Qwen CUA Driver prebuilt binaries
(vendored under `packages/cua-driver`).
- **macOS**: codesigned + notarized universal binary + `QwenCuaDriver.app`
- **Linux**: unsigned (x86_64 + arm64, glibc 2.31 floor)
- **Windows**: unsigned UIAccess worker + native SDK payload
(x86_64 + arm64); deployments must sign and trust the worker
on the target machine before UIAccess activation
- **Node.js**: the same workflow publishes `@qwen-code/cua-sdk`
after a clean install against these release assets and publishes
the same-version browser SDK and `@qwen-code/node-repl-mcp` package
after its MCP protocol smoke tests
Enable relative coordinates: `CUA_DRIVER_RS_COORDINATE_SPACE=1`
(default `0` = off; optional `CUA_DRIVER_RS_COORDINATE_SCALE=1000`).
Enable textual MCP payload filtering for affected model API routes:
`MCP_MODEL_PAYLOAD_FILTER=1` (default off).
<!-- Release notes generated using configuration in .github/release.yml at 65051590d90c3b043b94e65a56e3187f9e4d9f1b -->
## What's Changed
* fix(serve): preserve session creation failure diagnostics by @callmeYe in https://github.com/QwenLM/qwen-code/pull/12331
* feat(sdk-java): Add managed runtime attestation client by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12522
* feat(web-shell): select a time range on the trajectory overview to narrow the table by @qqqys in https://github.com/QwenLM/qwen-code/pull/12543
* feat(serve,web-shell): set the Qwen Live endpoint and model from settings by @qqqys in https://github.com/QwenLM/qwen-code/pull/12529
* feat(channels): separate private and group access policies by @qqqys in https://github.com/QwenLM/qwen-code/pull/12547
* fix(core): bound oversized images returned by MCP tools by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10835
* feat(serve): run Qwen Live through the Web Shell, native macOS Host opt-in by @qqqys in https://github.com/QwenLM/qwen-code/pull/12534
* feat(web-shell): search within the current conversation by @samuelhsin in https://github.com/QwenLM/qwen-code/pull/12234
* perf(serve): use catalog for workspace extension activation projection by @callmeYe in https://github.com/QwenLM/qwen-code/pull/12541
* fix(core): decide MCP media handling from the bytes, not the label by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12567
* fix(core): read a backslash inside single quotes as literal when splitting by @TianYuan1024 in https://github.com/QwenLM/qwen-code/pull/11765
* perf(web-shell): derive the session workflow projection once and share it across surfaces (#10865) by @now-ing in https://github.com/QwenLM/qwen-code/pull/11237
* fix(skills): reload changed content after refresh by @jkxiao in https://github.com/QwenLM/qwen-code/pull/12182
* feat(web-shell): add host controls for model management by @Lilian0122 in https://github.com/QwenLM/qwen-code/pull/12345
* fix(cli): keep CoreToolScheduler stable across callback identity changes by @kabishou11 in https://github.com/QwenLM/qwen-code/pull/12069
* fix(web-shell): make mobile access opt-in and simplify split composer by @ytahdn in https://github.com/QwenLM/qwen-code/pull/12537
* test(cli): yield the event loop between base-tree tests by @wenshao in https://github.com/QwenLM/qwen-code/pull/12573
* feat(browser-use): make the bundled runtime self-contained by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12548
* fix(cli): keep 64-bit file ids exact in the two identity comparators by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12568
* fix(cli): keep plan-identity guards exact for 64-bit file ids by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12577
* fix(java): Deliver broker cancellation after a dispatch lease lapses by @wenshao in https://github.com/QwenLM/qwen-code/pull/12583
* feat(web-shell): zoom and pan the trajectory overview by @qqqys in https://github.com/QwenLM/qwen-code/pull/12557
* fix(core): label each reattached image so older ones are not read as current by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12549
* feat(review): audit the applied --fix for unpinned new assumptions by @wenshao in https://github.com/QwenLM/qwen-code/pull/10169
* feat(channels): route messages to prefix-specific sessions by @qqqys in https://github.com/QwenLM/qwen-code/pull/12595
* fix(java): Fence lapsed tool executions by the repository clock by @wenshao in https://github.com/QwenLM/qwen-code/pull/12608
* feat(web-shell): show the trajectory over real time, idle included by @qqqys in https://github.com/QwenLM/qwen-code/pull/12607
* fix(review): correct what the fix audit tells its reader by @wenshao in https://github.com/QwenLM/qwen-code/pull/12610
* fix(serve): report serve.channels restore failures in channel status by @qqqys in https://github.com/QwenLM/qwen-code/pull/12542
* test(review): drive the fix-audit build through the yargs command by @wenshao in https://github.com/QwenLM/qwen-code/pull/12614
* feat(sdk-java): Adopt a Managed Runtime only after attestation by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12552
* feat(web-shell): inspect session tool calls by prompt by @ytahdn in https://github.com/QwenLM/qwen-code/pull/12466
* feat(web-shell): support selective host artifact integration by @dreamWB in https://github.com/QwenLM/qwen-code/pull/12588
* fix(web-shell): stop rendering empty args and input JSON in tool cards by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12601
* feat(live): stream shared screens into browser voice calls by @qqqys in https://github.com/QwenLM/qwen-code/pull/12623
* docs(extensions): cover workflow reload and add Chinese design by @BlackishGreen33 in https://github.com/QwenLM/qwen-code/pull/12625
* fix(core): cover every commit spelling and the promoted path in session-commit registration by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12556
* feat(desktop): add QWEN_DESKTOP_DISABLE_UPDATES opt-out for the startup update check by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12587
* perf(cli): stop one-shot runs from booting the CLI twice by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12602
* perf(cli): skip interactive-only probes on headless startup by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12603
* docs: fix /clear description, .qwen note, and outdated CLI name by @yc2bgr8 in https://github.com/QwenLM/qwen-code/pull/12555
* docs(conversations-recovery): document non-graceful ACP writer recovery by @dvd233 in https://github.com/QwenLM/qwen-code/pull/12268
* docs: fix comments and JSDoc that contradict the actual code by @sxh313 in https://github.com/QwenLM/qwen-code/pull/11950
* fix(cli): honor the usage-statistics opt-out under --bare by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12604
* fix(ci): trust the job workspace as a git safe.directory before checkout by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12648
* test(review): add hard-link witness test to save-artifact overwrite guard (#12578) by @holny in https://github.com/QwenLM/qwen-code/pull/12581
* test(java): make the local-process provisioner tests deterministic by @wenshao in https://github.com/QwenLM/qwen-code/pull/12639
* feat(review): record per-file content verdicts that survive a rebase by @wenshao in https://github.com/QwenLM/qwen-code/pull/9661
* feat(web-shell): manage the repository's worktrees from the git dialog by @wenshao in https://github.com/QwenLM/qwen-code/pull/12154
* docs(tools): add Firecrawl to the web search MCP services by @JuampiHernandez in https://github.com/QwenLM/qwen-code/pull/12646
* feat(sdk-java): Add the Hosted Harness private client by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12654
* test(java): pin runtime-broker guards left open in earlier reviews by @wenshao in https://github.com/QwenLM/qwen-code/pull/12632
* feat(java): Reconcile UNKNOWN tool executions from Runtime evidence by @wenshao in https://github.com/QwenLM/qwen-code/pull/12655
* test(cli): pin the managed-runtime worker's boot, bind and shutdown guards by @wenshao in https://github.com/QwenLM/qwen-code/pull/12633
* fix(review): persist the local findings ledger when a round cannot anchor by @wenshao in https://github.com/QwenLM/qwen-code/pull/12660
* fix(core): Preserve Claude thinking across tool turns by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/12621
* feat(cli): Declare the v2 execute/status/cancel Managed Runtime contract by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12630
* fix(cli): keep one-shot system-reminder prefixes out of shell mode by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12605
* feat(sdk-java): Reconcile and adopt restored Runtime bindings by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12627
* fix(standalone): pin @lydell/node-pty-linux-arm64 and fail release on missing prebuilds by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12649
* feat(cli): list managed Agent View sessions in qwen sessions ps by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10942
* fix(web-shell): fall back to a plain draft for New task in a Live chat without a draft target by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12626
* chore(desktop): rename packages/desktop-shell to packages/desktop by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12653
* test(java): wait for a renewal at the advanced time in lease renewal tests by @wenshao in https://github.com/QwenLM/qwen-code/pull/12656
* fix(cli): resolve npm's global config when npm refuses to print it by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12675
* feat(scripts): check in the startup benchmark harness by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12674
* fix(web-shell): allow deleting the current session from sidebar and picker by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12636
* fix(core): keep the deferred-tool bridge halves on the same tool by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12539
* feat(sdk-java): Add the v2 tool operations to the runtime transport by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12637
* feat: add native advisor tool by @ZijianZhang989 in https://github.com/QwenLM/qwen-code/pull/9636
* feat(sdk-java): Add the W0a Managed Workspace binding contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/12681
* perf(cli): keep running in place when env files only hold model credentials by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12680
* feat(cli): Mount the v2 tool operations on the Managed Runtime worker by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12671
* perf(cli): halve fresh-startup time to typeable and cut RSS by 60% by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12622
* fix(cli): make the Agent Team teammate tab transcript scrollable in VP mode by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/9531
* fix(cli): restore ripgrep exec bit on managed npm update activation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12673
* fix(cli): notify when the Linux clipboard tool is found but its query fails by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12666
* fix(core): rank PreToolUse permissionDecision most-restrictive in hook aggregation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12689
* perf(serve): coalesce in-flight extension status loads by @callmeYe in https://github.com/QwenLM/qwen-code/pull/12638
* feat(cli): Define the managed-context/1 envelope contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/12700
* feat(serve): add guarded Hosted Runtime foundations by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12691
* feat(managed-agent): Spring control plane and dual-path WebShell by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12692
* feat(serve): support model and reasoning selection at session creation by @callmeYe in https://github.com/QwenLM/qwen-code/pull/12308
* feat(core): Durable Managed Session journal and failover by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12693
* fix(cli): close the deferred /context accounting follow-ups by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12540
* fix(core): deduplicate system prompt guidance in a second pass by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12546
* feat(cli): agent-prepared Batch API workflow (/batch-api) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12492
* feat: complete Advisor consultation behavior and usage limits by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12688
* test(cli): Close the fixture gaps deferred from managed-context/1 by @wenshao in https://github.com/QwenLM/qwen-code/pull/12712
* fix(mcp): preserve registration URL from header discovery by @dvd233 in https://github.com/QwenLM/qwen-code/pull/12205
* feat(managed-agent): admit workspace-bound sessions without execution by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12709
* feat(cli): Run Managed Runtime tools in the Session's Workspace directory by @wenshao in https://github.com/QwenLM/qwen-code/pull/12732
* feat(acp-bridge): route sessions across legacy and managed engines by @wenshao in https://github.com/QwenLM/qwen-code/pull/12698
* feat(serve): Enable private Hosted Harness no-tool text turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12713
* fix(core): consult system code page before chardet for non-UTF-8 output by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12731
* fix(core): treat EHOSTUNREACH/ENETUNREACH as connection-level in web_fetch https-upgrade fallback by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12705
* feat(managed-agent): Define the managed-tool-result/1 contract (O1a) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12729
* fix(cli): pass the post-update relaunch command line to cmd verbatim by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12694
* fix(core): tolerate the win32 directory-sync refusal in managed session resources by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12718
* fix(core): prioritize registered prefixes in tool suggestions by @yc2bgr8 in https://github.com/QwenLM/qwen-code/pull/12743
* test(managed-agent): add Hosted no-tool process gates by @wenshao in https://github.com/QwenLM/qwen-code/pull/12733
* feat(acp-bridge): back paired engine selection with session owners and typed rejections by @wenshao in https://github.com/QwenLM/qwen-code/pull/12746
* fix(cli): Close the W0c-1 worker follow-ups before boot v2 is enabled by @wenshao in https://github.com/QwenLM/qwen-code/pull/12747
* fix(serve): Restore transcript reads for standalone sessions by @qqqys in https://github.com/QwenLM/qwen-code/pull/12615
* fix(serve): close review follow-ups for paired engine owners by @wenshao in https://github.com/QwenLM/qwen-code/pull/12750
* fix(serve): Settle hosted turns after transient read failures by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12742
* feat(runtime-broker): install managed Workspace contexts (W0c-2) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12730
* feat(web-shell): prepare updates and restart from sidebar by @wenshao in https://github.com/QwenLM/qwen-code/pull/12734
* fix(serve): keep ACP child error messages and standalone conflicts intact by @wenshao in https://github.com/QwenLM/qwen-code/pull/12753
* test(core): Close the compile-cache test and doc gaps deferred from #12747 by @wenshao in https://github.com/QwenLM/qwen-code/pull/12759
* test(runtime-broker): Add Stage F multi-process fault gates for the tool path by @wenshao in https://github.com/QwenLM/qwen-code/pull/12752
* fix(extensions): reject http archive URLs with an actionable error instead of attempting a git clone by @liwenjie200543 in https://github.com/QwenLM/qwen-code/pull/12697
* fix(cli): report batch task records that list cannot read by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12741
* fix(web-shell): clear scrollbar-gutter in collapsed sidebar rail (#12453) by @holny in https://github.com/QwenLM/qwen-code/pull/12652
* feat(memory): extract structured scan and bounded retrieval by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12726
* fix(core,cli): stop stale-worktree sweep from destroying git-ignored content by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12763
* fix(serve): stop validating load-only restore fields on resume by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12768
* fix(core): keep stale-worktree sweep from deleting untracked files by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12739
* fix(ci): gate the E2E pool leg on a disk floor (#12764) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12769
* fix(cli): surface real /update errors and self-heal stale pending swap by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12755
* fix(desktop): identify missing node-pty pin by @barry166 in https://github.com/QwenLM/qwen-code/pull/12684
* fix(vscode-ide-companion): hold the edit send until the rewind lands in the transcript by @yar3333 in https://github.com/QwenLM/qwen-code/pull/12711
* fix(core): Log a failing schema's own error and close the compile-cache gaps by @wenshao in https://github.com/QwenLM/qwen-code/pull/12777
* feat(acp-bridge): give each paired channel its own workspace runtime identity by @wenshao in https://github.com/QwenLM/qwen-code/pull/12776
* feat(managed-agent): wire private Workspace execution (W0c-3) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12754
* feat(web-shell): expose BTW in the composer add menu by @wenshao in https://github.com/QwenLM/qwen-code/pull/12775
* test(integration): Name the request in hosted session store failures by @wenshao in https://github.com/QwenLM/qwen-code/pull/12786
* fix(runtime-broker): read attestation integers exactly by @wenshao in https://github.com/QwenLM/qwen-code/pull/12774
* fix(core): deduplicate todo guidance and compress comment rule in a third prompt pass by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12784
* fix(core): preserve MCP status for optional -32601 responses by @dvd233 in https://github.com/QwenLM/qwen-code/pull/12500
* fix(core): recognize sed quiet aliases as read-only by @dvd233 in https://github.com/QwenLM/qwen-code/pull/12221
* fix(acp-bridge): drop oversized notifications instead of tearing down the channel by @kabishou11 in https://github.com/QwenLM/qwen-code/pull/11925
* fix(web-shell): complete zh-CN translations for the settings panel by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12783
* fix(hooks): key enabled state by name, not identity by @PratikWayase in https://github.com/QwenLM/qwen-code/pull/11965
* feat(mobile): support scoped native document selection (Phase 2) by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12126
* feat(core): add local managed tool-result segment store by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12767
* feat(acp-bridge): recover quarantined paired channels and operate per engine by @wenshao in https://github.com/QwenLM/qwen-code/pull/12795
* test(managed-agent): gate tool-driven failover E2E modes on Hosted no-tool slice by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12801
* fix(core): classify multi-address connect failures by any attempt, not the first by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12794
* fix(sdk-java): reject unreadable decimal scales by @yc2bgr8 in https://github.com/QwenLM/qwen-code/pull/12798
* test(runtime-broker): Add Stage F fault gates for W0c context installation by @wenshao in https://github.com/QwenLM/qwen-code/pull/12804
* fix(cli): preserve source identity in session exports by @banned2054 in https://github.com/QwenLM/qwen-code/pull/12118
* test(serve): tolerate workspace_runtime_stop envelope skew in capabilities baseline (#12490) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12494
* test(cli): Split the W0c-3 release test so Windows skips only the rename by @wenshao in https://github.com/QwenLM/qwen-code/pull/12815
* feat(acp-bridge): deliver workspace changes to every paired engine by @wenshao in https://github.com/QwenLM/qwen-code/pull/12807
* fix(ci): retry the helper-tests step once against pool contention (#12772) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12780
* fix(cli): report completion for saved workflow slash commands by @destire-mio in https://github.com/QwenLM/qwen-code/pull/12415
* docs(design): specify paired engine host wiring for B2d by @wenshao in https://github.com/QwenLM/qwen-code/pull/12771
* feat(managed-agent): Add the public API contract and contract tests by @wenshao in https://github.com/QwenLM/qwen-code/pull/12808
* fix(mcp): Support larger Apps, scoped tool calls and isolated origins by @samuelhsin in https://github.com/QwenLM/qwen-code/pull/12258
* fix(managed-agent): Align Flyway Runtime tables with the Broker schema by @wenshao in https://github.com/QwenLM/qwen-code/pull/12816
* test(managed-agent): Make the Hosted no-tool gate assertions falsifiable by @wenshao in https://github.com/QwenLM/qwen-code/pull/12819
* test(cli): Run the W0c-3 directory-loss test under Git Bash on Windows by @wenshao in https://github.com/QwenLM/qwen-code/pull/12818
* fix(cli): let an aged .deferred marker escape the update-still-applying block by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12810
* feat(cli): add /commit slash command with AI-drafted commit messages by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10586
* feat(web-shell): support optional worktrees for branch sessions by @water-in-stone in https://github.com/QwenLM/qwen-code/pull/11816
* fix(acp-bridge): close review follow-ups for paired quarantine recovery by @wenshao in https://github.com/QwenLM/qwen-code/pull/12811
* test(sdk-java): close the connection on Hosted Harness no-content responses by @wenshao in https://github.com/QwenLM/qwen-code/pull/12824
* fix(cli): require proof of death before deleting a staged swap by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12787
* feat(web-shell): Select and bind managed Workspaces by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12797
* feat(core): Capture foreground Managed Shell results with local receipts by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12821
* fix(sdk-java): preserve configured JDBC lease duration by @yc2bgr8 in https://github.com/QwenLM/qwen-code/pull/12788
* chore(sdk-java): align fastjson2 version to 2.0.65 by @wenshao in https://github.com/QwenLM/qwen-code/pull/12836
* perf(core): trim restated tool guidance and budget the resident tool surface by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12532
* feat(managed-agent): Implement the Session query contract (Stage D2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12822
* test(acp-bridge): pin the background drain ownership middle term and the backgroundTurn busy guards by @Oscar-Williams in https://github.com/QwenLM/qwen-code/pull/12250
* feat(memory): extract metadata migration and writer compatibility by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12757
* fix(cli): restore sessions in selected workspace runtime by @XIQIXIQIXIQI in https://github.com/QwenLM/qwen-code/pull/9050
* feat(managed-agent): Define the managed-extension-record/1 contract (H0b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12837
* feat(serve): wire paired execution engines into ordinary hosts behind an opt-in by @wenshao in https://github.com/QwenLM/qwen-code/pull/12828
* feat(managed-agent): Add the planned Stage H task contract (H0a) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12830
* docs(tools): sync shell.md with the shipped run_shell_command contract by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12841
* fix(web-shell): complete skill toggle feedback and controls by @BlackishGreen33 in https://github.com/QwenLM/qwen-code/pull/12641
* feat(managed-agent): Implement event replay (Stage D3) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12840
* feat(serve): add gated Hosted Workspace file tool turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12831
* fix(web-shell): defer React root unmount in chip destroy out of the CodeMirror update cycle by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12834
* feat(managed-agent): Design the ordinary-host Managed engine and close its preconditions (M1) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12861
* test(managed-agent): Close deferred H0b record contract follow-ups by @wenshao in https://github.com/QwenLM/qwen-code/pull/12863
* test(managed-agent): Close the deferred Hosted no-tool gate follow-ups by @wenshao in https://github.com/QwenLM/qwen-code/pull/12864
* feat(desktop): add a linux-aarch64 leg to the Desktop release matrix by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12833
* fix(node-repl): widen the bounded-cancellation test margin under runner load by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12884
* test(managed-agent): Add FG6a Hosted Broker reply-loss gates by @wenshao in https://github.com/QwenLM/qwen-code/pull/12873
* test(integration): give the ACP model round trip its own request budget by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12885
* fix(acp): disable LSP for MCP discovery config by @dvd233 in https://github.com/QwenLM/qwen-code/pull/12256
* feat(managed-agent): Add the strict configuration snapshot and Managed compatibility evaluation (M3) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12883
* test(managed-agent): add FG6b Session Store failure gates by @wenshao in https://github.com/QwenLM/qwen-code/pull/12888
* feat(managed-agent): Add W0e terminal recovery fences by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12839
* feat(managed-agent): Make Session close, archive and delete durable operations (Stage D4) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12881
* fix(core): preserve memory read-limit signal on replay by @yc2bgr8 in https://github.com/QwenLM/qwen-code/pull/12893
* fix(web-shell): inset docked right panel below the macOS titlebar drag region by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12876
* fix(core): restore the vendored ripgrep exec bit at resolution time by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12892
* fix(runtime-broker): reject BigDecimal scales beyond ±2048 by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12870
* feat(computer-use): let a remote session use your desktop through a node_repl relay by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11799
* docs: fix dead links in GitHub Action, extensions, and privacy pages by @pratikgx in https://github.com/QwenLM/qwen-code/pull/12717
* docs: correct CSP invalid-source comments by @sherxlg-gif in https://github.com/QwenLM/qwen-code/pull/12163
* fix(managed-agent): Move the Session operation migration to V17 by @wenshao in https://github.com/QwenLM/qwen-code/pull/12900
* feat(agents): add durable workspace collaboration state by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12854
* feat(memory): add structured on-demand recall by @ZijianZhang989 in https://github.com/QwenLM/qwen-code/pull/10183
* fix(managed-agent): Refuse Legacy renames of Managed-owned transcripts (M1 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12906
* fix(managed-agent): Treat settings locations that depend on the working directory as unknown (M3 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12903
* feat(channels): rotate bounded route sessions by @qqqys in https://github.com/QwenLM/qwen-code/pull/12616
* test(managed-agent): add FG6c process crash gates by @wenshao in https://github.com/QwenLM/qwen-code/pull/12896
* fix(cli): honor usage-statistics opt-out and proxy in `qwen mcp reconnect` by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12857
* feat(managed-agent): Commit Stage H records and serve the task list (H0c) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12855
* fix(runtime-broker): enforce the codec reader's total-digit budget by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12910
* fix(cli): unwedge qwen batch after provider anomalies; bound maxCostUsd by the worst case by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12895
* fix(core): reap stale worktrees holding only symlinks or nested build output by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12785
* docs(developers): document CI and release repository variables by @Theater-ahyeon in https://github.com/QwenLM/qwen-code/pull/11129
* fix(cli): honor --bare and --safe-mode in the cross-session messaging gate by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/9845
* fix(vscode-ide-companion): make the pre-auth Invalid Host header 403 actionable for port-forwarded windows by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12897
* test(cli): give the hosted tool-turn waitFor an explicit timeout (#12911) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12915
* test(managed-agent): add FG6d hosted cancellation gates by @wenshao in https://github.com/QwenLM/qwen-code/pull/12924
* fix(web-shell): hide empty MCP approval subtitles by @BlackishGreen33 in https://github.com/QwenLM/qwen-code/pull/12644
* fix(core): skip the skills listing when the Skill tool is not registered by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12838
* feat(serve): add gated Hosted foreground Shell turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12848
* test(managed-agent): add FG6e hosted SSE gap gates by @wenshao in https://github.com/QwenLM/qwen-code/pull/12942
* fix(daemon): persist session approval mode across cold restore by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12918
* fix(core): persist workflow replay suffix invalidation by @qqqys in https://github.com/QwenLM/qwen-code/pull/12948
* feat(managed-agent): Serve the public Turn list and detail (Stage D5) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12932
* feat(web-shell): clarify trajectory overview metrics by @qqqys in https://github.com/QwenLM/qwen-code/pull/12944
* fix(serve): Persist Hosted file path refusals by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12950
* fix(managed-agent): Share the home-expansion and spawn-environment rules of the compatibility evaluation by @wenshao in https://github.com/QwenLM/qwen-code/pull/12934
* feat(managed-agent): Adopt durable local Runtime workers by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12865
* test(hosted): gate Shell output capture failures (FG6f) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12954
* feat(core): lazy-load deferred tools in Code Mode by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12898
* perf(memory): reduce automatic extraction token overhead by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12951
* fix(memory): preserve migration progress when index rebuild fails by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12913
* fix(managed-agent): Close the post-merge review of event replay by @wenshao in https://github.com/QwenLM/qwen-code/pull/12968
* docs(managed-agent): Defer local engine delivery behind Hosted by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12920
* feat(core): Add Landlock execution fallback by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12278
* fix(memory): tighten structured recall contracts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12916
* fix(cli): scrub userinfo credentials from aux-model selector egress by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12862
* fix(managed-agent): Declare the tenant filter's 403 on the task read routes by @wenshao in https://github.com/QwenLM/qwen-code/pull/12966
* fix(core): preserve Code Mode cache when enabling workflow by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12933
* fix(core): let Full Access approve shell and monitor directories outside the workspace by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12927
* fix(core): withhold the SkillManager from subagents whose tool policy has no Skill tool by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12545
* feat(runtime-broker): reconcile executions on session takeover by @wenshao in https://github.com/QwenLM/qwen-code/pull/12964
* feat(managed-agent): Record Managed sessions as Managed Session logs (M4) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12935
* fix(managed-agent): align the delayed-Runtime ordering proof with the 15-second criterion by @wenshao in https://github.com/QwenLM/qwen-code/pull/12967
* fix(core): isolate declarative subagent hooks by invocation by @qqqys in https://github.com/QwenLM/qwen-code/pull/12949
* fix(workflow): validate structured output schemas before dispatch by @qqqys in https://github.com/QwenLM/qwen-code/pull/12978
* fix(memory): preserve task lifecycle signals by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12917
* test(core): register the Skill tool in the resume listing fixture by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12996
* fix(cli): pin fast model to the selected provider endpoint by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12773
* refactor: anchor rewind mapping to stable prompt identity by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/9466
* test(integration): disable managed auto-memory in advisor and telemetry CLI tests (#12979) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12981
* fix(e2e): Relax LLM-turn timeouts in monitor and cron interactive tests by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13002
* test(runtime-broker): Accept the takeover scan's settlement in the durable-local fault gate by @wenshao in https://github.com/QwenLM/qwen-code/pull/13000
* feat(web-shell): inspect trajectory records in place by @qqqys in https://github.com/QwenLM/qwen-code/pull/12971
* feat(managed-agent): Recover Workspace holders after trusted local reboot (W0e-3) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12869
* fix(runtime-broker): read ready, seed and request integers exactly by @wenshao in https://github.com/QwenLM/qwen-code/pull/12972
* test(managed-agent): Accept a repeated cancel once an uncertain submit resolves by @wenshao in https://github.com/QwenLM/qwen-code/pull/13011
* fix(core): run safe Code Mode calls concurrently by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12931
* fix(runtime-broker): Close the deferred W0c-2 findings from #12761 by @wenshao in https://github.com/QwenLM/qwen-code/pull/12975
* fix(core): align Code Mode text with lazy tool discovery by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12990
* fix(permissions): honor approved cross-directory tool calls by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/12987
* fix(cli): stop swallowing Enter while completion suggestions load (#13015) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13021
* fix(cli): isolate daemon extension settings loads from shared process state by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13022
* test(managed-agent): record Hosted latency baseline by @wenshao in https://github.com/QwenLM/qwen-code/pull/12945
* feat(agents): add local workspace-agent collaboration by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11206
* feat(serve): implement generic Broker provider controls by @wenshao in https://github.com/QwenLM/qwen-code/pull/12868
* feat(managed-agent): enable G0 public Workspace file turns by @wenshao in https://github.com/QwenLM/qwen-code/pull/12955
* fix(serve): upload session attachments in 512 KiB chunks by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12923
* test(managed-agent): Pin M4 close anchors and the published definition (M4 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12995
* fix(cli): Bound how long a relaunched child outlives its supervisor by @wenshao in https://github.com/QwenLM/qwen-code/pull/13036
* test(managed-agent): gate provider retries and release ordering by @wenshao in https://github.com/QwenLM/qwen-code/pull/13061
* test(managed-agent): stop racing the recovery scanner in turn-claim tests by @wenshao in https://github.com/QwenLM/qwen-code/pull/13032
* fix(core): honor NO_PROXY for usage-statistics RUM uploads by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13023
* fix(runtime-broker): answer a refused provider start as unknown instead of prepared by @wenshao in https://github.com/QwenLM/qwen-code/pull/13064
* fix(runtime-broker): keep the UNKNOWN answer when the original Runtime cannot answer by @wenshao in https://github.com/QwenLM/qwen-code/pull/13069
* feat(sdk-java): Add audited Hosted Workspace operator recovery by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12977
* fix(workflow): reject unsupported scripts and oversized batches early by @qqqys in https://github.com/QwenLM/qwen-code/pull/13012
* fix(hooks): deliver pre-tool and ACP failure context to the model by @qqqys in https://github.com/QwenLM/qwen-code/pull/13006
* fix(core): keep delivered notification turns out of ACP rewind ordinals by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13029
* fix(core): honor usage-statistics opt-out for extension lifecycle events by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12789
* feat(memory): bundle Mem0 with the main CLI by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12891
* feat(agents): add A2A access and sharing for workspace agents by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12851
* feat(managed-agent): ask for Hosted tool approvals (D6a) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13071
* fix(web-shell): prevent stats header overlap and raw JSON output by @qqqys in https://github.com/QwenLM/qwen-code/pull/13091
* fix(managed-agent): Settle task event and cancel semantics by @wenshao in https://github.com/QwenLM/qwen-code/pull/12998
* fix(managed-agent): guard queued Hosted approval expiry by @wenshao in https://github.com/QwenLM/qwen-code/pull/13098
* feat(managed-agent): Add durable remote Shell result delivery by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12894
* feat(managed-agent): Implement private Hosted MCP runtime (H1) by @wenshao in https://github.com/QwenLM/qwen-code/pull/12946
* perf(sdk-java): Serialize runtime broker JSON directly to bytes by @wenshao in https://github.com/QwenLM/qwen-code/pull/13108
* test(cli): give the settlement retry waitFors an explicit timeout (#13034) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13058
* test(managed-agent): state which coordinator refusal paths are real by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13099
* docs(managed-agent): name the real worker entry in the E2E README by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13093
* feat(managed-agent): Serve durable permission Actions (D6b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13101
* test(managed-agent): close the G0 admission follow-ups by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13095
* fix(web-shell): preserve large context usage snapshots by @qqqys in https://github.com/QwenLM/qwen-code/pull/13097
* fix(managed-agent): Complete tenant scope 403 contract by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13117
* feat(managed-agent): add verified W1a workspace cold restore by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13088
* feat(web-shell): add a collapsible trajectory waterfall by @qqqys in https://github.com/QwenLM/qwen-code/pull/13081
* test(managed-agent): Pin provider control refusal guards by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13118
* fix(managed-agent): Recover Hosted MCP release retries by @wenshao in https://github.com/QwenLM/qwen-code/pull/13109
* fix(managed-agent): Recover publication expiry with bounded verification by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13114
* test(core): compress the Core test suite without removing tests by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13007
* fix(cli): Publish settings without a missing-file window by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13119
* fix(web-shell): keep inline chip annotations on the chip's real range by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12992
* fix(cli): persist scheduled cron prompts by @XIQIXIQIXIQI in https://github.com/QwenLM/qwen-code/pull/8838
* test(managed-agent): Cover G0 startup and cached refusals by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13116
* test(managed-agent): finish actor-scope failure diagnostics by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13127
* feat(managed-agent): project durable tool results to WebShell by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13037
* test(core): treat GitHub-hosted lanes as shared in the recall scan latency gate by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13094
* feat(managed-agent): Host Managed sessions in a private ACP child (M2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13131
* feat(managed-agent): Add hosted file history and undo by @wenshao in https://github.com/QwenLM/qwen-code/pull/13110
* fix(runtime-broker): renew the recovery claim through lost cleanup (#13017) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13115
* test(integration): deflake the monitor tool call E2E against provider latency (#13001) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13005
* test(integration): subscribe to the session event stream before SIGKILLing the ACP child (#12925) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12930
* test(integration): disable managed auto-memory by default in E2E harnesses (#13009) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13013
* test(managed-agent): Close H0b record fixture gaps by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13120
* fix(core,cli): budget the bundled skill listing; drop OpenTUI's category heading without a provider total by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13159
* feat(web-shell): show and answer Hosted tool approvals in the Managed panel by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13107
* fix(core): deferred-tool selection rules in the reminder line and a reviewed-schema gate for tool_call by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13020
* feat(managed-agent): Hosted Turn takeover and G1 failover E2E by @wenshao in https://github.com/QwenLM/qwen-code/pull/13083
* feat(core): support Freeform input in Code Mode by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13150
* fix(core): align exec output with Codex by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13153
* feat(managed-agent): implement durable Hosted Hooks (H2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13129
* feat(core): allow concurrent Bash calls in Code Mode by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13151
* fix(managed-hooks): bound Hook admission and cold restore cost by @wenshao in https://github.com/QwenLM/qwen-code/pull/13136
* chore: drop the unanchored workspace/ ignore rule that hides web-shell sources by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13155
* feat(managed-agent): Protect Session-owned tool output retirement by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13084
* fix(serve): Report Hosted Hook denials and conflicts accurately by @wenshao in https://github.com/QwenLM/qwen-code/pull/13137
* fix(managed-agent): Validate undo receipts and disclose backup limits by @wenshao in https://github.com/QwenLM/qwen-code/pull/13144
* fix(ci): stabilize hosted browser smoke gates by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13172
* ci(sdk-java): guard Flyway version uniqueness and watch red main runs by @wenshao in https://github.com/QwenLM/qwen-code/pull/12965
* feat(managed-agent): Add offline W1b recovery bundles by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13138
* fix(web-shell): stop the memory panel replacing a global QWEN.md it could not read by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13154
* feat(managed-agent): reliably close workspace-bound sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13135
* fix(managed-agent): renumber session-close migration to V32 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13223
* fix(web): pin fast model to the selected provider endpoint by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13227
* feat(core): resolve model limits and modalities from a models.dev catalog by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11959
* fix(web-shell): stop offering a Managed approval the viewer cannot answer by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13165
* feat(agents): add isolated remote Qwen runtime hosts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12582
* feat(managed-agent): store immutable AgentDefinition revisions (Stage D8a) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13142
* test(managed-agent): Disable MockMvc result printing in ManagedEventReplayTest by @wenshao in https://github.com/QwenLM/qwen-code/pull/13229
* fix(web-shell): preserve authentication fragment on offline retry by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/13176
* fix(core): allow leading comments before workflow meta declaration (#12217) by @holny in https://github.com/QwenLM/qwen-code/pull/12651
* fix(cli): use Linux-specific unavailable message for clipboard paste (#12504) by @holny in https://github.com/QwenLM/qwen-code/pull/12507
* feat(managed-agent): archive and delete closed workspace sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13194
* fix(core): stop misdiagnosing malformed tool-call args as max_tokens truncation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12982
* test(core): pin CodeModeOnly bridge behavior at unit level by @waybarrios in https://github.com/QwenLM/qwen-code/pull/12497
* fix(serve): release only load-owned Hook Runtimes by @wenshao in https://github.com/QwenLM/qwen-code/pull/13195
* fix(core): recover a failed reminder-less notification turn as interrupted_prompt by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13126
* feat(qqbot): Accept inbound images and videos by @Eric-GoodBoy-Tech in https://github.com/QwenLM/qwen-code/pull/12850
* fix(acp): preserve configured OpenAI auth choice on model switches by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/13152
* fix(core): swap extension artifacts by copy when Windows locks the directory by @niheaven in https://github.com/QwenLM/qwen-code/pull/11889
* feat(managed-agent): Restore safe retired tool output collection by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13225
* fix(memory): preserve Markdown emphasis style during extraction by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13240
* feat(managed-agent): let a Workspace-bound Session's creator submit, cancel and rename by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13112
* test(managed-agent): Add tool output collection deployment gates by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13090
* feat(channels): add IMAP and SMTP email channel by @destire-mio in https://github.com/QwenLM/qwen-code/pull/12939
* feat(sdk-java): add SpotBugs high-confidence gate, CodeQL Java scan, Maven dependabot by @wenshao in https://github.com/QwenLM/qwen-code/pull/13216
* fix(managed-agent): Preserve writer and publication epoch deadlines by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13192
* feat(managed-agent): default durable local-process and trusted reboot recovery on by @wenshao in https://github.com/QwenLM/qwen-code/pull/13211
* fix(web-shell): skip corrupt managed SSE frames and merge gap resyncs by @wenshao in https://github.com/QwenLM/qwen-code/pull/13206
* feat(mobile): add scoped microphone consent (Phase 2) by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12127
* perf(extensions): load list metadata before selected details by @callmeYe in https://github.com/QwenLM/qwen-code/pull/12640
* test(feishu): isolate media dispatch coverage from external APIs by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/13170
* feat(managed-agent): Run Managed session tools in a Runtime worker (M5a) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13167
* fix(managed-agent): adopt the Runtime Session on a passive takeover by @wenshao in https://github.com/QwenLM/qwen-code/pull/13173
* fix(memory): keep MEMORY.md index link targets resolvable by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13156
* fix(cli): Harden settings failures and sandbox command streams by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13140
* fix(channels): clean up owned workers after config loss by @XIQIXIQIXIQI in https://github.com/QwenLM/qwen-code/pull/11071
* test(web-shell): pin the single-skip resync boundary and the stall threshold by @wenshao in https://github.com/QwenLM/qwen-code/pull/13277
* fix(ci): raise serve-ab handshake budget, report dead CodeQL nightlies, route trusted PR lanes to ECS by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13270
* fix(workflow): distinguish transport retry waits from stalls by @qqqys in https://github.com/QwenLM/qwen-code/pull/13274
* fix(core): cap the main-turn output clamp floor by the remaining window by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13286
* test(managed-agent): repair real-model mode of the managed-agent-server E2E runner by @wenshao in https://github.com/QwenLM/qwen-code/pull/13263
* fix(channels): pin channel-email on channel-base 0.24.7 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13305
* fix(ci): sparse-check out the owner scripts as a cone directory by @wenshao in https://github.com/QwenLM/qwen-code/pull/13306
* fix(ci): assign PR owners through the REST assignees endpoint by @wenshao in https://github.com/QwenLM/qwen-code/pull/13310
* fix(serve): keep Hosted Sessions available across Shell publisher drain and lost acknowledgements by @wenshao in https://github.com/QwenLM/qwen-code/pull/13304
* fix(managed-agent): surface the named load refusal from mixed-version takeovers by @wenshao in https://github.com/QwenLM/qwen-code/pull/13349
* fix(managed-agent): retract the published prefix when a midstream retry replays by @wenshao in https://github.com/QwenLM/qwen-code/pull/13351
* fix(managed-agent): settle a deadline-exceeded hosted Turn as a classified failure by @wenshao in https://github.com/QwenLM/qwen-code/pull/13359
* fix(web-shell): restore the Managed approval retry budget on reload by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13294
* fix(cli): make the Hosted takeover load idempotent after a lost reply by @wenshao in https://github.com/QwenLM/qwen-code/pull/13350
* feat(managed-agent): persist Workspace session tool profiles by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13301
* fix(agents): distinguish accepted Host results from terminal runs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13241
* fix(serve): queue a Workspace-bound hosted turn on a definite busy refusal by @wenshao in https://github.com/QwenLM/qwen-code/pull/13366
* test(core): wait for reap in supervisor-stopped hook case (#13356) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13357
* feat(prompt): answer from conversation history before investigating by @Andrea-Bruno in https://github.com/QwenLM/qwen-code/pull/12580
* feat(memory): Opt-in selector skip for a unique new recall hit by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13158
* test(core): bound Hook history fixture for CI by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13382
* fix(cli): keep the /context estimate within the context window by @Shizoqua in https://github.com/QwenLM/qwen-code/pull/13246
* fix(managed-agent): stop gap-locked replay probes deadlocking same-tenant admission bursts by @wenshao in https://github.com/QwenLM/qwen-code/pull/13365
* fix(serve): let Web Shell trust a workspace without a terminal by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13146
* chore(managed-agent): swap JDBC pool from HikariCP to Druid by @wenshao in https://github.com/QwenLM/qwen-code/pull/13363
* fix(mobile): allow bracketed IPv6 loopback cleartext by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12963
* docs(cli): correct Hosted Runtime Broker option help by @Shxiao101 in https://github.com/QwenLM/qwen-code/pull/13141
* test(core): pin executionStatus for cancelled Shell result carrying error by @Shxiao101 in https://github.com/QwenLM/qwen-code/pull/13212
* feat(review): capture-tui — rendering claims get pixels, not prose by @wenshao in https://github.com/QwenLM/qwen-code/pull/9273
* fix(runtime-broker): close cross-process release race and harden scheduling by @wenshao in https://github.com/QwenLM/qwen-code/pull/13214
* test(integration): recognize sealed writer renewals in crash gate by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13385
* fix(web-shell): defer composer tag root unmount at all three sites by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13262
* test(web-shell): close the R2 review's managed-session test gaps on #12692 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13346
* fix(managed-agent): stop database amplification on session hot paths by @wenshao in https://github.com/QwenLM/qwen-code/pull/13217
* feat(managed-agent): Add dev:managed-agent one-shot dev launcher by @wenshao in https://github.com/QwenLM/qwen-code/pull/13218
* fix(managed-agent): stop virtual-thread carrier pinning in the Hosted Harness stream and the Runtime Broker guards by @wenshao in https://github.com/QwenLM/qwen-code/pull/13388
* test(core): remove redundant tool registry override in resume matrix by @Shxiao101 in https://github.com/QwenLM/qwen-code/pull/13213
* fix(core): preserve original Code Mode Goal evidence by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13324
* fix(managed-agent): Close the H0c review follow-ups R3-6, R3-9, R3-10 and R3-11 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13347
* test: fix hosted crash fencing and approval waits by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13380
* test(cli): give the unknown Hook fence waitFor an explicit timeout (#13316) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13323
* test(cli): give the settled file tool outcome waitFor an explicit timeout (#13408) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13411
* test(managed-agent): Close the H0c review Suggestions R2-1, R2-2, R3-4, R3-5, R3-7, R3-8 and R3-12 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13345
* test(integration): make the caller-supplied session ID serve-routes test retry-safe (#13417) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13418
* fix(core): close managed-record validation gaps left from PR #12302 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13311
* fix(managed-agent): harden and diagnose Hosted cold-load refusal gates by @wenshao in https://github.com/QwenLM/qwen-code/pull/13361
* test(integration): stop relaying hop-by-hop headers through the Hosted store proxy by @wenshao in https://github.com/QwenLM/qwen-code/pull/13419
* feat(managed-agent): broker authentication and broker-provisioned writer credentials by @wenshao in https://github.com/QwenLM/qwen-code/pull/13210
* fix(managed-agent): Back off protected output collection candidates by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13296
* fix(core): allow plaintext HTTP opt-in in session-store tests by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13434
* fix(cli): deny outside Host tools before permission handling by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13406
* test(email): give the denied-sender admission waitFor an explicit timeout (#13433) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13438
* feat(web-shell): add adaptive navigation rail and unified Live settings by @ytahdn in https://github.com/QwenLM/qwen-code/pull/12943
* fix(agents): replace selected remote Hosts without losing bindings by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13430
* test(core): close #12693 post-merge review test and hygiene gaps by @wenshao in https://github.com/QwenLM/qwen-code/pull/13341
* test(integration): make the /hooks dialog E2E witness the rendered dialog (#13425) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13427
* fix(ci): wait 60s before the E2E build artifact download retry (#13284) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13292
* fix(ci): fail yamllint and shellcheck lanes loudly on an empty git file list by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12650
* fix(managed-agent): serve SSE subscribers from a Condition instead of pinning carriers (#13388 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13402
* test(cli): give the hosted tool-turn requested() waitFor an explicit timeout (#13397) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13399
* fix(managed-agent): single-flight Hosted Harness attachment creation off the CHM bin monitor by @wenshao in https://github.com/QwenLM/qwen-code/pull/13403
* perf(core): load extension directories in bounded batches by @callmeYe in https://github.com/QwenLM/qwen-code/pull/13379
* fix(cli): keep /context detail MCP rows within the MCP tools row by @Shizoqua in https://github.com/QwenLM/qwen-code/pull/13390
* test(integration): make the utf-bom defaultFileEncoding test deterministic by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13196
* feat(mobile): restore scoped connections after Activity recreation by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12247
* feat(mobile): improve profile screen accessibility (Phase 2) by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12129
* fix(memory): preserve complete index entries in prompts by @beibeihk in https://github.com/QwenLM/qwen-code/pull/13315
* fix(cli): make vim-mode clipboard paste work on Windows by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13198
* fix(core): stop memory discovery at Git root by @agammann in https://github.com/QwenLM/qwen-code/pull/13381
* feat(runtime): add experimental Kubernetes CSI runtime and durable worker ACK by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13289
* feat(managed-agent): H3 background Shell and Monitor runtime by @wenshao in https://github.com/QwenLM/qwen-code/pull/13265
* feat(web-shell): support side tasks in secondary workspaces by @wenshao in https://github.com/QwenLM/qwen-code/pull/13468
* feat(core): defer agent and goal declarations by default by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13033
* fix(core): pin GIT_TERMINAL_PROMPT in the extension git client by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13454
* fix(cli): preserve permissions when replacing settings by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13293
* feat(managed-agent): Make local Runtime tool outcomes durable (M5b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13291
* feat(managed-agent): read bounded approval input previews by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13400
* fix(channel-weixin): send iLink headers when minting the login QR code by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13482
* fix(core): recognize llama.cpp context-overflow wording so compaction runs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13421
* feat(managed-agent): let creators change a bound Session's directory (W2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13247
* fix(core): recover function-style XML tool calls by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13437
* fix(core): honor memory.agentMaxTurns in the user-scoped memory dream by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13462
* fix(core): stop MCP server rules from authorizing a colliding server by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12531
* docs(managed-agent): Stage H4/H5/H6 slice designs by @wenshao in https://github.com/QwenLM/qwen-code/pull/13499
* feat(managed-agent): admit glob in new hosted-workspace /2 profiles by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13166
* fix(web-shell): managed session UI correctness from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13342
* feat(managed-agent): Stage H5 channel contracts and persistence by @wenshao in https://github.com/QwenLM/qwen-code/pull/13497
* docs(managed-agent): cross-node EventTransport design by @wenshao in https://github.com/QwenLM/qwen-code/pull/13500
* fix(ci): rerun infrastructure-only main CI failures instead of filing (#13510) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13512
* fix(core): keep nested tool_call arguments open on Responses; name the target in bridged validation errors by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12901
* docs(managed-agent): repair the R2 review's doc findings on #12692 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13343
* fix(cli): never honor memory agent budgets from workspace scope by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13508
* fix(core): keep an XML tool call quoted in a parameter value inert by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13515
* fix(ci): raise the Hosted verify step ceiling above its failsafe fork timeout (#13503) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13504
* fix(ci): sweep stale pool residue before sdk-java checkouts by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13507
* fix(managed-agent): check the replay before publishing a domain record by @wenshao in https://github.com/QwenLM/qwen-code/pull/13376
* feat(web-shell): take back a cancelled prompt that produced nothing by @wenshao in https://github.com/QwenLM/qwen-code/pull/13488
* test(managed-agent): pin untested contracts from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13348
* fix(core): key the models.dev catalog under dotted as well as dashed ids by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13299
* fix(mobile): resolve document providers once per selection by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/13147
* fix(managed-agent): close the three Critical H0c follow-ups from #13300 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13355
* feat(hosted): show captured inputs in native approval cards by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13407
* test(integration): let the headless workflow-skill E2E inherit the suite timeout (#13518) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13520
* fix(core): stop advertising unsupported LSP dynamic registration by @shenyankm in https://github.com/QwenLM/qwen-code/pull/13494
* fix(core): stop JSONL prefix reads when their budget is met by @GoldArowana in https://github.com/QwenLM/qwen-code/pull/13486
* test(managed-agent): commit authority-valid deltas in the restore byte-budget test by @wenshao in https://github.com/QwenLM/qwen-code/pull/13551
* feat(managed-agent): EventTransport message-envelope contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13498
* feat(managed-agent): adopt the next Hosted Harness generation (G3) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13174
* fix(web-shell): escape control characters in the managed approval args preview by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13549
* test(core): pin the limit-less alias shape the models.dev projection ships by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13539
* fix(core): budget side-query output tokens against the resolved context window by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13244
* feat(managed-agent): enumerate the public and WebShell surface with an admission gate by @wenshao in https://github.com/QwenLM/qwen-code/pull/13543
* fix(agent): enforce per-model concurrency cap on foreground sub-agents by @Andrea-Bruno in https://github.com/QwenLM/qwen-code/pull/12461
* docs(serve): fix stale permission-route note and document pending-prompt events by @LUOSENGWA in https://github.com/QwenLM/qwen-code/pull/13281
* test(integration): require a successful monitor tool call by @GoldArowana in https://github.com/QwenLM/qwen-code/pull/13452
* docs(managed-agent): add the delivery ledger for #12380 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13565
* fix(runtime-broker): keep the HTTP exchange cancel off the deadline completion path by @wenshao in https://github.com/QwenLM/qwen-code/pull/13562
* fix(ci): skip millisecond latency budgets on the release ECS pool (#13541) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13547
* docs(troubleshooting): add a "connection resets on some networks" entry (TLS-stack-selective middleboxes) by @LUOSENGWA in https://github.com/QwenLM/qwen-code/pull/13235
* feat(managed-agent): H4a child agent and child acceptance record contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13505
* feat(managed-agent): give Hosted turns the Workspace's project context by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13168
* feat(managed-agent): H6a schedule and automation run record contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13536
* feat(managed-agent): H5a channel route and delivery record contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13548
* fix(docs): apply Prettier formatting to the daemon event schema (#13573) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13580
* docs(managed-agent): bring the delivery ledger up to main d0ddd020c8 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13593
* docs(serve): fix Prettier formatting in the daemon event schema (#13585) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13587
* feat(web-shell): Add fullscreen viewing for history tables by @wenshao in https://github.com/QwenLM/qwen-code/pull/13589
* fix(acp): preserve branch checkpoints after Code Mode turns by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13574
* feat(managed-agent): prove Shell process-group stops with a worker ledger (M5c) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13352
* feat(managed-agent): add W1c offline workspace migration by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13260
* fix(web-shell): allow deleting queued prompts during admission by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13594
* fix(serve): invalidate the Hosted Workspace context on instruction-file changes by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13605
* fix(web-shell): follow an accepted approval answer to its terminal operation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13609
* fix(managed-agent): commit oversized message records as inline chunks by @wenshao in https://github.com/QwenLM/qwen-code/pull/13375
* test(managed-agent): harden pinning witnesses and add renewal-arm pinning witness (#13388 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13401
* test(integration): share the Hosted proxy header filter across all store relays by @wenshao in https://github.com/QwenLM/qwen-code/pull/13431
* fix(ci): classify runner-acquisition failure as infrastructure (#13622) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13626
* docs(managed-agent): link every PR and issue reference in the delivery ledger by @wenshao in https://github.com/QwenLM/qwen-code/pull/13631
* fix(web-shell): sanitise model-supplied text at the approval card's sibling render sites by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13578
* fix(feishu): preserve text and clean up failed inbound file writes by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/13337
* feat(agents): session-centric multi-agent collaboration by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13467
* feat(managed-agent): add reliable ACTIVE Workspace deletion (L3) by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13354
* test: isolate hosted catalog refresh and verify ACP defaults by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13653
* docs(core): point the session-agents contract at its SDK mirror by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13648
* test(desktop): pin both Linux release legs to the ubuntu-22.04 glibc floor by @tonydzi in https://github.com/QwenLM/qwen-code/pull/13616
* test(managed-agent): tolerate scheduling slack in the detach heartbeat window by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13658
* fix(managed-agent): clear successful Workspace migration diagnostics by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13655
* test(integration): let workflow-completion reply waits inherit the helper default (#13552) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13555
* fix(managed-agent): stop a bound Turn under refused authorization by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13163
* fix(acp): include stored attachment paths in model context by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13668
* fix(core): preserve GLM vision metadata for dashed model IDs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13651
* refactor(transcript): centralize internal Code Mode result detection by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13577
* feat(hooks): apply PreToolUse updatedInput with full revalidation by @qqqys in https://github.com/QwenLM/qwen-code/pull/13442
* feat(web-shell): add trajectory search and diagnostic filters by @qqqys in https://github.com/QwenLM/qwen-code/pull/13264
* fix(goals): separate aggregate summaries from external facts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13575
* fix(core): hide the hook child console on Windows by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13670
* feat(web-shell): restore aggregated workspace hosts in sidebar by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13677
* fix(acp-bridge): keep local published file artifacts ephemeral by @zjgzx1988 in https://github.com/QwenLM/qwen-code/pull/12395
* fix(workflow): show results and failures in /workflows run details by @qqqys in https://github.com/QwenLM/qwen-code/pull/13646
* fix(core): gate discovery hints on registered capabilities by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13576
* fix(memory): preserve the prompt prefix when memory indexes change by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13521
* fix(core): surface PreToolUse ask content on MCP tool confirmations (#13687) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13697
* feat(managed-agent): persist workspace actor roles and session owners by @wenshao in https://github.com/QwenLM/qwen-code/pull/13544
* feat(managed-agent): H4b child Session runtime by @wenshao in https://github.com/QwenLM/qwen-code/pull/13550
* fix(web-shell): preserve artifact cards during reconnect by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13714
* fix(web-shell): allow downloading changed workspace artifacts by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13718
* fix(browser-use): fail fast when no Native Messaging host can be registered by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13699
* feat(web-shell): browse earlier trajectory windows by @qqqys in https://github.com/QwenLM/qwen-code/pull/13716
* feat(agents): remove the thread backend and run A2A on sessions by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13583
* fix(web-shell): Select worktree mode without extra confirmation by @wenshao in https://github.com/QwenLM/qwen-code/pull/13607
* feat(trajectory): preserve model request execution identity by @qqqys in https://github.com/QwenLM/qwen-code/pull/13740
* test(memory): cover request-tail catalog and protocol contracts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13736
* feat(managed-agent): H5b/H5c channel runtime for the email reference adapter by @wenshao in https://github.com/QwenLM/qwen-code/pull/13572
* fix(web-shell): show workspace artifacts by their filename by @zjgzx1988 in https://github.com/QwenLM/qwen-code/pull/13672
* fix(cli): preserve complete Hosted no-tool model Parts by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13750
* docs(verify-pr): add local-round publish, follow-up, mutation and rig rules by @wenshao in https://github.com/QwenLM/qwen-code/pull/13756
* feat(managed-agent): add opt-in production replay-floor advancement for Session event retention (#12380) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13621
* feat(managed-agent): H4c workflow child kind and child launch budget by @wenshao in https://github.com/QwenLM/qwen-code/pull/13754
* test(managed-agent): verify Hosted Shell operator recovery on MySQL and MariaDB by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13759
* test(managed-agent): cover AgentDefinition review follow-ups by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13757
* ci(sdk-java): re-check open PRs for Flyway version collisions as main moves by @wenshao in https://github.com/QwenLM/qwen-code/pull/13770
* ci(verify): provision a Java toolchain for sdk-java PRs by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13763
* fix(ci): raise the O4 gate step ceiling above its failsafe fork timeout (#13684) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13688
* docs(managed-agent): record H3 Linux acceptance blockers and replay inputs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13764
* feat(managed-agent): enforce workspace actor roles across the bound-Session surface by @wenshao in https://github.com/QwenLM/qwen-code/pull/13545
* fix(verify-pr): drop the stale "ships no JDK" claim from the Java lane guidance (#13791) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13792
* refactor(managed-agent): classify child Session run kinds by name by @wenshao in https://github.com/QwenLM/qwen-code/pull/13779
* feat(managed-agent): H6b/H6c automation runtime for persistent definitions by @wenshao in https://github.com/QwenLM/qwen-code/pull/13598
* fix(release): reclaim docker disk and gate the data root before the sandbox image build (#13479) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13481
* feat(core): record prompt execution context by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13712
* feat(managed-agent): H4d-a session message record contract and child continuation rules by @wenshao in https://github.com/QwenLM/qwen-code/pull/13786
* test(managed-agent): widen HostedHarnessMySqlIT lifecycle budgets for CI MySQL stalls (#13780) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13783
* test(cli): bind ephemeral loopback port in container-mode tests (#13775) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13778
* fix(managed-agent): unblock H3 background Shell and Monitor start path by @wenshao in https://github.com/QwenLM/qwen-code/pull/13789
* feat(managed-agent): H4e-a team record contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/13811
* docs(verify-pr): name scenario axes in scope selection and attribute merge-only reds by @wenshao in https://github.com/QwenLM/qwen-code/pull/13813
* feat(managed-agent): child Workspace capability for managed child Sessions (#13753 I1) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13781
* ci(sdk-java): stop the API contract version from regressing or stalling (#13804) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13808
* fix(core): leave unknown ${identifier} placeholders literal in subagent prompts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13694
* fix(mcp): discover tools on the readResource lazy-spawn path by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13806
* docs(managed-agent): H4e-b1 lead-side team runtime design by @wenshao in https://github.com/QwenLM/qwen-code/pull/13817
* feat(trajectory): record and replay request lifecycle (PR6B) by @qqqys in https://github.com/QwenLM/qwen-code/pull/13755
* feat(managed-agent): restart-recoverable foreground child wait (fixes #13708) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13769
* fix(cli): match ink's OpenTUI popup geometry and completion truncation by @chiga0 in https://github.com/QwenLM/qwen-code/pull/12559
* feat(web-shell): connect saved daemons simultaneously, no-flash host switching (#13727) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13739
* fix(ci): bound E2E sandbox image cleanup by @zonemeen in https://github.com/QwenLM/qwen-code/pull/13686
* fix(ci): reject unsupported Bash in workflow size checks by @zonemeen in https://github.com/QwenLM/qwen-code/pull/13470
* docs(managed-agent): Name RocketMQ LiteTopic (5.5.0+) as the preferred P2 EventTransport candidate by @wenshao in https://github.com/QwenLM/qwen-code/pull/13826
* docs(verify-pr): key the turn-axes rule to the diff, not the central claim by @wenshao in https://github.com/QwenLM/qwen-code/pull/13819
* fix(web-shell): collapse background results with turn steps by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13825
* test(cli): avoid port conflicts in managed runtime container tests by @zonemeen in https://github.com/QwenLM/qwen-code/pull/13569
* feat(managed-agent): H4e-b1 lead-side team runtime by @wenshao in https://github.com/QwenLM/qwen-code/pull/13824
* feat(managed-agent): H4f public task cancel for child agent tasks by @wenshao in https://github.com/QwenLM/qwen-code/pull/13823
* fix(managed-agent): answer journal-only calls on every interrupted-turn route by @wenshao in https://github.com/QwenLM/qwen-code/pull/13829
* fix(core): suppress trailing orphan thinking tags in prose by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13600
* fix(core): make lazy-spawn MCP discovery best-effort by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13828
* feat(trajectory): record native tool execution lifecycles by @qqqys in https://github.com/QwenLM/qwen-code/pull/13836
* test(cli): pin the background capture pause across the launcher-exit flush by @wenshao in https://github.com/QwenLM/qwen-code/pull/13834
* fix(browser-use): report Windows as unsupported instead of advising an install by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13675
* fix(managed-agent): observe background-process exits at Session re-acquire by @wenshao in https://github.com/QwenLM/qwen-code/pull/13830
* fix(permissions): escalate repeated destructive-command denials to manual approval by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13636
* feat(managed-agent): worktree admission for managed child agents (#13753 I2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13841
* feat(managed-agent): H4d-b session message runtime by @wenshao in https://github.com/QwenLM/qwen-code/pull/13822
* fix(core): surface failed or unavailable LSP diagnostics as errors by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13128
* feat(mods): run experimental headless Mod commands by @qqqys in https://github.com/QwenLM/qwen-code/pull/13843
* fix(managed-agent): harden the managed panel failure lifecycle and worker path containment by @wenshao in https://github.com/QwenLM/qwen-code/pull/13179
* fix(core): close Managed session correctness gaps from #12693 post-merge review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13332
* feat(managed-agent): enable the H4e-b1 team domains after the physical pass by @wenshao in https://github.com/QwenLM/qwen-code/pull/13846
* feat(managed-agent): Collect retired stream-capture tool outputs (#13534) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13554
* fix(session): reserve retained snapshot prompt identities on resume by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13729
* feat(managed-agent): execute pinned AgentDefinition revisions by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13530
* fix(runtime): retain CSI mount identity through directory resolution by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13772
* feat(core): Keep complete file reads on one opened source by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13776
* docs(managed-agent): H4e-b2 team mailbox design by @wenshao in https://github.com/QwenLM/qwen-code/pull/13879
* fix(managed-agent): reconcile approval delivery and concurrent session titles by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13682
* feat(managed-agent): support WebShell session cwd changes by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13760
* fix(hosted): Count future result-hook mounts at child admission by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13773
* fix(managed-agent): settle the deferred review findings of PR #13352 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13630
* test(managed-agent): run the H4e-b1 team flow end to end in the Hosted MySQL lane by @wenshao in https://github.com/QwenLM/qwen-code/pull/13867
* feat(web-shell): add Send now for queued mid-turn messages by @wenshao in https://github.com/QwenLM/qwen-code/pull/13681
* fix(core): tell the parent model why a foreground subagent stopped by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13624
* docs(verify-pr): budget the turn-axes secondary A/B as a harness slot by @wenshao in https://github.com/QwenLM/qwen-code/pull/13850
* fix(managed-agent): connector and broker robustness from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13330
* feat(managed-agent): H4e-b2 the lead's mailbox over Session messages by @wenshao in https://github.com/QwenLM/qwen-code/pull/13892
* fix(managed-agent): settle worktree child runs after their merge (#13753 I2 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13872
* feat(extensions): add test failure report explorer by @qqqys in https://github.com/QwenLM/qwen-code/pull/13854
* feat(mods): add TypeScript authoring and configuration (PR2a) by @qqqys in https://github.com/QwenLM/qwen-code/pull/13890
* test(managed-agent): Add FG7 channel fault gates for the channel domains (#13802) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13839
* fix(core): report monitor startup failures as tool errors by @GoldArowana in https://github.com/QwenLM/qwen-code/pull/13460
* fix(cli): strip UTF-8 BOM when reading MCP config files by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13596
* fix(core): size reactive compaction against the server-reported context ceiling by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13788
* fix(managed-agent): unwedge Hosted stream close and bound task cancel attempts by @wenshao in https://github.com/QwenLM/qwen-code/pull/13877
* docs(managed-agent): H4e-b3 member commands, plan approval and shutdown design by @wenshao in https://github.com/QwenLM/qwen-code/pull/13912
* test(managed-agent): plant the objects link at a name Git never creates (#13842) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13844
* fix(ci): route the sdk-java MariaDB lane to the ECS pool (#13623) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13627
* fix(managed-agent): recover original Hook sessions during Workspace retirement by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13673
* fix(cli): strip UTF-8 BOM when importing Claude MCP configs by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13711
* feat(managed-agent): admit public foreground Shell with mandatory approval by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13674
* fix(managed-agent): e2e runner and image robustness from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13344
* feat(managed-agent): Introduce the EventTransport seam behind the after-commit publisher by @wenshao in https://github.com/QwenLM/qwen-code/pull/13909
* fix(managed-agent): return 404 for unknown tool publications by @ZedingZhang in https://github.com/QwenLM/qwen-code/pull/13602
* test(integration): sync the updatedInput ask approval on the dialog, not the tool row (#13849) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13855
* fix(serve): name Hosted recovery-refusal branches in cold-load 409s by @wenshao in https://github.com/QwenLM/qwen-code/pull/13276
* fix(cli): bound managed function-hook module evaluation and keep hold-fenced owners recoverable by @wenshao in https://github.com/QwenLM/qwen-code/pull/13243
* docs(managed-agent): Resolve the EventTransport §5.1 LiteTopic verification ledger by @wenshao in https://github.com/QwenLM/qwen-code/pull/13927
* docs(managed-agent): Resolve the EventTransport §11 routing and wake-carrier questions by @wenshao in https://github.com/QwenLM/qwen-code/pull/13933
* feat(managed-agent): Stop Hosted team members with request_shutdown (H4e-b3a) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13923
* feat(mods): Add middleware dispatch and recovery (PR2b) by @qqqys in https://github.com/QwenLM/qwen-code/pull/13915
* fix(managed-agent): order publication placement before retention by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13894
* docs(managed-agent): Plan the EventTransport MQ2 producer/consumer wiring in four sub-slices by @wenshao in https://github.com/QwenLM/qwen-code/pull/13939
* feat(extensions): add interactive test failure explorer (PR2) by @qqqys in https://github.com/QwenLM/qwen-code/pull/13916
* feat(managed-agent): enable the H3 Monitor and background Shell gates (#13856) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13889
* fix(managed-agent): settle provably never-started dispatches at session open (#13801) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13917
* fix(cli): read comma-grouped test counts in review test-plan by @wenshao in https://github.com/QwenLM/qwen-code/pull/13881
* fix(managed-agent): config and API-surface hygiene from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13335
* fix(web-shell): localize and dismiss voice feedback by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13938
* feat(managed-agent): Add the Java mirror of the managed-event-envelope contract (MQ2a) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13940
* feat(web-shell): support copying selected reply content by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13833
* fix(cli): drain the wake park before teardown and restore the shell gate guard (#13953) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13959
* feat(web-shell): add action reminders and in-panel notification access by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13832
* feat(mods): Add tool interception and permission checks (PR3a) by @qqqys in https://github.com/QwenLM/qwen-code/pull/13950
* test(web-shell): re-measure the transcript entry ceiling (#13963) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13964
* feat(managed-agent): verify tool publications asynchronously by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13654
* feat(web-shell): add Managed child Agent task panel by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13936
* feat(managed-agent): recover Hosted G3 parked turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13777
* feat(runtime): add private CSI file worker with local-process isolation by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13899
* docs(sdk): clarify empty core-tool allowlists across SDKs by @Zhangchenhao-111 in https://github.com/QwenLM/qwen-code/pull/13949
* fix(lsp): load .lsp.json files saved with a UTF-8 BOM by @Shizoqua in https://github.com/QwenLM/qwen-code/pull/13946
* fix(desktop): preserve bundled runtime integrity in AppImage by @hahahahahayesyeseys in https://github.com/QwenLM/qwen-code/pull/13695
* fix(release): anchor desktop release notes at the previous desktop release by @Jay0130-a in https://github.com/QwenLM/qwen-code/pull/13960
* test(web-shell): re-measure the transcript entry ceiling (#13982) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13985
* fix(cli): report a spawn failure of the CLI child instead of exiting silently by @drakeo338 in https://github.com/QwenLM/qwen-code/pull/13077
* test(runtime-broker): budget the 1 MiB tool round trips past the request deadline by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13990
* fix(ci): double the sdk-java MariaDB lane's per-host lock budget (#13989) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13991
* fix(cli): drop the stale gate-close from the restored-shell-gate test by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13983
* feat(managed-agent): member board tools ride the session_command channel end to end (H4e-b3b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13928
* feat(web-shell): add read-only Excel artifact previews by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13664
* fix(core): clean the folded cause before getErrorMessage caps the retained subagent error text by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14008
* feat(managed-agent): H4 workflow child runtime by @wenshao in https://github.com/QwenLM/qwen-code/pull/13858
* fix(cli): load TOML custom commands saved with a UTF-8 BOM by @Shizoqua in https://github.com/QwenLM/qwen-code/pull/13945
* fix(ci): recover reused runner checkouts and Java lock waits by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14017
* test(managed-agent): clean up recovery fixtures after probe failures by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14018
* fix(core): strip a leading BOM before converting a TOML command by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13975
* fix(cli): give bare ↑/↓ back to input history in Virtualized History by @chiga0 in https://github.com/QwenLM/qwen-code/pull/14016
* feat(managed-agent): member-to-member messages ride the session_command channel (H4e-b3c) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13955
* fix(web-shell): hide the discontinued built-in OAuth model in Settings by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13971
* test(managed-agent): stabilize publication and API contract fixtures by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14012
* feat(managed-agent): give a Monitor auto-stop its remote exit evidence (#13896) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13929
* feat(web-shell): Reuse standard UI for Managed Agents by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13973
* fix(cli): window the OpenTUI transcript to fix the blank-screen resume by @chiga0 in https://github.com/QwenLM/qwen-code/pull/13669
* fix(cli): keep the OpenTUI composer caret steady by @chiga0 in https://github.com/QwenLM/qwen-code/pull/13693
* test(managed-agent): land the deferred findings from the definition-execution review by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13980
* feat(managed-agent): add L4 Shell and MCP session lifecycle by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13931
* fix(managed-agent): share title blankness and pin the lease-renewal clamp by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13979
* fix(managed-agent): count http/function result Hooks at child admission by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13978
* feat(core): add a convergence reminder for read-only exploration by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13601
* fix(cli): stop OpenTUI slash commands reading their own dispatch as busy by @MohammedAlkindi in https://github.com/QwenLM/qwen-code/pull/12960
* test(core): cover unfinished invocation guard before turn reclamation by @jayfeng7 in https://github.com/QwenLM/qwen-code/pull/13257
* fix(cli): recognize markdown fences only on matching lines by @GoldArowana in https://github.com/QwenLM/qwen-code/pull/13331
* feat(cli): add repeatable --disable-mcp-server to exclude servers per invocation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14003
* feat(web-shell): Add workspace file browser and previews by @ytahdn in https://github.com/QwenLM/qwen-code/pull/13878
* fix(sdk): strip terminal escapes from plaintext tool previews by @sxh313 in https://github.com/QwenLM/qwen-code/pull/12751
* fix(cli): split comma-separated --include-tools/--exclude-tools in mcp add by @yanyukang2003-ux in https://github.com/QwenLM/qwen-code/pull/12985
* docs: record local tool visibility comparison and verification steps by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13767
* feat(managed-agent): add durable team plan approval (H4e-b3d) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13974
* refactor(core): one record/array gate for file-history snapshot payloads by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13981
* fix(web-shell): Ignore standalone whitespace assistant chunks by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14031
* feat(managed-agent): Add the LiteTopic journal-event transport (MQ2b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14029
* feat(web-shell): bridge trajectory history and live lifecycle state by @qqqys in https://github.com/QwenLM/qwen-code/pull/13952
* fix(managed-agent): order a sender's commands by commit sequence, and make the member restart IT interrupt a live wait by @wenshao in https://github.com/QwenLM/qwen-code/pull/14014
* fix(desktop): let Web Shell receive OS file drops by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/14053
* fix(managed-agent): numeric parity and family-list hoisting for publication families, with end-to-end admission and wedge witnesses by @wenshao in https://github.com/QwenLM/qwen-code/pull/13815
* fix(cli): reject batch plan targets that alias the same path by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14055
* fix(managed-agent): close shell profiles after native file calls by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14045
* fix(managed-agent): recover lost lifecycle detach replies by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14039
* fix(serve): resume committed file results after runtime retirement by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14059
* test(managed-agent): deflake the transient verification retry rescan (#14037) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14042
* fix(release): raise the npm package unpacked-size budget to 160 MiB by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14066
* feat(web-shell): pulse the header environment entry while tasks run by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14048
* feat(web-shell,desktop): update Qwen Code logo to the current brand mark by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/14052
* test(managed-agent): widen process-death observation windows in the operator recovery probe (#14072) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14079
* fix(managed-agent): passively reattach child relay sessions after control-plane restart by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14020
* fix(desktop): keep desktop-latest release notes pointing at the current release by @shpaker in https://github.com/QwenLM/qwen-code/pull/13900
* Add SerpApi to web search MCP services list by @pulkitchowdry in https://github.com/QwenLM/qwen-code/pull/13104
* test(managed-agent): handle the procfs exit race in the operator recovery probe by @wenshao in https://github.com/QwenLM/qwen-code/pull/14090
* test(serve): widen hosted approval inline-limit windows for CI contention (#14084) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14091
* feat(managed-agent): Add the public-event transport and the wake/materialization consumers (MQ2c) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14080
* test(managed-agent): fix the shell lifecycle recovery journal-head assertions (#14103) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14108
* feat(managed-agent): consolidate persistence into a 32-table baseline by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14069
* fix(ci): raise the Hosted MySQL fork and step budgets past the L4 class (#14125) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14128
* feat(web-shell): open context details in the side panel from the ring by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/14086
* docs(readme): simplify evaluation overview and refine trend chart by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/14093
* test(serve): widen hosted recovery waitFor windows for CI contention (#14101) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14107
* test(managed-agent): Pin the history response size boundary by @loglapa in https://github.com/QwenLM/qwen-code/pull/14111
* feat(runtime-broker): add bounded retention for terminal JDBC history by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13642
* docs(cli): stop naming Terminal.app in the arrowKeysScrollTranscript description by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14092
* fix(cli): bound short OpenTUI scroll dialogs (MYWO-3, MYWO-7) by @chiga0 in https://github.com/QwenLM/qwen-code/pull/14034
* fix(managed-agent): Repair the Hosted storage-guard fixtures red since #14069 by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14131
* feat(web-shell): review MCP App messages before submission (PR3a) by @qqqys in https://github.com/QwenLM/qwen-code/pull/13958
* feat(managed-agent): H4f public task cancel for workflow tasks by @wenshao in https://github.com/QwenLM/qwen-code/pull/14076
* test(managed-agent): Run the EventTransport fault rows against a real RocketMQ broker (MQ2d) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14109
* feat(mods): support selected Claude tool input contracts (PR3b) by @qqqys in https://github.com/QwenLM/qwen-code/pull/14027
* fix(acp): preserve cancellation intent across session recovery by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13436
* test(integration): Cover a completing write_file tool call over ACP by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14144
* test(managed-agent): register storage for Hosted admission gates by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14154
* test(managed-agent): stabilize retraction snapshot verification by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14151
* fix(managed-agent): settle journal-only parked Harness turns on takeover (#13847) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14078
* test(managed-agent): wait for the published Snapshot before naming its Items by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14156
* fix(managed-agent): Wire OSS capture budgets into Hosted sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14124
* feat(sdk-java): add private CSI Session and native SQL authority by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13996
* test(managed-agent): retry the team-lead hosted boot past the free-port race by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14153
* test(managed-agent): cover coordinator-only Hosted restart by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14155
* fix(build): re-apply the ink patch when install skipped lifecycle scripts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14170
* fix(cli): preserve Unicode queries in at completion by @dakjdakd in https://github.com/QwenLM/qwen-code/pull/13866
* fix(sdk-python): resolve Windows command shims on the effective PATH by @dakjdakd in https://github.com/QwenLM/qwen-code/pull/13862
* fix(cli): gate non-interactive /update installs on enableAutoUpdate by @fengyue-xve in https://github.com/QwenLM/qwen-code/pull/13665
* refactor(core): give the Code Mode tool-result stamp a single owner by @fengyue-xve in https://github.com/QwenLM/qwen-code/pull/13666
* fix(core): preserve fuzzy edit line boundaries by @GoldArowana in https://github.com/QwenLM/qwen-code/pull/13484
* fix(sdk): release reconnect transports created after disposal by @dakjdakd in https://github.com/QwenLM/qwen-code/pull/13864
* fix(sdk-java): get the MariaDB lane past #13996's schema, recovery IT and baseline witness by @wenshao in https://github.com/QwenLM/qwen-code/pull/14177
* fix(core): resolve ${CLAUDE_PLUGIN_ROOT} in plugin markdown without hooks by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14194
* fix(ci): repair Java backlog and schema/Hosted test failures by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14178
* fix(ci): re-pin Java gate CI tests to the daily-trigger shape (#14223) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14227
* test(ci): pin the main-failure watcher's whole job condition by @wenshao in https://github.com/QwenLM/qwen-code/pull/14233
* fix(sdk-java): restore session-root materialization in acquireWriter (#14224) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14228
* fix(core): keep Artifact guidance out of record_artifact description by @zjgzx1988 in https://github.com/QwenLM/qwen-code/pull/14206
* docs(runtime-broker): design Workspace-resident Managed Tool Runtime by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14214
* chore: adopt qwen-code-checks.xml and fix all checkstyle violations by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14186
* test(managed-agent): Run the EventTransport fault matrix against two nodes (MQ3) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14242
* fix(managed-agent): settle the monitor loop when its resume finds a settled record by @wenshao in https://github.com/QwenLM/qwen-code/pull/14074
* test(cli): skip the chmod-based tests where permission bits do not bind by @wenshao in https://github.com/QwenLM/qwen-code/pull/14162
* feat(managed-agent): publish an experimental reference distribution by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14176
* fix(ci): repair daily failure reporting and contract guards by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14238
* docs: remind to update workflow meta-tests when changing CI workflows by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14239
* fix(ci): repin the sdk-java test job's MAVEN_ARGS count for the checkstyle gate (#14247) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14258
* fix(sdk-java): Order the MQ3 gate's imports for the new checkstyle rules by @wenshao in https://github.com/QwenLM/qwen-code/pull/14253
* feat(web-shell): show a reduced header on the new-task page by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14159
* feat(web-shell): upload files by dropping into the file tree by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14145
* fix(core): select the DashScope provider for Model Studio workspace domains by @qqqys in https://github.com/QwenLM/qwen-code/pull/14245
* fix(managed-agent): close the critical R2 review findings on #12692 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13325
* fix(core): surface the provider request id on bodyless API errors by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14133
* feat(web-shell): open workflow agents in the detail panel by @qqqys in https://github.com/QwenLM/qwen-code/pull/14175
* fix(managed-agent): hand one run's session messages over in send order by @wenshao in https://github.com/QwenLM/qwen-code/pull/14235
* refactor(runtime-broker): name the local-process kind and Workspace isolation policy by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14254
* docs(design): drop stray conflict markers from the actor-roles design by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14270
* test(managed-agent): gate G3 Step 3 recovery, model-round takeover and control-plane fencing by @wenshao in https://github.com/QwenLM/qwen-code/pull/14181
* fix(Managed agent): settle never-started background dispatches in the live turn by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14021
* diagnostics(ci): capture RocketMQ latency stages separately by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14241
* fix(core): keep the git snapshot out of the system prompt by @qqqys in https://github.com/QwenLM/qwen-code/pull/14255
* fix(ci): gate Desktop and Java SDK releases on checks of the release commit by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14259
* fix(serve): align Hosted team delivery answers by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14267
* fix(ci): drain Hosted test turns and repair nightly browser checks by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14275
* fix(cli): close post-merge takeover findings from the #13083 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13188
* refactor(managed-agent): Reuse Apache Commons utilities by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14280
* fix(vscode): move conversation payloads out of globalState by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14285
* fix(managed-agent): admit team_plan_approval into the journal-only interrupted-turn settle (#13847) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14160
* test(managed-agent): add the FG8e/FG8f monitor_run and background-shell fault gates by @wenshao in https://github.com/QwenLM/qwen-code/pull/14120
* feat(extensions): add bounded generated failure explorer views (PR4) by @qqqys in https://github.com/QwenLM/qwen-code/pull/14269
* fix(sdk-java): Order the FG8 gate's imports for the checkstyle rules by @wenshao in https://github.com/QwenLM/qwen-code/pull/14305
* test(cli): skip the remaining chmod-based tests on the permission probe by @wenshao in https://github.com/QwenLM/qwen-code/pull/14271
* refactor(managed-agent): Reuse text and byte-range utilities by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14307
* fix(managed-agent): Standardize SQL timestamps and query mappings by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14185
* fix(core): retain CSI preparation resources through the HTTP store by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14180
* fix(managed-agent): Align hosted prompts with declared tools by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14306
* fix(managed-agent): stop each child's running Turn on parent close by @wenshao in https://github.com/QwenLM/qwen-code/pull/14218
* fix(managed-agent): restart-proof the held-Runtime drain obligation (#13930) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13986
* refactor(managed-agent): Consolidate server and broker sources by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14277
* feat(web-shell): drop the mobile composer's history arrow buttons by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/14220
* fix(managed-agent): name the plan's size and room in the team-plan bound refusal by @wenshao in https://github.com/QwenLM/qwen-code/pull/14057
* feat(web-shell): show live trajectory executions by @qqqys in https://github.com/QwenLM/qwen-code/pull/14071
* fix(ci): restore a meaningful Windows merge gate by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14298
* feat(managed-agent): Wire static Skills and extension configuration by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14319
* feat(web-shell): add file creation and confirmed folder deletion by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14169
* fix(managed-agent): bound retry loops with terminal states by @wenshao in https://github.com/QwenLM/qwen-code/pull/13219
* fix(cli): correct member-message timeout guidance by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14296
* refactor(core): separate CLI launcher from JS interpreter (MYWO-8) by @chiga0 in https://github.com/QwenLM/qwen-code/pull/14036
* refactor(runtime-broker): key Harness ownership on shared Workspace bindings by Runtime Session by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14339
* feat(acp): confirm legacy cancellations before continuing by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14087
* test(managed-agent): keep the member command IT inside the Hosted fork budget, and release a relay hold that never took by @wenshao in https://github.com/QwenLM/qwen-code/pull/14061
* feat(managed-agent): read-only snapshot children (#13753 I3) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14265
* fix(web-shell): keep dialogs opened over the mobile drawer touch-scrollable by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/14217
* feat(web-shell): open workspace files from the chat header by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14344
* feat(web-shell): integrate Managed sessions into the home workflow by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14316
* feat(web-shell): add file-tree deletion with confirmation by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14158
* fix(managed-agent): Fix publication grants and background close by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14364
* docs(design): state the permission field as it behaves and fix a dead pointer by @L4XB in https://github.com/QwenLM/qwen-code/pull/11774
* docs: add qwen-audio-agent voice frontend to Ecosystem by @x-lixu in https://github.com/QwenLM/qwen-code/pull/8630
* docs(tools): add looot to the web search MCP services by @walidboulanouar in https://github.com/QwenLM/qwen-code/pull/13999
* feat(runtime): add resident Workspace file sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14340
* fix(cli): preserve injected file content during command interpolation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14295
* fix(web-shell): display response token rate when enabled by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14294
* fix(web-shell): polish files and trim preview resources by @ytahdn in https://github.com/QwenLM/qwen-code/pull/14143
* feat(managed-agent): add Shell Full Access and session approval switching by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14323
* test(managed-agent): Add real extension process acceptance by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14357
* fix(ci): route post-merge classifier to ECS and yield CLI workers by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14293
* fix(hooks): gate headless file and skill prompts before expansion by @qqqys in https://github.com/QwenLM/qwen-code/pull/14356
* feat(mods): support commands in interactive terminals (PR4a) by @qqqys in https://github.com/QwenLM/qwen-code/pull/14268
* fix(ci): make finalize-release second-bot approve non-blocking (#14341) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14342
* fix(managed-agent): hold behind an older message whose body cannot be read by @wenshao in https://github.com/QwenLM/qwen-code/pull/14299
* fix(managed-agent): tenant-wide InnoDB locks must not wedge unrelated Sessions by @wenshao in https://github.com/QwenLM/qwen-code/pull/13918
* fix(managed-runtime): landed PR 12691 review follow-ups across providers, activator, core tools and runtime broker by @wenshao in https://github.com/QwenLM/qwen-code/pull/13297
* test(managed-agent): add the FG9a/FG9f session_message and session_command relay fault gates (#14164) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14333
* test: skip the chmod-based core, wecom and scripts tests where permission bits do not bind by @wenshao in https://github.com/QwenLM/qwen-code/pull/14283
* refactor(managed-agent): Decouple tool publication storage from OSS by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14370
* fix(channels/email): re-register on a channel_disconnected answer by @wenshao in https://github.com/QwenLM/qwen-code/pull/13768
* test(managed-agent): give WorkspaceCreationSchemaMySqlIT its own disposable catalog by @wenshao in https://github.com/QwenLM/qwen-code/pull/14375
* fix(sdk-java): Close Hosted Harness review criticals from #12654 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13314
* fix(managed-agent): hand back the Workspace mount when a tool turn goes recovery blocked by @wenshao in https://github.com/QwenLM/qwen-code/pull/13816
* fix(managed-agent): Report merges deleting uncommitted parent content as conflicts by @wenshao in https://github.com/QwenLM/qwen-code/pull/14058
* docs(memory): plan extraction baseline before input changes by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14368
* feat(providers): add QwenCloud as the first /auth entry by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14073
* test(managed-agent): expect legacy creation to refuse a CSI storage alias by @wenshao in https://github.com/QwenLM/qwen-code/pull/14382
* fix(ci): document the shared-group supersede policy and keep main uncancellable by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14286
* fix(serve): fan out never-started process probes by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14303
* feat(ci): route the release lane's hosted stragglers onto ECS runners by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14336
* feat(web-shell): add side task archive controls by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14300
* test(managed-agent): add the FG8a/FG8b/FG8d monitor_run and background-shell fault gates (#14163) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14334
* fix(web-shell): inset the right edge of a label-only composer chip by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13968
* fix(web-shell): neutralise controls in the generic approval content block by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13972
* test(managed-agent): add the FG9d/FG9e session relay cancellation and SSE-gap fault gates (#14164) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14402
* test: gate the remaining chmod-based root skips on the permission-bit probe by @wenshao in https://github.com/QwenLM/qwen-code/pull/14403
* feat(managed-agent): Add SSH Tool Runtime support by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14318
* fix(web-shell): delete attachments from an empty composer by @Zhangchenhao-111 in https://github.com/QwenLM/qwen-code/pull/13947
* fix(managed-agent): close the deferred #13182 terminal-state suggestions by @wenshao in https://github.com/QwenLM/qwen-code/pull/14358
* docs(managed-agent): require one child Workspace setting on every replica by @wenshao in https://github.com/QwenLM/qwen-code/pull/14411
* feat(web-shell): list every Managed task kind in the task panel by @wenshao in https://github.com/QwenLM/qwen-code/pull/14415
* test(managed-agent): add the FG8c process-crash gates for monitor_run and background shells (#14163) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14407
* fix(managed-agent): log the check behind a refused internal request by @wenshao in https://github.com/QwenLM/qwen-code/pull/14391
* feat(managed-agent): H4f-c public task cancel for background Shell and Monitor tasks by @wenshao in https://github.com/QwenLM/qwen-code/pull/14412
* fix(ci): assemble the reference distribution into a fresh directory by @wenshao in https://github.com/QwenLM/qwen-code/pull/14421
* test(managed-agent): ground the FG8a/FG8b/FG8d gate choreography in Linux truth by @wenshao in https://github.com/QwenLM/qwen-code/pull/14398
* docs(managed-agent): stop saying no lifecycle operation sets failure_code by @wenshao in https://github.com/QwenLM/qwen-code/pull/14422
* feat(managed-agent): link a child task to its child Session (#13746 F2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14413
* fix(daemon): preserve active work when deleting scheduled tasks by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14276
* fix(core): report a defunct session pid as dead instead of active by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14301
* feat(managed-agent): Improve workspace selection and tool progress by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14405
* test(managed-agent): keep the harness daemon log in Hosted shell lifecycle evidence by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14401
* test(serve): widen the Hosted Harness idle wait on loaded runners by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14394
* fix(runtime-broker): support credential key rotation by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14317
* fix(ci): keep the setup-java Maven cache on hosted runners by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14396
* test(managed-agent): give FG8d Sessions a 10 s writer lease so drain-release gets a capture slot by @wenshao in https://github.com/QwenLM/qwen-code/pull/14425
* test(managed-agent): add the FG10a workflow child_run digest-integrity fault gate (#14165) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14390
* fix(managed-agent): run a merge recorded on a snapshot as a discard (#13905 items 33-36) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14432
* feat(managed-agent): project channel deliveries as tasks and serve their cancel (#13746 F3) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14414
* test(managed-agent): add the FG9b/FG9c session relay store-failure and crash fault gates (#14164) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14420
* fix(ci): start the reference distribution MySQL without native AIO by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14429
* feat(managed-agent): record Turn input and cancel as durable command operations (D7-1) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14404
* fix(web-shell): Distinguish unavailable shell output by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14436
* fix(ci): stop re-running the H2 unit suite in every Hosted job step by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14423
* feat(managed-agent): support native macOS workspace runtime by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14442
* test(sdk-java): read the heartbeat scheduler queue on its own thread by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14427
* fix(managed-agent): address the H4f task cancel review follow-ups by @wenshao in https://github.com/QwenLM/qwen-code/pull/14437
* refactor(integration-tests): extract the shared helpers duplicated across the hosted gate drivers (#14147) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14439
* docs(managed-agent): keep hooks on snapshot children (#13905 item 37) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14440
* fix(managed-agent): flush early reject responses before draining the unread body by @wenshao in https://github.com/QwenLM/qwen-code/pull/14444
* fix(web-shell): improve favicon contrast on dark browser tabs by @wenshao in https://github.com/QwenLM/qwen-code/pull/14417
* feat(qqbot): accept inbound files and voice messages by @Eric-GoodBoy-Tech in https://github.com/QwenLM/qwen-code/pull/14343
* feat(managed-agent): reconcile acceptance-unknown operations through one rule (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14443
* docs(managed-agent): state the read-profile step-3 acceptance (#13905 item 45) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14450
* fix(managed-agent): answer a full tool publication reservation with its own code by @wenshao in https://github.com/QwenLM/qwen-code/pull/14451
* fix(serve): answer a batch the publication limit refused instead of blocking the Session by @wenshao in https://github.com/QwenLM/qwen-code/pull/14452
* feat(managed-agent): reconcile a parked SSH Workspace registration (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14456
* fix(managed): Recover cancellation after process restarts by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14377
* feat(runtime-broker): Workspace-resident Tool Runtime for bound Sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14435
* docs: clarify safe mode tool schemas for small contexts by @cenab in https://github.com/QwenLM/qwen-code/pull/14445
* fix(ci): run three hosted control-plane jobs on the ECS pool by @wenshao in https://github.com/QwenLM/qwen-code/pull/14469
* fix(managed-agent): skip the deletion probe when a resume owes nothing (#13905 items 50-52) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14462
* test(managed-agent): pin the read-profile Session's serve wiring (#13905 items 41-44) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14459
* test(managed-agent): add the FG10b/FG10f workflow relay lost-reply and delivery fault gates (#14165) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14468
* fix(vscode): avoid navigator reads in the extension host by @zonemeen in https://github.com/QwenLM/qwen-code/pull/14304
* feat(managed-agent): add the opt-in java_durable admission profile (D7-3) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14470
* fix(managed-agent): address the record/contract review follow-ups of the H3 enablement (#13930) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14464
* test: fix the SDK Java suite's red jobs (FG6e frames, schema V8 pin, client flakes) by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14457
* feat(ci): gate Managed Agent changes on a full SDK Java run before merge by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14397
* fix(ci): give the hosted Test lane the same 120-minute ceiling as ECS by @wenshao in https://github.com/QwenLM/qwen-code/pull/14474
* fix(ci): run the trusted web-shell browser smoke on the ECS pool by @wenshao in https://github.com/QwenLM/qwen-code/pull/14471
* fix(ci): skip application tests for Markdown-only and CODEOWNERS-only changes by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14284
* test(managed-agent): add the FG10c/FG10e workflow relay store-failure and cancellation fault gates (#14165) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14473
* feat(serve): attach private CSI Sessions to Hosted text turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14081
* docs(managed-agent): specify the M6 engine registration and workspace-change contract by @wenshao in https://github.com/QwenLM/qwen-code/pull/14479
* ci(sdk-java): run the Hosted failover arms in their own job by @wenshao in https://github.com/QwenLM/qwen-code/pull/14467
* fix(core): fill empty signature on unsigned thinking blocks for strict Anthropic-compatible proxies by @4ekuct25 in https://github.com/QwenLM/qwen-code/pull/13676
* feat(managed-agent): reconcile parked Session title deliveries (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14475
* test(managed-agent): pin that reconcile_run leaves a live wake turn's run alone by @wenshao in https://github.com/QwenLM/qwen-code/pull/14480
* feat(managed-agent): register the Managed engine in paired daemons by @wenshao in https://github.com/QwenLM/qwen-code/pull/14483
* fix(managed-agent): never re-drive an unsettled workflow Turn on the recovery path (#14387) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14461
* docs(managed-agent): record M6 as implemented in #14483 by @wenshao in https://github.com/QwenLM/qwen-code/pull/14491
* test(core): size the hosted cold-scan ceiling from the slowest hosted runners by @wenshao in https://github.com/QwenLM/qwen-code/pull/14497
* test(managed-agent): stub the acquire provisioner overload the Broker calls by @wenshao in https://github.com/QwenLM/qwen-code/pull/14498
* test(managed-agent): pin #14387's Turn-row accessors in the lock canary by @wenshao in https://github.com/QwenLM/qwen-code/pull/14501
* feat(managed-agent): allow approval changes in stored agent sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14484
* fix(managed-agent): keep a crash-blocked workflow run unknown and honestly notified, gated by FG10d (#14165) by @wenshao in https://gi