What's Changed

• fix(agents): replace selected remote Hosts without losing bindings by @yiliang114 in #13430
• test(core): close #12693 post-merge review test and hygiene gaps by @wenshao in #13341
• test(integration): make the /hooks dialog E2E witness the rendered dialog (#13425) by @qwen-code-dev-bot in #13427
• fix(ci): wait 60s before the E2E build artifact download retry (#13284) by @qwen-code-dev-bot in #13292
• fix(ci): fail yamllint and shellcheck lanes loudly on an empty git file list by @qwen-code-dev-bot in #12650
• fix(managed-agent): serve SSE subscribers from a Condition instead of pinning carriers (#13388 follow-up) by @wenshao in #13402
• test(cli): give the hosted tool-turn requested() waitFor an explicit timeout (#13397) by @qwen-code-dev-bot in #13399
• fix(managed-agent): single-flight Hosted Harness attachment creation off the CHM bin monitor by @wenshao in #13403
• perf(core): load extension directories in bounded batches by @callmeYe in #13379
• fix(cli): keep /context detail MCP rows within the MCP tools row by @Shizoqua in #13390
• test(integration): make the utf-bom defaultFileEncoding test deterministic by @Bug-killer-prog in #13196
• feat(mobile): restore scoped connections after Activity recreation by @jabrailkhalil in #12247
• feat(mobile): improve profile screen accessibility (Phase 2) by @jabrailkhalil in #12129
• fix(memory): preserve complete index entries in prompts by @beibeihk in #13315
• fix(cli): make vim-mode clipboard paste work on Windows by @Bug-killer-prog in #13198
• fix(core): stop memory discovery at Git root by @agammann in #13381
• feat(runtime): add experimental Kubernetes CSI runtime and durable worker ACK by @doudouOUC in #13289
• feat(managed-agent): H3 background Shell and Monitor runtime by @wenshao in #13265
• feat(web-shell): support side tasks in secondary workspaces by @wenshao in #13468
• feat(core): defer agent and goal declarations by default by @yiliang114 in #13033
• fix(core): pin GIT_TERMINAL_PROMPT in the extension git client by @yiliang114 in #13454
• fix(cli): preserve permissions when replacing settings by @doudouOUC in #13293
• feat(managed-agent): Make local Runtime tool outcomes durable (M5b) by @wenshao in #13291
• feat(managed-agent): read bounded approval input previews by @yiliang114 in #13400
• fix(channel-weixin): send iLink headers when minting the login QR code by @yiliang114 in #13482
• fix(core): recognize llama.cpp context-overflow wording so compaction runs by @yiliang114 in #13421
• feat(managed-agent): let creators change a bound Session's directory (W2) by @wenshao in #13247
• fix(core): recover function-style XML tool calls by @yiliang114 in #13437
• fix(core): honor memory.agentMaxTurns in the user-scoped memory dream by @yiliang114 in #13462
• fix(core): stop MCP server rules from authorizing a colliding server by @yiliang114 in #12531
• docs(managed-agent): Stage H4/H5/H6 slice designs by @wenshao in #13499
• feat(managed-agent): admit glob in new hosted-workspace /2 profiles by @yiliang114 in #13166
• fix(web-shell): managed session UI correctness from the #12692 R2 review by @wenshao in #13342
• feat(managed-agent): Stage H5 channel contracts and persistence by @wenshao in #13497
• docs(managed-agent): cross-node EventTransport design by @wenshao in #13500
• fix(ci): rerun infrastructure-only main CI failures instead of filing (#13510) by @qwen-code-dev-bot in #13512
• fix(core): keep nested tool_call arguments open on Responses; name the target in bridged validation errors by @yiliang114 in #12901
• docs(managed-agent): repair the R2 review's doc findings on #12692 by @wenshao in #13343
• fix(cli): never honor memory agent budgets from workspace scope by @yiliang114 in #13508
• fix(core): keep an XML tool call quoted in a parameter value inert by @yiliang114 in #13515
• fix(ci): raise the Hosted verify step ceiling above its failsafe fork timeout (#13503) by @qwen-code-dev-bot in #13504
• fix(ci): sweep stale pool residue before sdk-java checkouts by @qwen-code-dev-bot in #13507
• fix(managed-agent): check the replay before publishing a domain record by @wenshao in #13376
• feat(web-shell): take back a cancelled prompt that produced nothing by @wenshao in #13488
• test(managed-agent): pin untested contracts from the #12692 R2 review by @wenshao in #13348
• fix(core): key the models.dev catalog under dotted as well as dashed ids by @yiliang114 in #13299
• fix(mobile): resolve document providers once per selection by @jabrailkhalil in #13147
• fix(managed-agent): close the three Critical H0c follow-ups from #13300 by @wenshao in #13355
• feat(hosted): show captured inputs in native approval cards by @yiliang114 in #13407
• test(integration): let the headless workflow-skill E2E inherit the suite timeout (#13518) by @qwen-code-dev-bot in #13520
• fix(core): stop advertising unsupported LSP dynamic registration by @shenyankm in #13494
• fix(core): stop JSONL prefix reads when their budget is met by @GoldArowana in #13486
• test(managed-agent): commit authority-valid deltas in the restore byte-budget test by @wenshao in #13551
• feat(managed-agent): EventTransport message-envelope contract by @wenshao in #13498
• feat(managed-agent): adopt the next Hosted Harness generation (G3) by @wenshao in #13174
• fix(web-shell): escape control characters in the managed approval args preview by @yiliang114 in #13549
• test(core): pin the limit-less alias shape the models.dev projection ships by @yiliang114 in #13539
• fix(core): budget side-query output tokens against the resolved context window by @yiliang114 in #13244
• feat(managed-agent): enumerate the public and WebShell surface with an admission gate by @wenshao in #13543
• fix(agent): enforce per-model concurrency cap on foreground sub-agents by @Andrea-Bruno in #12461
• docs(serve): fix stale permission-route note and document pending-prompt events by @LUOSENGWA in #13281
• test(integration): require a successful monitor tool call by @GoldArowana in #13452
• docs(managed-agent): add the delivery ledger for #12380 by @wenshao in #13565
• fix(runtime-broker): keep the HTTP exchange cancel off the deadline completion path by @wenshao in #13562
• fix(ci): skip millisecond latency budgets on the release ECS pool (#13541) by @qwen-code-dev-bot in #13547
• docs(troubleshooting): add a "connection resets on some networks" entry (TLS-stack-selective middleboxes) by @LUOSENGWA in #13235
• feat(managed-agent): H4a child agent and child acceptance record contract by @wenshao in #13505
• feat(managed-agent): give Hosted turns the Workspace's project context by @yiliang114 in #13168
• feat(managed-agent): H6a schedule and automation run record contract by @wenshao in #13536
• feat(managed-agent): H5a channel route and delivery record contract by @wenshao in #13548
• fix(docs): apply Prettier formatting to the daemon event schema (#13573) by @qwen-code-dev-bot in #13580
• docs(managed-agent): bring the delivery ledger up to main d0ddd02 by @wenshao in https://github.com/Qwen...

What's Changed

• fix(agents): replace selected remote Hosts without losing bindings by @yiliang114 in #13430
• test(core): close #12693 post-merge review test and hygiene gaps by @wenshao in #13341
• test(integration): make the /hooks dialog E2E witness the rendered dialog (#13425) by @qwen-code-dev-bot in #13427
• fix(ci): wait 60s before the E2E build artifact download retry (#13284) by @qwen-code-dev-bot in #13292
• fix(ci): fail yamllint and shellcheck lanes loudly on an empty git file list by @qwen-code-dev-bot in #12650
• fix(managed-agent): serve SSE subscribers from a Condition instead of pinning carriers (#13388 follow-up) by @wenshao in #13402
• test(cli): give the hosted tool-turn requested() waitFor an explicit timeout (#13397) by @qwen-code-dev-bot in #13399
• fix(managed-agent): single-flight Hosted Harness attachment creation off the CHM bin monitor by @wenshao in #13403
• perf(core): load extension directories in bounded batches by @callmeYe in #13379
• fix(cli): keep /context detail MCP rows within the MCP tools row by @Shizoqua in #13390
• test(integration): make the utf-bom defaultFileEncoding test deterministic by @Bug-killer-prog in #13196
• feat(mobile): restore scoped connections after Activity recreation by @jabrailkhalil in #12247
• feat(mobile): improve profile screen accessibility (Phase 2) by @jabrailkhalil in #12129
• fix(memory): preserve complete index entries in prompts by @beibeihk in #13315
• fix(cli): make vim-mode clipboard paste work on Windows by @Bug-killer-prog in #13198
• fix(core): stop memory discovery at Git root by @agammann in #13381
• feat(runtime): add experimental Kubernetes CSI runtime and durable worker ACK by @doudouOUC in #13289
• feat(managed-agent): H3 background Shell and Monitor runtime by @wenshao in #13265
• feat(web-shell): support side tasks in secondary workspaces by @wenshao in #13468
• feat(core): defer agent and goal declarations by default by @yiliang114 in #13033
• fix(core): pin GIT_TERMINAL_PROMPT in the extension git client by @yiliang114 in #13454
• fix(cli): preserve permissions when replacing settings by @doudouOUC in #13293
• feat(managed-agent): Make local Runtime tool outcomes durable (M5b) by @wenshao in #13291
• feat(managed-agent): read bounded approval input previews by @yiliang114 in #13400
• fix(channel-weixin): send iLink headers when minting the login QR code by @yiliang114 in #13482
• fix(core): recognize llama.cpp context-overflow wording so compaction runs by @yiliang114 in #13421
• feat(managed-agent): let creators change a bound Session's directory (W2) by @wenshao in #13247
• fix(core): recover function-style XML tool calls by @yiliang114 in #13437
• fix(core): honor memory.agentMaxTurns in the user-scoped memory dream by @yiliang114 in #13462
• fix(core): stop MCP server rules from authorizing a colliding server by @yiliang114 in #12531
• docs(managed-agent): Stage H4/H5/H6 slice designs by @wenshao in #13499
• feat(managed-agent): admit glob in new hosted-workspace /2 profiles by @yiliang114 in #13166
• fix(web-shell): managed session UI correctness from the #12692 R2 review by @wenshao in #13342
• feat(managed-agent): Stage H5 channel contracts and persistence by @wenshao in #13497
• docs(managed-agent): cross-node EventTransport design by @wenshao in #13500
• fix(ci): rerun infrastructure-only main CI failures instead of filing (#13510) by @qwen-code-dev-bot in #13512
• fix(core): keep nested tool_call arguments open on Responses; name the target in bridged validation errors by @yiliang114 in #12901
• docs(managed-agent): repair the R2 review's doc findings on #12692 by @wenshao in #13343
• fix(cli): never honor memory agent budgets from workspace scope by @yiliang114 in #13508
• fix(core): keep an XML tool call quoted in a parameter value inert by @yiliang114 in #13515
• fix(ci): raise the Hosted verify step ceiling above its failsafe fork timeout (#13503) by @qwen-code-dev-bot in #13504
• fix(ci): sweep stale pool residue before sdk-java checkouts by @qwen-code-dev-bot in #13507
• fix(managed-agent): check the replay before publishing a domain record by @wenshao in #13376
• feat(web-shell): take back a cancelled prompt that produced nothing by @wenshao in #13488
• test(managed-agent): pin untested contracts from the #12692 R2 review by @wenshao in #13348
• fix(core): key the models.dev catalog under dotted as well as dashed ids by @yiliang114 in #13299
• fix(mobile): resolve document providers once per selection by @jabrailkhalil in #13147
• fix(managed-agent): close the three Critical H0c follow-ups from #13300 by @wenshao in #13355
• feat(hosted): show captured inputs in native approval cards by @yiliang114 in #13407
• test(integration): let the headless workflow-skill E2E inherit the suite timeout (#13518) by @qwen-code-dev-bot in #13520

New Contributors

• @beibeihk made their first contribution in #13315
• @agammann made their first contribution in #13381

Full Changelog: v0.25.0...v0.25.1-preview.0

Bundled CLI Version

This SDK release bundles CLI version: 0.25.0

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.7

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.6

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.5

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.3

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.1

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.3

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.2

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.1

Source: CLI built from source (same branch/ref as SDK)

Highlights

The bundled CLI 0.23.0 includes two fixes requested in #11022:

• Managed memory availability now respects the memory.enableManagedAutoMemory setting (#6941). Hosts that disable managed auto memory no longer see remember/dream requests admitted or managed-memory instructions in the system prompt; local patches can be removed.
• Size-triggered microcompaction now clears old tool results toward a low watermark (#8464), so it no longer rewrites another part of the conversation prefix on every subsequent turn. Provider prompt-cache reuse is preserved across long tool-heavy sessions, reducing cached-input cost.

Bundled CLI Version

This SDK release bundles CLI version: 0.23.0

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.19.10

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.15.3

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.13.1

Source: latest stable CLI from npm

Backfilled release for npm-published version 0.1.5 (original workflow failed before GitHub release creation).

What's Changed

• chore: bump version to 0.8.2 by @Mingholy in #1632
• chore(release): sdk-typescript v0.1.4 by @qwen-code-ci-bot in #1633
• Fix: Use resolved authType to initialize ACP agent by @Mingholy in #1622
• Add parentToolCallId and subagentType for ACP subagent tracking by @Mingholy in #1620
• feat(core): improve error message when skill is invoked as tool by @tanzhenxin in #1623
• fix(acp): stream subagent text + reasoning chunks by @tanzhenxin in #1626
• fix: ensure output-language.md is created before config initialization by @tanzhenxin in #1637
• fix(security): prevent command injection via newline bypass in shell command validation by @tanzhenxin in #1638
• Fix Claude plugin resource collection to respect marketplace config by @LaZzyMan in #1639
• feat(core): improve retry logic for better 429/5xx error handling by @tanzhenxin in #1628
• feat: add extra_body support for OpenAI-compatible providers by @tanzhenxin in #1654
• Support model selection through ACP in vscode ide companion by @yiliang114 in #1582
• feat: add multi-modal input support (image, PDF, audio) across all content generators by @tanzhenxin in #1564
• Add Zed extension for Qwen Code agent server by @Mingholy in #1630
• feat: clarify output formats for non-interactive mode by @LaZzyMan in #1579
• feat: add concurrent runner for batch CLI execution by @tanzhenxin in #1640
• Add experimental LSP support for code intelligence by @yiliang114 in #1401
• Fix: React/React-DOM version inconsistency in package.json and lockfile by @Mingholy in #1659
• feat(webui): implement unified UI architecture with shared component library by @yiliang114 in #1543
• chore: bump version to 0.9.0 by @tanzhenxin in #1661
• Add contextWindowSize Configuration Support by @xuewenjie123 in #1539
• fix(core): avoid passing undici agent to Anthropic SDK by @tanzhenxin in #1663
• fix(vscode-ide-companion): fix race conditions and improve @ file completion search by @yiliang114 in #1676
• fix(core): properly cleanup MCP server subprocesses on exit by @tt-a1i in #1285
• test(cli): stabilize AuthDialog ESC assertion by @liqiongyu in #1535
• fix(cli): expand MCP @server: resource references by @liqiongyu in #1531
• fix(core): auto-enable WebFetch and WebSearch tools in Plan mode by @afarber in #1686
• feat(core): add symlink support for skill manager by @DragonnZhang in #1690
• fix: normalize skill file content in extensions to handle BOM and CRLF by @LaZzyMan in #1667
• fix(ci): honor manual preview version input by @tanzhenxin in #1665
• build: Improve build efficiency and add dev mode by @tanzhenxin in #1681
• fix(core): handle heredoc in command substitution guard by @liqiongyu in #1701
• feat: Preserve UTF-8 BOM when editing files by @tanzhenxin in #1680
• fix(core): Preserve trailing whitespace in newString during edits by @tanzhenxin in #1688
• fix: enable Shift+Tab shortcut in Windows PowerShell by @LaZzyMan in #1607
• fix(core): enforce tool restrictions in subagents by @tanzhenxin in #1691
• [AnthropicContentGenerator] optimize: ADD cache_control for system and last user text message by @Weaxs in #1613
• refactor(i18n): translate Agent as 智能体 by @itchina110 in #1718
• fix(docker): fix build error and enable manual version builds by @tanzhenxin in #1722
• chore(release): Bump version to 0.10.0 by @tanzhenxin in #1720
• fix(settings): rename negative settings to positive naming (disable* -> enable*) by @afarber in #1330
• ci(sdk-release): use stable CLI tags for SDK releases by @Mingholy in #1710
• feat(query): add support for resuming sessions with session ID by @DragonnZhang in #1714
• add hint for installing external source extensions by @LaZzyMan in #1694
• Feat/javasdk alpha 202501 by @gwinthis in #1717
• Fix: clarify is_background parameter is required in docs and examples by @Mingholy in #1716
• feat: Remove Smart Edit tool and ClearcutLogger by @tanzhenxin in #1684
• Add export command for session history with markdown and HTML formats by @Mingholy in #1515
• Add FORK_MODE support to ProcessTransport for Electron IPC integration by @Mingholy in #1719
• feat(sdk): add resume, continue options and extend authType support by @Mingholy in #1726
• Fix ACP model selection to handle all configured authentication types by @Mingholy in #1555
• refactor: remove read_many_files tool, add readManyFiles utility for user @-commands by @tanzhenxin in #1673
• fix(vscode-ide-companion): Fix UI display issues with server-side timestamp and file path extraction by @yiliang114 in #1682
• chore: Reduce Qwen OAuth free quota from 2000 to 1000 requests per day by @pomelo-nwu in #1730
• fix(ui): resolve auth not updating in top-right corner by @DennisYu07 in #1670
• feat: debug mode output refactor — route console calls to logfile-first debugLogger by @tanzhenxin in #1610
• fix: use openai model instead of index=0 in acp integration test by @Mingholy in #1733
• fix(cli): route sandbox diagnostic messages to stderr by @tanzhenxin in #1735
• Add CLI source selection for SDK releases and fix subagent output handler by @Mingholy in #1732
• feat(paste): add large paste placeholder and fix enter-submit on macOS by @tanzhenxin in #1713
• ...

What's Changed

• fix(serve): preserve session creation failure diagnostics by @callmeYe in #12331
• feat(sdk-java): Add managed runtime attestation client by @doudouOUC in #12522
• feat(web-shell): select a time range on the trajectory overview to narrow the table by @qqqys in #12543
• feat(serve,web-shell): set the Qwen Live endpoint and model from settings by @qqqys in #12529
• feat(channels): separate private and group access policies by @qqqys in #12547
• fix(core): bound oversized images returned by MCP tools by @yiliang114 in #10835
• feat(serve): run Qwen Live through the Web Shell, native macOS Host opt-in by @qqqys in #12534
• feat(web-shell): search within the current conversation by @samuelhsin in #12234
• perf(serve): use catalog for workspace extension activation projection by @callmeYe in #12541
• fix(core): decide MCP media handling from the bytes, not the label by @yiliang114 in #12567
• fix(core): read a backslash inside single quotes as literal when splitting by @TianYuan1024 in #11765
• perf(web-shell): derive the session workflow projection once and share it across surfaces (#10865) by @now-ing in #11237
• fix(skills): reload changed content after refresh by @jkxiao in #12182
• feat(web-shell): add host controls for model management by @Lilian0122 in #12345
• fix(cli): keep CoreToolScheduler stable across callback identity changes by @kabishou11 in #12069
• fix(web-shell): make mobile access opt-in and simplify split composer by @ytahdn in #12537
• test(cli): yield the event loop between base-tree tests by @wenshao in #12573
• feat(browser-use): make the bundled runtime self-contained by @tanzhenxin in #12548
• fix(cli): keep 64-bit file ids exact in the two identity comparators by @yiliang114 in #12568
• fix(cli): keep plan-identity guards exact for 64-bit file ids by @yiliang114 in #12577
• fix(java): Deliver broker cancellation after a dispatch lease lapses by @wenshao in #12583
• feat(web-shell): zoom and pan the trajectory overview by @qqqys in #12557
• fix(core): label each reattached image so older ones are not read as current by @yiliang114 in #12549
• feat(review): audit the applied --fix for unpinned new assumptions by @wenshao in #10169
• feat(channels): route messages to prefix-specific sessions by @qqqys in #12595
• fix(java): Fence lapsed tool executions by the repository clock by @wenshao in #12608
• feat(web-shell): show the trajectory over real time, idle included by @qqqys in #12607
• fix(review): correct what the fix audit tells its reader by @wenshao in #12610
• fix(serve): report serve.channels restore failures in channel status by @qqqys in #12542
• test(review): drive the fix-audit build through the yargs command by @wenshao in #12614
• feat(sdk-java): Adopt a Managed Runtime only after attestation by @doudouOUC in #12552
• feat(web-shell): inspect session tool calls by prompt by @ytahdn in #12466
• feat(web-shell): support selective host artifact integration by @dreamWB in #12588
• fix(web-shell): stop rendering empty args and input JSON in tool cards by @yiliang114 in #12601
• feat(live): stream shared screens into browser voice calls by @qqqys in #12623
• docs(extensions): cover workflow reload and add Chinese design by @BlackishGreen33 in #12625
• fix(core): cover every commit spelling and the promoted path in session-commit registration by @yiliang114 in #12556
• feat(desktop): add QWEN_DESKTOP_DISABLE_UPDATES opt-out for the startup update check by @yiliang114 in #12587
• perf(cli): stop one-shot runs from booting the CLI twice by @yiliang114 in #12602
• perf(cli): skip interactive-only probes on headless startup by @yiliang114 in #12603
• docs: fix /clear description, .qwen note, and outdated CLI name by @yc2bgr8 in #12555
• docs(conversations-recovery): document non-graceful ACP writer recovery by @dvd233 in #12268
• docs: fix comments and JSDoc that contradict the actual code by @sxh313 in #11950
• fix(cli): honor the usage-statistics opt-out under --bare by @yiliang114 in #12604
• fix(ci): trust the job workspace as a git safe.directory before checkout by @yiliang114 in #12648
• test(review): add hard-link witness test to save-artifact overwrite guard (#12578) by @holny in #12581
• test(java): make the local-process provisioner tests deterministic by @wenshao in #12639
• feat(review): record per-file content verdicts that survive a rebase by @wenshao in #9661
• feat(web-shell): manage the repository's worktrees from the git dialog by @wenshao in #12154
• docs(tools): add Firecrawl to the web search MCP services by @JuampiHernandez in #12646
• feat(sdk-java): Add the Hosted Harness private client by @doudouOUC in #12654
• test(java): pin runtime-broker guards left open in earlier reviews by @wenshao in #12632
• feat(java): Reconcile UNKNOWN tool executions from Runtime evidence by @wenshao in #12655
• test(cli): pin the managed-runtime worker's boot, bind and shutdown guards by @wenshao in #12633
• fix(review): persist the local findings ledger when a round cannot anchor by @wenshao in #12660
• fix(core): Preserve Claude thinking across tool turns by @pomelo-nwu in #12621
• feat(cli): Declare the v2 execute/status/cancel Managed Runtime contract by @doudouOUC in #12630
• fix(cli): keep one-shot system-reminder prefixes out of shell mode by @yiliang114 in #12605
• feat(sdk-java): Reconcile and adopt restored Runtime bindings by @doudouOUC in #12627
• fix(standalone): pin @lydell/node-pty-linux-arm64 and fail release on missing prebuilds by @yiliang114 in #12649
• feat(cli): list managed Agent View sessions in qwen sessions ps by @yiliang114 in #10942
• fix(web-shell): fall back to a plain draft for New task in a Live chat without a draft target by @yiliang114 in #12626
• chore(desktop): rename packages/desktop-shell to packages/desktop by @yiliang114 in #12653
• test(java): wait for a renewal at the advanced time in lease renewal tests by @wenshao in #12656
• fix(cli): resolve npm's global config when npm refuses to print it by @tanzhenxin in #12675
• feat(scripts): check in the startup benchmark harness by @tanzhenxin in #12674
• fix(web-shell): allow deleting the current session from sidebar and picker by @yiliang114 in #12636
• fix(core): keep the deferred-tool bridge halves on the same tool by @yiliang114 in #12539
• feat(sdk-java): Add the v2 tool operations to the runtime transport by @doudouOUC in #12637
• feat: add native advisor tool by @ZijianZhang989 in #9636
• feat(sdk-java): Add the W0a Managed Workspace binding contract by @wenshao in #12681
• perf(cli): keep running in place when env files only hold model credentials by @tanzhenxin in #12680
• feat(cli): Mount the v2 tool operations on the Managed Runtime worker by @doudouOUC in #12671
• perf(cli): halve fresh-startup time to typeable and cut RSS by 60% by @tanzhenxin in #12622
• fix(cli): make the Agent Team teammate tab transcript scrollable in VP mode by @Yiliang11...

Bundled CLI Version

This SDK release bundles CLI version: 0.24.7

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.6

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.5

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.3

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.1

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.3

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.2

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.1

Source: CLI built from source (same branch/ref as SDK)

Highlights

The bundled CLI 0.23.0 includes two fixes requested in #11022:

• Managed memory availability now respects the memory.enableManagedAutoMemory setting (#6941). Hosts that disable managed auto memory no longer see remember/dream requests admitted or managed-memory instructions in the system prompt; local patches can be removed.
• Size-triggered microcompaction now clears old tool results toward a low watermark (#8464), so it no longer rewrites another part of the conversation prefix on every subsequent turn. Provider prompt-cache reuse is preserved across long tool-heavy sessions, reducing cached-input cost.

Bundled CLI Version

This SDK release bundles CLI version: 0.23.0

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.19.10

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.15.3

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.13.1

Source: latest stable CLI from npm

Backfilled release for npm-published version 0.1.5 (original workflow failed before GitHub release creation).

What's Changed

• chore: bump version to 0.8.2 by @Mingholy in #1632
• chore(release): sdk-typescript v0.1.4 by @qwen-code-ci-bot in #1633
• Fix: Use resolved authType to initialize ACP agent by @Mingholy in #1622
• Add parentToolCallId and subagentType for ACP subagent tracking by @Mingholy in #1620
• feat(core): improve error message when skill is invoked as tool by @tanzhenxin in #1623
• fix(acp): stream subagent text + reasoning chunks by @tanzhenxin in #1626
• fix: ensure output-language.md is created before config initialization by @tanzhenxin in #1637
• fix(security): prevent command injection via newline bypass in shell command validation by @tanzhenxin in #1638
• Fix Claude plugin resource collection to respect marketplace config by @LaZzyMan in #1639
• feat(core): improve retry logic for better 429/5xx error handling by @tanzhenxin in #1628
• feat: add extra_body support for OpenAI-compatible providers by @tanzhenxin in #1654
• Support model selection through ACP in vscode ide companion by @yiliang114 in #1582
• feat: add multi-modal input support (image, PDF, audio) across all content generators by @tanzhenxin in #1564
• Add Zed extension for Qwen Code agent server by @Mingholy in #1630
• feat: clarify output formats for non-interactive mode by @LaZzyMan in #1579
• feat: add concurrent runner for batch CLI execution by @tanzhenxin in #1640
• Add experimental LSP support for code intelligence by @yiliang114 in #1401
• Fix: React/React-DOM version inconsistency in package.json and lockfile by @Mingholy in #1659
• feat(webui): implement unified UI architecture with shared component library by @yiliang114 in #1543
• chore: bump version to 0.9.0 by @tanzhenxin in #1661
• Add contextWindowSize Configuration Support by @xuewenjie123 in #1539
• fix(core): avoid passing undici agent to Anthropic SDK by @tanzhenxin in #1663
• fix(vscode-ide-companion): fix race conditions and improve @ file completion search by @yiliang114 in #1676
• fix(core): properly cleanup MCP server subprocesses on exit by @tt-a1i in #1285
• test(cli): stabilize AuthDialog ESC assertion by @liqiongyu in #1535
• fix(cli): expand MCP @server: resource references by @liqiongyu in #1531
• fix(core): auto-enable WebFetch and WebSearch tools in Plan mode by @afarber in #1686
• feat(core): add symlink support for skill manager by @DragonnZhang in #1690
• fix: normalize skill file content in extensions to handle BOM and CRLF by @LaZzyMan in #1667
• fix(ci): honor manual preview version input by @tanzhenxin in #1665
• build: Improve build efficiency and add dev mode by @tanzhenxin in #1681
• fix(core): handle heredoc in command substitution guard by @liqiongyu in #1701
• feat: Preserve UTF-8 BOM when editing files by @tanzhenxin in #1680
• fix(core): Preserve trailing whitespace in newString during edits by @tanzhenxin in #1688
• fix: enable Shift+Tab shortcut in Windows PowerShell by @LaZzyMan in #1607
• fix(core): enforce tool restrictions in subagents by @tanzhenxin in #1691
• [AnthropicContentGenerator] optimize: ADD cache_control for system and last user text message by @Weaxs in #1613
• refactor(i18n): translate Agent as 智能体 by @itchina110 in #1718
• fix(docker): fix build error and enable manual version builds by @tanzhenxin in #1722
• chore(release): Bump version to 0.10.0 by @tanzhenxin in #1720
• fix(settings): rename negative settings to positive naming (disable* -> enable*) by @afarber in #1330
• ci(sdk-release): use stable CLI tags for SDK releases by @Mingholy in #1710
• feat(query): add support for resuming sessions with session ID by @DragonnZhang in #1714
• add hint for installing external source extensions by @LaZzyMan in #1694
• Feat/javasdk alpha 202501 by @gwinthis in #1717
• Fix: clarify is_background parameter is required in docs and examples by @Mingholy in #1716
• feat: Remove Smart Edit tool and ClearcutLogger by @tanzhenxin in #1684
• Add export command for session history with markdown and HTML formats by @Mingholy in #1515
• Add FORK_MODE support to ProcessTransport for Electron IPC integration by @Mingholy in #1719
• feat(sdk): add resume, continue options and extend authType support by @Mingholy in #1726
• Fix ACP model selection to handle all configured authentication types by @Mingholy in #1555
• refactor: remove read_many_files tool, add readManyFiles utility for user @-commands by @tanzhenxin in #1673
• fix(vscode-ide-companion): Fix UI display issues with server-side timestamp and file path extraction by @yiliang114 in #1682
• chore: Reduce Qwen OAuth free quota from 2000 to 1000 requests per day by @pomelo-nwu in #1730
• fix(ui): resolve auth not updating in top-right corner by @DennisYu07 in #1670
• feat: debug mode output refactor — route console calls to logfile-first debugLogger by @tanzhenxin in #1610
• fix: use openai model instead of index=0 in acp integration test by @Mingholy in #1733
• fix(cli): route sandbox diagnostic messages to stderr by @tanzhenxin in #1735
• Add CLI source selection for SDK releases and fix subagent output handler by @Mingholy in #1732
• feat(paste): add large paste placeholder and fix enter-submit on macOS by @tanzhenxin in #1713
• fix(cli): prevent Tab key from cycling approval mode when autocomplete is active on Windows by @LaZzyMan in https://github.com/Qwen...

What's Changed

• fix(serve): preserve session creation failure diagnostics by @callmeYe in #12331
• feat(sdk-java): Add managed runtime attestation client by @doudouOUC in #12522
• feat(web-shell): select a time range on the trajectory overview to narrow the table by @qqqys in #12543
• feat(serve,web-shell): set the Qwen Live endpoint and model from settings by @qqqys in #12529
• feat(channels): separate private and group access policies by @qqqys in #12547
• fix(core): bound oversized images returned by MCP tools by @yiliang114 in #10835
• feat(serve): run Qwen Live through the Web Shell, native macOS Host opt-in by @qqqys in #12534
• feat(web-shell): search within the current conversation by @samuelhsin in #12234
• perf(serve): use catalog for workspace extension activation projection by @callmeYe in #12541
• fix(core): decide MCP media handling from the bytes, not the label by @yiliang114 in #12567
• fix(core): read a backslash inside single quotes as literal when splitting by @TianYuan1024 in #11765
• perf(web-shell): derive the session workflow projection once and share it across surfaces (#10865) by @now-ing in #11237
• fix(skills): reload changed content after refresh by @jkxiao in #12182
• feat(web-shell): add host controls for model management by @Lilian0122 in #12345
• fix(cli): keep CoreToolScheduler stable across callback identity changes by @kabishou11 in #12069
• fix(web-shell): make mobile access opt-in and simplify split composer by @ytahdn in #12537
• test(cli): yield the event loop between base-tree tests by @wenshao in #12573
• feat(browser-use): make the bundled runtime self-contained by @tanzhenxin in #12548
• fix(cli): keep 64-bit file ids exact in the two identity comparators by @yiliang114 in #12568
• fix(cli): keep plan-identity guards exact for 64-bit file ids by @yiliang114 in #12577
• fix(java): Deliver broker cancellation after a dispatch lease lapses by @wenshao in #12583
• feat(web-shell): zoom and pan the trajectory overview by @qqqys in #12557
• fix(core): label each reattached image so older ones are not read as current by @yiliang114 in #12549
• feat(review): audit the applied --fix for unpinned new assumptions by @wenshao in #10169
• feat(channels): route messages to prefix-specific sessions by @qqqys in #12595
• fix(java): Fence lapsed tool executions by the repository clock by @wenshao in #12608
• feat(web-shell): show the trajectory over real time, idle included by @qqqys in #12607
• fix(review): correct what the fix audit tells its reader by @wenshao in #12610
• fix(serve): report serve.channels restore failures in channel status by @qqqys in #12542
• test(review): drive the fix-audit build through the yargs command by @wenshao in #12614
• feat(sdk-java): Adopt a Managed Runtime only after attestation by @doudouOUC in #12552
• feat(web-shell): inspect session tool calls by prompt by @ytahdn in #12466
• feat(web-shell): support selective host artifact integration by @dreamWB in #12588
• fix(web-shell): stop rendering empty args and input JSON in tool cards by @yiliang114 in #12601
• feat(live): stream shared screens into browser voice calls by @qqqys in #12623
• docs(extensions): cover workflow reload and add Chinese design by @BlackishGreen33 in #12625
• fix(core): cover every commit spelling and the promoted path in session-commit registration by @yiliang114 in #12556
• feat(desktop): add QWEN_DESKTOP_DISABLE_UPDATES opt-out for the startup update check by @yiliang114 in #12587
• perf(cli): stop one-shot runs from booting the CLI twice by @yiliang114 in #12602
• perf(cli): skip interactive-only probes on headless startup by @yiliang114 in #12603
• docs: fix /clear description, .qwen note, and outdated CLI name by @yc2bgr8 in #12555
• docs(conversations-recovery): document non-graceful ACP writer recovery by @dvd233 in #12268
• docs: fix comments and JSDoc that contradict the actual code by @sxh313 in #11950
• fix(cli): honor the usage-statistics opt-out under --bare by @yiliang114 in #12604
• fix(ci): trust the job workspace as a git safe.directory before checkout by @yiliang114 in #12648
• test(review): add hard-link witness test to save-artifact overwrite guard (#12578) by @holny in #12581
• test(java): make the local-process provisioner tests deterministic by @wenshao in #12639
• feat(review): record per-file content verdicts that survive a rebase by @wenshao in #9661
• feat(web-shell): manage the repository's worktrees from the git dialog by @wenshao in #12154
• docs(tools): add Firecrawl to the web search MCP services by @JuampiHernandez in #12646
• feat(sdk-java): Add the Hosted Harness private client by @doudouOUC in #12654
• test(java): pin runtime-broker guards left open in earlier reviews by @wenshao in #12632
• feat(java): Reconcile UNKNOWN tool executions from Runtime evidence by @wenshao in #12655
• test(cli): pin the managed-runtime worker's boot, bind and shutdown guards by @wenshao in #12633
• fix(review): persist the local findings ledger when a round cannot anchor by @wenshao in #12660
• fix(core): Preserve Claude thinking across tool turns by @pomelo-nwu in #12621
• feat(cli): Declare the v2 execute/status/cancel Managed Runtime contract by @doudouOUC in #12630
• fix(cli): keep one-shot system-reminder prefixes out of shell mode by @yiliang114 in #12605
• feat(sdk-java): Reconcile and adopt restored Runtime bindings by @doudouOUC in #12627
• fix(standalone): pin @lydell/node-pty-linux-arm64 and fail release on missing prebuilds by @yiliang114 in #12649
• feat(cli): list managed Agent View sessions in qwen sessions ps by @yiliang114 in #10942
• fix(web-shell): fall back to a plain draft for New task in a Live chat without a draft target by @yiliang114 in #12626
• chore(desktop): rename packages/desktop-shell to packages/desktop by @yiliang114 in #12653
• test(java): wait for a renewal at the advanced time in lease renewal tests by @wenshao in #12656
• fix(cli): resolve npm's global config when npm refuses to print it by @tanzhenxin in #12675
• feat(scripts): check in the startup benchmark harness by @tanzhenxin in #12674
• fix(web-shell): allow deleting the current session from sidebar and picker by @yiliang114 in #12636
• fix(core): keep the deferred-tool bridge halves on the same tool by @yiliang114 in #12539
• feat(sdk-java): Add the v2 tool operations to the runtime transport by @doudouOUC in #12637
• feat: add native advisor tool by @ZijianZhang989 in #9636
• feat(sdk-java): Add the W0a Managed Workspace binding contract by @wenshao in #12681
• perf(cli): keep running in place when env files only hold model credentials by @tanzhenxin in #12680
• feat(cli): Mount the v2 tool operations on the Managed Runtime worker by @doudouOUC in #12671
• perf(cli): halve fresh-startup time to typeable and cut RSS by 60% by @tanzhenxin in #12622
• fix(cli): make the Agent Team teammate tab transcript scrollable in VP mode by @Yiliang11...

Bundled CLI Version

This SDK release bundles CLI version: 0.24.6

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.5

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.3

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.1

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.3

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.2

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.1

Source: CLI built from source (same branch/ref as SDK)

Highlights

The bundled CLI 0.23.0 includes two fixes requested in #11022:

• Managed memory availability now respects the memory.enableManagedAutoMemory setting (#6941). Hosts that disable managed auto memory no longer see remember/dream requests admitted or managed-memory instructions in the system prompt; local patches can be removed.
• Size-triggered microcompaction now clears old tool results toward a low watermark (#8464), so it no longer rewrites another part of the conversation prefix on every subsequent turn. Provider prompt-cache reuse is preserved across long tool-heavy sessions, reducing cached-input cost.

Bundled CLI Version

This SDK release bundles CLI version: 0.23.0

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.19.10

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.15.3

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.13.1

Source: latest stable CLI from npm

Backfilled release for npm-published version 0.1.5 (original workflow failed before GitHub release creation).

What's Changed

• chore: bump version to 0.8.2 by @Mingholy in #1632
• chore(release): sdk-typescript v0.1.4 by @qwen-code-ci-bot in #1633
• Fix: Use resolved authType to initialize ACP agent by @Mingholy in #1622
• Add parentToolCallId and subagentType for ACP subagent tracking by @Mingholy in #1620
• feat(core): improve error message when skill is invoked as tool by @tanzhenxin in #1623
• fix(acp): stream subagent text + reasoning chunks by @tanzhenxin in #1626
• fix: ensure output-language.md is created before config initialization by @tanzhenxin in #1637
• fix(security): prevent command injection via newline bypass in shell command validation by @tanzhenxin in #1638
• Fix Claude plugin resource collection to respect marketplace config by @LaZzyMan in #1639
• feat(core): improve retry logic for better 429/5xx error handling by @tanzhenxin in #1628
• feat: add extra_body support for OpenAI-compatible providers by @tanzhenxin in #1654
• Support model selection through ACP in vscode ide companion by @yiliang114 in #1582
• feat: add multi-modal input support (image, PDF, audio) across all content generators by @tanzhenxin in #1564
• Add Zed extension for Qwen Code agent server by @Mingholy in #1630
• feat: clarify output formats for non-interactive mode by @LaZzyMan in #1579
• feat: add concurrent runner for batch CLI execution by @tanzhenxin in #1640
• Add experimental LSP support for code intelligence by @yiliang114 in #1401
• Fix: React/React-DOM version inconsistency in package.json and lockfile by @Mingholy in #1659
• feat(webui): implement unified UI architecture with shared component library by @yiliang114 in #1543
• chore: bump version to 0.9.0 by @tanzhenxin in #1661
• Add contextWindowSize Configuration Support by @xuewenjie123 in #1539
• fix(core): avoid passing undici agent to Anthropic SDK by @tanzhenxin in #1663
• fix(vscode-ide-companion): fix race conditions and improve @ file completion search by @yiliang114 in #1676
• fix(core): properly cleanup MCP server subprocesses on exit by @tt-a1i in #1285
• test(cli): stabilize AuthDialog ESC assertion by @liqiongyu in #1535
• fix(cli): expand MCP @server: resource references by @liqiongyu in #1531
• fix(core): auto-enable WebFetch and WebSearch tools in Plan mode by @afarber in #1686
• feat(core): add symlink support for skill manager by @DragonnZhang in #1690
• fix: normalize skill file content in extensions to handle BOM and CRLF by @LaZzyMan in #1667
• fix(ci): honor manual preview version input by @tanzhenxin in #1665
• build: Improve build efficiency and add dev mode by @tanzhenxin in #1681
• fix(core): handle heredoc in command substitution guard by @liqiongyu in #1701
• feat: Preserve UTF-8 BOM when editing files by @tanzhenxin in #1680
• fix(core): Preserve trailing whitespace in newString during edits by @tanzhenxin in #1688
• fix: enable Shift+Tab shortcut in Windows PowerShell by @LaZzyMan in #1607
• fix(core): enforce tool restrictions in subagents by @tanzhenxin in #1691
• [AnthropicContentGenerator] optimize: ADD cache_control for system and last user text message by @Weaxs in #1613
• refactor(i18n): translate Agent as 智能体 by @itchina110 in #1718
• fix(docker): fix build error and enable manual version builds by @tanzhenxin in #1722
• chore(release): Bump version to 0.10.0 by @tanzhenxin in #1720
• fix(settings): rename negative settings to positive naming (disable* -> enable*) by @afarber in #1330
• ci(sdk-release): use stable CLI tags for SDK releases by @Mingholy in #1710
• feat(query): add support for resuming sessions with session ID by @DragonnZhang in #1714
• add hint for installing external source extensions by @LaZzyMan in #1694
• Feat/javasdk alpha 202501 by @gwinthis in #1717
• Fix: clarify is_background parameter is required in docs and examples by @Mingholy in #1716
• feat: Remove Smart Edit tool and ClearcutLogger by @tanzhenxin in #1684
• Add export command for session history with markdown and HTML formats by @Mingholy in #1515
• Add FORK_MODE support to ProcessTransport for Electron IPC integration by @Mingholy in #1719
• feat(sdk): add resume, continue options and extend authType support by @Mingholy in #1726
• Fix ACP model selection to handle all configured authentication types by @Mingholy in #1555
• refactor: remove read_many_files tool, add readManyFiles utility for user @-commands by @tanzhenxin in #1673
• fix(vscode-ide-companion): Fix UI display issues with server-side timestamp and file path extraction by @yiliang114 in #1682
• chore: Reduce Qwen OAuth free quota from 2000 to 1000 requests per day by @pomelo-nwu in #1730
• fix(ui): resolve auth not updating in top-right corner by @DennisYu07 in #1670
• feat: debug mode output refactor — route console calls to logfile-first debugLogger by @tanzhenxin in #1610
• fix: use openai model instead of index=0 in acp integration test by @Mingholy in #1733
• fix(cli): route sandbox diagnostic messages to stderr by @tanzhenxin in #1735
• Add CLI source selection for SDK releases and fix subagent output handler by @Mingholy in #1732
• feat(paste): add large paste placeholder and fix enter-submit on macOS by @tanzhenxin in #1713
• fix(cli): prevent Tab key from cycling approval mode when autocomplete is active on Windows by @LaZzyMan in #1736
• feat: promote Agent Skills from experimental to stable by @tanzhenxin in https://github.com/QwenLM/qwen-c...

What's Changed

• fix(serve): preserve session creation failure diagnostics by @callmeYe in #12331
• feat(sdk-java): Add managed runtime attestation client by @doudouOUC in #12522
• feat(web-shell): select a time range on the trajectory overview to narrow the table by @qqqys in #12543
• feat(serve,web-shell): set the Qwen Live endpoint and model from settings by @qqqys in #12529
• feat(channels): separate private and group access policies by @qqqys in #12547
• fix(core): bound oversized images returned by MCP tools by @yiliang114 in #10835
• feat(serve): run Qwen Live through the Web Shell, native macOS Host opt-in by @qqqys in #12534
• feat(web-shell): search within the current conversation by @samuelhsin in #12234
• perf(serve): use catalog for workspace extension activation projection by @callmeYe in #12541
• fix(core): decide MCP media handling from the bytes, not the label by @yiliang114 in #12567
• fix(core): read a backslash inside single quotes as literal when splitting by @TianYuan1024 in #11765
• perf(web-shell): derive the session workflow projection once and share it across surfaces (#10865) by @now-ing in #11237
• fix(skills): reload changed content after refresh by @jkxiao in #12182
• feat(web-shell): add host controls for model management by @Lilian0122 in #12345
• fix(cli): keep CoreToolScheduler stable across callback identity changes by @kabishou11 in #12069
• fix(web-shell): make mobile access opt-in and simplify split composer by @ytahdn in #12537
• test(cli): yield the event loop between base-tree tests by @wenshao in #12573
• feat(browser-use): make the bundled runtime self-contained by @tanzhenxin in #12548
• fix(cli): keep 64-bit file ids exact in the two identity comparators by @yiliang114 in #12568
• fix(cli): keep plan-identity guards exact for 64-bit file ids by @yiliang114 in #12577
• fix(java): Deliver broker cancellation after a dispatch lease lapses by @wenshao in #12583
• feat(web-shell): zoom and pan the trajectory overview by @qqqys in #12557
• fix(core): label each reattached image so older ones are not read as current by @yiliang114 in #12549
• feat(review): audit the applied --fix for unpinned new assumptions by @wenshao in #10169
• feat(channels): route messages to prefix-specific sessions by @qqqys in #12595
• fix(java): Fence lapsed tool executions by the repository clock by @wenshao in #12608
• feat(web-shell): show the trajectory over real time, idle included by @qqqys in #12607
• fix(review): correct what the fix audit tells its reader by @wenshao in #12610
• fix(serve): report serve.channels restore failures in channel status by @qqqys in #12542
• test(review): drive the fix-audit build through the yargs command by @wenshao in #12614
• feat(sdk-java): Adopt a Managed Runtime only after attestation by @doudouOUC in #12552
• feat(web-shell): inspect session tool calls by prompt by @ytahdn in #12466
• feat(web-shell): support selective host artifact integration by @dreamWB in #12588
• fix(web-shell): stop rendering empty args and input JSON in tool cards by @yiliang114 in #12601
• feat(live): stream shared screens into browser voice calls by @qqqys in #12623
• docs(extensions): cover workflow reload and add Chinese design by @BlackishGreen33 in #12625
• fix(core): cover every commit spelling and the promoted path in session-commit registration by @yiliang114 in #12556
• feat(desktop): add QWEN_DESKTOP_DISABLE_UPDATES opt-out for the startup update check by @yiliang114 in #12587
• perf(cli): stop one-shot runs from booting the CLI twice by @yiliang114 in #12602
• perf(cli): skip interactive-only probes on headless startup by @yiliang114 in #12603
• docs: fix /clear description, .qwen note, and outdated CLI name by @yc2bgr8 in #12555
• docs(conversations-recovery): document non-graceful ACP writer recovery by @dvd233 in #12268
• docs: fix comments and JSDoc that contradict the actual code by @sxh313 in #11950
• fix(cli): honor the usage-statistics opt-out under --bare by @yiliang114 in #12604
• fix(ci): trust the job workspace as a git safe.directory before checkout by @yiliang114 in #12648
• test(review): add hard-link witness test to save-artifact overwrite guard (#12578) by @holny in #12581
• test(java): make the local-process provisioner tests deterministic by @wenshao in #12639
• feat(review): record per-file content verdicts that survive a rebase by @wenshao in #9661
• feat(web-shell): manage the repository's worktrees from the git dialog by @wenshao in #12154
• docs(tools): add Firecrawl to the web search MCP services by @JuampiHernandez in #12646
• feat(sdk-java): Add the Hosted Harness private client by @doudouOUC in #12654
• test(java): pin runtime-broker guards left open in earlier reviews by @wenshao in #12632
• feat(java): Reconcile UNKNOWN tool executions from Runtime evidence by @wenshao in #12655
• test(cli): pin the managed-runtime worker's boot, bind and shutdown guards by @wenshao in #12633
• fix(review): persist the local findings ledger when a round cannot anchor by @wenshao in #12660
• fix(core): Preserve Claude thinking across tool turns by @pomelo-nwu in #12621
• feat(cli): Declare the v2 execute/status/cancel Managed Runtime contract by @doudouOUC in #12630
• fix(cli): keep one-shot system-reminder prefixes out of shell mode by @yiliang114 in #12605
• feat(sdk-java): Reconcile and adopt restored Runtime bindings by @doudouOUC in #12627
• fix(standalone): pin @lydell/node-pty-linux-arm64 and fail release on missing prebuilds by @yiliang114 in #12649
• feat(cli): list managed Agent View sessions in qwen sessions ps by @yiliang114 in #10942
• fix(web-shell): fall back to a plain draft for New task in a Live chat without a draft target by @yiliang114 in #12626
• chore(desktop): rename packages/desktop-shell to packages/desktop by @yiliang114 in #12653
• test(java): wait for a renewal at the advanced time in lease renewal tests by @wenshao in #12656
• fix(cli): resolve npm's global config when npm refuses to print it by @tanzhenxin in #12675
• feat(scripts): check in the startup benchmark harness by @tanzhenxin in #12674
• fix(web-shell): allow deleting the current session from sidebar and picker by @yiliang114 in #12636
• fix(core): keep the deferred-tool bridge halves on the same tool by @yiliang114 in #12539
• feat(sdk-java): Add the v2 tool operations to the runtime transport by @doudouOUC in #12637
• feat: add native advisor tool by @ZijianZhang989 in #9636
• feat(sdk-java): Add the W0a Managed Workspace binding contract by @wenshao in #12681
• perf(cli): keep running in place when env files only hold model credentials by @tanzhenxin in #12680
• feat(cli): Mount the v2 tool operations on the Managed Runtime worker by @doudouOUC in #12671
• perf(cli): halve fresh-startup time to typeable and cut RSS by 60% by @tanzhenxin in #12622
• fix(cli): make the Agent Team teammate tab transcript scrollable in VP mode by @Yiliang11...

Bundled CLI Version

This SDK release bundles CLI version: 0.24.5

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.3

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.24.1

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.3

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.2

Source: CLI built from source (same branch/ref as SDK)

Bundled CLI Version

This SDK release bundles CLI version: 0.23.1

Source: CLI built from source (same branch/ref as SDK)

Highlights

The bundled CLI 0.23.0 includes two fixes requested in #11022:

• Managed memory availability now respects the memory.enableManagedAutoMemory setting (#6941). Hosts that disable managed auto memory no longer see remember/dream requests admitted or managed-memory instructions in the system prompt; local patches can be removed.
• Size-triggered microcompaction now clears old tool results toward a low watermark (#8464), so it no longer rewrites another part of the conversation prefix on every subsequent turn. Provider prompt-cache reuse is preserved across long tool-heavy sessions, reducing cached-input cost.

Bundled CLI Version

This SDK release bundles CLI version: 0.23.0

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.19.10

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.15.3

Source: latest stable CLI from npm

Bundled CLI Version

This SDK release bundles CLI version: 0.13.1

Source: latest stable CLI from npm

Backfilled release for npm-published version 0.1.5 (original workflow failed before GitHub release creation).

What's Changed

• chore: bump version to 0.8.2 by @Mingholy in #1632
• chore(release): sdk-typescript v0.1.4 by @qwen-code-ci-bot in #1633
• Fix: Use resolved authType to initialize ACP agent by @Mingholy in #1622
• Add parentToolCallId and subagentType for ACP subagent tracking by @Mingholy in #1620
• feat(core): improve error message when skill is invoked as tool by @tanzhenxin in #1623
• fix(acp): stream subagent text + reasoning chunks by @tanzhenxin in #1626
• fix: ensure output-language.md is created before config initialization by @tanzhenxin in #1637
• fix(security): prevent command injection via newline bypass in shell command validation by @tanzhenxin in #1638
• Fix Claude plugin resource collection to respect marketplace config by @LaZzyMan in #1639
• feat(core): improve retry logic for better 429/5xx error handling by @tanzhenxin in #1628
• feat: add extra_body support for OpenAI-compatible providers by @tanzhenxin in #1654
• Support model selection through ACP in vscode ide companion by @yiliang114 in #1582
• feat: add multi-modal input support (image, PDF, audio) across all content generators by @tanzhenxin in #1564
• Add Zed extension for Qwen Code agent server by @Mingholy in #1630
• feat: clarify output formats for non-interactive mode by @LaZzyMan in #1579
• feat: add concurrent runner for batch CLI execution by @tanzhenxin in #1640
• Add experimental LSP support for code intelligence by @yiliang114 in #1401
• Fix: React/React-DOM version inconsistency in package.json and lockfile by @Mingholy in #1659
• feat(webui): implement unified UI architecture with shared component library by @yiliang114 in #1543
• chore: bump version to 0.9.0 by @tanzhenxin in #1661
• Add contextWindowSize Configuration Support by @xuewenjie123 in #1539
• fix(core): avoid passing undici agent to Anthropic SDK by @tanzhenxin in #1663
• fix(vscode-ide-companion): fix race conditions and improve @ file completion search by @yiliang114 in #1676
• fix(core): properly cleanup MCP server subprocesses on exit by @tt-a1i in #1285
• test(cli): stabilize AuthDialog ESC assertion by @liqiongyu in #1535
• fix(cli): expand MCP @server: resource references by @liqiongyu in #1531
• fix(core): auto-enable WebFetch and WebSearch tools in Plan mode by @afarber in #1686
• feat(core): add symlink support for skill manager by @DragonnZhang in #1690
• fix: normalize skill file content in extensions to handle BOM and CRLF by @LaZzyMan in #1667
• fix(ci): honor manual preview version input by @tanzhenxin in #1665
• build: Improve build efficiency and add dev mode by @tanzhenxin in #1681
• fix(core): handle heredoc in command substitution guard by @liqiongyu in #1701
• feat: Preserve UTF-8 BOM when editing files by @tanzhenxin in #1680
• fix(core): Preserve trailing whitespace in newString during edits by @tanzhenxin in #1688
• fix: enable Shift+Tab shortcut in Windows PowerShell by @LaZzyMan in #1607
• fix(core): enforce tool restrictions in subagents by @tanzhenxin in #1691
• [AnthropicContentGenerator] optimize: ADD cache_control for system and last user text message by @Weaxs in #1613
• refactor(i18n): translate Agent as 智能体 by @itchina110 in #1718
• fix(docker): fix build error and enable manual version builds by @tanzhenxin in #1722
• chore(release): Bump version to 0.10.0 by @tanzhenxin in #1720
• fix(settings): rename negative settings to positive naming (disable* -> enable*) by @afarber in #1330
• ci(sdk-release): use stable CLI tags for SDK releases by @Mingholy in #1710
• feat(query): add support for resuming sessions with session ID by @DragonnZhang in #1714
• add hint for installing external source extensions by @LaZzyMan in #1694
• Feat/javasdk alpha 202501 by @gwinthis in #1717
• Fix: clarify is_background parameter is required in docs and examples by @Mingholy in #1716
• feat: Remove Smart Edit tool and ClearcutLogger by @tanzhenxin in #1684
• Add export command for session history with markdown and HTML formats by @Mingholy in #1515
• Add FORK_MODE support to ProcessTransport for Electron IPC integration by @Mingholy in #1719
• feat(sdk): add resume, continue options and extend authType support by @Mingholy in #1726
• Fix ACP model selection to handle all configured authentication types by @Mingholy in #1555
• refactor: remove read_many_files tool, add readManyFiles utility for user @-commands by @tanzhenxin in #1673
• fix(vscode-ide-companion): Fix UI display issues with server-side timestamp and file path extraction by @yiliang114 in #1682
• chore: Reduce Qwen OAuth free quota from 2000 to 1000 requests per day by @pomelo-nwu in #1730
• fix(ui): resolve auth not updating in top-right corner by @DennisYu07 in #1670
• feat: debug mode output refactor — route console calls to logfile-first debugLogger by @tanzhenxin in #1610
• fix: use openai model instead of index=0 in acp integration test by @Mingholy in #1733
• fix(cli): route sandbox diagnostic messages to stderr by @tanzhenxin in #1735
• Add CLI source selection for SDK releases and fix subagent output handler by @Mingholy in #1732
• feat(paste): add large paste placeholder and fix enter-submit on macOS by @tanzhenxin in #1713
• fix(cli): prevent Tab key from cycling approval mode when autocomplete is active on Windows by @LaZzyMan in #1736
• feat: promote Agent Skills from experimental to stable by @tanzhenxin in #1738
• feat: add source information tracking in telemetry logs by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull...

What's Changed

• fix(serve): preserve session creation failure diagnostics by @callmeYe in #12331
• feat(sdk-java): Add managed runtime attestation client by @doudouOUC in #12522
• feat(web-shell): select a time range on the trajectory overview to narrow the table by @qqqys in #12543
• feat(serve,web-shell): set the Qwen Live endpoint and model from settings by @qqqys in #12529
• feat(channels): separate private and group access policies by @qqqys in #12547
• fix(core): bound oversized images returned by MCP tools by @yiliang114 in #10835
• feat(serve): run Qwen Live through the Web Shell, native macOS Host opt-in by @qqqys in #12534
• feat(web-shell): search within the current conversation by @samuelhsin in #12234
• perf(serve): use catalog for workspace extension activation projection by @callmeYe in #12541
• fix(core): decide MCP media handling from the bytes, not the label by @yiliang114 in #12567
• fix(core): read a backslash inside single quotes as literal when splitting by @TianYuan1024 in #11765
• perf(web-shell): derive the session workflow projection once and share it across surfaces (#10865) by @now-ing in #11237
• fix(skills): reload changed content after refresh by @jkxiao in #12182
• feat(web-shell): add host controls for model management by @Lilian0122 in #12345
• fix(cli): keep CoreToolScheduler stable across callback identity changes by @kabishou11 in #12069
• fix(web-shell): make mobile access opt-in and simplify split composer by @ytahdn in #12537
• test(cli): yield the event loop between base-tree tests by @wenshao in #12573
• feat(browser-use): make the bundled runtime self-contained by @tanzhenxin in #12548
• fix(cli): keep 64-bit file ids exact in the two identity comparators by @yiliang114 in #12568
• fix(cli): keep plan-identity guards exact for 64-bit file ids by @yiliang114 in #12577
• fix(java): Deliver broker cancellation after a dispatch lease lapses by @wenshao in #12583
• feat(web-shell): zoom and pan the trajectory overview by @qqqys in #12557
• fix(core): label each reattached image so older ones are not read as current by @yiliang114 in #12549
• feat(review): audit the applied --fix for unpinned new assumptions by @wenshao in #10169
• feat(channels): route messages to prefix-specific sessions by @qqqys in #12595
• fix(java): Fence lapsed tool executions by the repository clock by @wenshao in #12608
• feat(web-shell): show the trajectory over real time, idle included by @qqqys in #12607
• fix(review): correct what the fix audit tells its reader by @wenshao in #12610
• fix(serve): report serve.channels restore failures in channel status by @qqqys in #12542
• test(review): drive the fix-audit build through the yargs command by @wenshao in #12614
• feat(sdk-java): Adopt a Managed Runtime only after attestation by @doudouOUC in #12552
• feat(web-shell): inspect session tool calls by prompt by @ytahdn in #12466
• feat(web-shell): support selective host artifact integration by @dreamWB in #12588
• fix(web-shell): stop rendering empty args and input JSON in tool cards by @yiliang114 in #12601
• feat(live): stream shared screens into browser voice calls by @qqqys in #12623
• docs(extensions): cover workflow reload and add Chinese design by @BlackishGreen33 in #12625
• fix(core): cover every commit spelling and the promoted path in session-commit registration by @yiliang114 in #12556
• feat(desktop): add QWEN_DESKTOP_DISABLE_UPDATES opt-out for the startup update check by @yiliang114 in #12587
• perf(cli): stop one-shot runs from booting the CLI twice by @yiliang114 in #12602
• perf(cli): skip interactive-only probes on headless startup by @yiliang114 in #12603
• docs: fix /clear description, .qwen note, and outdated CLI name by @yc2bgr8 in #12555
• docs(conversations-recovery): document non-graceful ACP writer recovery by @dvd233 in #12268
• docs: fix comments and JSDoc that contradict the actual code by @sxh313 in #11950
• fix(cli): honor the usage-statistics opt-out under --bare by @yiliang114 in #12604
• fix(ci): trust the job workspace as a git safe.directory before checkout by @yiliang114 in #12648
• test(review): add hard-link witness test to save-artifact overwrite guard (#12578) by @holny in #12581
• test(java): make the local-process provisioner tests deterministic by @wenshao in #12639
• feat(review): record per-file content verdicts that survive a rebase by @wenshao in #9661
• feat(web-shell): manage the repository's worktrees from the git dialog by @wenshao in #12154
• docs(tools): add Firecrawl to the web search MCP services by @JuampiHernandez in #12646

New Contributors

• @jkxiao made their first contribution in #12182
• @BlackishGreen33 made their first contribution in #12625
• @yc2bgr8 made their first contribution in #12555
• @sxh313 made their first contribution in #11950
• @holny made their first contribution in #12581
• @JuampiHernandez made their first contribution in #12646

Full Changelog: cua-driver-rs-v0.20.11...desktop-v0.24.5