#13930) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14691 * fix(config): let a Managed host restore its own session by @wenshao in https://github.com/QwenLM/qwen-code/pull/14688 * test(integration): widen workflow completion reply budgets past loaded-shard stalls (#14191) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14202 * feat(managed-agent): bootstrap the shared deployment credentials by @wenshao in https://github.com/QwenLM/qwen-code/pull/14634 * feat(runtime): complete private CSI cold recovery by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14695 * fix(managed-agent): never fail a pending cancel over recovery (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14694 * test(managed-agent): pin the drain flag on the release wire (#13930) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14712 * test(core): pin the Goal record's type/subtype gate by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14705 * test(web-shell): remove fixed transcript bundle size ceiling by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14703 * fix(managed-agent): bound publication placement waits by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14542 * fix(managed-agent): Align image attachment formats with Qwen Code by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14704 * feat(extensions): add bounded generated HTML and JavaScript views by @qqqys in https://github.com/QwenLM/qwen-code/pull/14338 * docs(vscode): explain why webviews cannot use the same-origin exception by @Jun516 in https://github.com/QwenLM/qwen-code/pull/14684 * refactor(managed-agent): organize server packages by responsibility by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14710 * test(managed-agent): stabilize the FG12b released store fault gate (#14697) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14711 * test(managed-agent): add G3 approval fault-point E2E arms by @wenshao in https://github.com/QwenLM/qwen-code/pull/14687 * test(core): synchronize scheduler disposal fault injection by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14727 * fix(ci): permit Java failure summaries on pull requests by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14717 * fix(managed-agent): reject an incomplete Workspace tool path in --check by @wenshao in https://github.com/QwenLM/qwen-code/pull/14635 * feat(workflow): authorize daemon ancestor workflows by @qqqys in https://github.com/QwenLM/qwen-code/pull/14646 * fix(cli): hold pre-runtime /acp WebSocket upgrades instead of falling through to a 406 (#13995) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13997 * test(managed-agent): replay a denied Hook decision after a lost reply by @wenshao in https://github.com/QwenLM/qwen-code/pull/14701 * fix: align DeepSeek reasoning controls across official and MaaS routes by @qqqys in https://github.com/QwenLM/qwen-code/pull/14689 * fix(web-shell): surface the fix witness in the review artifact viewer by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14725 * feat(web-shell): show per-model TTFT and output speed in Token Usage by @qqqys in https://github.com/QwenLM/qwen-code/pull/14728 * fix(managed-agent): align fault gates with unsettled-append recovery by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14716 * test(cli): pin the FG13d pre-dispatch cancel in a unit test by @wenshao in https://github.com/QwenLM/qwen-code/pull/14735 * test(managed-agent): witness the durable hold sweep across both families (#13930) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14719 * test(managed-agent): widen the hosted recovery and hook-cancel gate windows (#14729) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14741 * feat(runtime): add original CSI application retirement by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14698 * feat(telemetry): Record reasoning effort on LLM spans by @zonemeen in https://github.com/QwenLM/qwen-code/pull/14718 * test(managed-agent): gate a disabled automation span (FG11d) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14731 * test(managed-agent): finish the FG13f decision-delivery arms by @wenshao in https://github.com/QwenLM/qwen-code/pull/14736 * test(managed-agent): leave a v2 execution unknown across a Harness kill (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14750 * docs(managed-agent): name the pre-dispatch commit-spy assertion by @wenshao in https://github.com/QwenLM/qwen-code/pull/14756 ## New Contributors * @Jun516 made their first contribution in https://github.com/QwenLM/qwen-code/pull/14684 **Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.25.3...v0.25.3-nightly.20261019.5dcf7c7cb1

Qwen Code v0.25.3-nightly.20261019.5dcf7c7cb1 预发布