0 Fork 0

mirror of https://github.com/QwenLM/qwen-code.git synced 2026-11-07 06:19:43 -10:00

Files

T

Bob.qwencodeandgithub-actions[bot] 16496a71ec chore(release): v0.24.6 (#12722 )

* chore(release): v0.24.6

* docs(changelog): sync for v0.24.6

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

2026-09-26 01:06:56 +00:00

892 KiB

Raw Blame History

Changelog

All notable changes to Qwen Code are documented in this file.

The format is based on Keep a Changelog, and the project follows Semantic Versioning. Only stable releases are listed; nightly and preview pre-releases are intentionally omitted.

This file is generated automatically from GitHub Releases. Do not edit it by hand — run npm run changelog to regenerate.

0.24.6 - 2026-09-26

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(sdk-java): Add the Hosted Harness private client (#12654) by @doudouOUC
feat(java): Reconcile UNKNOWN tool executions from Runtime evidence (#12655) by @wenshao
feat(cli): Declare the v2 execute/status/cancel Managed Runtime contract (#12630) by @doudouOUC
feat(sdk-java): Reconcile and adopt restored Runtime bindings (#12627) by @doudouOUC
feat(cli): list managed Agent View sessions in qwen sessions ps (#10942) by @yiliang114
feat(scripts): check in the startup benchmark harness (#12674) by @tanzhenxin
feat(sdk-java): Add the v2 tool operations to the runtime transport (#12637) by @doudouOUC
feat: add native advisor tool (#9636) by @ZijianZhang989
feat(sdk-java): Add the W0a Managed Workspace binding contract (#12681) by @wenshao
feat(cli): Mount the v2 tool operations on the Managed Runtime worker (#12671) by @doudouOUC
feat(cli): Define the managed-context/1 envelope contract (#12700) by @wenshao
feat(serve): add guarded Hosted Runtime foundations (#12691) by @doudouOUC
feat(managed-agent): Spring control plane and dual-path WebShell (#12692) by @doudouOUC
feat(serve): support model and reasoning selection at session creation (#12308) by @callmeYe
feat(core): Durable Managed Session journal and failover (#12693) by @doudouOUC
feat(cli): agent-prepared Batch API workflow (/batch-api) (#12492) by @yiliang114
feat: complete Advisor consultation behavior and usage limits (#12688) by @yiliang114

Bug Fixes

fix(review): persist the local findings ledger when a round cannot anchor (#12660) by @wenshao
fix(core): Preserve Claude thinking across tool turns (#12621) by @pomelo-nwu
fix(cli): keep one-shot system-reminder prefixes out of shell mode (#12605) by @yiliang114
fix(standalone): pin @lydell/node-pty-linux-arm64 and fail release on missing prebuilds (#12649) by @yiliang114
fix(web-shell): fall back to a plain draft for New task in a Live chat without a draft target (#12626) by @yiliang114
fix(cli): resolve npm's global config when npm refuses to print it (#12675) by @tanzhenxin
fix(web-shell): allow deleting the current session from sidebar and picker (#12636) by @yiliang114
fix(core): keep the deferred-tool bridge halves on the same tool (#12539) by @yiliang114
fix(cli): make the Agent Team teammate tab transcript scrollable in VP mode (#9531) by @yiliang114
fix(cli): restore ripgrep exec bit on managed npm update activation (#12673) by @yiliang114
fix(cli): notify when the Linux clipboard tool is found but its query fails (#12666) by @yiliang114
fix(core): rank PreToolUse permissionDecision most-restrictive in hook aggregation (#12689) by @yiliang114
fix(cli): close the deferred /context accounting follow-ups (#12540) by @yiliang114
fix(core): deduplicate system prompt guidance in a second pass (#12546) by @doudouOUC

Performance

perf(cli): keep running in place when env files only hold model credentials (#12680) by @tanzhenxin
perf(cli): halve fresh-startup time to typeable and cut RSS by 60% (#12622) by @tanzhenxin
perf(serve): coalesce in-flight extension status loads (#12638) by @callmeYe

Internal Changes

test(java): pin runtime-broker guards left open in earlier reviews (#12632) by @wenshao
test(cli): pin the managed-runtime worker's boot, bind and shutdown guards (#12633) by @wenshao
chore(desktop): rename packages/desktop-shell to packages/desktop (#12653) by @yiliang114
test(java): wait for a renewal at the advanced time in lease renewal tests (#12656) by @wenshao

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.24.5...v0.24.6

0.24.5 - 2026-09-24

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(channels): decouple group-member access from senderPolicy (#12475) by @qwen-code-dev-bot
feat(cli): Add managed runtime attestation worker (#12506) by @doudouOUC
feat(serve): restore serve.channels once for a workspace registered after boot (#12396) by @qqqys
feat(core): record when each tool call started (#12517) by @qqqys
feat(cua): unify App workflows and fix no-Metal capture for SDK 0.20.11 (#12386) by @LaZzyMan
feat(web-shell): trajectory overview strip showing where a run spent its time (#12524) by @qqqys
feat(web-shell): load the whole trajectory window before drawing it (#12533) by @qqqys
feat(web-shell): add shared URL navigation for pages and sessions (#12499) by @Lilian0122
feat(web-shell): edit group senders and session operators in the channel editor (#12535) by @qqqys
feat(sdk-java): Add managed runtime attestation client (#12522) by @doudouOUC
feat(web-shell): select a time range on the trajectory overview to narrow the table (#12543) by @qqqys
feat(serve,web-shell): set the Qwen Live endpoint and model from settings (#12529) by @qqqys
feat(channels): separate private and group access policies (#12547) by @qqqys
feat(serve): run Qwen Live through the Web Shell, native macOS Host opt-in (#12534) by @qqqys
feat(web-shell): search within the current conversation (#12234) by @samuelhsin
feat(web-shell): add host controls for model management (#12345) by @Lilian0122
feat(browser-use): make the bundled runtime self-contained (#12548) by @tanzhenxin
feat(web-shell): zoom and pan the trajectory overview (#12557) by @qqqys
feat(review): audit the applied --fix for unpinned new assumptions (#10169) by @wenshao
feat(channels): route messages to prefix-specific sessions (#12595) by @qqqys
feat(web-shell): show the trajectory over real time, idle included (#12607) by @qqqys
feat(sdk-java): Adopt a Managed Runtime only after attestation (#12552) by @doudouOUC
feat(web-shell): inspect session tool calls by prompt (#12466) by @ytahdn
feat(web-shell): support selective host artifact integration (#12588) by @dreamWB
feat(live): stream shared screens into browser voice calls (#12623) by @qqqys
feat(desktop): add QWEN_DESKTOP_DISABLE_UPDATES opt-out for the startup update check (#12587) by @yiliang114
feat(review): record per-file content verdicts that survive a rebase (#9661) by @wenshao
feat(web-shell): manage the repository's worktrees from the git dialog (#12154) by @wenshao

Bug Fixes

fix(vscode-ide-companion): regenerate NOTICES.txt after release dependency reorder (#12479) (#12483) by @qwen-code-dev-bot
fix(java): Fence stale tool dispatch owners (#12477) by @doudouOUC
fix(java): Make JDBC lease clocks timezone and storage safe (#12478) by @doudouOUC
fix(cli): hide external editor option when the configured editor is unavailable (#12498) by @yiliang114
fix(review): Move trusted state outside workspaces (#12491) by @doudouOUC
fix(cli): report clipboard unavailability on Linux instead of failing silently (#12489) by @yiliang114
fix(release): keep manifest layout when bumping versions (#12487) by @yiliang114
fix(chrome-extension): make the store release fail where it can be read (#12392) by @tanzhenxin
fix(cli): report clipboard unavailability when the native module throws (#12508) by @yiliang114
fix(web-shell): keep mobile composer controls reachable above a soft keyboard (#12462) by @wenshao
fix(web-shell): open an ordinary task from New task in a Live chat (#12516) by @qqqys
fix(channels): one operator rule for shared sessions, with an explicit operators list (#12515) by @qqqys
fix(core): Simplify system prompts and remove conflicting examples (#12360) by @doudouOUC
fix(web-shell): keep New task from a Live chat off the Live context without a trusted primary (#12519) by @qqqys
fix(cli): scroll conversation on bare Up/Down in VP mode with empty input (#12518) by @yiliang114
fix(vscode-ide-companion): stop sending unregistered client id on message-edit rewind (#12502) by @yar3333
fix(dws): keep document threads and todos on the direct-message axis (#12525) by @qqqys
fix(serve): never hold a workspace registration on the channel-control lane (#12527) by @qqqys
fix(web-shell): settle stale streaming messages when idle (#12439) by @callmeYe
fix(core): register session commits so the amend exemption is reachable (#12463) by @yiliang114
fix(serve): preserve session creation failure diagnostics (#12331) by @callmeYe
fix(core): bound oversized images returned by MCP tools (#10835) by @yiliang114
fix(core): decide MCP media handling from the bytes, not the label (#12567) by @yiliang114
fix(core): read a backslash inside single quotes as literal when splitting (#11765) by @TianYuan1024
fix(skills): reload changed content after refresh (#12182) by @jkxiao
fix(cli): keep CoreToolScheduler stable across callback identity changes (#12069) by @kabishou11
fix(web-shell): make mobile access opt-in and simplify split composer (#12537) by @ytahdn
fix(cli): keep 64-bit file ids exact in the two identity comparators (#12568) by @yiliang114
fix(cli): keep plan-identity guards exact for 64-bit file ids (#12577) by @yiliang114
fix(java): Deliver broker cancellation after a dispatch lease lapses (#12583) by @wenshao
fix(core): label each reattached image so older ones are not read as current (#12549) by @yiliang114
fix(java): Fence lapsed tool executions by the repository clock (#12608) by @wenshao
fix(review): correct what the fix audit tells its reader (#12610) by @wenshao
fix(serve): report serve.channels restore failures in channel status (#12542) by @qqqys
fix(web-shell): stop rendering empty args and input JSON in tool cards (#12601) by @yiliang114
fix(core): cover every commit spelling and the promoted path in session-commit registration (#12556) by @yiliang114
fix(cli): honor the usage-statistics opt-out under --bare (#12604) by @yiliang114
fix(ci): trust the job workspace as a git safe.directory before checkout (#12648) by @yiliang114

Performance

perf(core): move the Agent tool's prompt-writing guidance into a bundled skill (#12323) by @yiliang114
perf(serve): use catalog for workspace extension activation projection (#12541) by @callmeYe
perf(web-shell): derive the session workflow projection once and share it across surfaces (#10865) (#11237) by @now-ing
perf(cli): stop one-shot runs from booting the CLI twice (#12602) by @yiliang114
perf(cli): skip interactive-only probes on headless startup (#12603) by @yiliang114

Documentation

fix(core,docs): correct what the deferred-tool bridge made stale or untested (#12355) by @yiliang114
docs(plans): record why CI test time is bound by module import, not scheduling (#10909) by @yiliang114
docs(verify-pr): add persisted-state, steady-state and skip-coverage rules (#12456) by @wenshao
docs(browser-use): point users at the Chrome Web Store listing (#12510) by @tanzhenxin
docs(design): add Chinese translation of the memory pressure monitor design (#12521) by @yiliang114
docs(extensions): cover workflow reload and add Chinese design (#12625) by @BlackishGreen33
docs: fix /clear description, .qwen note, and outdated CLI name (#12555) by @yc2bgr8
docs(conversations-recovery): document non-graceful ACP writer recovery (#12268) by @dvd233
docs: fix comments and JSDoc that contradict the actual code (#11950) by @sxh313
docs(tools): add Firecrawl to the web search MCP services (#12646) by @JuampiHernandez

Internal Changes

chore(vscode-ide-companion): regenerate NOTICES.txt after dependency reorder (#12481) (#12485) by @qwen-code-dev-bot
refactor(channels): move group senders into groups and resolve them per conversation (#12520) by @qqqys
test(cli): yield the event loop between base-tree tests (#12573) by @wenshao
test(review): drive the fix-audit build through the yargs command (#12614) by @wenshao
test(review): add hard-link witness test to save-artifact overwrite guard (#12578) (#12581) by @holny
test(java): make the local-process provisioner tests deterministic (#12639) by @wenshao

New Contributors

@yar3333 made their first contribution in #12502
@jkxiao made their first contribution in #12182
@BlackishGreen33 made their first contribution in #12625
@yc2bgr8 made their first contribution in #12555
@sxh313 made their first contribution in #11950
@holny made their first contribution in #12581
@JuampiHernandez made their first contribution in #12646

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.24.4...v0.24.5

0.24.4 - 2026-09-22

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(core): add monitor tool to system prompt guidance (#12408) by @yiliang114
feat(daemon): Add batched workspace session catalogs (#12254) by @samuelhsin
feat(review): record what a plan was computed from, and report drift (#12369) by @wenshao
feat(java): Add managed tool execution state (#12391) by @doudouOUC
feat(serve): support SSH workspaces without a remote daemon (#12255) by @wenshao
feat(web-shell): enable expiring QR pairing on non-loopback listeners (#12322) by @wenshao
feat(mobile): add encrypted, isolated connection profiles (Phase 2) (#12121) by @jabrailkhalil
feat(java): Add runtime broker service core (#12438) by @doudouOUC
feat(cli): Add managed runtime attestation contract (#12447) by @doudouOUC
feat(serve): Add opt-in fixed ACP child heap enforcement (#12353) by @doudouOUC
feat(cli): Move bwrap sandboxing to tool execution (#12267) by @doudouOUC
feat(serve): add --token-qr escape hatch and address-only QR fallback (#12266) by @wenshao
feat(java): Persist managed tool executions with JDBC (#12445) by @doudouOUC

Bug Fixes

fix(review): keep unplanned chunks out of coverage, and read the denominator from the plan (#12370) by @wenshao
fix(core): accept nullable pagination when reading notebooks (#12421) by @DragonnZhang
fix(cli): clean up stale session debug logs (#12374) by @doudouOUC
fix(web-shell): isolate npm pack diagnostics from verifier output (#12367) by @dvd233
fix(live): spend JPEG quality, not pixels, when a shared screen will not fit (#12397) by @qqqys
fix(web-shell): expose markdown message completion state (#12431) by @callmeYe
fix(web-shell): verify wildcard export targets against the packed file list (#12364) by @yiliang114
fix(web-shell): recover queued prompt binding after refresh failure (#12279) by @elizabethbrunette21
fix(desktop): restore window zoom in the Tauri shell (#12410) by @yiliang114
fix(web-shell): preserve reference tags across reloads (#12404) by @ytahdn
fix(web-shell): browse remote workspace folders without page refresh (#12412) by @yiliang114
fix(cli): close the remaining OpenTUI parity gaps against ink (#12309) by @chiga0
fix(core): warn when tools.eager entries match no discovered tool (#12451) by @yiliang114
fix(web-shell): open a Live session on a daemon serving one project (#12441) by @qqqys
fix(web-shell): show edit diffs before approval (#12443) by @yiliang114

Documentation

docs: update README hero image (#12474) by @yiliang114

Internal Changes

refactor(build,release): Use pnpm workspace builds and publishing (#12400) by @yiliang114
test(scripts): warm the pinned corepack pnpm cache before workers fork (#12436) (#12446) by @qwen-code-dev-bot
chore(cli): bump the OpenTUI renderer to 0.5.10 (#12321) by @chiga0
chore(sdk-java): bump fastjson2 to 2.0.65 (#12465) by @wenshao

New Contributors

@elizabethbrunette21 made their first contribution in #12279

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.24.3...v0.24.4

0.24.3 - 2026-09-21

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Web Shell

Web Shell gains structured shell results, optional trajectory metrics, host settings allowlists, and mobile navigation fixes.

Web Shell now presents structured shell execution results with command, output, execution details, elapsed time, and scrollable content. (#12311)
Adds an opt-in trajectory table tab in Web Shell showing per-turn durations, time to first token, token counts, and tool timing. (#12388)
web-shell: support host settings item allowlists (#12328)
web-shell: restore mobile history navigation (#12362)
web-shell: stop the header title from showing the new-session placeholder (#12379)

Live Voice

Live Voice capture moves to AudioWorklet with a fallback, improves failure reporting, and supports shared-screen requests.

Live Voice microphone capture now uses an AudioWorklet with the old ScriptProcessorNode kept as fallback, reducing main-thread work while preserving level metering and call gating. (#12338)
live: report the cause when Live Voice fails to start with a non-Error (#12377)
live: let a browser Host answer a screen request from a shared screen (#12378)

Runtime and sessions

Runtime foundations add managed state, session records, JDBC persistence, and broader serve channel restoration.

java: Add managed runtime state foundation (#12301)
core: Add managed session record foundation (#12302)
Adds JDBC persistence for Runtime bindings and sessions, enabling shared state across broker processes and restart-safe ownership. (#12390)
qwen serve now restores serve.channels from every trusted workspace at boot, not just the primary workspace. (#12385)

Review workflow

Review behavior becomes more focused with critical fix-audit rounds and safer base-tree reuse.

review: swap re-review rounds to a fix-audit shape under the critical posture (#10136)
Fixes review base-tree reuse by storing merge-base evidence outside the mounted sandbox, so stale or conflicting anchors are rejected based on trusted host-side lease state. (#11540)

Chrome extension

Chrome extension release packaging and privacy documentation are now in place.

Adds Chrome Web Store packaging and a release workflow that can build, scan, upload, and optionally publish the Chrome extension during stable releases or manual dispatch. (#12329)
chrome: disclose browser data handling and limited use (#12330)

Desktop and CLI

macOS gets a native integrated title bar, CLI startup is more resilient, and history retry states are clearer.

macOS desktop now uses an integrated native title bar with content painted behind traffic-light controls and a dedicated drag region. (#12393)
CLI startup no longer crashes when the output-language file cannot be written; it continues without the file. (#10455)
History entries that cannot be retried now expose argsUnavailable so clients can accurately reflect retry limitations. (#12349)

Performance and execution

Headless execution is leaner and duplicate workspace-provider requests are coalesced.

One-shot headless execution now defaults to a pipe-based shell backend and optimizes relaunch behavior for lower overhead. (#12340)
Concurrent workspace-providers requests for the same resolved URL now share one in-flight request, reducing duplicate network calls without adding caching or TTL behavior. (#12327)

Other Changes

core: Route runtime tools through bwrap (#12269)
workflows: write a resumed run's checkpoint before it registers (#12347)
core: reject broadcast-capable hook PIDs (#12344)
E2E CI install steps now retry transient npm ci failures up to three times before failing, reducing flaky workflow breaks. (#11731)
Release standalone archive downloads now use timeouts and retries with checksum verification inside the retry loop, improving resilience to transient network failures. (#11879)
Channel grouping can now accept an ownership hint to resolve ambiguous channel names and skip tolerated names while preserving existing behavior. (#12383)
Updates SDK E2E integration assertions to recognize deferred MCP tool calls while still accepting direct MCP tool-use blocks. (#12365)
Defines a versioned private protocol foundation for Hosted Harness, including capability envelope, boot fence, and request validation. (#12409)
test(cli): keep an ambient GIT_CONFIG_GLOBAL from hijacking withHome (#12407)
release: resume automated web-shell publishing (#12387)

中文摘要

Web Shell

Web Shell 新增结构化 shell 结果、可选 trajectory 指标、主机设置白名单，并修复移动端历史导航。

Web Shell 现在以结构化方式展示 shell 执行结果，包含命令、输出、执行详情、耗时和可滚动内容区域。 (#12311)
Web Shell 新增可选的 trajectory 表格页签，展示每轮耗时、首 token 时间、token 数量和工具调用耗时。 (#12388)
新增可选 settings.includeItems 白名单，主机可仅显示指定设置和内置块；excludeItems 优先，空白名单显示空状态。 (#12328)
web-shell: restore mobile history navigation (#12362)
web-shell: stop the header title from showing the new-session placeholder (#12379)

Live Voice

Live Voice 麦克风采集改用 AudioWorklet 并保留回退，改进启动失败原因展示，并支持从共享屏幕响应请求。

Live Voice 麦克风采集改用 AudioWorklet，并保留旧 ScriptProcessorNode 作为回退，减少主线程负担，同时保持电平表和通话控制行为不变。 (#12338)
live: report the cause when Live Voice fails to start with a non-Error (#12377)
live: let a browser Host answer a screen request from a shared screen (#12378)

运行时与会话

运行时基础新增托管状态、会话记录、JDBC 持久化，并在启动时恢复更多受信任 workspace 的 serve.channels。

java: Add managed runtime state foundation (#12301)
core: Add managed session record foundation (#12302)
为 Runtime bindings 和 sessions 添加 JDBC 持久化，支持跨 broker 进程共享状态及重启后保留所有权。 (#12390)
qwen serve 现在在启动时会恢复所有受信任 workspace 的 serve.channels，而不仅是主 workspace。 (#12385)

审查工作流

审查行为更聚焦：critical 多轮审查改用 fix-audit 形态，并修复基础树复用的锚点校验。

当多轮 /review 明确进入仅发布 critical 的模式且存在增量锚点时，改用更窄的 fix-audit 形态，而不是重复完整首轮审查。 (#10136)
修复 review 基础树复用问题：将合并基准证据移出挂载沙箱，基于主机侧租约状态拒绝过期或冲突的锚点。 (#11540)

Chrome 扩展

Chrome extension 新增打包与发布工作流，并补充浏览器数据处理与隐私说明。

新增 Chrome Web Store 打包与发布工作流，可在稳定版发布或手动触发时构建、扫描、上传并可选发布 Chrome extension。 (#12329)
更新隐私文档，披露浏览器数据处理、extension 权限、本地 token 存储、模型提供方传输、保留控制和 Limited Use 承诺。 (#12330)

桌面端与 CLI

macOS 使用集成原生标题栏，CLI 启动更稳健，历史记录重试限制展示更准确。

macOS 桌面端现在使用集成的原生标题栏，内容延伸至窗口控制按钮后方，并保留专用拖拽区域。 (#12393)
当 output-language 文件无法写入时，CLI 启动不再崩溃，而是继续运行。 (#10455)
无法重试的历史记录现在会标记 argsUnavailable，使客户端能准确反映重试限制。 (#12349)

性能与执行

一次性 headless 执行开销更低，相同 workspace-providers URL 的并发请求会合并。

一次性 headless 执行现在默认使用基于 pipe 的 shell 后端，并优化重启行为以降低开销。 (#12340)
针对同一已解析 URL 的并发 workspace-providers 请求现在会共享同一个进行中的请求，减少重复网络调用，且不引入缓存或 TTL。 (#12327)

其他变更

新增内部运行时支持，为各工具启用 bwrap 隔离并应用不可变工作区策略，同时禁用不受支持的主机副作用路径，本阶段暂不公开设置。 (#12269)
workflows: write a resumed run's checkpoint before it registers (#12347)
core: reject broadcast-capable hook PIDs (#12344)
E2E CI 安装步骤现在会对瞬时 npm ci 失败最多重试三次后再失败，减少工作流误报。 (#11731)
发布流程中的 standalone 归档下载现在使用超时与重试，并在重试循环内校验 checksum，提高对瞬时网络故障的容错能力。 (#11879)
channel 分组现在可接受 ownership hint，以解析歧义 channel 名称并跳过可容忍名称，同时保持现有行为。 (#12383)
更新 SDK E2E 集成断言，使其能识别延迟 MCP 工具调用，同时继续支持直接 MCP 工具调用。 (#12365)
为 Hosted Harness 定义版本化私有协议基础，包含能力封装、启动防护和请求校验。 (#12409)
test(cli): keep an ambient GIT_CONFIG_GLOBAL from hijacking withHome (#12407)
release: resume automated web-shell publishing (#12387)

Complete Change List (31 pull requests)

Features

web-shell: capture the Live Voice microphone with an AudioWorklet (#12338) by @qqqys
core: Route runtime tools through bwrap (#12269) by @doudouOUC
review: swap re-review rounds to a fix-audit shape under the critical posture (#10136) by @wenshao
chrome-extension: publish the extension to the Chrome Web Store (#12329) by @tanzhenxin
web-shell: support host settings item allowlists (#12328) by @Lilian0122
java: Add managed runtime state foundation (#12301) by @doudouOUC
core: Add managed session record foundation (#12302) by @doudouOUC
live: let a browser Host answer a screen request from a shared screen (#12378) by @qqqys
serve: let channel grouping take an ownership hint and skip tolerated names (#12383) by @qqqys
serve: restore every trusted workspace's own serve.channels at boot (#12385) by @qqqys
java: Add JDBC binding and session persistence (#12390) by @doudouOUC
web-shell: present structured shell execution results (#12311) by @ytahdn
web-shell: trajectory table showing where a run spent its time (#12388) by @qqqys
desktop: integrate the macOS title bar (#12393) by @yiliang114
serve: Define Hosted Harness private protocol (#12409) by @doudouOUC

Bug Fixes

review: fence base-tree reuse on state kept outside the mount (#11540) by @wenshao
web-shell: restore mobile history navigation (#12362) by @wenshao
workflows: write a resumed run's checkpoint before it registers (#12347) by @qqqys
live: report the cause when Live Voice fails to start with a non-Error (#12377) by @qqqys
core: reject broadcast-capable hook PIDs (#12344) by @yiliang114
web-shell: stop the header title from showing the new-session placeholder (#12379) by @ytahdn
ci: retry transient npm ci failures in e2e.yml install steps (#11726) (#11731) by @qwen-code-dev-bot
release: retry transient standalone runtime downloads (#11870) (#11879) by @qwen-code-dev-bot
cli: don't crash startup when the output-language file is unwritable (#10453) (#10455) by @qwen-code-dev-bot
serve: tell clients which history entries cannot be retried (#12349) by @qqqys
release: resume automated web-shell publishing (#12387) by @yiliang114

Performance

sdk: dedupe in-flight workspace-providers requests per resolved URL (#12327) by @Willam2004
cli: optimize one-shot headless execution (#12340) by @yiliang114

Documentation

chrome: disclose browser data handling and limited use (#12330) by @tanzhenxin

Internal Changes

test(integration): support deferred MCP tool calls in SDK E2E (#12365) by @dvd233
test(cli): keep an ambient GIT_CONFIG_GLOBAL from hijacking withHome (#12407) by @yiliang114

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.24.2...v0.24.3

0.24.2 - 2026-09-20

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(web-shell): restore remote workspace add flow (#12085) by @yiliang114
feat(web-shell): expose assistant turn settlement lifecycle (#11251) by @yiliang114
Adds an internal bwrap-based Linux sandbox execution foundation with structured process launching, supervision, and confined worker support. (#12067) by @doudouOUC
feat(web-shell): choose the Live Voice model and voice from the setup card (#12199) by @qqqys
feat(web-shell): expose slash-command exports as artifacts (#12050) by @ytahdn
feat(browser-use): support concurrent sessions sharing a Chrome profile (#12229) by @tanzhenxin
feat(web-shell): simplify mobile composer actions (#12252) by @wenshao
feat(cli,docs): attribute each context file to its extension, and say what one costs (#12318) by @yiliang114
feat(core): judge each inbound cross-session message for the session it is addressed to (#12292) by @qqqys
feat(web-shell): open link artifacts in a new page (#12317) by @ytahdn
feat(web-shell): show the microphone level during a browser Live Voice call (#12294) by @qqqys
feat(acp-bridge): surface request and tool timing on paged transcript replay (#12304) by @qqqys
feat(serve): retry and rerun workflow runs from persisted history (#12291) by @qqqys
feat(web-shell): move the workspace and git chips out of the composer toolbar (#12299) by @ytahdn
feat(core,docs): add conditional extension rules and cap context warnings (#12034) by @yiliang114
feat(web-shell): project paged transcript events into a trajectory (#12337) by @qqqys
feat(core): preserve prompt cache for deferred tools (#10410) by @DragonnZhang
feat(core): let a background turn carry a message from another session (#12342) by @qqqys

Bug Fixes

fix(ci): reclaim Docker cache and clean review scratch directories (#12135) by @yiliang114
fix(core): handle simple Bash comments in permission rules (#12096) by @yiliang114
fix(ci): pass --allow-escape-sequences to the failure watcher's job-log download (#12117) by @qwen-code-dev-bot
fix(cli): require explicit trust for undecided workspaces (#12198) by @yiliang114
fix(web-shell): make the published package resolvable for consumers (#12188) by @yiliang114
Updates the active Plan chip in the Web Shell composer to use neutral background and theme-matched text/icons for better light/dark theme consistency. (#12241) by @wenshao
Gives the Git mode chip in the Web Shell composer a neutral background and border while keeping colored Git icons to distinguish branch and worktree modes. (#12251) by @wenshao
Reworks the /context breakdown so category rows partition request content and sum to the provider-reported total, improving token usage accuracy. (#12119) by @yiliang114
fix(ci): retry transient E2E build artifact download failures once (#12125) (#12128) by @qwen-code-dev-bot
fix(web-shell): hand keyboard focus on when the Plan chip goes (#12248) by @wenshao
fix(web-shell): contain the inline message editor in narrow panes (#12175) by @Lilian0122
fix(export): raise the document runtime budget for transcript growth (#12298) by @yiliang114
fix(web-shell): keep Live Voice strings out of the exported transcript renderer (#12305) by @qqqys
fix(web-shell): keep Live Voice entry in live boundary (#12319) by @yiliang114
fix(core): hide unavailable image zoom guidance (#12271) by @yiliang114
fix(core): gate teammate guidance and budget large tool surfaces (#12142) by @yiliang114
fix(web-shell): avoid unnecessary table horizontal scrolling (#12312) by @ytahdn
fix(web-shell): check publish artifacts against the npm pack list (#12343) by @yiliang114
fix(workflows): write run snapshots atomically (#12341) by @qqqys

Documentation

docs(session-recovery): sync shape-B claims with the landed provenance channel (#12203) by @yiliang114
Documents why the remote webview daemon URL rejects bracketed IPv6 literals, noting Chromium CSP limitations and alignment with existing daemon URL handling. (#12140) by @yiliang114
docs(serve): Document ACP child heap calibration (#12265) by @doudouOUC

Internal Changes

Adds the review-scratch suite to the CI yaml import ratchet guard and corrects the suite count comment to keep fast-lane import checks accurate. (#12259) by @yiliang114
Fixes a Windows test failure by adjusting an scp-like remote removal fixture so it is not interpreted as a drive-relative local path. (#12263) by @yiliang114
Simplifies remote workspace flow in Web Shell by sharing remote-add and connection-add navigation, keeping daemon links tab-scoped, and reducing duplicate labels. (#12264) by @yiliang114
test(core): skip the bwrap execution suite on win32 (#12281) (#12282) by @qwen-code-dev-bot
ci(shepherd): close bot PRs whose merge would change nothing (#12150) by @wenshao
ci(pnpm): install with pnpm everywhere and retire package-lock.json (#11859) by @yiliang114
test(web-shell): guard Live strings on the built transcript bundle, not the source tree (#12316) by @qqqys
refactor(browser-use): accept a set of Chrome extension ids (#12300) by @tanzhenxin
test(core): report what a tool-surface configuration actually withholds (#12346) by @yiliang114

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.24.1...v0.24.2

0.24.1 - 2026-09-19

Highlights

See the complete change list below.

Breaking Changes

refactor(goal)!: stop emitting the active_goal stream event (#12181) by @qqqys

Complete Change List

Features

feat(workflows): let agent() narrow a subagent to an explicit tool allowlist (#12051) by @qqqys
feat: select the OpenAI wire API per model (#11538) by @tanzhenxin
feat(core): identify hook invocations in progress events and announce the message bus (#12075) by @qqqys
feat(external-context): Support configurable Mem0 providers (#9952) by @yiliang114
feat(web-shell): support host settings item exclusions (#11975) by @Lilian0122
feat(web-shell): fold oversized pastes into an attachment card (#12084) by @ytahdn
feat(browser-use): add Playwright-based Browser SDK (#11241) by @tanzhenxin
feat(workflows): add a name-only lock that restricts the Workflow tool to named workflows (#12078) by @qqqys
feat(web-shell): manage git remotes from the workspace branch picker (#11163) by @wenshao
feat(cli): write Goal state records into session exports (#12099) by @qqqys
feat(goal): judge terminal proposals from the transcript tail (#12105) by @qqqys
feat(web-shell): add PWA installability and Android development shell (#11722) by @jabrailkhalil
feat(core): define enabled and disabledReason in the hooks listing (#12139) by @qqqys
feat(core): export hook event display metadata and pure timeout helpers (#12138) by @qqqys
feat(browser-use): add Chrome Native Messaging relay (#11242) by @tanzhenxin
feat(workflows): record a checkpoint for every run and surface runs a restart interrupted (#12159) by @qqqys
feat(web-shell): render the compression outcome from structured meta (#12141) by @ytahdn
feat(core): add container execution for subagents (#11711) by @wenshao
feat(web-shell): draw the commit history as a lane graph, across all branches, with search (#12152) by @wenshao
feat(live): admit the Web Shell as a browser Live Host (#12166) by @qqqys
feat(web-shell): add per-turn satisfied / not satisfied marks (#12174) by @ytahdn
feat(live): resolve the Live Voice model from a realtimeOnly modelProviders route (#12173) by @qqqys
feat(web-shell): publish the package with the cli release (#12178) by @yiliang114
feat(core): assemble the system prompt from the resident tool set (#12145) by @yiliang114
feat(web-shell): hold a Live Voice call from the browser (#12189) by @qqqys
feat(web-shell): show a Goal's turn and active-time ceilings on the status strip (#12201) by @qqqys
feat(serve): let users stop workspace runtimes to release ACP capacity (#12008) by @doudouOUC
feat(web-shell): move the Plan entry into the composer add menu (#12218) by @wenshao

Bug Fixes

fix(ci): wait for the published export renderer before packaging the VSIX (#12036) by @yiliang114
fix(web-shell): stop dropping the daemon credential on two navigation paths (#12011) by @yiliang114
fix(acp): restore managed auto-memory extraction (#12018) by @yiliang114
fix(cli): close twelve OpenTUI parity gaps found against ink (#11806) by @chiga0
fix(core): count Stop-hook blocks across tool round trips (#12062) by @qqqys
fix(core): avoid false interruption after completed slash commands (#12052) by @ytahdn
fix(web-shell): restore context usage after page refresh (#12070) by @ytahdn
fix(desktop): wait out the daemon drain before removing the smoke workspace (#12049) by @yiliang114
fix(core,cli): green the Windows lane's three remaining failures (#12063) by @yiliang114
fix(ci): wait for the release on npm before dispatching the benchmark (#12086) by @yiliang114
fix(extensions): show progress and clear the update flag after an update (#11886) by @yiliang114
fix(acp): preserve user resource links in transcript replay (#12088) by @XIQIXIQIXIQI
fix(core): load system-scope hooks under their own source (#12077) by @qqqys
fix(core): report real outcomes from the http, prompt and function hook runners (#12081) by @qqqys
fix(core): scrub a known path the filesystem re-spells (#12087) by @yiliang114
fix(vscode): reject unsupported IPv6 remote webview URLs (#12092) by @yiliang114
fix(web-shell): alias the tools.workflowNameOnly settings row (#12100) by @yiliang114
fix(web-shell): alias tools.workflowNameOnly in the settings panel (#12094) (#12103) by @qwen-code-dev-bot
fix(cli): prefer per-session cached token count in /context (#12066) by @kabishou11
fix(core): keep MCP App html in recorded transcripts so replay can render (#12131) by @yiliang114
fix(core): resolve DeepSeek's official API deepseek-flash name at V4 limits (#11909) by @he-yufeng
fix(core): keep the DeepSeek V4 generation suffix through model-name normalization (#12124) by @he-yufeng
fix(core): treat only space/tab/newline as word separators in isAsyncOperator (#11865) by @yiliang114
fix(mcp): show MCP App resource load warnings (#11960) by @doudouOUC
fix(serve): read channel settings from user scope when workspace is home (#11083) by @yiliang114
fix(core): purge a deleted session's prompts from the log history (#11769) by @L4XB
fix(workflows): refuse a resume that has no journal, and keep a run's sourceRef across restarts (#12097) by @qqqys
fix(web-shell): keep first-prompt session when its attach is superseded (#12149) by @cactuser-Lu
fix(goal): say which newer records recovery walked past (#12148) by @qqqys
fix(review): put PR worktree absolute path in dimension-agent briefs (#11926) by @kabishou11
fix(web-shell): allow sequential SDK requests during session creation (#11913) by @shenyankm
fix(web-shell): keep the mermaid canvas fixed while zooming out (#12177) by @ytahdn
fix(core): stop session recovery from flagging unanswered notifications (#12007) by @yiliang114
fix(cli): keep full-turn tool cancellation out of the error path (#11154) by @yiliang114
fix(release): temporarily pause web-shell publishing (#12202) by @yiliang114
fix(core): parse LSP frames by byte length so non-ASCII responses are not dropped (#12210) by @yiliang114
fix(desktop): stage the node-pty prebuild into the bundled runtime (#12225) by @yiliang114

Performance

perf(core): manifest-only refresh for the extension catalog route (#12153) by @callmeYe

Documentation

docs(serve): record merged ACP boundary acceptance (#12024) by @wenshao
docs(hooks): merge the duplicated Browsing sections (#12071) by @qqqys
docs(core): tell /goal-draft the objective limit propose_goal enforces (#12101) by @qqqys
docs(ci): explain why the review-pr sweep needs a whole-workspace quarantine (#10493) by @CanReader
docs(daemon): complete REST integration coverage (#12144) by @yiliang114
docs(config): note baseUrl is the /v1 root for hosted OpenAI-compatible gateways (#10362) (#11155) by @now-ing
docs(verify-pr): add local follow-up discovery, publish path, and build recipes (#12232) by @wenshao

Internal Changes

test(cli): refresh the loop-guard comments to the shipped mechanism (#12065) by @yiliang114
test(core): compare hook progress outcomes without the invocation id (#12104) by @qqqys
refactor(goal): stop showing checkpoint health on every surface (#12114) by @qqqys
refactor(goal): delete the evidence checkpoint and catalog code (#12120) by @qqqys
refactor(cli): draw the ink Goal cards from the view OpenTUI already uses (#12110) by @qqqys
test(serve): bind guide operations to their protocol sections (#11808) by @mohammedmessaoudene-cmd
refactor(goal): cut what the Goal tools cost every model request by two fifths (#12123) by @qqqys
test(cli): step through Grok before MiniMax in the provider-order test (#10089) by @harjothkhara
test(sdk): validate content block stops per message (#12158) by @yiliang114
refactor(goal): retire recovery of Goals recorded before Goal state was journaled (#12155) by @qqqys
refactor(goal): keep one Goal card on the ACP wire and name the module for it (#12187) by @qqqys
refactor(goal): read the unreadable-state running card through the core reader (#12194) by @qqqys
test(core): await full run exit before resuming in the authoring-hint test (#12196) by @yiliang114

New Contributors

@Lilian0122 made their first contribution in #11975
@jabrailkhalil made their first contribution in #11722
@mohammedmessaoudene-cmd made their first contribution in #11808
@L4XB made their first contribution in #11769

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.24.0...v0.24.1

0.24.0 - 2026-09-16

Highlights

See the complete change list below.

Breaking Changes

fix(core)!: let bash expand project directory variables in command hooks (#11864) by @qqqys

Complete Change List

Features

feat(core): cap web_search calls per session (#11852) by @qqqys
feat: track background result execution across daemon and web shell (#11636) by @ytahdn
feat(cli): full /hooks dialog in OpenTUI (#11903) by @qqqys
feat(core): emit hook progress events (#11906) by @qqqys
feat(extensions): ship dynamic workflows from extensions (#11805) by @qqqys
feat(channels): add shared output modes with DingTalk support (#11822) by @qqqys
feat(web-shell): slide the active pill between tabs (#11844) by @callmeYe
feat(daemon): enumerate installed extension skills locally (#11281) by @callmeYe
feat(web-shell): follow the reading position in the global turn navigation (#11801) by @callmeYe
feat(workflows): share a per-turn token budget from a +Nk directive (#11917) by @qqqys
feat(serve): add budget-based ACP child admission (#11911) by @doudouOUC
feat(cli): add bwrap kernel sandbox backend for Linux (#11614) by @doudouOUC
feat(core): support external reasoning profiles and defaults (#11856) by @callmeYe
feat(settings): turn cross-session messaging on by default (#11840) by @qqqys
feat(core): run saved workflows by name and pin workflow grants to script content (#11943) by @qqqys
feat(workflow): preserve source references across runs and resumes (#11931) by @qqqys
feat(workflow): correlate agent dispatches and nested workflow calls (#11932) by @qqqys
feat(workflows): size guideline, structure preview and large-run warning (#11939) by @qqqys
feat(workflows): let the model invoke extension workflows that declare whenToUse (#11957) by @qqqys
feat(daemon): support summary projection for prompt and replay APIs (#11920) by @ytahdn
feat(web-shell): add footnote previews and per-turn sources (#11480) by @callmeYe
feat(telemetry): emit a Goal lifecycle event and metrics (#11927) by @qqqys
feat(cli): reload hook registry when /hooks opens (#11904) by @qqqys
feat(serve): reclaim idle ACP children when admission is full (#11940) by @doudouOUC
feat(web-shell): connect to a selected remote daemon (#11548) by @yiliang114
feat(web-shell): preview files from expanded tool details (#11982) by @ytahdn
feat(serve): start workflow runs with args, sourceRef and a caller-supplied script (#11979) by @qqqys
feat(web-shell): customize context details and collapse snapshots (#11996) by @ytahdn
feat(goal): bill foreground subagents and verifier token usage (#11998) by @qqqys
feat(dingtalk): carry sender identity in direct messages (#12017) by @BenGuanRan
feat(goal): show turn and active-time budgets (#11999) by @qqqys
feat(omni): integrate multimodal media pipeline into main (#12019) by @LaZzyMan

Bug Fixes

fix(cua): preserve Linux observations and REPL diagnostics (#11829) by @DragonnZhang
fix(cua): make Linux input delivery adaptive (#11876) by @LaZzyMan
fix(core): keep escaped whitespace at pipe-list entry edges (#11860) by @qqqys
fix(serve): resolve skill identity from the catalog for toggle guards (#11831) by @harjothkhara
fix(standalone): bundle @lydell/node-pty prebuilds so the web terminal works (#11881) by @yiliang114
fix(cua): bound Linux observations and prepare SDK 0.20.9 (#11910) by @LaZzyMan
fix(cli): scope the ACP permission queue to the session (#11802) by @chiga0
fix(ci): separate autofix runner labels from queued reviews (#11912) by @yiliang114
fix(cli): restore shared Skill status and runner CI checks (#11933) by @qqqys
fix(vscode): retire legacy ACP input bridges (#11928) by @yiliang114
fix(web-shell): show Qwen Live tasks in session sidebar (#11830) by @qqqys
fix(ci): isolate runner schedule fixture module scope (#11938) by @doudouOUC
fix(core): carry the PTY load reason on the call, not in module state (#11923) by @yiliang114
fix(core): keep escaped trailing whitespace when trimming hook matchers (#11871) by @yiliang114
fix(core): expand ${session_id} and stamp User-Agent on the Responses wire (#11947) by @yiliang114
fix(core): keep tool parameters on the MiniMax chat-completions wire (#11842) by @yiliang114
fix(web-shell): stop the approval sheet resizing while reading (#11930) by @ytahdn
fix(release): gate pool-routed validation jobs on a disk floor (#11972) by @qwen-code-dev-bot
fix(web-shell): preserve separators in tool description paths (#11977) by @ytahdn
fix(core): persist Goal turn endings outside model history (#11924) by @qqqys
fix(web-shell): keep the recap below a turn's outputs and dedupe it (#11986) by @ytahdn
fix(ci): heal the docker lock cache ownership in e2e-test-linux (#11990) (#11992) by @qwen-code-dev-bot
fix(cli): register model-invocable commands before headless turns (#11994) by @qqqys
fix(vscode): reach the workspace daemon from a remote window's webview (#11983) by @yiliang114
fix(cli): make the ink useBoxMetrics loop guard independent of machine speed (#11835) by @yiliang114
fix(ci): skip completed desktop releases (#12013) by @yiliang114
fix(web-shell): honor ui.theme and general.language in the standalone Web Shell (#11961) by @yiliang114

Documentation

docs(hooks): complete the event catalog and correct stale claims (#11863) by @qqqys
docs(goal): retire the Stop-hook era prose after the implementation was removed (#11922) by @qqqys
docs(serve): clarify daemon event recovery contracts (#12015) by @wenshao
docs(users): point onboarding at Token Plan instead of Coding Plan (#11980) by @wenshao
docs(daemon): complete integration path guide (#12005) by @yiliang114

Internal Changes

test: record what the Windows inode gates are hiding, and un-skip one (#11853) by @yiliang114
chore(pnpm): correct the range-key rationale and cover the version union (#11845) by @yiliang114
test(cli): mock realpathSync in the review cleanup suite so the cwd witness holds on Windows (#11893) by @yiliang114
refactor(goal): delete the first-generation Stop-hook Goal implementation (#11900) by @qqqys
refactor(vscode): remove unused token limit mirror (#11946) by @yiliang114
ci(desktop): publish the desktop app when the CLI releases (#11575) by @yiliang114
test(cli): unbreak the bwrap sandbox suites on the Windows lane (#11968) (#11970) by @qwen-code-dev-bot
refactor(serve): separate ACP control plane and channel harness (#11916) by @wenshao
test(serve): harden REST docs contract checks (#12009) by @yiliang114

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.23.4...v0.24.0

0.23.4 - 2026-09-14

Highlights

See the complete change list below.

Breaking Changes

Removes configurable message-prefix filtering from channels, so eligible messages now follow normal sender, group, mention, and pairing policies without a prefix. (#11571) by @qqqys
fix(core)!: read command hook timeout in seconds (#11615) by @qqqys

Complete Change List

Features

Lets approved Web Shell Goal proposals start automatically after their owning turn finishes, removing the need to copy a manual /goal set command. (#11360) by @qqqys
feat(sdk): add a peer endpoint so a program outside Qwen Code can join cross-session messaging (#11560) by @qqqys
Adds optional Goal limits via model.goalMaxTurns and model.goalMaxActiveMinutes, and rebases active Goal time on restore. (#11457) by @qqqys
Web Shell scheduled runs can now route to a configured model and session group when New session each run is selected. (#11396) by @qqqys
Browser notifications in Web Shell now identify the session, show prompt and reply excerpts, and open the target session when clicked. (#11447) by @doudouOUC
Improves Web Shell composer compactness and makes context usage clearer across composer, conversation, and sidebar. (#11509) by @wenshao
Adds visual input, proactive assistance, and local memory to the standalone Qwen Live experience. (#11369) by @wangxiongts
Automatic reviews of small static documentation navigation changes now use a focused reviewer with narrower scope and capped outcomes. (#11456) by @wenshao
feat(subagents): add Codex executor and native agent builtins (#11474) by @wenshao
feat(core): add CodeModeOnly tool execution (#10607) by @DragonnZhang
Moved Workflow authoring reference into the bundled workflow-authoring skill, reducing default tool description overhead. (#11520) by @qqqys
Hid the Web Shell sources panel add-source button by default; it can be re-enabled with the addSource=1 URL parameter. (#11639) by @callmeYe
Channel turns in CLI resume, Web Shell, and session previews now display exactly the prompt the model received. (#11646) by @qqqys
Added Web preview panels with desktop and mobile widths, refresh, external opening, saved HTML artifacts, and per-session URL and width memory. (#11276) by @wenshao
Added inline editing and resending of the latest user message in Web Shell, retaining attached images and files while generating a new reply. (#11650) by @ytahdn
feat(core): add permission_mode, agent_id and prompt_id to every hook input (#11618) by @qqqys
Adds a Continue execution action in Web Shell for recoverable interrupted sessions, allowing users to resume the original conversation without duplicating messages. (#11545) by @wenshao
feat(skills): extension skills are named by their extension (#10841) by @nerdalytics
feat(vscode): add an explicit session source switch (#11584) by @yiliang114
feat(core): auto-retry transient network errors (EOF) where Ctrl+Y is unavailable (#10347) by @qwen-code-dev-bot
feat(workflows): add effort and disallowedTools to agent() options (#11691) by @qqqys
feat(goal): rerun a stalled checkpoint in batches, smaller after each stall (#11690) by @qqqys
feat(web-shell): add model role and context window configuration (#11342) by @wenshao
feat(cua): add app-bound actions and compact native observations (#11705) by @LaZzyMan
feat: agent board — share work across independently started agents (#9402) by @yiliang114
feat(review): record a default deadline in the plan so every run has a wall (#11686) by @wenshao
feat(web-shell): make Session Workflow dependencies navigable and quiet its chrome (#10938) by @yiliang114
feat(web-shell): Improve context overview and add manual compression (#11700) by @wenshao
feat(core): make the web_search budget configurable and bound the extractor fallback (#11692) by @qqqys
feat(web-shell): restore the workspace Git picker in the sidebar hover details (#11818) by @ytahdn
feat(web-shell): Add manual compression to composer context hover (#11782) by @wenshao

Bug Fixes

Deflakes a replayed-loop CI test by widening the fabricated timeline-event margin from 75 to 300 seconds without changing workflow or product behavior. (#11581) by @wenshao
Fixes autofix gating so regressions count against the brake and test weakening is gated, preventing a fix round from shipping new problems for free. (#10188) by @wenshao
Preserves the originally submitted prompt for UserPromptSubmit hooks so Auto Recall works for Web Shell submissions and opted-in ACP or daemon clients. (#11455) by @doudouOUC
Restores workspace-configured startup channels when qwen serve starts without an explicit channel argument, while explicit channel selection still takes precedence. (#11472) by @qqqys
Fixes qwen serve startup so persisted workspace-scope MCP configuration is loaded after ACP preheat. (#11145) by @kabishou11
Fixes VS Code diff handling so diffs can be closed reliably using either the original or workspace-resolved path. (#10494) by @CanReader
Frees web terminal PTY resources when the terminal exits instead of waiting for later release. (#11572) by @yiliang114
Adds one bounded retry to E2E build artifact uploads to reduce transient CI failures. (#11375) by @qwen-code-dev-bot
Preserves child error details when agent sessions are explicitly closed or killed, improving diagnostic logging. (#11190) by @now-ing
Web Shell now preserves cancelled responses across reloads and shows how long the request ran before cancellation. (#11608) by @ytahdn
Pins the fleet updater install to the /usr/local prefix so runners execute the newly installed version instead of continuing to use an older install on PATH. (#11593) by @yiliang114
fix(core): recover from rejected Responses encrypted reasoning (#11596) by @DragonnZhang
Improves checkpoint verification by stripping markdown fences and retrying with one corrective model call for certain malformed or inconsistent verifier answers. (#11578) by @qqqys
Shows the Try again action in source previews only after attachment or workspace-file load failures, and clears it after a successful retry. (#11629) by @callmeYe
Routes successful plain-text hook stdout to additionalContext for SessionStart, UserPromptSubmit, and UserPromptExpansion events while other events keep system-message behavior. (#11612) by @qqqys
Fixed OpenTUI renderer display gaps across transcript, composer, footer, dialogs, keyboard, and startup approval to match ink. (#11630) by @chiga0
Reattached image snapshots are now labeled as potentially outdated so earlier session images are not treated as current UI state. (#11602) by @yiliang114
Localized VS Code rewind preflight failures when editing a sent message, replacing raw transport errors with a translated message. (#11628) by @yiliang114
fix(core): preserve Responses retry metadata and assistant phases (#11652) by @DragonnZhang
fix(cli): keep the expanded confirmation dialog inside the viewport (#11656) by @qwen-code-dev-bot
fix(core): retry transient server errors in established streams (#11634) by @DragonnZhang
fix(vscode): preserve IDE workspace env var on Remote-SSH (#11556) (#11624) by @yiliang114
fix(vscode): give the edit back when a permission diff is closed (#11171) by @yiliang114
Persists a one-line diagnostic when a Goal evidence checkpoint fails and displays it before the Goal stops, improving visibility into why checkpoints fail. (#11576) by @qqqys
Suppresses unnecessary error toasts in Web Shell when a submission is rejected due to preflight cancellation or abort, avoiding confusing failure messages. (#11676) by @yiliang114
fix(core): redact request-body prefix in Responses debug logs (#11668) by @yiliang114
Correctly labels blocked Goal cards as Goal blocked in Web Shell instead of the broader Goal aborted label, improving status clarity. (#11174) by @yu-xin-c
Updates a CLI serve test to wait for the fire-and-forget handler to finish before completing, improving test reliability without changing production behavior. (#11417) by @qwen-code-dev-bot
Prevents Responses reasoning replay data from being sent to incompatible providers by stripping or ignoring foreign thoughtSignature payloads during request building. (#11567) by @yiliang114
Fixes local-files bridge trust and bystander issues by reserving a resolving state and preventing parked tabs from wiping stored grants on disconnect. (#11169) by @wenshao
Moves the DashScope conversation cache breakpoint before reattached images so the cached prefix no longer shifts between turns. (#11640) by @yiliang114
fix(core): report real stop_hook_active on Stop hooks (#11613) by @qqqys
fix(core): cite web search sources as bare URLs (#11677) by @qqqys
ACP child spawns now derive V8 old-space targets from actual host memory instead of trusting an unlimited cgroup sentinel value. (#11653) by @doudouOUC
Prevents stale concurrent leader assignments from dispatching the same task to multiple teammates. (#10237) by @AaronZ345
fix(telemetry): gate request_text/response_text on logPrompts (#11670) by @yiliang114
fix(vscode): unify session history and remove source switch (#11713) by @yiliang114
fix(acp): preserve original filenames in resource-link prompts (#11721) by @zhangxy-zju
fix(vscode): shut the ACP CLI down gracefully instead of killing it (#11642) by @yiliang114
fix(core): redact error text in usage-statistics telemetry sink (#11649) by @yiliang114
fix(core): reap surviving hook process trees on Windows (#11623) by @yiliang114
fix(core): compute cron next-fire time with epoch arithmetic across DST fall-back (#11723) by @yiliang114
fix(goal): remove backtracking fence unwrap from judge replies (#11693) by @yiliang114
fix(core): keep the mirrored reasoning field off Fireworks requests (#11701) by @bluefateludi
fix(core): fire active-todo reminders at delegation boundaries and user turns (#10963) by @yiliang114
fix(core): guard internal git calls against configured helper programs (#11669) by @yiliang114
fix(lsp): synchronize target documents before queries (#11443) by @shenyankm
fix(core): run web terminal PTYs on the bundled ConPTY backend (#11643) by @yiliang114
fix(core): retry status-less upstream errors instead of ending the turn (#11291) by @wenshao
fix(dashscope): send request metadata only for qwen-family models (#11606) by @shoemoney
fix(web-shell): prevent terminal query freezes and clean up protocol rejection (#11748) by @yiliang114
fix(cli): break Ink useBoxMetrics commit-phase setState loop (React #185) (#11565) by @zaalipro
fix(dingtalk): handle replied rich-text media (#11759) by @qqqys
fix(dingtalk): preserve callback text (#11757) by @qqqys
fix(cli): prevent dialog clipping in short terminals (#9040) by @shenyankm
fix(web-shell): keep mid-turn messages the daemon rejects at idle (#11289) by @wenshao
fix(core): strip AppImage PYTHONHOME/PYTHONPATH from stdio MCP children (#11763) by @yiliang114
fix(cua): address tool failures and efficiency in OSWorld runs (#11683) by @tanzhenxin
fix(cua): bound observations and reduce model round trips (#11735) by @DragonnZhang
fix(web-shell): pin es2021 floor across both build configs and harden terminal tests (#11758) by @yiliang114
fix(core): let the producer's own budget decide shell output size (#11727) by @doudouOUC
fix(review): document the deadline's pause ceilings and improve capture-local errors (#11779) by @wenshao
fix(ci): raise the build heap cap from 3072 to 4096 MB (#11781) by @doudouOUC
fix(cli): reap running monitors when the process dies on an uncaught exception (#11742) by @yiliang114
fix(web-shell): move source download to the header (#11641) by @callmeYe
fix(skills): re-apply a Skill's side effects when a session is resumed (#11280) by @TianYuan1024
fix(web-shell): make the cockpit visual capture deterministic (#11786) by @yiliang114
fix(dingtalk): remove background agent headings (#11800) by @qqqys
fix(cli): treat write-side PTY EIO as a benign teardown race (#11788) by @yiliang114
fix(goal): keep a full-claim checkpoint replay from spending a stall, and tidy batching follow-ups (#11796) by @qqqys
fix(cli): resolve ACP core settings against the active target dir (#11647) by @yiliang114
fix(sdk): support standalone session creation over HTTP (#11812) by @doudouOUC
fix(core): accept Claude Code tool names in tool hook matchers (#11826) by @qqqys
fix(cli): keep history item ids strictly increasing across mixed base timestamps (#11743) by @yiliang114
fix(ci): pass autofix reasoning effort to Kimi K3 (#11843) by @yiliang114
fix(ci): restore Windows test baseline (#11787) by @yiliang114
fix(cua): recover macOS App observation and input for 0.20.7 (#11841) by @LaZzyMan
fix(cli): only suggest -y for tool calls denied for lack of approval (#11828) by @qqqys
fix(web-shell): stabilize goal proposal approval layout (#11839) by @qqqys
fix(dws): align group and direct chat access controls (#11836) by @qqqys

Performance

Improves session recovery performance by removing a redundant deep copy of conversation history. (#11595) by @DragonnZhang
perf(web-shell): load metadata on demand and reuse capability checks (#11644) by @ytahdn

Documentation

docs(daemon): publish the REST API reference (#11592) by @yiliang114
docs(vscode): record the cross-source delete consequence (#11730) by @yiliang114
docs(daemon): describe the prompt rate-limit and queue-full responses separately (#11733) by @yiliang114
docs: translate permission card and browser notification designs (#11775) by @wenshao

Internal Changes

Removes the obsolete DingTalk background response aggregation setting while keeping immediate Agent responses, transports, attachments, splitting, and interactive cards. (#11570) by @qqqys
Adds review tests that pin the fold invariant for multi-line entries and updates related comments without changing executable product behavior. (#11533) by @wenshao
Refactors the DashScope web search client behind a backend interface with no user-facing behavior change. (#11490) by @qqqys
Strengthens integration tests to verify /compress actually reduces token usage. (#11259) by @yu-xin-c
Removes the unused trusted hooks manager and makes unregisterSkillHooks actually remove session hooks registered by a skill's root directory. (#11621) by @qqqys
test(integration): isolate the QWEN_HOME-unset case from the real $HOME (#10900) (#10920) by @qwen-code-dev-bot
test(core): pin the deferred exit-time PTY release against trailing output (#11585) by @yiliang114
Adds missing hook events to the settings schema and hook execution bus so editors no longer flag them as unknown keys and all hook events are dispatched consistently. (#11620) by @qqqys
Consolidates shared Web Shell sidebar test setup into a single harness to prevent inconsistent behavior across suites. (#9797) by @bluefateludi
chore: enforce Playwright version parity and close the deferred #11101 follow-ups (#11371) by @yiliang114
chore(pnpm): gate pnpm-lock on package-lock and declare hoisted imports (#11625) by @yiliang114
test(lockfile): pin the Playwright parity check's first manifest and both nested directions (#11716) by @yiliang114
refactor(core): apply one matcher rule to every hook event (#11619) by @qqqys
test(web-shell): give the 200-record history-viewport smoke case its own budget (#11740) by @yiliang114
test(core): account for the extra Windows fstat in the tail-growth session mocks (#11750) by @Bug-killer-prog
chore(release): bump node repl to 0.1.4 (#11771) by @LaZzyMan
chore(pnpm): scope build approvals, pin the ACP zod peer, add a lockfile freshness lane (#11797) by @yiliang114
ci(lint): stop new cli imports from the core package root (#11798) by @yiliang114

New Contributors

@kabishou11 made their first contribution in #11145
@CanReader made their first contribution in #10494
@wangxiongts made their first contribution in #11369
@Bug-killer-prog made their first contribution in #11750
@zaalipro made their first contribution in #11565

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.23.3...v0.23.4

0.23.3 - 2026-09-10

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(core): expand Kimi, Qwen and DeepSeek reasoning presets (#11349) by @callmeYe
feat(sessions): record what kind of session registered, and document the registry and wire contract (#11463) by @qqqys
feat(web-shell): keep answered questions visible outside processed summaries (#11461) by @ytahdn
feat(web-shell): improve session overview navigation and details (#11238) by @wenshao
feat(core): add OpenAI Responses API content generator (#8169) by @netbrah
feat(providers): show newest discovered models first (#11449) by @qqqys
feat(web-shell): add unified session sources (#11262) by @callmeYe
feat: delegate a subagent turn to an external agent over ACP (Claude Code first) (#11003) by @wenshao
feat(web-shell): make the product name and logo configurable (#11244) by @wenshao
feat(autofix): run one bounded self-review before an address-review commit (A/B) (#11516) by @wenshao
feat(acp): register daemon-managed sessions in the session registry and let them send peer messages (#11488) by @qqqys
feat(web-shell): render URLs in user messages as clickable links (#11464) by @wenshao
feat(serve): support 256 workspaces by default (#11515) by @doudouOUC

Bug Fixes

fix(goal): retry a checkpoint that overran the claim budget instead of spending a stall (#11365) by @qqqys
fix(dws): forward Aone sandbox identifier (#11462) by @qqqys
fix(cli): quiesce a fire-and-forget serve handler across tests (#11346) (#11362) by @qwen-code-dev-bot
fix(serve): reconnect evicted SSE clients (#11467) by @yiliang114
fix(ci): space PR creation from release to avoid secondary rate limit (#11444) by @yiliang114
fix(cua): preserve degraded UIAccess responses (#11479) by @LaZzyMan
fix(release): pin Debian 11 repositories to a coherent snapshot (#11487) by @LaZzyMan
fix(web-shell): hide the sidebar version label at the compact footer breakpoint (#11470) by @yiliang114
fix(permissions): cite matching deny rule for compound and virtual-op shell denials (#11411) by @yiliang114
fix(core): reject pre-aborted queued tool requests (#11483) by @lorenzozanee
fix(web-shell): avoid duplicate cold session restoration (#11413) by @wenshao
fix(core): preserve every reasoning episode's signature during history consolidation (#8260) by @netbrah
fix(dws): retry completed response delivery (#11387) by @qqqys
fix(core): host Windows shell PTYs via bundled ConPTY to stop orphaning conhost.exe (#11497) by @yiliang114
fix(web-shell): restore standalone header and scroll button styles (#11517) by @ytahdn
fix(desktop): unblock macOS and Linux desktop packaging (#11518) by @yiliang114
fix(review): reply carried findings into their thread, resolve fixed ones (#9940) by @wenshao
fix(desktop): realign the release test with the new signing step (#11522) by @yiliang114
fix(bridge): keep pending permission/question across refreshed session loads (#11468) by @wenshao
fix(export): restore document runtime budget headroom (#11372) by @yiliang114
fix(core): preserve Responses stream error details (#11523) by @tanzhenxin
fix(core): release node-pty's conout worker after every PTY on Windows (#11313) by @yiliang114
fix(web-shell): make the workspace provider guard self-diagnosing and reload on root retry (#11421) by @wenshao
fix(web-shell): move scheduled task row icon into trailing meta slot (#11356) by @qqqys
fix(vscode): restore pre-cutover conversation history in the panel (#11495) by @yiliang114
fix(ci): record the qwen-autofix.yml size drift two in-allowance PRs accumulated (#11529) (#11537) by @qwen-code-dev-bot
fix(web-shell): realign two suites with shipped behavior to unbreak main CI (#11525) (#11530) by @qwen-code-dev-bot
fix(ci): grant the packaging check the permissions its callee declares (#11532) by @yiliang114
fix(dev): install hooks during worktree bootstrap (#11496) by @yiliang114
fix(review): dispatch review agents through parallel workflows (#11524) by @wenshao
fix(vscode): preserve active file exclusion (#11568) by @yiliang114
fix(cli): drain notification queue when a turn errors out (#11559) by @yiliang114
fix(review): keep host-trusted state out of the container's writable surface (#9983) by @wenshao
fix(acp): pass shell execution config to tool invocations (#11102) by @yiliang114

Performance

perf(export): split the transcript renderer's embedded CSS into a versioned asset (#11485) by @yiliang114

Documentation

docs: highlight Qwen Code interfaces in the README (#11491) by @pomelo-nwu
docs(daemon): add a REST integration entry point, guarded against the route surface (#11477) by @yiliang114

Internal Changes

refactor(cli): drop the legacy Goal Stop-hook plumbing (#11459) by @qqqys
refactor(core): stop routing Goal turns through the legacy Stop hook (#11458) by @qqqys
test(channels): canonicalize restored worktree fixture paths (#11476) by @yiliang114
ci(desktop): exercise desktop packaging on a schedule (#11519) by @yiliang114
test(integration): deflake the /compress E2E event budget (#11088) (#11094) by @qwen-code-dev-bot
test(core): cover bundled ConPTY fallback and terminal replies (#11555) by @yiliang114

New Contributors

@lorenzozanee made their first contribution in #11483

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.23.2...v0.23.3

0.23.2 - 2026-09-09

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(web-shell): Improve split-view session navigation (#11250) by @wenshao
feat(goal): carry budget figures and progress guidance in the continuation prompt (#11257) by @qqqys
feat(workflows): journal failed agents and settle agent failures to null (#11196) by @qqqys
feat(core): enable the built-in web_search by default on ModelStudio Standard/Token Plan (#11348) by @qqqys
feat(web-shell): add opt-in browser task notifications (#11398) by @doudouOUC
feat(dingtalk): present tool permission requests with native interactive cards (#10457) by @BenGuanRan
feat(web-shell): separate Plan workflow from execution permissions (#11423) by @ytahdn
feat(serve): one-command remote start with a generated token, same-origin shell access, and a pairing QR (#11172) by @wenshao
feat(ipc): drop peer messages that arrive faster than a session can take, and tell the sender once (#11277) by @qqqys
feat: support GPT-5 and GPT-6 reasoning effort configuration (#11295) by @wenshao

Bug Fixes

fix(ci): isolate subprocess-heavy E2E from fork pressure (#11388) by @yiliang114
fix(review): screen content filters at every rewrite the probe authorises (#9558) (#10421) by @wenshao
fix(web-shell): preserve history anchors during slow rendering (#11366) by @yiliang114
fix(core): keep branch commits made by a failing post-checkout hook (#11300) by @dvd233
fix(web-shell): Replace undefined mock in split rerender tests (#11404) (#11406) by @qwen-code-dev-bot
fix(web-shell): use renamed session-activity mock in split-view rerender test (#11409) (#11412) by @qwen-code-dev-bot
fix(ci): isolate serve route E2E from fork pressure (#11389) (#11391) by @qwen-code-dev-bot
fix(cli): guard channel pidfiles against PID reuse (#10687) by @BenGuanRan
fix(cli): cap the background-notification queue and tell the model what was dropped (#11351) by @qqqys
fix(ci): allow 90 minutes for ECS runner version resolution (#10921) by @yiliang114
fix(web-shell): restore transcript layout and navigation presentation (#11430) by @ytahdn
fix(deps): Bump sharp to 0.35.4 to resolve high-severity libheif CVE (#11435) by @yiliang114
fix(web-shell): make light-theme terminal text selection visible (#11445) by @ytahdn
fix(external-context): Align deletion responses with Mem0 SDK (#11397) by @doudouOUC
fix(core): use qwen3.8-flash for automatic web search (#11450) by @qqqys
fix(web-shell): show and wire composer quick keys on the mobile textarea backend (#11454) by @ytahdn
fix(web-shell): gate subagent details until session is ready (#11434) by @ytahdn
fix(web-shell): move the hover timestamp off the message text (#11380) by @yiliang114
fix(cli): seed headless promptIds from the resumed transcript (#11441) by @yiliang114
fix(core): omit parameterless OpenAI tool schemas (#11431) by @yiliang114
fix(cli): restore OpenTUI banner, footer, and loading states; fix the OSS mirror flavor (#11437) by @chiga0
fix(daemon): persist prompt identity for active transcript replay (#11062) by @XIQIXIQIXIQI

Documentation

docs: require bilingual design documents (#11419) by @wenshao
docs(nav): stop hiding the developer examples section (#11426) by @yiliang114
docs(serve): state what --no-web actually removes (#11446) by @yiliang114

Internal Changes

refactor(channels): remove obsolete block streaming (#11381) by @qqqys
refactor(serve): decouple workspace capacity policies (#11428) by @doudouOUC

New Contributors

@dvd233 made their first contribution in #11300

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.23.1...v0.23.2

0.23.1 - 2026-09-08

Highlights

See the complete change list below.

Breaking Changes

refactor!: retire @qwen-code/webui (#9812) by @yiliang114

Complete Change List

Features

feat(web-shell): visualize and manage dynamic workflow runs (#10594) by @qqqys
feat(ipc): tell senders when a message is refused, and expire held ones (#10809) by @qqqys
feat(serve): add session resource catalog (#10837) by @w9lsky
feat(web-shell): give running subagents a live status in the transcript (#10939) by @wenshao
Enables opening OSC 8 links with a plain click in VP mode and adds a right-click menu with Open Link, Copy Link Address, and Copy Selection. (#10979) by @chiga0
feat(channels): Add worktree-isolated named tasks (#10643) by @doudouOUC
Adds session turn navigation protocol support in daemon and SDK for bounded turn indexing, snapshots, and transcript paging. (#10751) by @doudouOUC
feat(web-shell): restore environment panel state (#10627) by @ytahdn
feat(ipc): keep the peer inbox reachable, and say so when it is not (#10800) by @qqqys
feat: chat transcript mr2a html export (#10076) by @water-in-stone
feat(serve): Fence Conversations writers with mandatory session leases (#10924) by @doudouOUC
feat: load custom output styles from ~/.qwen/output-styles and .qwen/output-styles (#10761) by @qqqys
feat(ui): add ui.showToolCallArgs to render tool-call arguments inline (#10565) by @TianYuan1024
feat(ipc): hold peer messages across review classes, let repositories only tighten inbound settings (#11026) by @qqqys
feat(skills): add built-in zvec-grep installer (#10723) by @zhourrr
feat(core): send session ID to Routify endpoints (#10896) by @DragonnZhang
feat(core): make todo_write opt-in (#10645) by @DragonnZhang
feat(serve): add workspace-scoped Skills runtime (#10697) by @ytahdn
feat(channels): filter messages by configured prefix (#10817) by @qqqys
feat(review): add low-effort recall floor (#9912) by @yu-xin-c
feat(workflows): return run handles and persist inline scripts (#11089) by @qqqys
feat(review): add the prose-execution audit and the counter-frame audit (#10221) by @wenshao
feat(web-shell): add headless global turn navigation (#11054) by @doudouOUC
feat(web-shell): bridge a browser-granted local directory into a session (#10962) by @wenshao
feat(acp): make subagent execution visible via parent tool_call updates (#8729) by @PratikWayase
feat(dingtalk): make background agent aggregation optional (#10899) by @qqqys
feat(ipc): let a user-minted controller token drive a session without per-message review (#11090) by @qqqys
feat(ci): surface the resolved model and CLI version in autofix round reports (#11124) by @wenshao
feat(web-shell): align sidebar session scopes (#11240) by @ytahdn
feat(web-shell): explain shell approval commands (#11266) by @ytahdn
feat(web-shell): customize artifact icons (#11247) by @ytahdn
feat(update): support a configurable release download base URL (#11150) by @XIQIXIQIXIQI
feat(web-shell): show what a Goal has spent against the window it is allowed (#11254) by @qqqys
feat(external-context): Add opt-in auto recall for administrator-owned Mem0 dialects (#11246) by @doudouOUC
feat(goal): show what a Goal has spent against the window it is allowed (#11248) by @qqqys
feat(channels): Implement named-session worktree reset (Part 4B) (#11015) by @doudouOUC
feat(serve): allow concurrent standalone daemons with session fencing (#11207) by @doudouOUC
feat(web-shell): add continuous history and compact turn navigation (#11208) by @doudouOUC
feat(external-context): Add daemon memory writes (#11311) by @doudouOUC
feat(web-shell): add a context usage tab to the right sidebar (#11177) by @wenshao
feat(web-shell): refine file cards and configure drop destination (#11298) by @ytahdn
feat(cli): reap owned worktrees when daemon sessions are deleted (#11309) by @doudouOUC
feat(channels): add shared multiline instructions field to channel management (#11082) by @yiliang114
feat(goal): pause a Goal after three autonomous turns that make no progress (#11239) by @qqqys
feat(core): configure model reasoning capabilities (#10999) by @callmeYe
feat(goal): size the checkpoint verifier timeout for a full claim list, and let operators set it (#11305) by @qqqys
feat(dingtalk): show dynamic lifecycle tags (#10504) by @BenGuanRan
feat(external-context): Add daemon memory deletion (#11337) by @doudouOUC
feat(core): expand ${session_id} in per-provider customHeaders (#11282) by @yiliang114
feat(cli): OpenTUI parity closeout (dialogs, composer, shell mode) (#11152) by @chiga0

Bug Fixes

fix(web-shell): make the 30 s overview-poll e2e deterministic (#10934) by @yiliang114
fix(cli): submit exact slash commands from the live input (#10929) by @yiliang114
fix(web-shell): disable Push while the branch is behind its upstream (#10754) by @wenshao
fix(cli): resolve session-management settings per request, not from the stale this.settings cache (#10095) by @tomsen02
fix(ci): name the failing job when a main CI run reports no test result (#10855) by @qwen-code-dev-bot
fix(cli): complete the live slash-submit deps and fixture (#10944) (#10961) by @qwen-code-dev-bot
fix(test): end interactive PTY sessions a test never closed (#10971) by @qwen-code-dev-bot
fix(cli): submit exact OpenTUI slash commands from live input (#10987) by @yiliang114
Fixes OpenTUI so Enter submits or accepts completions based on the live editor buffer, preventing stale render state from misrouting the keystroke. (#10986) by @wenshao
Prevents the DingTalk channel from printing clientSecret and stream ticket to stdout during SDK connect logging. (#10945) by @yiliang114
Fixes OpenTUI transcript visibility so slash command output, /clear results, and steer messages appear in the transcript. (#10947) by @chiga0
Syncs the documented daemon capability count to 153 to match the current registry after recent feature additions. (#11012) by @yiliang114
fix(dws): recognize slash commands after bot mentions (#10930) by @qqqys
fix(ci): retry a registry-side npm audit failure instead of reporting it as a CVE (#11006) by @yiliang114
fix(cli): allow quit before slash commands load (#11029) by @yiliang114
fix(test): stop measuring model latency on the shared E2E pool (#11004) by @qwen-code-dev-bot
fix(cli): keep input closed until chat initialization completes (#11000) by @yiliang114
fix: restore ACP-related main CI checks (#11033) by @yiliang114
fix(web-shell): label usage-limited goal cards correctly (#10553) by @yu-xin-c
fix(test): sync the pinned no-AK integration script list (#11050) (#11052) by @qwen-code-dev-bot
fix(web-shell): scope select-all in the cell value dialog to the value (#10857) by @LizunovSergey
fix(test): raise the ACP initialize budget for inline E2E daemon spawns (#11034) (#11041) by @qwen-code-dev-bot
fix(core): allow manual retry after auto mode blocks (#11025) by @qqqys
fix(cli): route turn-index reads through runtime-root pin (#11036) by @yiliang114
fix(core): coalesce concurrent Config.initialize() calls (#11037) by @yiliang114
fix(cli): repair the live slash gate fallout on main (#10940) by @qwen-code-dev-bot
fix(core): reject ambiguous send_message destinations (#10090) by @GCGH159
fix(core): strip reasoning_content from Cerebras requests (#11049) by @yiliang114
fix(goal): end daemon turns at verification checkpoints (#11011) by @qqqys
fix(core): harden Config.initialize() join path (#11075) by @yiliang114
fix(docs): correct DaemonSessionProvider path in architecture diagram (#11099) by @yiliang114
fix(cli): wait for the startup chat before an OpenTUI turn sends (#11042) (#11046) by @qwen-code-dev-bot
fix(cli): deliver Agent View queued follow-ups from the provider (#10315) by @yiliang114
fix(cli): keep the tmux IME composition cell free of a fixed background (#8177) (#10998) by @now-ing
fix(cli): route the transcript turn-index handler through the pin choke point (#11047) by @wenshao
fix(release): let an operator retune the quality lane timeouts (#11104) (#11110) by @qwen-code-dev-bot
fix(release): price the static quality lane from the reserved host (#11127) by @qwen-code-dev-bot
fix(review): keep quoted code from blinding the footer strip (#10458) by @wenshao
fix(web-shell): close the four deferred #9812 review follow-ups (#11107) by @yiliang114
fix(release): block the transport-timeout pass-through on any exception header (#10902) by @yiliang114
fix(ci): stop the scripts-suite timeout knob from failing open on an empty value (#10910) by @yiliang114
fix(test): put the scripts suite's quiet-host budgets on its own knob (#11106) by @qwen-code-dev-bot
fix(ci): salvage superseded review runs and hold the loop's report-time base refresh (#10123) by @wenshao
fix(core): normalize tool schemas for grammar-based providers (#10080) by @yiliang114
fix(core): include full filePath alongside fileName in edit/write-file diff results (#8607) by @JonathanOrr
fix(export): shrink the exported transcript renderer to what a read-only transcript needs (#11038) by @yiliang114
fix(core): preserve host-confirmed user answers in auto classification (#11084) by @qqqys
fix(goal): pause the Goal on every user-cancel path, and say why (#10802) by @qqqys
fix(acp): emit standard session title updates (#8782) by @zjunothing
fix(ci): record the release.yml size drift two in-allowance PRs accumulated (#11157) by @wenshao
fix(web-shell): keep the auto-sized dialog's gutter on a phone (#11077) by @yiliang114
fix(dws): isolate IM ingestion across conversations (#10952) by @qqqys
fix(core): replay retained shell notifications after transient unbind (#11132) by @yiliang114
fix(test): stop timing tsx startup in the export separator bound (#11044) by @qwen-code-dev-bot
fix(web-shell): scope mock sessions by workspace (#10273) by @AaronZ345
fix(export): point documents at a published renderer, drop mermaid (#11167) by @yiliang114
fix(serve): bound and diagnose a session reclaim that can never succeed (#11120) by @doudouOUC
fix(web-shell): keep daemon prompt state authoritative through silence (#9487) (#10941) by @yiliang114
fix(skills): register frontmatter hooks on the /<skill-name> path (#11068) by @TianYuan1024
fix(ci): give web-shell E2E Smoke the ECS timeout allowance its siblings have (#11212) by @doudouOUC
fix(core): surface ask_user_question cancellation reasons (#9070) by @destire-mio
fix(core): add explicit stop directive to tool cancellation messages (#10180) by @aniruddhaadak80
fix(vscode): canonicalize workspace paths (#11201) by @yiliang114
fix(serve): report child-owned session turns as active work (#11265) by @yiliang114
fix(cua): stabilize automatic observation diffs (#11293) by @LaZzyMan
fix(cli): stop housekeeping hanging on a deleted bind mount (#11285) by @doudouOUC
fix(ci): reap leaked E2E sandbox containers (#11264) by @yiliang114
fix(ci): isolate E2E directories across Vitest forks (#11312) by @yiliang114
fix(goal-draft): keep drafts concise and verifiable (#11284) by @qqqys
fix(serve): fail fast on unsupported target mutations in the CDP tunnel (#11315) by @wenshao
fix(channels): restore worktree-task routes through the managed load path (#11308) by @doudouOUC
fix(channels): spell the fake worktree path in its canonical form (#11317) (#11318) by @qwen-code-dev-bot
fix(web-shell): cancel pending locate scroll timers on unmount (#11322) by @doudouOUC
fix(live-host): keep packaging in the standalone npm workspace (#11329) by @yiliang114
fix(web-shell): preserve running subagent timer across replay (#11332) by @ytahdn
fix(core): stop the background-agent launch result from inviting the parent to peek (#11324) by @qqqys
fix(web-shell): prefer clipboard text over image attachments (#11334) by @ytahdn
fix(rewind): close the review findings left open when #10959 merged (#11344) by @yiliang114
fix(goal): count a checkpoint the verifier never answers as a stall (#11304) by @qqqys
fix(serve): configure live-state polling with a five-second default (#11339) by @doudouOUC
fix(web-shell): stop surfacing SSE backpressure warning in transcript (#11340) by @ytahdn
fix(core): retry statusless SSE throttling errors (#11216) by @DragonnZhang
fix(ci): reap release integration containers (#11330) by @yiliang114
fix(web-shell): show session active work (#11267) by @yiliang114
fix(docs): stop daemon capability totals drifting (#11370) by @yiliang114
fix(web-shell): require answers before submitting questions (#11341) by @ytahdn
fix(web-shell): keep the transcript column on the composer axis while the turn rail shows (#11338) by @qqqys
fix(web-shell): gate todo progress interaction (#11382) by @yiliang114

Performance

perf(web-shell): derive the session workflow projection once (#10871) by @yiliang114
perf(cli): avoid hashing invalid inline image cache hits (#10626) by @zjunothing
perf(cli): let tests resolve core modules individually (#10917) by @yiliang114
perf(cli): import core modules directly instead of the package root (#10957) by @yiliang114
perf(dev): add pnpm worktree bootstrap foundation (#10449) by @yiliang114
perf(web-shell): avoid an unnecessary initial turn-index page request (#11323) by @doudouOUC

Documentation

Updates Web Shell follow-up suggestion settings copy to accurately describe Tab, Right Arrow, and Enter key behavior. (#10851) by @Theater-ahyeon
docs(web-shell): add global turn navigation Phase 2 design (#11020) by @doudouOUC
docs(cli): mention Token Plan env setup in the qwen auth removal notice (#10993) by @now-ing
docs: record where a background agent shows up, and who owns it (#10951) by @yiliang114
docs(core): say why the Todo dependency semantics are not behind the flag (#11078) by @yiliang114
docs(arena): clarify unset run limits (#9860) by @AaronZ345
docs(auth): document Token Plan setup (endpoint, regions, env key, settings.json example) (#10980) by @now-ing
docs(serve): clarify API-only HTTP integration (#11314) by @yiliang114
docs(serve): sync the daemon capability tag count with the registry (#11368) by @wenshao

Internal Changes

test(integration): synchronize mid-turn /quit completion (#10926) by @qwen-code-dev-bot
test(cli): keep the redaction ReDoS guard asserting on the shared pool (#10912) by @yiliang114
ci(e2e): build once on a hosted runner and unpack it on every leg (#10894) by @wenshao
refactor(cli): route every per-request runtime-root pin through runWithPinnedRuntimeBaseDir (#10988) by @tomsen02
refactor(rewind): unify the ACP and TUI user-prompt classifiers (#10959) by @yiliang114
test(web-shell): render the Session Workflow cockpit in the visuals preview (#11014) by @yiliang114
chore(ci): remove retired WebUI dependency guard (#11095) by @yiliang114
test(e2e): split model latency from the cron fire budget in cron-interactive (#11085) by @he-yufeng
config: make goal readiness methods reject instead of throwing sync (#10647) by @rootkiller6788
test(core): pin Config.initialize() join ordering so the await-drop mutant fails (#11113) by @yiliang114
test(sdk): pin the skills entry in the transcript compactor keep-set (#11079) by @yiliang114
test(web-shell): stop the pagination scroll test racing the auto-scroll driver (#11105) by @yiliang114
test(ci): make verify-capture fallback assertion rasterization-safe (#10758) by @qwen-code-dev-bot
test(integration): make compress E2E deterministic (#11175) by @yiliang114
test(integration): make BOM reads deterministic (#11187) by @yiliang114
test(integration): make spaced-path write deterministic (#11181) by @yiliang114
test(integration): fit the compress seed into the OpenTUI pty viewport (#11191) (#11199) by @qwen-code-dev-bot
ci(release): drop the redundant Format Project step that verifies nothing (#11109) (#11195) by @now-ing
ci: make the Prettier lane a real gate (#11117) by @yiliang114
chore(core): wrap two over-width cancellation assertions (#11232) by @wenshao
ci: give every workspace the shared-pool test timeout, not just five (#10915) by @yiliang114
chore(release): bump node repl to 0.1.3 (#11299) by @LaZzyMan
test(e2e): isolate protocol checks and ACP test state (#11286) by @qwen-code-dev-bot
refactor(ci): extract release workflow scripts (#11165) by @yiliang114
chore: restore regression coverage after WebUI retirement (#11101) by @yiliang114
refactor(daemon): decouple extension activation refresh (#10991) by @callmeYe
chore(core): format the one file the prettier check lane still rejects (#11378) by @wenshao
style(core): format Anthropic generator test (#11374) by @yiliang114

New Contributors

@w9lsky made their first contribution in #10837
@Theater-ahyeon made their first contribution in #10851
@LizunovSergey made their first contribution in #10857
@zhourrr made their first contribution in #10723
@now-ing made their first contribution in #10993
@GCGH159 made their first contribution in #10090
@rootkiller6788 made their first contribution in #10647
@JonathanOrr made their first contribution in #8607
@aniruddhaadak80 made their first contribution in #10180
@XIQIXIQIXIQI made their first contribution in #11150

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.23.0...v0.23.1

0.23.0 - 2026-09-03

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

The branch picker now displays git state hints like '↓3 · origin/main' or 'Up to date' beside Update Project, Commit, and Push actions to help users judge status before clicking. (#10397) by @wenshao
Adds the qwen review emit-workflow subcommand to generate a deterministic script that executes Review Step 3A's agent fan-out using parallel() instead of manual orchestration. (#10119) by @qqqys
The Web Shell 'Add workspace' dialog now hides the Browse button on headless daemon hosts that lack native directory picker capabilities like zenity or osascript. (#9406) by @qqqys
Adds support for scoped workspace memory tasks with project or user targets, enforcing strict filesystem permission boundaries between stores during remember and forget operations. (#9895) by @qqqys
Added a QR code button to the Web Shell header for quick Local Control pairing, with direct navigation to Settings if the feature is disabled. (#10432) by @wenshao
Enables the takeover loop to consume review convergence signals via a new ledger marker containing matched recommendation codes. (#10122) by @wenshao
Optimizes the Session Overview table with responsive columns, sorting, filtering, and improved handling for session management actions. (#10115) by @ytahdn
Adds per-run scheduled task sessions in Web Shell, creating fresh child conversations with unique timestamps for each execution. (#10233) by @qqqys
Removes the public-only network policy restriction in qwen serve, allowing extension installs from enterprise-private Git hosts. (#10156) by @callmeYe
feat(core): address other sessions by name from send_message and list_agents (#10158) by @qqqys
Added explicit daemon session contexts for workspace, standalone, and Live conversations to improve routing and runtime resolution. (#10418) by @doudouOUC
feat(core): report compression API failures distinctly (#9119) by @xianjianlf2
Automatically assigns exactly one accountable maintainer to new PRs touching mapped areas and resolves a single owner when automated triage defers a PR. (#9813) by @yiliang114
Forwards bounded MCP tool arguments and server annotations to the AUTO-mode classifier to improve decision accuracy beyond tool names alone. (#10352) by @qqqys
Enabled full operator API access on trusted loopback interfaces for qwen serve when no bearer token is configured and authentication is not explicitly required. (#10403) by @doudouOUC
Named Channel tasks now include source attribution labels like [task] or [sender · task] in their output for better delivery correlation. (#10420) by @doudouOUC
Enhanced the Web Shell sidebar to display workspace session counts, full paths, and detailed chips for MCP servers, skills, extensions, and context files. (#10407) by @wenshao
Exposed Workflow execution controls via the daemon, allowing clients to inspect, cancel, pause, resume, retry, and delete runs while preserving legacy task contracts. (#10411) by @qqqys
Lays the foundation for OpenTUI migration by adding new renderer modules for themes, accessibility, clipboard, key mapping, and dialog scaffolding. (#10146) by @chiga0
Enables concurrent named task control in Channels, allowing background tasks to run while users switch contexts, and adds /session cancel support. (#10574) by @doudouOUC
Web Shell terminal error messages now include a Copy action that copies the exact rendered error text with a visual confirmation. (#10001) by @Wkewen
Workspace runtime ownership is now established as the daemon lifecycle boundary, ensuring runtime activity persists through workspace removal and shutdown. (#10593) by @ytahdn
Workspace-scoped Extension skill state can now be managed via a batch API, allowing independent overrides while keeping parent Extension settings authoritative. (#10600) by @callmeYe
Operators can now configure or disable the Goal token budget using the model.goalTokenBudget setting, with support for values from 1 to 300,000,000 or -1 for unlimited. (#10543) by @qqqys
The model now receives a per-turn reminder about the active output style to ensure concise responses when non-default styles are enabled. (#10282) by @qqqys
Enables the external-context-mem0 Extension to load administrator-owned Mem0 dialects via absolute paths in InstanceConfigV2. (#10634) by @doudouOUC
Added a sessionless POST /language route to synchronize user-level language preferences across all runtimes before any session exists. (#10554) by @doudouOUC
Sessions bound to GitHub PRs now display linked issues closed by those PRs in the Web Shell tooltip and support searching sessions by issue number. (#10425) by @wenshao
feat(serve): allow relocating session attachment storage via env var (#10066) by @ytahdn
Adds the live-session stream, input layer, and composer to the OpenTUI migration, enabling streaming markdown, tool runs, and unified-diff rendering. (#10368) by @chiga0
Improves channel fallback permission prompts with specific tool details and hides internal error data in DingTalk failure messages. (#10614) by @qqqys
Allows the Web Shell Update Project action to proceed on dirty working trees by offering options to stash or discard local changes. (#10390) by @wenshao
Lets DWS channels customize the start and end reaction emojis shown during task execution and completion states. (#10610) by @qqqys
feat(cli): select an output style via general.outputStyle or --output-style (#10283) by @qqqys
feat(qwen-live): standalone voice daemon package — M1 + M2 (#10367) by @LaZzyMan
feat(cli): OpenTUI migration batch 4 — dialogs, commands, and session-rewind (#10383) by @chiga0
feat(goal): let the model propose a Goal the user approves in a dialog (#10171) by @qqqys
feat(web-shell): Add standalone chats (#10514) by @doudouOUC
feat(cli): hot-reload modelProviders without session restart (#10582) by @yiliang114
feat(web-shell): add an experimental session workflow cockpit (#8583) by @yiliang114
feat(web-shell): search conversation content in the sidebar session search (#10612) by @wenshao
feat(opentui): Add the backend composition root (Batch 5) (#10696) by @chiga0
feat(web-shell): add a Workspaces overview panel (#10589) by @wenshao
feat(review): prebuild the review worktree before any agent runs (#10423) by @wenshao
feat(web-shell): declutter the workspace sidebar and add loopback open actions (#10606) by @wenshao
feat(external-context): Publish the Mem0 Extension package (#10653) by @doudouOUC
feat(core): bind PRs created via gh pr create in the session shell (#9739) by @wenshao
feat(web-shell): group scheduled task run sessions (#10611) by @qqqys
feat(cli): add /output-style command with picker and mid-session switching (#10683) by @qqqys
feat(ipc): authenticate cross-session inbox connections with per-session tokens (#10636) by @qqqys
feat(qwen-live): ACP backend adaptor and multi-backend routing — M4 (#10617) by @LaZzyMan
feat(opentui): Activate the OpenTUI backend behind QWEN_TUI_RENDERER (#10739) by @chiga0
feat(ipc): give the session's own processes a child token the inbound gate recognizes (#10764) by @qqqys
feat(opentui): bundle assets, CI matrix and parity tooling (Batch 7) (#10770) by @chiga0
feat(daemon): name the saturated NDJSON budget in channel-teardown diagnostics (#10727) by @yiliang114
feat(qwen-live): protocol v7 playback receipts and interactive init — M5 (#10769) by @LaZzyMan
feat(release): add gated bun/OpenTUI preview flavor to standalone releases (#10814) by @chiga0
feat(channels): expose BTW through agent bridges (#10712) by @qqqys
feat(serve): add workspace-scoped MCP management (#10679) by @ytahdn
feat(channels): add BTW side questions to Channel conversations (#10713) by @qqqys
feat(web-shell): expose session artifact snapshots (#10747) by @dreamWB
feat(dingtalk): support outbound file delivery (#10893) by @qqqys

Bug Fixes

fix(core): keep the ask_user_question dialog behind allow rules and auto-approval (#10160) by @qqqys
Updates qwen --help to derive output from shared option definitions, ensuring it accurately lists all accepted flags like --approval-mode and --auth-type instead of a stale subset. (#8902) by @yiliang114
Applies idle and maximum-lifetime watchdogs to Anthropic streams to prevent indefinite hanging, ensuring they abort with ETIMEDOUT similar to OpenAI-compatible providers. (#9945) by @yiliang114
Autofix now reports which guard refused thread resolution in round reports and waits for head propagation to prevent silent failures. (#10117) by @wenshao
Agent tools now display the runtime-resolved execution mode to correctly distinguish foreground and background tasks regardless of model arguments. (#9955) by @DragonnZhang
The older-Git archive fallback now accepts safe contained symlinks while continuing to reject absolute paths, drive letters, and escape attempts. (#9969) by @harjothkhara
Fixed debug logging to prevent daemon Configs and background work from leaking session logs into unrelated debug files. (#9930) by @tomsen02
Fixes session branching to correctly detect duplicate titles by scanning both active and archived sessions. (#10032) by @harjothkhara
Ensures named Agent Team teammates resolve the same model provider route as ordinary subagents defined in the same agent file. (#10092) by @yiliang114
Routes non-publishing Linux release pipeline jobs to the ECS runner pool while keeping publishing jobs on ubuntu-latest. (#10036) by @yiliang114
fix(core): propagate filesystem cleanup failures in team_delete (#10213) by @yiliang114
fix(test): probe the native directory picker once at daemon spawn time (#10456) by @yiliang114
fix(serve): advertise the native directory picker during bootstrap (#10471) by @wenshao
Cancelled workflows now terminate immediately instead of waiting for the clock to expire, and the execution window is sized by usable CPUs. (#10468) by @qqqys
Web Shell tabs now display a recoverable error message instead of a blank white screen when boot failures occur before React mounts. (#10215) by @harjothkhara
Recovers protected .qwen state after abrupt job termination by repairing permissions or quarantining files to ensure successful checkout. (#10214) by @yiliang114
Ensures fire-and-forget hooks like MessageDisplay and SessionDelete complete execution with full supervision even after the Qwen process exits. (#10288) by @doudouOUC
Keeps pinned sessions visible within their original sidebar group sections while maintaining their presence in the dedicated Pinned section. (#10416) by @yiliang114
Increases the Python SDK subprocess stream reader limit to 4 MiB to support large stream-json messages without errors. (#9337) by @lwind233
Fixes test infrastructure to correctly render AppContainer and observe post-mount state updates during queued-submission drain tests. (#10436) by @yiliang114
Fixed a Ruff linting error in the Python SDK tests by removing a stray blank line in the import block. (#10505) by @qwen-code-dev-bot
Scoped startup warning files to individual npm start sessions to prevent conflicts between concurrent development environments. (#8456) by @xianjianlf2
Prevented the system from incorrectly claiming a question host in stream-json direct mode when the control system is inactive. (#9414) by @tonydzi
Enforced strict timeout limits for daemon session initialization, ensuring timed-out sessions are cancelled and cleaned up properly. (#10268) by @doudouOUC
Fixed an issue where failed concurrent teammate spawns left ghost members in the persisted team roster file. (#10223) by @yiliang114
Made category tabs in the @ completion picker clickable via mouse when terminal mouse tracking is active. (#8395) by @destire-mio
Anchored the VS Code companion model selector dropdown to the input form to prevent it from floating over the message list. (#9702) by @yiliang114
Fixes Windows IME composition visibility by rendering the software cursor as an underline without a fixed background, preventing Pinyin text from becoming invisible. (#9803) by @bluefateludi
Enables relative daemon base URLs for six workspace file helpers including readWorkspaceFile and glob, fixing Invalid URL errors in Web Shell integrations. (#9817) by @shoemoney
Prevents stale abort handlers and misleading logs by cleaning up the shell abort listener when ShellExecutionService.execute() throws synchronous errors. (#9849) by @AaronZ345
fix(cli): infer keyless Vertex AI auth (#9045) by @KXHXK
Provider update prompts now instruct users to manually select a new model with /model instead of promising an automatic switch. (#9023) by @rbalachandar
Removed the non-functional general.dynamicCommandTranslation setting from CLI, VS Code schemas, and documentation to prevent user confusion. (#8754) by @destire-mio
Removed the unsupported npm --parallel flag from scripts to ensure test commands run successfully on npm version 12 and newer. (#8725) by @imrehg
Fixed Windows unit tests by normalizing unverifiable file IDs to zero while maintaining strict path and device checks for workspace isolation. (#10440) by @yiliang114
Serve workspace checks now correctly allow subdirectories starting with .. while still rejecting actual parent directory traversal. (#9848) by @AaronZ345
fix(cli): reject symlinked screenshot paths on win32 in capture_screen_context (#9847) by @zhou2024NAU
Removes a schema length constraint to prevent LM Studio grammar parsing errors and allow new conversations to start successfully. (#10275) by @mredbishop
Route-scopes the session token-limit cache to prevent stale counts from triggering limits when switching models between different routes. (#9862) by @yiliang114
Preserves sourceType and sourceId metadata during daemon channel session restores to ensure consistent attribution for legacy sessions. (#10257) by @AaronZ345
Stops forcing temperature 0 for DeepSeek models, allowing them to use default sampling behavior unless explicitly configured by the user. (#9879) by @AaronZ345
fix(core): disambiguate send_message destinations (#10083) by @Sumire-no-kai
Delivers teammate messages to the leader at tool-round boundaries instead of waiting for the entire multi-round task to finish. (#9638) by @yiliang114
Optimizes repeated inline image rendering by adding a negative cache for invalid decodes and correcting height allocation for image-only messages. (#8789) by @zjunothing
The serve command now prefers a valid TLS issuer over an expired one with the same subject to prevent handshake failures during CA renewal. (#10042) by @qqqys
Session cleanup operations now strictly preserve daemon writer-lease ownership to ensure data integrity during delete, archive, and repair actions. (#10300) by @doudouOUC
The serve command now supports hot-reloading model providers and refreshing session registries without disrupting active turns or switching current models. (#10269) by @doudouOUC
Fixed MCP connection stability by tolerating HTTP 404 responses during the optional Streamable HTTP GET SSE probe and preventing body-read hangs. (#10091) by @harjothkhara
Improved TypeScript SDK error reporting by surfacing specific daemon JSON-RPC error details from data fields instead of showing generic Internal error messages. (#10571) by @doudouOUC
fix(serve): surface provider error detail in turn_error messages (#10569) by @doudouOUC
Increases the browser daemon bundle budget to 216KB to accommodate recent error-detail surfacing changes and fix CI install failures. (#10602) by @chiga0
Fixes the Release workflow by moving runner-environment mapping to specific steps, resolving GitHub parsing errors caused by invalid job-level context usage. (#10598) by @yiliang114
fix(ci): run /resolve without the container sandbox and pin its CLI version (#10428) by @wenshao
Coordinates Docker sandbox workloads on shared ECS hosts using a reader/writer lock to allow concurrent test shards without reducing concurrency. (#10605) by @yiliang114
Aligns non-Linux Vitest unit suites to treat unhandled errors as non-fatal on macOS and Windows, ensuring consistent cross-platform test behavior. (#10443) by @qwen-code-dev-bot
The /resolve workflow now recovers lost requests caused by moved heads, fork pushes, 503 errors, and draft states by replaying merges safely. (#10429) by @wenshao
fix(core): keep no-follow reads protected where O_NOFOLLOW is missing (#10007) by @yiliang114
The daemon browser bundle size limit is now advisory, emitting a warning instead of failing the build when exceeding 216 KiB. (#10630) by @yiliang114
Fixes container startup failures when using image IDs by shortening the hostname to comply with Linux 64-character limits while keeping full container names. (#10624) by @yiliang114
Adds disk capacity checks to the no-credential integration job on self-hosted runners to prevent installations when insufficient space is detected. (#10539) by @yiliang114
Ensures disk pressure samples are captured and retained during npm install failures to improve debugging of transient disk issues. (#10517) by @yiliang114
Prevents loss of existing skills during reinstall failures on Windows by using a backup-and-restore strategy instead of delete-then-rename. (#10189) by @yiliang114
Fixes Web Shell footer rendering delays by ensuring background agent notifications correctly resolve pending tool rows before final output. (#10503) by @dreamWB
Restores native VS Code diff approval flows for WebShell edit permissions, allowing Accept/Reject commands to resolve pending tools correctly. (#10534) by @yiliang114
Adds an opt-in grace period for poll-based SSE clients to reconnect after prompt settlement without triggering event stream resync errors. (#10344) by @chiga0
fix(tools): treat blank task_list filters as absent (#10159) by @yiliang114
Restores the web-shell composer input functionality after closing the MCP plugin panel to prevent the interface from becoming stuck. (#10232) by @AaronZ345
Improved /review presubmit to detect overlapping multi-line comment ranges by checking closed-interval intersections instead of only end lines. (#9801) by @bluefateludi
Fixed a memory leak by clearing pending copy-feedback timers on unmount for all copy buttons in the Web Shell and core tests. (#10655) by @wenshao
Edit-class tools now display change diffs in the approval prompt when a PreToolUse hook returns an ask decision. (#9441) by @yiliang114
The Java SDK now correctly reads control response status from the nested response.subtype field to properly detect and log control errors. (#9924) by @AaronZ345
Model requests rejected with HTTP 413 now automatically trigger one-shot compaction and retry, or surface a clear error to start a new session if compression fails. (#10408) by @yiliang114
fix(core): make loop detection result-aware for task_list polls (#9492) by @yiliang114
Channel initialization timeouts now return a structured HTTP 504 response with Retry-After headers instead of a generic 500 error. (#10404) by @chiga0
Review disclosures for lint deferrals now display clean, accurate bilingual messages in both English and Simplified Chinese without stuttering or untranslated text. (#10587) by @wenshao
HTTP hooks now strictly disable redirects to prevent repository-controlled configurations from exposing session data to arbitrary internal or metadata addresses. (#10427) by @wenshao
fix(core): keep image views working with sharp releases older than 0.34 (#10633) by @MingyaWang
Enables DingTalk status cards to recover from network failures via exponential backoff retries and periodic heartbeat content republishing. (#10357) by @qqqys
Displays the Goal objective as the label for Goal-only sessions in the resume picker and search instead of showing empty prompt. (#10295) by @qqqys
fix(core): make the failed-spawn compensating-write gate commit-aware (#10522) by @yiliang114
fix(cua): harden Node REPL and Windows UIAccess (#10666) by @LaZzyMan
fix(cua): publish unsigned Windows UIAccess worker (#10680) by @LaZzyMan
fix(ci): make shared ECS Vitest concurrency tunable (#10667) by @yiliang114
fix(web-shell): persist model reasoning preferences (#10489) by @callmeYe
fix(ci): keep web-shell visuals comment on upload failure (#10253) by @AaronZ345
fix(permissions): never let the AUTO-mode classifier auto-approve out-of-workspace writes; always fall back to manual approval (#8744) by @PratikWayase
fix(review): gate decided stops on a composed re-rule verdict (#10310) by @wenshao
fix(sdk): stop emitting a duplicated hashbang in the serve-mcp bin (#10485) by @wenshao
fix(cli): keep hardware cursor aligned after layout changes (#10417) by @liujiayi771
fix(cli): Defer provisional standalone reasoning options (#10706) by @doudouOUC
fix(cli): abort subagent generation on unmount (#9937) by @AaronZ345
fix(web-shell): remove duplicate language declaration in ChatEditor.test.tsx (#10729) by @yiliang114
fix(autofix): clamp gate test load explicitly instead of via RUNNER_NAME (#10671) by @qqqys
fix(java): make SDK worker threads daemon (#9925) by @AaronZ345
fix(core): support hybrid thinking streams for Qwen3 (#9607) by @yiliang114
fix(web-shell): reconcile queued prompts across clients (#10704) by @ytahdn
fix(ci): retry transient sandbox:none E2E shard failures once (#10566) (#10572) by @qwen-code-dev-bot
fix(web-shell): proxy standalone/live daemon routes in vite dev (#10748) by @wenshao
fix(core): validate git pull option combinations and detached HEAD (#10752) by @wenshao
fix(channels): apply approval mode to standalone sessions (#10715) by @qqqys
fix(cli): route the /output-style dialog in the OpenTUI registry (#10763) by @wenshao
fix(serve): keep prompt-turn failure logs from degrading to [object Object] (#10732) by @yiliang114
fix(acp-bridge): backpressure ACP NDJSON queue saturation instead of tearing down the channel (#10731) by @yiliang114
fix(ci): isolate and bound release validation workloads (#10765) by @yiliang114
fix(workflow): tighten multi-workspace state boundaries (#10772) by @yiliang114
fix(vscode): stop webview bundle test timing out under CI contention (#10665) (#10672) by @qwen-code-dev-bot
fix(release): raise prepared package size budget to 112 MiB (#10774) (#10781) by @qwen-code-dev-bot
fix(core): skip non-regular files in usage history transcript replay (#10681) by @qqqys
fix(cli): stop the ctrl+s hint advertising shell-cap hidden lines (#10657) by @yiliang114
fix(web-shell): keep the sidebar New task on a workspace (#10777) by @wenshao
fix(serve): keep the Conversations runtime outside the workspace registration limit (#10759) by @wenshao
fix(cua): restore legacy Windows installer compatibility (#10792) by @LaZzyMan
fix(triage): make Stage 1-pre subsumption check large-file safe (#10396) by @yiliang114
fix(web-shell): Load models for fresh standalone sessions (#10719) by @doudouOUC
fix(core): recover from gateway 400 on media-bearing OpenAI requests by degrading the media (#10699) by @yiliang114
fix(ci): keep worker tests responsive under ECS contention (#10813) by @yiliang114
fix(ci): classify the CI profile from the trusted base SHA (#10799) by @yiliang114
fix(cli): align OpenTUI output-style behavior (#10806) by @qqqys
fix(cli): show active scheduled tasks at session start (#10053) by @yiliang114
fix(ci): stop stable releases from disabling per-workspace test retries (#10803) by @yiliang114
fix(release): stop hiding sandbox build failures and check the prepared package early (#10784) by @yiliang114
fix(core): craft the hard-link tar fixture instead of packing it (#10801) by @yiliang114
fix(release): cap Vitest workers in the quality_scripts lane (#10755) (#10760) by @qwen-code-dev-bot
fix(web-shell): keep a manual session name across /clear (#8977) (#9260) by @yiliang114
fix(ci): Take the OpenTUI interactive e2e leg out of CI (#10829) by @chiga0
fix(live-host-release): correct setup-node action SHA (#10827) by @LaZzyMan
fix(web-shell): Reload models for repeated new tasks (#10824) by @doudouOUC
fix(goal): stop exporting the unreachable propose_goal decline message (#10787) by @qqqys
fix(ci): stop heartbeat mint-skip test racing loop startup (#10527) by @qwen-code-dev-bot
fix(dws): isolate direct-message ingestion across conversations (#10691) by @qqqys
fix(web-shell): preserve slash command attachments (#10730) by @ytahdn
fix(channels): prune selections when workspaces are removed (#10796) by @qqqys
fix(ci): stop sandbox image prep from waiting on another run's tests (#10843) by @yiliang114
fix(test): give the serve routes daemon a CI-sized ACP handshake budget (#10846) by @yiliang114
fix(cli): rate-limit interim monitor notification turns (#10818) (#10848) by @yiliang114
fix(channels): route daemon permission votes by session (#10793) by @qqqys
fix(live-host-release): build sdk before qwen-live in publish job (#10836) by @LaZzyMan
fix(ci): read the CI patrol's status rollup one PR at a time (#10861) by @yiliang114
fix(cli): close OpenTUI submit-path gaps, restore its E2E leg (#10831) by @chiga0
fix(release): stop one flaky test from failing a stable release (#10842) by @yiliang114
fix(ci): retry a contended unit attempt and bound a hung one (#10868) by @yiliang114
fix(cli): resolve the sessionCd folder-trust gate from the session workspace, not the stale this.settings cache (#10470) by @tomsen02
fix(cli): remove duplicate folder trust mock (#10874) by @yiliang114
fix(acp-bridge): deflake the exhaustive UTF-16 byte-estimate test (#10529) (#10532) by @qwen-code-dev-bot
fix(workflow): classify Critical feedback by leading marker (#10361) by @Sumire-no-kai
fix(release): report a workspace test run that fails with nothing failing (#10805) by @yiliang114
fix(cli): Align OpenTUI mid-turn submit and exit with ink (#10883) by @chiga0

Performance

Added a pre-verify dedup step to the review pipeline that skips candidates matching the carried ledger to save verification resources. (#10121) by @wenshao
perf(ci): shard release quality checks (#10619) by @yiliang114

Documentation

Adds a design document detailing the architecture, batching plan, and verification strategy for migrating the TUI from ink to OpenTUI. (#10343) by @chiga0
Corrects Java SDK documentation to replace the nonexistent SessionClosedException with SessionControlException for closed or unavailable session errors. (#9859) by @AaronZ345
Added an evidence-based conclusions recipe to common workflows documentation with a copy-pasteable QWEN.md verification policy template. (#8702) by @Dmatut7
Documented how to configure a trusted tool PATH for qwen serve daemons managed by systemd or launchd to ensure user-installed tools remain resolvable. (#10576) by @doudouOUC
docs(design): Align OpenTUI migration notes with the landed batches (#10724) by @chiga0
docs(readme): add versioned SWE-bench scores (#10808) by @DennisYu07
docs(goals): sync the Goal docs with the current runtime (#10785) by @qqqys
docs(design): Define relaxed standalone daemon ownership (#10828) by @doudouOUC

Internal Changes

Automated PR evidence images are now uploaded to Aliyun OSS instead of cluttering the Git repository with thousands of asset branches. (#9985) by @yiliang114
Refactored SDK authentication to remove a runtime module cycle by importing HTTP errors directly from their owning module. (#10039) by @DragonnZhang
Centralizes JSON tag-character escaping to prevent untrusted content from breaking HTML or XML envelopes across all model-facing outputs. (#9917) by @AaronZ345
Removes the unused MemoryUsageDisplay component from the CLI status bar as it is no longer referenced in the codebase. (#10238) by @qqqys
Goal messages now respect the caller's recursion budget by applying boundedTurns limits, while other specific carve-outs remain with updated documentation. (#10259) by @qqqys
Java SDK test fixtures now properly close connections for body-less responses to prevent intermittent HTTP header parser errors during session teardown. (#10472) by @wenshao
Removed a circular dependency between the ACP route table and transport utility layer by localizing the route parameter extraction predicate. (#10040) by @DragonnZhang
No user-facing changes; this release refactors internal MCP server configuration into a dedicated module without altering functionality. (#9496) by @DragonnZhang
Migrates VS Code IDE Companion chat to WebShell backed by a workspace-scoped qwen serve daemon, separating transcript management from VS Code-specific lifecycle tasks. (#9811) by @yiliang114
Integration tests now use condition-based polling instead of a fixed one-second sleep to reliably wait for ACP command update notifications. (#10516) by @yiliang114
Fixed the web-shell boot test by correcting the mock path for the daemon React SDK to match the current module structure. (#10526) by @wenshao
Updated the Web Shell boot regression test to mock the daemon SDK from its current package entrypoint, resolving CI failures caused by moved modules. (#10545) by @yiliang114
Stabilized the session deadline boundary test by using a safe integer value that avoids intermittent failures near Node.js timer limits. (#10556) by @yiliang114
ci: stabilize tests under shared ECS host contention (#10552) by @yiliang114
Applied shared-runner integration limits to Release jobs by passing the GitHub runner environment to enforce single-fork limits on ECS hosts. (#10592) by @yiliang114
Hardens timing-sensitive waits in Agent View supervisor and Web Shell pagination tests to prevent intermittent nightly release failures. (#10615) by @yiliang114
CI tests now measure CPU time instead of wall-clock time for performance guards and wait for a second marker to validate cron interactive checks. (#10648) by @yiliang114
Added regression tests to ensure tools.eager configuration tolerates Object.prototype keys without crashing the PermissionManager at startup. (#10479) by @yiliang114
Stabilizes the picker hang-up abort test by replacing fixed timeouts with vi.waitFor polling to reliably detect signal abortion. (#10664) by @yiliang114
test(core): close the deferred test gaps recorded in #9930's review rounds (#10465) by @tomsen02
test(integration): remove flaky ACP recall timing check (#10703) by @yiliang114
ci(ecs): file an issue when the runner fleet update fails (#10445) by @wenshao
test(ci): make web-shell visuals publish stub module-safe (#10736) (#10738) by @qwen-code-dev-bot
test(core): rescale the shell-safety CPU budget to the metric it measures (#10735) by @TianYuan1024
chore(deps): bump fast-uri to 3.1.7 to clear the high-severity audit gate (#10862) by @wenshao
chore(vscode): refresh NOTICES for the fast-uri bump (#10863) by @yiliang114
ci: split lint and static checks out of the Test job (#10756) by @wenshao
test(review): stamp the ledger entries when the test runs, not when it loads (#10878) by @yiliang114
ci: collect coverage only on the post-merge run and run cli tests under node (#10890) by @wenshao
test(cli): stamp the background-work duration fixture when the test runs, not when it loads (#10881) (#10889) by @qwen-code-dev-bot
test: stop millisecond budgets from measuring the shared pool (#10870) by @yiliang114

New Contributors

@lwind233 made their first contribution in #9337
@tonydzi made their first contribution in #9414
@bluefateludi made their first contribution in #9803
@shoemoney made their first contribution in #9817
@KXHXK made their first contribution in #9045
@imrehg made their first contribution in #8725
@Dmatut7 made their first contribution in #8702
@mredbishop made their first contribution in #10275
@Sumire-no-kai made their first contribution in #10083
@Wkewen made their first contribution in #10001
@MingyaWang made their first contribution in #10633
@liujiayi771 made their first contribution in #10417

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.22.3...v0.23.0

0.22.3 - 2026-08-28

Highlights

Added owner-scoped named sessions in Channels to manage up to eight persistent tasks per chat. (#10198)
Enabled daemon Extension installs to accept absolute local paths while rejecting relative paths and unsupported options. (#10131)
Updated Web Shell sidebar to display GitHub-style colored state icons for sessions bound to pull requests. (#10258)
Added an opt-in composer add menu in Web Shell grouping attachments, files, extensions, MCP servers, and skills. (#10379)
Restored bold text visibility in assistant messages and prevented sidebar session names from being truncated. (#10157)
Ensured tool summaries are consistently collapsible and separated MCP Apps from other aggregations. (#10231)

Breaking Changes

No known breaking changes.

Complete Change List

Features

Added a private OpenTelemetry span attribute to report detailed LLM context usage metrics including input categories and remaining capacity. (#10016) by @doudouOUC
Enabled daemon Extension installs to accept absolute local paths while rejecting relative paths and unsupported options like ref. (#10131) by @callmeYe
Backfills PR bindings for existing sessions and adds merge-state snapshots to track whether linked pull requests are open, merged, or closed. (#9729) by @wenshao
Adds an opt-in setting for embedded Web Shell hosts to hide the session source switch, pinning all sidebar catalogs to ordinary task conversations. (#10079) by @dreamWB
Implements safe projection for reserved [FILE: ...] output markers by redacting malformed or oversized inline markers without uploading files. (#9991) by @qqqys
Updates Goal prompts to notify the model exactly once when the objective changes, while continuing to assert the current objective on every turn. (#10013) by @qqqys
Added support for owner-scoped named sessions in Channels, allowing users to manage up to eight persistent named tasks per chat. (#10198) by @doudouOUC
Updated Web Shell sidebar to display GitHub-style colored state icons for sessions bound to pull requests based on their open, merged, or closed status. (#10258) by @wenshao
Made deferred review suggestions recoverable by external tooling via a stable invisible marker in the review body artifact. (#9761) by @wenshao
The /review command now warns when a subsystem's Critical issues repeatedly regrow across rounds by detecting successor chains. (#10010) by @wenshao
Restored the desktop brand builder skill for the Tauri shell to generate branded packages using brandId and logo inputs. (#10164) by @yiliang114
Added a standalone daemon session API supporting create, list, resume, archive, and delete operations for top-level sessions. (#10179) by @doudouOUC
The /review command now remembers the last explicitly used --effort level per project for subsequent runs without arguments. (#9883) by @tlysanhuo
Long-running review rounds now update their status comment every 10 minutes with elapsed time and last agent activity to distinguish active work from stalled processes. (#9771) by @wenshao
Local review-fix loops now anchor incremental rounds to working tree content changes instead of commits, reducing token usage by avoiding full tree re-reviews. (#9659) by @wenshao
Review findings now support an optional fixConstraint field to specify existing facts or limits that suggested fixes must not violate during the repair process. (#10168) by @wenshao
feat(sdk): Add standalone session APIs (#10294) by @doudouOUC
feat(cli): OpenTUI migration infra batch — locked deps, dependency-direction arch check, framework-neutral streaming model (#10134) by @chiga0
Added a configurable Mem0 extension skeleton providing a retrieval-only external-context-mem0 stdio Extension with bounded HTTP request support. (#10149) by @doudouOUC
Added a new triage gate that automatically identifies and closes duplicate PRs when their changes are already fully resolved by merged fixes. (#10292) by @yiliang114
Added an opt-in composer add menu to Web Shell that groups attachments, files, extensions, MCP servers, and skills for easier pointer-oriented selection. (#10379) by @ytahdn
Added an opt-in interactive browser terminal to Web Shell that manages independent PTY sessions per tab with persistent scrollback and state handling. (#9984) by @ytahdn
Adds the qwen review ab-drive subcommand to run execution-grade verification scripts against PR and base trees with shared or fresh instances. (#9740) by @wenshao
Confirmed Critical issues now include direction and baseline axes to distinguish between false certifications, failures, regressions, and new surfaces. (#10301) by @wenshao
Makes Aone a first-class platform for session PR bindings, enabling automatic branch-to-MR mapping and state refresh via the a1 CLI. (#10287) by @wenshao

Bug Fixes

Fixed Web Shell to correctly restore saved session diffs with accurate line counts even when file bodies were previously truncated. (#10093) by @ytahdn
Ensured DingTalk rich-text messages preserve all images as ordered attachments across sessions and handle upload failures gracefully. (#9922) by @BenGuanRan
fix: repair the Windows test lane's standing failures (#10064) by @wenshao
fix(core): report broadcast delivery failures in send_message (#10081) by @yiliang114
Moved the autofix scan lane to the persistent self-hosted runner pool to prevent GitHub-hosted runner backlogs from blocking routing. (#10055) by @wenshao
Restores bold text visibility in assistant messages and prevents session names in the sidebar from being truncated by attention pills. (#10157) by @wenshao
Prevents large transcript turns from collapsing automatically after pagination completes, ensuring content remains visible until manually closed. (#10086) by @ytahdn
Makes the delta-resume reconnect test deterministic by waiting for the resumed chunk instead of using a fixed time delay. (#10203) by @qwen-code-dev-bot
Verifies the previous release tag exists in git before anchoring release notes, falling back to the latest stable tag if missing. (#10167) by @yiliang114
Exempts off-Linux E2E shards from fatal unhandled vitest RPC-timeout errors while maintaining strict error handling on Linux. (#10112) by @qwen-code-dev-bot
Ensures tool summaries are consistently collapsible, prevents child tools from opening automatically, and separates MCP Apps from other aggregations. (#10231) by @ytahdn
Ensures tool results in headless and ACP hosts are stamped with Goal turn permits so they can serve as citable evidence for Goal reasoning. (#10175) by @qqqys
Removes a duplicate getToolRegistry mock property in telemetry-swap tests to fix TypeScript build errors caused by duplicate object keys. (#10252) by @wenshao
Fixes TypeScript build failure by removing a duplicate getToolRegistry property from the telemetry swap test configuration mock. (#10243) by @AaronZ345
Adds qwen3.8-flash and qwen3.8-plus to modality patterns to enable native image and video handling instead of routing through the vision bridge. (#10195) by @yiliang114
Bounds the goal-runtime startup wait to 5 seconds to prevent hanging and skips unnecessary memory relaunch steps when running under Bun. (#10128) by @chiga0
Implemented robust process tree reaping for ACP child processes on POSIX and Windows to prevent orphaned processes during shutdown or errors. (#10142) by @doudouOUC
Ensured model-specific reasoning controls remain available and correctly synchronized for qwen3.8-max before, during, and after session execution. (#10244) by @callmeYe
Fixed command hook cleanup to reliably reclaim entire process trees on POSIX and Windows when hooks time out or are cancelled. (#10100) by @doudouOUC
Auto-detection now correctly identifies deepseek-v4-flash-vision-exp, glm-4.6v, glm-5v-turbo, and glm-5.3-flash as vision-capable models. (#10278) by @yiliang114
Increased autofix agent time budgets to 60 minutes for repair passes and 90 minutes for the runner default to prevent premature task termination. (#10217) by @wenshao
Updated stream idle timeout error messages to guide users to both environment variables and explicit settings for resolution. (#9896) by @yu-xin-c
The Web Shell new-session welcome header now features improved typography, spacing, a fade-in animation, and a brand-aligned gradient matching the Qwen logo. (#10230) by @wenshao
Artifact updatedAt timestamps and sizeBytes now update immediately when content changes, ensuring Web Shell previews and caches reflect the latest file state. (#9929) by @zjgzx1988
Extension Skills now separate canonical identity from display names, ensuring consistent matching while showing friendly localized labels in the CLI and Web Shell. (#10296) by @callmeYe
Agent View now preserves queued follow-up messages in shared context across tab switches, preventing data loss when teammates switch views while an agent is busy. (#10102) by @yiliang114
Stale team reclamation is now generation-safe, aborting deletion if the team configuration has changed since the staleness check to prevent accidental data loss. (#10236) by @yiliang114
fix(core): report teammate result settled before event bridge attach (#10245) by @yiliang114
fix(cli): restore goal-less startup broken by the goal-runtime wait refactor (#10290) by @yiliang114
fix(test): mount channel plugin fixture in Docker (#10318) by @yiliang114
fix(ci): stop shared-pool hosts exiting all-green E2E runs red (#10325) (#10329) by @qwen-code-dev-bot
Integration tests now run with an isolated global qwen dir to prevent host configuration and saved memories from affecting test results. (#10337) by @wenshao
E2E workflows now include a bounded retry for transient sandbox image build failures in the Linux docker leg to improve CI stability. (#10359) by @qwen-code-dev-bot
Moved the archive action to the session dropdown and disabled it for running sessions to prevent UI overlap and accidental archiving. (#10302) by @wenshao
Skill toggle endpoints now persist requested names directly to workspace settings without validating against the runtime Skill catalog. (#10077) by @callmeYe
fix(test): isolate tool-control E2E from shared state (#10340) by @yiliang114
Wind-down hand-off markers are now stamped only when the turn is successfully delivered to the model to ensure correct budget handling. (#10260) by @qqqys
Direct DWS final responses now use standard direct-message delivery and recovery paths to ensure messages are not silently dropped. (#10274) by @qqqys
Fixed an intermittent Java 11 test failure by ensuring HTTP connections close properly after cancel and detach responses in the concurrency test fixture. (#10365) by @yiliang114
Updated the ACP cron test fixture to route responses based on prompt content instead of request order, preventing failures caused by parallel test interference. (#10374) by @yiliang114
Configured Linux E2E shards to use isolated disk-backed temporary directories under /var/tmp to prevent /tmp exhaustion errors during test execution. (#10376) by @yiliang114
Updated the triage workflow to silently exit when a PR is closed during a re-run, preventing unnecessary warnings about missing bot reviews. (#10334) by @yiliang114
Updated the triage workflow to correctly fail the check step when the response indicates a model-layer API error instead of treating it as success. (#10333) by @yiliang114
The ack-review-request job now reposts acknowledgements directly under the triggering command and adds reactions to improve visibility. (#10381) by @qqqys
Hardens Computer Use sessions with real AbortSignal timeouts, typed errors, authorization reconnection, and consistent foreground delivery. (#10319) by @LaZzyMan
Decouples permissions.allow from tool registration by introducing settings.tools.eager to control schema visibility without affecting auto-approval. (#10098) by @yiliang114

Documentation

Removes redundant and non-operational text from agent context files to reduce token usage without altering project rules or commands. (#10137) by @DragonnZhang
docs(external-context): Design a configurable Mem0 provider extension (#10113) by @doudouOUC

Internal Changes

Fixed telemetry-swap tests by adding the missing getToolRegistry method to the Config mock to prevent initialization errors. (#10220) by @wenshao
Removed stale references to the deleted packages/desktop directory from CI tooling and documentation following the Electron removal. (#10021) by @yiliang114
Renamed internal identifiers containing legacy Gemini prefixes to generic names while maintaining deprecated aliases for backward compatibility. (#9900) by @yiliang114
Centralized worktree configuration derivation to ensure consistent handling of workspace paths and context across all launch paths. (#9915) by @yiliang114
refactor(core,cli): rename generic Gemini identifiers to Llm (#10124) by @yiliang114
Fixes the release classifier test stub to work correctly when Node interprets extensionless executables as either CommonJS or ESM. (#10402) by @ytahdn

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.22.2...v0.22.3

0.22.2 - 2026-08-26

Highlights

See the complete change list below.

Breaking Changes

refactor(node-repl)!: deliver the persistent Node REPL as a standalone MCP server (#9499) by @LaZzyMan

Complete Change List

Features

Added temporal-reachability and incident-replay lenses to review briefs to analyze whether values exist at the correct moments to steer decisions. (#9708) by @wenshao
Review findings now include specific test acceptance criteria for their fixes and explicitly rule on non-convergence to reduce review-fix loops. (#9596) by @wenshao
Daemon sessions now restore to their last selected model across restarts and detaches, while new sessions continue to use the current settings default. (#9687) by @doudouOUC
Validates inline anchors for /review --comment on Aone targets before posting, relocating Critical findings to the summary body and discarding Suggestions if anchors are invalid. (#9634) by @wenshao
Adds a tokensUsed field to GoalRecord to report the total tokens consumed by a Goal alongside its turn count in the lastGoal summary. (#9583) by @qqqys
Enables dynamic workflows via the tools.workflowsEnabled user setting, replacing the previous undocumented environment variable method. (#9098) by @qqqys
Enables PR context fetching for Aone Code targets in the /review command, restoring full review capabilities including native approval and issue fidelity. (#9621) by @wenshao
Web Shell now correctly refreshes composer skills after toggles, preventing disabled skills from reappearing and surfacing failed refreshes instead of stale suggestions. (#9131) by @samuelhsin
The review skill now supports comment-status and presubmit flows for Aone Code targets, generating the same JSON report schema as GitHub for merge-gate and CI state checks. (#9627) by @wenshao
feat(models): support dual-role image generation models (#9650) by @callmeYe
Review compose now surfaces a land-with-residual-risk advisory when critical findings persist across rounds, signaling that manual risk acceptance is required to exit the loop. (#9526) by @wenshao
The Computer Use SDK for Node.js is now updated to v0.20.0, providing versioned accessibility observations and stable element tokens across macOS, Windows, and Linux platforms. (#9587) by @LaZzyMan
Added support for MCP 2026 core protocol and introduced an MCP Apps host for rendering inline applications in daemon-backed WebShell sessions. (#8992) by @samuelhsin
Adds a do-not-refute list and constructible rejection bar to the /review skill verifier to prevent invalid rejections of speculative findings. (#9799) by @wenshao
feat(core): declare create_sub_session only under qwen serve (#9425) by @DragonnZhang
Added support for creating scheduled tasks that reuse an existing live session by providing an optional sessionId. (#9361) by @yiliang114
Compact mode now folds adjacent thinking, tool activity, and parallel agents into a single expandable summary row in the web shell. (#9657) by @ytahdn
Kimi (Moonshot AI) is added as a built-in third-party provider with support for international and China endpoints and editable model catalogs. (#9814) by @TianYuan1024
The Workflow tool now displays a detailed approval dialog showing the script's name, phases, and arguments before execution. (#9837) by @qqqys
WebShell now exposes an optional callback to report the active session's complete subagent task snapshot for embedding hosts. (#9637) by @callmeYe
Added an optional async prepareSubmit callback for Web Shell hosts to resolve context dynamically before submission. (#9802) by @dreamWB
Adds four built-in output styles (Concise, Proactive, Explanatory, Learning) to control how the agent reports work throughout a session. (#9565) by @qqqys
Introduces qwen serve --open-with-auth to open a loopback Web Shell with bearer authentication using a provided or auto-generated token. (#9738) by @doudouOUC
Adopts the shared WebShell transcript renderer as the default and only conversation timeline in the VS Code companion, replacing the legacy renderer. (#9719) by @yiliang114
Replaced built-in Computer Use tools with a bundled skill that automatically configures the external Node REPL MCP server and CUA SDK on first use. (#9856) by @LaZzyMan
Promoted language-pitfall and wrapper/proxy checks from Agent 1a to dedicated high-effort Step 3A roles for more thorough code review. (#9805) by @wenshao
The /review command now adds an advisory note when the overall approach, rather than the current patch, is identified as the primary open question. (#9340) by @qqqys
Added a new find-simplifications sweep skill that identifies dead code and orphaned resources, generating evidence-backed proposals for maintainer review. (#9384) by @qqqys
Required explicit user opt-in before launching workflows by defining five specific triggers to prevent unintended multi-agent orchestration. (#9806) by @qqqys
Review executions now run the repository's own commands inside a container boundary defined by operator policy instead of relying on local installation. (#9723) by @wenshao
feat(core): add a per-project outside-repo artifact landing (#9776) by @wenshao
feat(review): report findings to clients as a typed contract (#9794) by @wenshao
Engages the critical severity floor immediately after two consecutive rounds of sustained finding rates instead of waiting for the fixed round-6 schedule. (#9938) by @wenshao
Removed the Electron desktop package and related sync scripts since the code has been forked to the OpenWork repository. (#9085) by @yiliang114
Adds an opt-in liveness check for daemon child processes using ACP channels, with retries and timeouts to detect failures without false positives from host suspension. (#9976) by @doudouOUC
Introduces a built-in DingTalk Workspace channel supporting direct messages, mentions, document notifications, and todo tracking using authenticated DWS CLI profiles. (#9394) by @qqqys
feat(review): add a --topology minimal single-pass A/B arm (#9919) by @wenshao
feat(cli): Manage agent view session lifecycle (#9986) by @ZijianZhang989
feat(goal): make get_goal's default view a summary instead of the whole catalog (#9973) by @qqqys
feat(goal): stop a Goal whose checkpoints stall three times in a row (#9975) by @qqqys
feat(web-shell): make compact view the only mode (#9993) by @ytahdn
feat(daemon): Support current-session scheduled tasks (#9838) by @doudouOUC
feat(core): trust a generated-scripts root for workflow scriptPath loads (#9987) by @qqqys
feat(providers): load model recommendations before editing (#9980) by @qqqys
feat(goal): stop autonomous continuation at a token budget the user re-arms (#9891) by @qqqys
feat(acp): enable managed auto-memory lifecycle (#9992) by @zgxkbtl
feat(cli): Add standalone sessions for projectless tasks (#9978) by @doudouOUC
feat(web-shell): add session token usage panel (#9988) by @ytahdn
feat(core): accept cross-session messages behind an inbound gate (#9576) by @qqqys
feat(goal): let a Goal stop early when its objective is infeasible (#10125) by @qqqys
feat(goal): grant one hand-off turn before a spent budget stops the Goal (#10132) by @qqqys
feat(core): add a bundled goal-draft skill that writes verifier-judgeable Goals (#10002) by @qqqys

Bug Fixes

Clicking a session in the Session Overview panel now correctly opens it within its original workspace directory instead of defaulting to the primary workspace. (#9730) by @wenshao
Web Shell now automatically retries messages via the ordinary prompt path if a mid-turn insertion is rejected while the stream is idle, preventing unnecessary error toasts. (#9732) by @ytahdn
The review pipeline no longer posts fallback comments when a run is cancelled because a newer superseding run started, while still commenting on job-level timeouts. (#9716) by @wenshao
Pinned sessions in the Web Shell sidebar now maintain a stable order based on pinning time and provide instant visual feedback when pinned or unpinned. (#9560) by @yiliang114
Updates the workflow size baseline for qwen-autofix.yml to 397656 bytes to match the actual shipped file size and unblock CI checks. (#9747) by @wenshao
fix(ci): gate the fork signal on fields the review payload delivers (#9469) by @qqqys
Rejects session titles that exactly match the prompt's example strings, triggering the existing fallback behavior for auto-title and /rename --auto. (#9709) by @yiliang114
Replaces VM evaluation of workflow meta literals with a static parser to prevent hangs or unbounded allocation caused by malicious model-generated code. (#9325) by @qqqys
Enables workspace artifact downloads using relative daemon base URLs to fix Invalid URL errors in Web Shell integrations configured with same-origin paths. (#9734) by @ytahdn
Increases the repair attempt agent budget to 45 minutes and adjusts related step caps to prevent opaque check failures during deterministic rejections. (#9691) by @qqqys
Extends the workflow stall watchdog window from 60s to 180s to prevent false timeouts during long transport retries or slow model responses. (#9397) by @qqqys
Gates skill announcements on whether the model explicitly declared the Skill tool, preventing wasted turns for subagents with restricted tool lists. (#9718) by @wenshao
Counts fix-induced re-reports as new work in review statistics, distinguishing them from simple re-posts of existing findings. (#9744) by @wenshao
Enables previewing for Markdown, HTML, and raster images in Web Shell by correctly classifying them before generic document handling. (#9760) by @ytahdn
fix(daemon): keep restored ask_user_question valid after load (#9763) by @doudouOUC
Public GitHub extensions now work on systems with Git older than 2.37 by resolving refs to immutable commits and downloading via the secure archive path instead of native Git. (#9690) by @yiliang114
The review workflow now repairs permissions and retries before failing to clean up leftover worktrees, ensuring jobs do not fail due to removal errors. (#9748) by @wenshao
Session title echo comparisons now use symmetric normalization for both candidate and example titles to prevent false mismatches. (#9809) by @yiliang114
Fixed a React dev-mode memory leak in Web Shell by capping performance.measure accumulation and clearing the timeline every 16,384 entries. (#9770) by @wenshao
The DingTalk channel now correctly parses forwarded chat records and includes their titles and summaries in the agent's context. (#9339) by @qqqys
Web Shell now renders bold text correctly when emphasis markers are adjacent to CJK punctuation by adding the remark-cjk-friendly plugin. (#9457) by @cactuser-Lu
Updates the settings schema to accept prompt hooks with prompt and model fields, aligning VS Code validation with runtime behavior. (#8779) by @zjunothing
Adds a read-only reasoning effort preview for the qwen3.8-max model in WebShell welcome state before session creation. (#9599) by @callmeYe
Enables Vertex AI authentication using Application Default Credentials when a Google Cloud project is configured without an API key. (#9017) by @axiom-of-choice
Updates the workflow size baseline for cd-cua-driver.yml to prevent CI failures caused by its increased shipped file size. (#9822) by @wenshao
Clears the tool display list immediately before invoking the completion callback to prevent duplicate rendering in the TUI. (#9602) by @qwen-code-dev-bot
Normalizes Windows drive-letter casing in MCP approval keys to ensure consistent server recognition between CLI and VS Code. (#9779) by @zhou2024NAU
File reading now validates image content via magic bytes before trusting extensions, preventing text files with image extensions from being misclassified. (#9113) by @rbalachandar
Session exports on Windows now correctly preserve drive-letter paths in file links, allowing them to open locally instead of failing in the browser. (#8953) by @yefuyou
The CLI input box border now adapts to terminal resizing by truncating long titles, preventing layout overflow and row jitter. (#8991) by @tlysanhuo
Background agent notifications now include counts of remaining active agents for the same owner to improve coordination status visibility. (#9018) by @tao943
Reasoning effort tiers are now automatically capped to the maximum level supported by each specific model endpoint to prevent request errors. (#9501) by @harjothkhara
Microphone permission checks now occur only when recording starts rather than during voice warmup, preventing unnecessary early permission prompts. (#8912) by @Nas01010101
Fixed loop detection to halt turns when the model repeats long verbatim blocks in content or reasoning streams. (#9668) by @yiliang114
Secured the review process by ensuring the verified git identity remains consistent across all residue probe commands. (#9742) by @wenshao
Fixed an issue where nested sub-agent approval requests were not surfaced to the UI, causing background agents to hang. (#9793) by @wenshao
Ensured agent launch failures now correctly populate the error field to be reported as failed tool calls. (#9519) by @yiliang114
Prevented ghost shutdown pending states by gating task assignment during teammate shutdown request processing. (#9550) by @AaronZ345
Cached fork snapshots are now isolated by session ID to prevent cross-session data leakage during background reads. (#9471) by @tomsen02
Evidence catalog previews are now capped at 240 UTF-8 bytes instead of characters to prevent Goal failures in non-ASCII languages. (#9835) by @qqqys
Fixed text duplication in WSL terminals by skipping the redraw optimizer when running under ConPTY. (#7897) by @C0d3N1nja97342
Fixed token count tracking to invalidate data when the active model route changes, ensuring accurate session limits and compression banners. (#9506) by @yiliang114
Bounded conditional-close refusal holds to a 1,024-hold per-Session limit to prevent oversized responses from breaking cache retention. (#9820) by @doudouOUC
Enabled workflow reapproval after hook bounces by making approval handling incarnation-aware and preventing stale events from affecting newer instances. (#9547) by @AaronZ345
Fixed debug log routing in daemon mode to use async-local session IDs, preventing logs from different sessions being written to the same file. (#9538) by @tomsen02
Added support for per-provider streamIdleTimeoutMs settings to handle varying latency requirements across different model providers. (#9795) by @yu-xin-c
Fixes memory management by allowing forget operations to scan the same uncapped document universe as recall, preventing stale entries from persisting. (#9530) by @harjothkhara
fix(core): make team shutdown a leader-only tool (#9401) by @yiliang114
CI now moves undeletable workspace residue aside via rename instead of failing when standard deletion methods encounter permission issues. (#9868) by @wenshao
Live task bridge operations now consistently use canonical lowercase UUIDs to prevent session lookup failures caused by case mismatches. (#9819) by @doudouOUC
fix(core): map OpenAI-compatible finish_reason case-insensitively (#9884) by @yiliang114
After retry exhaustion, the system now accepts quiet model completions following a tool result instead of aborting the run with an API error. (#9196) by @yiliang114
Added stream-json to the allowed values for the output.format setting in the schema, ensuring VS Code settings match the CLI runtime capabilities. (#8966) by @harjothkhara
The system now validates completed Anthropic tool arguments as strict JSON objects, rejecting malformed inputs to prevent execution of invalid calls. (#9013) by @tlysanhuo
Fixed CI to wipe only A/B checkout directories instead of the entire workspace, preventing 900 MB git history re-downloads and runner hangs. (#9228) by @qwen-code-dev-bot
Disabled the default permission-response timeout so requests remain pending until user decision, while still supporting explicit timeouts via --permission-response-timeout-ms. (#9933) by @doudouOUC
Removed unsupported uniqueItems constraints from function schemas for OpenAI-compatible requests to prevent DashScope endpoint rejections. (#9869) by @qqqys
Unified Goal continuation prompts across all interfaces with a guarded JSON block to prevent prompt injection and ensure objective consistency. (#9834) by @qqqys
Banned unexecuted mutation claims in coverage briefs, requiring unrun mutations to be labeled as hypotheses with witness notes. (#9923) by @wenshao
Downgraded workflow-size ratchet failures to warnings when the PR did not modify the grown file, preventing false positives from baseline changes. (#9931) by @wenshao
Reduces rendering jank in Web Shell by keeping streamed thinking text out of the top-level render path and unmounting collapsed tool details. (#9914) by @ytahdn
Neutralizes both modern ::name:: and legacy ##[name] workflow commands in autofix stdout echoes to prevent injection attacks in job logs. (#9871) by @wenshao
Compiles workflow scripts before registering runs to ensure invalid scripts fail cleanly without creating phantom rows or telemetry events. (#9873) by @qqqys
Repairs persisted session lifecycle operations to handle empty, malformed, or orphaned transcript files while returning conflicts as per-session errors. (#9626) by @doudouOUC
The CLI now gracefully handles unreadable prompt files by logging a warning and using the default rewrite prompt instead of crashing. (#9753) by @yiliang114
Goal ownership now hydrates independently from session metadata, allowing Slash commands to load faster without waiting for slower metadata requests. (#9977) by @ytahdn
The /goal resume command now correctly resumes evidence-limited Goals by resetting the evidence cursor while preserving objective and revision data. (#9840) by @qqqys
Restricts Git credential configuration to scoped operations initiated by Qwen Code, ensuring credentials remain isolated from URLs, logs, and environment variables. (#9870) by @callmeYe
Ensures branched sessions inherit the source session's display name with numeric suffixes instead of random UUIDs, improving session recognition and consistency. (#9764) by @water-in-stone
Fixes telemetry aggregation errors during failed session swaps by using explicit transactions to prevent inflated usage records from replayed history. (#9844) by @yiliang114
Corrects QQ Bot cron message handling by tracking active prompts in a dedicated set instead of relying on unreliable stream state indicators. (#9971) by @yiliang114
fix(cli): mark estimated compression token counts in banners (#9568) by @yiliang114
Ensures OpenRouter requests explicitly disable reasoning features when configured off, by emitting the native reasoning parameter in the API payload. (#9758) by @yiliang114
fix(core): validate skill commands against the live provider to survive late attach (#9824) by @yiliang114
fix(cli): keep in-flight tool calls pending during live session replay (#9705) by @yiliang114
fix(core): reject unverifiable validated read inodes (#9857) by @AaronZ345
fix(review): the sandbox default named an image that does not exist (#9972) by @wenshao
fix(web-shell): localize vision bridge notices (#10003) by @ytahdn
fix(web-shell): allow reasoning selection before session creation (#10008) by @callmeYe
fix(core): subordinate the coordinate skill's teammate count to the configured cap (#9403) by @yiliang114
fix: repair the Windows and macOS test lane failures (#9728) by @wenshao
fix(ci): give the macOS and Windows lanes a trigger again (#9370) by @wenshao
fix(core): make permissions.allow restrict the tool schemas sent to the model (#9829) by @yiliang114
fix(webui): preserve hydrated Goal state during event startup (#10012) by @ytahdn
fix(cli): graft the review anchor forward across fail-closed rounds (#9932) by @wenshao
fix(live): restore Live Host after desktop removal (#9994) by @yiliang114
fix(goal): cite this turn's delivered output instead of refusing over it (#9880) by @qqqys
fix(serve): let channel workers reach TLS-enabled daemons (#9392) by @qqqys
fix(cli): drop duplicate fake properties breaking the main build (#10022) by @yiliang114
fix(core): register report_findings in the permission alias table (#10033) by @yiliang114
fix(cli): preserve bridge timeouts for mid-turn media (#9995) by @ytahdn
fix(mcp): recover restarted HTTP MCP servers in-session and in CLI (#9962) by @yiliang114
fix(core): sync loaded-skill state with history eviction (#9500) by @ZijianZhang989
fix(core): preserve images for multimodal DeepSeek (#9854) by @shenyankm
fix(ci): yield the event loop between script tests to avoid vitest RPC timeouts (#10037) (#10050) by @qwen-code-dev-bot
fix(vscode): sync companion token limits (#9850) by @AaronZ345
fix(ui): suppress duplicate identical TodoList panels in a single turn (#9692) by @PratikWayase
fix(ci): retry sandbox image builds and file an issue when a release build fails (#9916) by @yiliang114
fix(web-shell): constrain responsive sidebar drawer (#10020) by @dreamWB
fix(core): dedupe hierarchical memory files by canonical identity (#9600) by @yiliang114
fix(cua-driver): support sandboxed Windows SDK clients (#10120) by @LaZzyMan
fix(node-repl): make package verification idempotent (#10133) by @LaZzyMan
fix(review): give cancelled runs an accurate fallback body instead of the failure comment (#10114) by @wenshao
fix(cua-driver): synchronize release version marker (#10135) by @LaZzyMan
fix(core): keep allowlist-uncovered tools registered as deferred instead of removing them (#10075) (#10082) by @yiliang114
fix(daemon): Persist empty sessions before scheduled-task binding (#10144) by @doudouOUC
fix(channels): Make same-chat delivery session-aware (#10145) by @doudouOUC

Performance

Terminal virtual scrolling now renders at up to 60 FPS, eliminating choppiness and improving scroll smoothness in large PTY windows compared to the previous 30 FPS cap. (#9681) by @DragonnZhang

Documentation

Clarifies documentation by explicitly naming axes when referring to "rank 3" to resolve ambiguity between trimming and keeping operations. (#9759) by @wenshao
docs(agent): clarify parameter preconditions (#9580) by @tao943
Corrected the VS Code extension README to state the actual minimum required version of 1.96.0 instead of 1.85.0. (#9852) by @AaronZ345
docs(core): fix goal judge timeout unit (#9861) by @AaronZ345
Updated the ReadFile tool documentation to reference the truncateToolOutputLines setting for the default paging limit instead of a hardcoded line count. (#9863) by @AaronZ345
Fixed TypeScript SDK timeout examples to use the correct query({ prompt, options }) factory signature instead of the outdated positional argument format. (#9867) by @AaronZ345
docs: consolidate assorted documentation corrections (#9855) by @AaronZ345

Internal Changes

Migrated autofix prose to a design record to reduce workflow file size and implemented a ratchet mechanism to limit future growth visibility in reviews. (#9677) by @wenshao
Adds tests confirming subagent registries exclude MCP instructions, ensuring buildMcpServerInstructionsReminder remains safe without production code changes. (#9720) by @wenshao
Enforced architectural boundaries by moving domain-coupled modules out of the CLI utils leaf layer and adding an ESLint rule to prevent upward imports. (#9737) by @yiliang114
Refactors ACP skill management by extracting source acquisition and mutation logic into cohesive internal modules. (#8865) by @callmeYe
Image generation now supports MiniMax endpoints by using the correct request schema and handling both URL and base64 responses. (#8322) by @octo-patch
Refactored Goal continuation prompts to use a single core renderer for consistent output across all interfaces. (#9581) by @qqqys
The review skill manifest is split into a core body and verdict-gated reference files to optimize loading based on posting status. (#9804) by @wenshao
chore(ci): refresh the core issue-owner pool (#9808) by @yiliang114
Refactors core utils to be a strict leaf layer with no runtime dependencies on other core modules, ensuring cleaner architectural boundaries. (#9778) by @yiliang114
Centralizes approval mode contracts across core, CLI, and SDKs to ensure consistent validation and prevent silent mismatches in future updates. (#9796) by @yiliang114
Establishes explicit ownership for derived Config instances via a new deriveConfig factory boundary and guards for lifecycle mutations. (#8100) by @yiliang114
ACP cron tests now terminate the entire CLI process tree during cleanup to prevent directory deletion errors on POSIX and Windows. (#9815) by @dream-creator
Removed unused token-counting and summarized-thinking capabilities from the core content generator interface to simplify provider implementations. (#9676) by @DragonnZhang
Updated the Vertex-mode lazy generator test to use embedContent instead of the removed countTokens method to fix the TypeScript build. (#9888) by @AaronZ345
Skipped the unreadable-ledger test when running as root since permission checks are bypassed, ensuring test stability in root environments. (#9913) by @wenshao
Updated internal comments to correctly explain that replay safety relies on discarding failed attempt turns rather than excluding thought parts from history. (#8861) by @ComplexSimply
Refactored the Core client to remove a runtime import cycle by importing the approval-mode enum directly from its definition. (#9959) by @DragonnZhang
Workspace Git and status routes now share a single trusted-runtime resolver to ensure consistent security validation across all endpoints. (#9958) by @DragonnZhang
chore(github): add @qqqys as core package codeowner (#9982) by @yiliang114
test(cli): teach session-swap telemetry fakes the /branch title prerequisites (#9998) by @yiliang114
refactor(acp-bridge): narrow workspace event capabilities (#9957) by @DragonnZhang
refactor(web-shell): extract shared contexts (#9954) by @DragonnZhang
refactor(web-shell): reuse canonical todo parser (#9956) by @DragonnZhang
refactor(cli): remove unused EnumSelector component (#9997) by @qqqys
ci: take the macOS and Windows lanes off pull requests (#10059) by @wenshao
refactor(core): remove unused LruCache utility (#9926) by @AaronZ345
refactor(cli): remove unused useInputHistoryStore hook (#10041) by @qqqys
chore(ci): migrate CUA npm packages to trusted publishing (#9836) by @yiliang114
chore(cua-driver): bump SDK to 0.20.1 (#10127) by @LaZzyMan

New Contributors

@cactuser-Lu made their first contribution in #9457
@axiom-of-choice made their first contribution in #9017
@zhou2024NAU made their first contribution in #9779
@octo-patch made their first contribution in #8322
@yefuyou made their first contribution in #8953
@tao943 made their first contribution in #9018
@AaronZ345 made their first contribution in #9550
@yu-xin-c made their first contribution in #9795
@dream-creator made their first contribution in #9815
@zgxkbtl made their first contribution in #9992

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.22.0...v0.22.2

0.22.0 - 2026-08-22

Highlights

Web Shell prevents out-of-memory crashes by bounding transcript retention and trimming oversized replays. (#9303)
Review loops now explain instability by citing specific files with recurring findings or non-shrinking comment volumes. (#9461)
Autofix now audits PR approach for simplicity instead of stopping automation immediately upon a growth-budget breach. (#9262)
Web Shell keeps conversation turns expanded while background shells run, collapsing them only after completion. (#9632)
Created GitHub PRs are now bound to originating sessions with a searchable list and sidebar badge. (#9543)
Non-blocking slash commands now include eleven built-ins like /theme and /tools for immediate execution during streaming. (#9495)

Breaking Changes

No known breaking changes.

Web Shell Experience

Improves Web Shell stability, UI responsiveness, streaming performance, and conversation handling during active sessions.

Web Shell now bounds daemon transcript retention and trims oversized replays to prevent renderer out-of-memory crashes. (#9303)
Web Shell now keeps conversation turns expanded while their background shells are running, collapsing them only after completion. (#9632)
Fixes web-shell UI so subagent prompts scroll correctly and parallel-agent groups collapse immediately upon completion. (#9640)
Adds a hover tooltip to the create-group icon in Web Shell to clarify its function for mouse users. (#9400)
Updates the conversation loading indicator to use the daemon's hasActivePrompt state, ensuring it remains visible during long tool calls even when streaming is idle. (#9631)
Prevents the Web Shell tool-approval dialog from stealing keyboard focus when it appears while the user is actively typing in an editable element. (#9609)
Optimizes Web Shell streaming performance by reducing main-thread work and reloading oversized transcripts after 15 seconds of inactivity. (#9672)
Routes ordinary Web Shell messages based on session activity rather than Goal status to improve turn handling and insertion logic. (#9667)

Review & Autofix Logic

Enhances review loop explanations, Autofix auditing, convergence observations, and PR detection to reduce noise and improve automation reliability.

Review loops now explain why they are not settling by citing specific files with recurring findings or comment volumes that are not shrinking. (#9461)
Autofix now audits the PR approach for simplicity and minimal change instead of stopping automation immediately upon a growth-budget breach. (#9262)
Fixed autofix busy-PR detection to include pending workflow runs, preventing duplicate dispatches caused by GitHub status reporting delays. (#9662)
Adds machine-readable convergence observation codes like root-cause-triage and batch-fixes to enable automated review actions. (#9623)
Assigns review agents a dedicated subagent type with only six required tools to reduce token usage and improve performance. (#9678)
Adjusts review body trimming priority to preserve convergence observations about finding rates until all other advisory content is dropped. (#9715)
Extends the /review skill cleanup audit to Aone Code targets, flagging comments or edits made within the review window that were not submitted via the sanctioned path. (#9633)

Aone & GitHub Integration

Fixes Aone AGit-Flow caching, presubmit checks, and comment handling while binding GitHub PRs to sessions for better traceability.

Fixed incremental review caching for Aone AGit-Flow CRs by computing diffs between local heads instead of relying on ancestry tests that fail after amendments. (#9630)
Enabled /review presubmit on Aone targets to detect self-MRs and head drift by routing through the a1 CLI and comparing author identity. (#9629)
Updated /review --comment output on Aone targets to explicitly disclose that posted comments are unmarked and only join the generic discussion gate. (#9625)
Binds created GitHub PRs to their originating sessions with a searchable list and sidebar badge, supporting up to 10 PRs per session with latest-first ordering. (#9543)
Fixes Aone review support by generating canonical PR links directly from the platform and updating test-plan routing and version floors. (#9624)
Clears deferred Round-5 findings on the Aone write path, ensuring empty --host arguments fail distinctly and test pins correctly guard regressions. (#9604)
Adds a secure fallback path for installing public GitHub extensions on older Git versions by resolving commits via GitHub's anonymous API and downloading archives directly. (#9680)

Slash Commands & Tools

Expands non-blocking slash commands, stabilizes menu selection during streaming, and restores interactive HITL prompts on session resume.

Extends non-blocking slash commands to eleven built-ins like /theme and /tools, allowing immediate execution during streaming. (#9495)
Stabilizes slash-command menu selection while a response streams by preventing unnecessary re-runs of the suggestion search due to unrelated context updates. (#9508)
serve: restore ask_user_question HITL on session load/resume (#9665)
Integrates import widening logic into fetch-pr --since to streamline incremental scope calculation and reduce token usage. (#9332)

Security & Dependencies

Patches high-severity CVEs, secures sandbox images against tampering, and enforces stricter dependency and workflow security gates.

The sandbox image is now bound to its specific pulled digest to prevent tampering via mutable tags between resolve and consumption steps. (#9527)
Upgraded dependencies including OpenTelemetry 0.221.x and markdown-it 15 to resolve high-severity CVEs and enforced the security gate as a hard block. (#9584)
Bumps vulnerable dependencies including tar, protobufjs, dompurify, and echarts to patched versions to resolve CVE audits without changing code or package ranges. (#9703)
core: make list_directory opt-in (disabled by default) (#9424)

SDKs & Permissions

Updates Python and Java SDKs to support auto permission mode, aligning tool call approval behavior across all client libraries.

Updates Python and Java SDKs to support the auto permission mode, aligning them with the CLI and TypeScript SDK for LLM-based tool call approval. (#9003)

CI & Artifact Handling

Corrects CI fallback comments, fixes artifact download logic for Office files, and stabilizes verification gates with proper environment variables.

The CI fallback comment no longer incorrectly claims a review failed when the same run successfully posted a review earlier. (#9462)
Fixed artifact handling to expand recorded directories into per-file downloads while skipping hidden or junk files, and ensured Office documents download directly. (#9395)
Restores CI=true to autofix verification-gate launches to prevent test flakiness caused by missing environment variables in clean child processes. (#9649)
Excludes idle watchdog timeouts from the cumulative timeout cap so they no longer block PRs while remaining visible in logs. (#9673)

General Fixes

Addresses miscellaneous bugs including session recovery races, review body trimming, and daemon state synchronization issues.

Fixes session recovery across archive races by prioritizing active storage copies for REST, daemon ACP, and embedded ACP load operations. (#9513)
Removes root barrel self-imports in packages/core and adds an ESLint rule to prevent circular dependencies and enforce architecture boundaries. (#9635)
Refactors acp-integration and serve internals to enforce dependency boundaries with no intended behavior change for users. (#9144)
Moves the push-and-report workflow logic to a separate shell script to reduce YAML size while maintaining execution security. (#9653)
Adds translated Unset entries to all nine CLI locale dictionaries for consistent settings dialog display across languages. (#9714)
review: report the address a drive's service actually bound (#9655)

Other Changes

Release CI now disables install scripts during dependency installation and requires core maintainer approval for security-checks workflow changes. (#9577)
Corrected workflow comments to accurately state that the self-hosted ECS pool supports container runtime execution. (#9575)
Documents a new design for autofix that isolates trusted publishing steps from untrusted code execution to enhance security. (#9525)
Documents how inline terminal image previews render, including limits, fallbacks, and session-resume behavior. (#8656)
Documents the experimental Session Workflow setting, covering its default state, live updates, and Web Shell presentation. (#8554)
Documentation updated to clarify that autofix checks are derived strictly from patch text and to outline sequencing constraints for issue-autofix. (#9652)
autofix: add an operator guide for /takeover from N (#9622)
Corrects the autofix round-seed guide to clarify that any leading whitespace, including spaces, tabs, or newlines, prevents command recognition. (#9663)
Documents architectural invariants classified by enforcement mechanism including ESLint rules, tests, and tsconfig settings. (#9689)

中文摘要

亮点

Web Shell 通过限制转录保留并修剪过大的重放来防止内存溢出崩溃。 (#9303)
审查循环现在通过指出存在重复问题的文件或评论数量未减少的情况来说明不稳定的原因。 (#9461)
Autofix 现在在超出增长预算时审计 PR 方法的简洁性，而不是立即停止自动化。 (#9262)
Web Shell 现在会在后台 shell 运行时保持对话轮次展开，仅在完成后折叠。 (#9632)
创建的 GitHub PR 现在绑定到其源会话，提供可搜索列表和侧边栏徽章。 (#9543)
非阻塞斜杠命令现在扩展到 /theme 和 /tools 等十一个内置命令，允许在流式传输期间立即执行。 (#9495)

Web Shell 体验优化

提升 Web Shell 的稳定性、UI 响应速度、流式传输性能以及活跃会话期间的对话处理能力。

Web Shell 现在限制了守护进程转录保留并修剪过大的重放，以防止渲染器内存溢出崩溃。 (#9303)
Web Shell 现在会在后台 shell 运行时保持对话轮次展开，仅在完成后折叠。 (#9632)
修复 Web Shell UI，使子代理提示正常滚动且并行代理组在完成后立即折叠。 (#9640)
为 Web Shell 中的 create-group 图标添加悬停提示，以便鼠标用户了解其功能。 (#9400)
更新对话加载指示器以使用 daemon 的 hasActivePrompt 状态，确保在长时间工具调用期间即使流式传输空闲也能保持可见。 (#9631)
防止 Web Shell 工具批准对话框在用户正在可编辑元素中输入时弹出并窃取键盘焦点。 (#9609)
通过减少主线程工作并在空闲 15 秒后重载过大转录文本来优化 Web Shell 流式传输性能。 (#9672)
根据会话活动而非 Goal 状态路由普通 Web Shell 消息，以改进轮次处理和插入逻辑。 (#9667)

审查与自动修复逻辑

增强审查循环解释、Autofix 审计、收敛观察及 PR 检测功能，以减少噪音并提升自动化可靠性。

审查循环现在会说明未稳定的原因，指出存在重复问题的文件或评论数量未减少的情况。 (#9461)
Autofix 现在在超出增长预算时审计 PR 方法的简洁性和最小变更，而不是立即停止自动化。 (#9262)
修复了 autofix 繁忙 PR 检测逻辑以包含 pending 状态的工作流运行，防止因 GitHub 状态报告延迟导致的重复分发。 (#9662)
添加了 root-cause-triage 和 batch-fixes 等机器可读的收敛观察代码以支持自动化审查操作。 (#9623)
为审查代理分配仅含六个必要工具的专用子代理类型，以减少令牌使用并提升性能。 (#9678)
调整审查正文裁剪优先级，确保在丢弃其他建议内容前保留关于发现率的收敛观察。 (#9715)
将 /review 技能清理审计扩展至 Aone Code 目标，标记在审查窗口内未经过批准路径提交的评论或编辑。 (#9633)

Aone 与 GitHub 集成

修复 Aone AGit-Flow 缓存、预提交检查及评论处理，并将 GitHub PR 绑定至会话以提升可追溯性。

修复了 Aone AGit-Flow CR 的增量审查缓存，通过计算本地头之间的差异而非依赖修正后失效的祖先测试。 (#9630)
启用了 Aone 目标上的 /review presubmit 功能，通过 a1 CLI 路由并比对作者身份来检测 self-MR 和头部分支漂移。 (#9629)
更新了 Aone 目标上 /review --comment 的输出，明确说明发布的评论未标记且仅加入通用讨论网关。 (#9625)
将创建的 GitHub PR 绑定到其源会话，提供可搜索列表和侧边栏徽章，每会话支持最多 10 个 PR 并按最新优先排序。 (#9543)
修复 Aone 审查支持，直接从平台生成规范 PR 链接，并更新 test-plan 路由和版本下限。 (#9624)
清理 Aone 写入路径上延迟的第五轮发现，确保空 --host 参数明确失败且测试桩正确防护回归。 (#9604)
为旧版 Git 添加安全回退路径，通过 GitHub 匿名 API 解析提交并直接下载归档，以安装公共 GitHub 扩展。 (#9680)

斜杠命令与工具

扩展非阻塞斜杠命令，稳定流式传输期间的菜单选择，并在会话恢复时还原交互式 HITL 提示。

将非阻塞斜杠命令扩展到 /theme 和 /tools 等十一个内置命令，允许在流式传输期间立即执行。 (#9495)
通过防止因无关上下文更新而重新运行建议搜索，稳定响应流式传输时的斜杠命令菜单选择。 (#9508)
serve: restore ask_user_question HITL on session load/resume (#9665)
将导入扩展逻辑集成到 fetch-pr --since 中，以简化增量范围计算并减少 token 使用量。 (#9332)

安全与依赖项

修补高危 CVE 漏洞，防止沙箱镜像被篡改，并执行更严格的依赖项与工作流安全网关。

沙箱镜像现在绑定到其特定的拉取摘要，以防止在解析和使用步骤之间通过可变标签进行篡改。 (#9527)
升级了 OpenTelemetry 0.221.x 和 markdown-it 15 等依赖以修复高危 CVE，并将安全网关设为强制拦截。 (#9584)
提升 tar、protobufjs、dompurify 和 echarts 等易受攻击依赖项至修补版本，以解决 CVE 审计问题，无需更改代码或包范围。 (#9703)
core: make list_directory opt-in (disabled by default) (#9424)

SDK 与权限管理

更新 Python 和 Java SDK 以支持 auto 权限模式，统一所有客户端库的工具调用审批行为。

更新 Python 和 Java SDK 以支持 auto 权限模式，使其与 CLI 和 TypeScript SDK 在基于 LLM 的工具调用审批上保持一致。 (#9003)

CI 与工件处理

修正 CI 回退评论，修复 Office 文件的工件下载逻辑，并通过正确的环境变量稳定验证网关。

CI 回退评论不再错误地声称审查失败，如果同一运行已成功发布审查。 (#9462)
修复了工件处理逻辑，将目录展开为单文件下载并跳过隐藏文件，同时确保 Office 文档直接下载。 (#9395)
恢复 autofix verification-gate 启动时的 CI=true，防止因清理子进程缺少环境变量导致的测试不稳定。 (#9649)
将空闲看门狗超时排除在累计超时上限之外，使其不再阻塞 PR 但仍保留在日志中。 (#9673)

常规修复

解决包括会话恢复竞争、审查正文裁剪及守护进程状态同步在内的各类杂项问题。

修复跨归档竞争的会话恢复，优先在 REST、daemon ACP 和 embedded ACP 加载操作中使用活动存储副本。 (#9513)
移除 packages/core 中的根桶自导入并添加 ESLint 规则，防止循环依赖并强制架构边界。 (#9635)
重构 acp-integration 和 serve 内部结构以强制依赖边界，对用户无预期行为变更。 (#9144)
将 push-and-report 工作流逻辑移至单独的 Shell 脚本，在保持执行安全性的同时减小 YAML 文件体积。 (#9653)
为所有九种 CLI 语言字典添加了 Unset 翻译条目，以确保设置对话框的多语言显示一致性。 (#9714)
review: report the address a drive's service actually bound (#9655)

其他变更

发布 CI 现在在安装依赖时禁用安装脚本，并需要核心维护者批准 security-checks 工作流的更改。 (#9577)
更正了工作流注释，准确说明自托管 ECS 池支持容器运行时执行。 (#9575)
文档化了 autofix 的新设计，将可信发布步骤与不可信代码执行隔离以增强安全性。 (#9525)
文档化了终端内联图片预览的渲染方式，包括限制、回退机制和会话恢复行为。 (#8656)
文档化了实验性 Session Workflow 设置，涵盖其默认状态、实时更新和 Web Shell 展示方式。 (#8554)
文档更新了 autofix 检查仅源自 patch 文本的说明，并概述了 issue-autofix 的时序约束。 (#9652)
autofix: add an operator guide for /takeover from N (#9622)
修正 autofix round-seed 指南，明确任何前导空白（包括空格、制表符或换行）都会导致命令无法识别。 (#9663)
文档化了按执行机制分类的架构不变量，包括 ESLint 规则、测试和 tsconfig 设置。 (#9689)

Complete Change List (50 pull requests)

Features

review: tell the author why a review loop is not settling (#9461) by @wenshao
web-shell: keep a turn expanded while its background shell runs (#9632) by @ytahdn
autofix: audit the approach instead of stopping on growth-budget breach (#9262) by @wenshao
review: fold the one-hop import widening into fetch-pr --since (#9332) by @wenshao
core: make list_directory opt-in (disabled by default) (#9424) by @DragonnZhang
cli: extend non-blocking slash commands to more builtins (#9495) by @DragonnZhang
review: disclose that Aone posts join the discussion gate only (#9625) by @wenshao
review: detect self-MR on Aone targets in presubmit (#9629) by @wenshao
web-shell: Bind GitHub PRs to sessions with sidebar badge and search (#9543) by @wenshao
review: give the convergence observation a machine-readable half (#9623) by @wenshao
review: report the address a drive's service actually bound (#9655) by @wenshao
review: close Aone residual gaps — composeUrl, test-plan routing, a1 version floor (#9624) by @wenshao
serve: restore ask_user_question HITL on session load/resume (#9665) by @doudouOUC

Bug Fixes

ci: stop the fallback comment from denying a review it already posted (#9462) by @wenshao
web-shell: bound daemon transcript retention to stop renderer OOM crashes (#9303) by @wenshao
autofix: bind the sandbox image to its pulled digest (#9527) by @wenshao
web-shell: settle parallel-agents collapse and unify agent detail transcript (#9640) by @ytahdn
web-shell: show create-group tooltip (#9400) by @deggs7
artifacts: expand recorded directories into per-file artifacts (#9395) by @zjgzx1988
review: make the incremental cache work for Aone AGit-Flow CRs (#9630) by @wenshao
autofix: include pending runs in the busy-PR enumeration (#9662) by @wenshao
web-shell: use daemon live-state hasActivePrompt for loading indicator (#9487) (#9631) by @yiliang114
cli: keep slash menu selection stable while a response streams (#9508) by @yiliang114
web-shell: don't steal approval focus while the user is typing (#9609) by @yiliang114
core: support public GitHub extensions with older Git (#9680) by @yiliang114
ci: bump vulnerable dependencies to unblock CVE audit (#9703) by @yiliang114
review: audit Aone targets in cleanup's bypass tripwire (#9633) by @wenshao
autofix: stop counting idle timeouts toward the timeout cap (#9673) by @wenshao
web-shell: route goal messages by session activity (#9667) by @ytahdn
autofix: pass CI=true through the gate's env -i launches (#9649) by @wenshao
review: stop shedding the convergence observation first (#9715) by @wenshao
review: clear the deferred Round-5 findings from the Aone write path (#9604) by @wenshao
cli: Recover sessions across archive races (#9513) by @doudouOUC
sdk: support "auto" permission mode (#9003) by @shenyankm

Performance

web-shell: optimize streaming transcript rendering (#9672) by @ytahdn
review: give review agents their own subagent type (#9678) by @wenshao

Documentation

ci: the ECS pool does run containers — correct two comments that say it does not (#9575) by @wenshao
autofix: design runner-level isolation for PAT-bearing steps (#9525) by @wenshao
document inline terminal image previews (#8656) by @DragonnZhang
document the Session Workflow setting (#8554) by @DragonnZhang
autofix: pin the publish-side checks to the patch text (#9652) by @wenshao
autofix: add an operator guide for /takeover from N (#9622) by @wenshao
autofix: correct the round-seed guide on leading whitespace (#9663) by @wenshao
classify architecture invariants by enforcement mechanism (#9152) (#9689) by @yiliang114

Internal Changes

chore(ci): Disable install scripts in release CI and guard security-checks workflow (#9577) by @yiliang114
chore(deps): Clear high-severity CVE baseline and harden the security gate (#9584) by @yiliang114
i18n(cli): translate Unset in the settings dialog (#9714) by @yiliang114
refactor(autofix): move the push-and-report body out of the workflow file (#9653) by @wenshao
refactor(cli): keep acp-integration off serve internals (#8084) (#9144) by @yiliang114
refactor(core): remove root barrel self-imports and enforce the boundary (#9635) by @yiliang114

New Contributors

@deggs7 made their first contribution in #9400

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.15...v0.22.0

SWE-bench Verified

Status: SUCCEEDED
Dataset: swe-bench/swe-bench-verified@2; 500/500 completed
Results: 380 resolved, 113 unresolved, 5 execution errors, 2 infrastructure failures
Score: 77.08%
Score denominator: valid grader results (380 + 113 = 493)
Qwen Code: v0.22.0 (1c3a385d9bc8); model qwen3.7-plus
Run: pool-b3c14a381dad4f8f; dispatch workflow: https://github.com/QwenLM/qwen-code/actions/runs/32580293448
Case trajectories: swe-bench-verified-v0.22.0-trajectories.tar.gz (498 cases)

Terminal-Bench 2.0

Status: QUARANTINED
Dataset: [email protected]; 89/89 completed
Results: 43 resolved, 29 unresolved, 15 execution errors, 2 infrastructure failures
Score: not published (non-scoreable or quarantined run)
Score denominator: valid grader results (43 + 29 = 72)
Qwen Code: v0.22.0 (1c3a385d9bc8); model qwen3.7-plus
Run: pool-4564557c6b714d59; dispatch workflow: https://github.com/QwenLM/qwen-code/actions/runs/32580293448
Case trajectories: terminal-bench-2.0-v0.22.0-trajectories.tar.gz (79 cases)

0.21.15 - 2026-08-20

Highlights

Web Shell now supports inserting file attachments via composer or @ selection, with improved streaming performance and immediate sidebar synchronization. (#9405, #9477, #9570, #9533)
Qwen hybrid models now expose a simple Thinking toggle for reasoning control, and the stable qwen3.8-max model is available via /model. (#9574, #9383)
The --resume flag is now supported in /review and CI retries to continue interrupted reviews when the PR head has not moved. (#9153)
Added support for authenticated HTTPS Git extension installs with configurable credential persistence for secure private repository cloning. (#9458)
Tool approval and ask-user dialogs now appear as in-flow bottom sheets aligned to chat width for a more integrated experience. (#9351)
Fixed issues where /rewind incorrectly dropped conversation history and duplicate tool-call IDs caused execution errors. (#9331, #9436)

Breaking Changes

No known breaking changes.

Web Shell Experience

Web Shell now features improved streaming performance, unified file uploads, Goal v3 controls, and real-time sidebar synchronization.

Web Shell streaming output is now more responsive during long tasks by batching transcript delivery and avoiding expensive Markdown parsing on growing content. (#9405)
Improved Web Shell performance by using live-state activity timestamps to refresh session recency and sort active lists without triggering rate-limited full catalog rescans. (#9476)
Unifies file uploads in Web Shell to offer reference or upload options, storing attachments persistently with duplicate name handling. (#9477)
Web Shell sidebar now immediately synchronizes session changes like renaming or deleting, while improving loading indicator spacing. (#9533)
Web Shell now stops redundant session title catalog refreshes after resolving a display name, reducing unnecessary network requests. (#9563)
Web Shell now supports inserting file attachments into active turns via the composer or @ selection, with preview and queue management. (#9570)
WebShell adopts Goal v3 controls, allowing goals to be managed independently of chat messages with a compact composer row. (#9393)
web-shell: fall back to execCommand copy in non-secure contexts (#9540)
ui: collapse duplicate in-flight tool_group rendered from history + pending (#9421)

Review & Verification

Enhanced review workflows with resume support, Aone Code integration, stricter verification disciplines, and accurate volume tracking.

The --resume flag is now supported in /review, review run, and CI retries to continue interrupted reviews when the PR head has not moved. (#9153)
Review ledger markers now record the posted inline comment count for the current and previous rounds to track posting volume trends. (#9413)
Review verifiers now enforce four run disciplines from live two-arm verification, including starting stateful targets from fresh state for each row. (#9447)
review: clamp the posting volume at its origin, not only where it is written (#9460)
review: keep the blocker in a COMMENT body every softening path reaches (#9416)
review: add runtime-axis, table-sweep and isolation witness forms (#9445)
Review verifier probes now run in private scratch worktrees to prevent race conditions with auditors reading the shared tree. (#9221)
The review system now validates that consumer-facing contract documentation accurately matches the implemented code behavior. (#9448)
The /review skill now supports posting comments and approvals to Aone Code via the a1 CLI when using the --comment flag. (#9491)

Autofix & CI Reliability

Resolved GitHub Actions bottlenecks, fixed workflow queuing deadlocks, and enforced test coverage for automated code fixes.

Fixed a CI failure in the flakiness gate by diffing against a pinned base OID instead of resolving HEAD^1, preventing intermittent access errors on the persistent pool. (#9464)
Fixes the flake-gate CI step by computing git diffs before environment scrubbing to prevent access errors on shallow merge-ref objects. (#9468)
Clones the autonomous-fix workflow into a new entity to bypass a GitHub Actions backend issue causing runs to stick in queued state. (#9482)
Added a comment to the autofix workflow file to force GitHub Actions to re-register triggers that had silently stopped executing scheduled and event-based runs. (#9479)
Reduced the size of the qwen-autofix.yml workflow file to stay under GitHub's 500 KB limit, restoring silent-failing automated fix runs that had stopped executing. (#9517)
The shepherd no longer counts permanently queued workflow runs with zero jobs as in-flight, preventing deadlocks that blocked autofix loops for hours. (#9518)
Autofix now requires mutation probes to verify that new guards or branches added in a round are covered by tests before committing changes. (#9578)
Autofix finding replies are now idempotent, skipping duplicate posts when the thread already contains an identical comment from the bot. (#9463)
Release pull requests are now authored by a dedicated bot account instead of the GitHub Actions token, enabling finalization in organizations that restrict Actions-created PRs. (#9592)

Session & Conversation Management

Introduced conversation isolation primitives, privacy-preserving ledgers, and fixed history retention issues during compression.

Introduces primitives for standalone conversation isolation, enabling deterministic session identity and validated lineage checks. (#9341)
Sessions now persist a privacy-preserving ledger of prompt outcomes to enable accurate cold-load reconciliation without storing user content. (#9426)
Fixed an issue where /rewind would incorrectly drop conversation history after /compress-fast by properly distinguishing rule-based compression markers from summarizing boundaries. (#9331)
Standalone conversation primitives now safely adopt concurrently created directories and enforce strict integrity budgets for JSONL readers. (#9512)
Skipped duplicate tool results during ACP loop detection are now persisted as terminal errors, preventing missing tool results in transcript replays after session resumes. (#9593)

Agent Capabilities & Models

Added stable qwen3.8-max model, simplified Thinking toggles, enabled DingTalk media access, and improved tool-call handling.

Added the stable qwen3.8-max model to the Token Plan model list, allowing users to select it via /model alongside the existing preview version. (#9383)
Qwen hybrid models now expose a simple Thinking toggle for reasoning control, removing complex effort tiers for supported versions. (#9574)
Enables DingTalk to download and attach media from quoted messages, allowing agents to inspect referenced images and files. (#9347)
Treats duplicate provider tool-call IDs as replays only when arguments match, allowing ID collisions with different arguments to execute normally. (#9436)
Prevents upstream fail-fast placeholder responses like '(request timeout)' from appearing in chat by retrying them internally. (#8938)
cli: surface the daemon duplicate tool-call breaker as a visible loop-detected stop (#9435)
core: reject run_in_background: false for named teammates (#9433)
core: clarify list_agents excludes Agent Team teammates (#9432)

Extensions & Git Integration

Enabled authenticated HTTPS Git installs, batch Extension state updates, and PTY worker support for managed terminal sessions.

Added support for authenticated HTTPS Git extension installs with configurable credential persistence, enabling secure cloning of private repositories via the daemon. (#9458)
Added batch APIs to update Extension activation states for up to 100 extensions globally or for specific trusted workspaces. (#8788)
Adds PTY worker support to enable managed Agent View sessions with local terminal hosts and authenticated stream forwarding. (#7800)

Observability & Diagnostics

Exposed V8 heap metrics, linked distributed tracing contexts, and routed unrecognized diagnostics to bounded sidechannels.

ACP child processes now track and report V8 old-generation heap metrics, including peak committed memory and major-GC counts, in daemon status. (#9380)
Links daemon HTTP request spans to inbound W3C traceparent headers to maintain continuous distributed tracing context. (#9391)
Routes unrecognized diagnostics to a bounded sidechannel instead of cluttering the main transcript blocks with debug entries. (#9202)
The bridge now advances a strictly monotonic per-session watermark and exposes it via BridgeSessionSummary.updatedAt in the live-state API. (#9396)

CLI & Workflow APIs

Added context file visibility, structured Workflow runtime models, and support for posting comments via a1 CLI.

Added a one-time INFO message to the CLI that lists attached context files above the first user prompt, making invisible system prompt attachments visible in the chat. (#8855)
Exposes a structured runtime model for Workflow execution to record lifecycle events, persist state, and support cancellation. (#9034)
Attachment uploads now send filenames as encoded URL query parameters instead of custom headers to prevent cross-origin issues. (#9567)
Suppresses Homebrew update notifications when local metadata confirms no newer version is available, preventing false alerts. (#9502)

Other Changes

Tool approval and ask-user dialogs now appear as in-flow bottom sheets aligned to chat width, and the agent-launch dialog defaults focus to allow. (#9351)
Ensures image payload eviction remains consistent across chat history and forks by rewriting large images to stable text markers. (#9423)
web-shell: add transcript contract prevalidation (#9388)
Refactored CLI internals to move shared helpers for findings validation into a common utility package, ensuring consistent behavior across review commands. (#9345)
Refactored the review pipeline to define certification bar atoms exactly once in a new library module, eliminating duplicate predicate logic across multiple files. (#9473)
Refactors certification path validation to use a single helper function, ensuring consistent exact-path matching across atoms. (#9484)
Adds --provenance to npm publish commands to generate signed attestations verifying package origin from CI pipelines. (#9532)
Centralized ownership for live-task tool-name and delegated prompt-length contracts to prevent silent drift between packages. (#9497)
Fixed a build failure on main caused by missing deleteSessionAttachments mock in the case-variant delete test. (#9551)
E2E tests now retry cleanup removals on transient ENOTEMPTY errors to fix flaky failures in recurring cron job scenarios. (#9559)
chore(ci): Drop NPM_TOKEN in favor of npm Trusted Publishing (#9552)
The autofix brake now treats a BLOCKED handoff as a valid round outcome, preventing false failures when the agent stops to request human intervention. (#9297)
Fixed the diff-read test fixture to prevent double-encoding and ensure correct gating for failed diff read scenarios. (#9539)
Incremental review now builds its scope directly from the PR diff, ensuring every reviewed line matches GitHub's display without requiring post-hoc proof. (#9267)
CI now heals workspaces replaced by symlinks or non-directories before wiping, preventing runner wedges caused by hardened guard refusals. (#9498)
The serve A/B test suite can now stage transcripts on disk before requests, enabling validation of session state behaviors previously unreachable with empty homes. (#9444)

中文摘要

亮点

Web Shell 现支持通过 composer 或 @ 选择插入文件附件，优化了流式输出性能并实现侧边栏即时同步。 (#9405, #9477, #9570, #9533)
Qwen 混合模型现提供简单的 Thinking 切换以控制推理，稳定的 qwen3.8-max 模型可通过 /model 选择。 (#9574, #9383)
--resume 标志现支持用于 /review 和 CI 重试，以便在 PR 头部未移动时继续中断的审查。 (#9153)
增加了对带可配置凭据持久性的 authenticated HTTPS Git 扩展安装支持，实现安全克隆私有仓库。 (#9458)
工具审批和询问用户对话框现在作为与聊天宽度对齐的流内底部表单显示，体验更集成。 (#9351)
修复了 /rewind 错误丢弃对话历史以及重复 tool-call ID 导致执行错误的问题。 (#9331, #9436)

Web Shell 体验

Web Shell 现在具备更优的流式性能、统一文件上传、Goal v3 控制及实时侧边栏同步功能。

Web Shell 通过批量处理转录交付并避免对增长内容进行昂贵的 Markdown 解析，提升了长任务期间流式输出的响应速度。 (#9405)
通过利用实时状态活动时间戳刷新会话最近性并排序活动列表，提升了 Web Shell 性能，避免了受限的全量目录重新扫描。 (#9476)
统一 Web Shell 中的文件上传，提供引用或上传选项，并持久化存储附件且处理重复文件名。 (#9477)
Web Shell 侧边栏现在可立即同步重命名或删除等会话变更，并优化了加载指示器的间距。 (#9533)
Web Shell 在解析显示名称后停止多余的会话标题目录刷新，减少不必要的网络请求。 (#9563)
Web Shell 现在支持通过 composer 或 @ 选择将文件附件插入进行中轮次，包含预览和队列管理。 (#9570)
WebShell 采用 Goal v3 控制，允许独立于聊天消息管理目标，并配备紧凑的 composer 行。 (#9393)
web-shell: fall back to execCommand copy in non-secure contexts (#9540)
ui: collapse duplicate in-flight tool_group rendered from history + pending (#9421)

审查与验证

通过恢复支持、Aone Code 集成、更严格的验证准则及准确的体量追踪，增强了审查工作流。

--resume 标志现在支持用于 /review、review run 和 CI 重试，以便在 PR 头部未移动时继续中断的审查。 (#9153)
审查 ledger 标记现在记录当前和上一轮的已发布内联评论数量，以跟踪发布量趋势。 (#9413)
审查验证器现在执行来自实时双臂验证的四个运行准则，包括为每一行从全新状态启动有状态目标。 (#9447)
通过在计数来源处应用共享 volume reader 限制，修复了 review 发布量报告中的不一致问题，确保所有输出表面的数据一致。 (#9460)
review: keep the blocker in a COMMENT body every softening path reaches (#9416)
扩展了验证器的 brief，增加了用于运行时轴验证、表扫描影响分析和隔离测试的新见证形式，以处理关于未发布版本和硬编码表的声明。 (#9445)
Review verifier 探针现在在私有临时工作树中运行，以防止与读取共享树的审计器发生竞态条件。 (#9221)
review 系统现在验证面向消费者的合同文档是否准确匹配已实现的代码行为。 (#9448)
/review 技能现在支持通过 a1 CLI 的 --comment 标志向 Aone Code 发布评论和批准意见。 (#9491)

Autofix 与 CI 可靠性

解决了 GitHub Actions 瓶颈，修复了工作流排队死锁，并对自动代码修复强制执行测试覆盖。

修复了 flakiness gate 中的 CI 故障，改为针对固定的 base OID 进行 diff，避免了在持久化池上解析 HEAD^1 时的间歇性访问错误。 (#9464)
通过在环境清理前计算 git 差异来修复 flake-gate CI 步骤，防止浅合并引用对象的访问错误。 (#9468)
将 autonomous-fix 工作流克隆到新实体，以绕过导致运行卡在排队状态的 GitHub Actions 后端问题。 (#9482)
在 autofix 工作流中添加注释以强制 GitHub Actions 重新注册触发器，修复了定时和事件驱动运行静默停止的问题。 (#9479)
减小了 qwen-autofix.yml 工作流文件的大小以保持在 GitHub 500 KB 限制内，恢复了此前因超限而静默失败的自动修复运行。 (#9517)
Shepherd 不再将零任务的永久排队运行视为进行中，避免了阻碍 autofix 循环数小时的死锁。 (#9518)
Autofix 现在要求通过变异探测验证新增的防护或分支在提交前已被测试覆盖。 (#9578)
Autofix 查找回复现已幂等，若线程中已存在机器人发布的相同评论，则跳过重复发帖。 (#9463)
发布 PR 现在由专用机器人账户而非 GitHub Actions 令牌创建，使在限制 Actions 创建 PR 的组织中也能完成发布。 (#9592)

会话与对话管理

引入了对话隔离原语和保护隐私的分类账，并修复了压缩过程中的历史记录保留问题。

引入独立会话隔离原语，支持确定性会话身份验证和谱系检查。 (#9341)
会话现在持久化一个保护隐私的提示结果分类账，以便在不存储用户内容的情况下实现准确的冷加载对账。 (#9426)
修复了 /rewind 在 /compress-fast 之后错误丢弃对话历史的问题，方法是正确区分基于规则的压缩标记和总结边界。 (#9331)
独立对话原语现在能安全采纳并发创建的目录，并对 JSONL 读取器执行严格的完整性预算。 (#9512)
ACP 循环检测期间跳过的重复工具结果现在会持久化为终端错误，避免会话恢复后转录重放时出现缺失的工具结果。 (#9593)

Agent 能力与模型

添加了稳定的 qwen3.8-max 模型，简化了 Thinking 切换，启用了 DingTalk 媒体访问，并改进了工具调用处理。

将稳定的 qwen3.8-max 模型添加到 Token Plan 模型列表中，允许用户通过 /model 选择该模型以及现有的预览版本。 (#9383)
Qwen 混合模型现在暴露简单的 Thinking 切换以控制推理，为支持的版本移除了复杂的 effort 层级。 (#9574)
使 DingTalk 能够下载并附加引用消息中的媒体，让 agent 可以检查引用的图片和文件。 (#9347)
仅当参数匹配时将重复的 provider tool-call ID 视为重放，允许参数不同的 ID 冲突正常执行。 (#9436)
防止上游快速失败占位符响应（如 '(request timeout)'）显示在聊天中，改为内部重试。 (#8938)
cli: surface the daemon duplicate tool-call breaker as a visible loop-detected stop (#9435)
core: reject run_in_background: false for named teammates (#9433)
core: clarify list_agents excludes Agent Team teammates (#9432)

扩展与 Git 集成

启用了认证 HTTPS Git 安装、批量扩展状态更新以及用于托管终端会话的 PTY worker 支持。

增加了对带有可配置凭据持久性的 authenticated HTTPS Git 扩展安装的支持，实现了通过 daemon 安全克隆私有仓库的功能。 (#9458)
添加了批量 API，用于全局更新多达 100 个扩展的激活状态或针对特定受信任工作区进行更新。 (#8788)
添加 PTY worker 支持以启用托管 Agent View 会话，包含本地终端主机和认证流转发。 (#7800)

可观测性与诊断

暴露了 V8 堆指标，链接了分布式追踪上下文，并将未识别的诊断路由到有界的侧通道。

ACP 子进程现在跟踪并在 daemon 状态中报告 V8 老生代堆指标，包括峰值提交内存和主要 GC 计数。 (#9380)
将 daemon HTTP 请求跨度链接到入站 W3C traceparent 头，以维持连续的分布式追踪上下文。 (#9391)
将未识别的诊断路由到有界的侧通道，而不是用调试条目杂乱主转录块。 (#9202)
Bridge 现在推进严格的每会话单调水印，并通过 live-state API 中的 BridgeSessionSummary.updatedAt 暴露该值。 (#9396)

CLI 与工作流 API

增加了上下文文件可见性、结构化工作流运行时模型，并支持通过 a1 CLI 发布评论。

在 CLI 中增加了一次性 INFO 消息，在首个用户提示上方列出附加的上下文文件，使原本不可见的系统提示附件在聊天中可见。 (#8855)
暴露 Workflow 执行的结构化运行时模型，用于记录生命周期事件、持久化状态并支持取消操作。 (#9034)
附件上传现在将文件名作为编码的 URL 查询参数发送而非自定义头，以避免跨域问题。 (#9567)
当本地元数据确认无更新版本时抑制 Homebrew 更新通知，防止误报。 (#9502)

其他变更

工具审批和询问用户对话框现在作为与聊天宽度对齐的流内底部表单显示，agent-launch 对话框默认聚焦于允许。 (#9351)
通过将大图像重写为稳定文本标记，确保图像负载驱逐在聊天历史和分支间保持一致。 (#9423)
web-shell: add transcript contract prevalidation (#9388)
重构 CLI 内部结构，将共享的 findings 验证助手移至通用工具包，确保审查命令间行为一致。 (#9345)
重构审查管道，在新库模块中唯一定义认证栏原子，消除了多个文件中的重复谓词逻辑。 (#9473)
重构认证路径验证以使用单一辅助函数，确保跨原子的一致性精确路径匹配。 (#9484)
向 npm publish 命令添加 --provenance 以生成签名证明，验证包源自 CI 流水线。 (#9532)
集中管理 live-task tool-name 和 delegated prompt-length 契约的所有权，防止包之间出现静默偏差。 (#9497)
修复了因 case-variant delete 测试中缺少 deleteSessionAttachments mock 而导致 main 分支构建失败的问题。 (#9551)
E2E 测试现在会在遇到瞬态 ENOTEMPTY 错误时重试清理删除，以修复循环 cron 作业场景中的不稳定失败。 (#9559)
chore(ci): Drop NPM_TOKEN in favor of npm Trusted Publishing (#9552)
autofix 刹车现在将 BLOCKED 移交视为有效的轮次结果，防止代理停止请求人工干预时出现误报失败。 (#9297)
修复了 diff-read 测试夹具以防止双重编码，并确保失败 diff 读取场景的正确门控。 (#9539)
增量审查现在直接从 PR 差异构建范围，确保每行审查内容与 GitHub 显示一致，无需事后验证。 (#9267)
CI 现在会在清理前修复被符号链接或非目录替换的工作区，防止因硬性防护拒绝导致的运行器卡死。 (#9498)
Serve A/B 测试套件现在可在请求前将转录文件暂存到磁盘，从而验证此前在空主目录下无法触及的会话状态行为。 (#9444)

Complete Change List (67 pull requests)

Features

web-shell: approval and ask-user dialogs as in-flow sheets; fix background-agent false failure (#9351) by @ytahdn
serve: Add live-state session activity watermark (#9396) by @doudouOUC
serve: measure ACP child peak old-generation heap (#9380) by @doudouOUC
review: wire --resume through /review, review run and the CI retry (#9153) by @wenshao
review: record each round's posting volume in the ledger marker (#9413) by @wenshao
review: teach verifiers four run disciplines from a live two-arm verification (#9447) by @wenshao
daemon: add batch extension activation APIs (#8788) by @callmeYe
providers: add qwen3.8-max to Token Plan model list (#9383) by @qqqys
extensions: support authenticated HTTPS Git installs (#9458) by @callmeYe
telemetry: link daemon HTTP request spans to inbound W3C traceparent (#9391) by @chiga0
web-shell: add transcript contract prevalidation (#9388) by @water-in-stone
web-shell: Consume live-state session activity timestamps (#9476) by @doudouOUC
cli: show loaded context files alongside the first prompt (#8855) by @ZijianZhang989
review: add runtime-axis, table-sweep and isolation witness forms (#9445) by @wenshao
cli: Add agent view PTY workers (#7800) by @ZijianZhang989
core: expose workflow execution state (#9034) by @qqqys
cli: Add standalone conversation isolation primitives (#9341) by @doudouOUC
web-shell: unify file uploads and references (#9477) by @ytahdn
serve: persist prompt terminal ledger for cold-load reconciliation (#9426) by @chiga0
review: rule on contract documentation, and matrix layered guards (#9448) by @wenshao
web-shell: support file attachments in mid-turn messages (#9570) by @ytahdn
register toggle-only reasoning for Qwen hybrid models (#9574) by @callmeYe
web-shell: adopt canonical Goal v3 controls (#9393) by @qqqys
review: post --comment reviews to Aone Code via the a1 CLI (#9491) by @wenshao

Bug Fixes

triage: diff the flake-gate file list against the pinned base OID (#9464) by @yiliang114
cli: surface the daemon duplicate tool-call breaker as a visible loop-detected stop (#9435) by @doudouOUC
cli: prevent /rewind from dropping conversation history after /compress-fast (#9331) by @yiliang114
core: reject run_in_background: false for named teammates (#9433) by @yiliang114
review: clamp the posting volume at its origin, not only where it is written (#9460) by @wenshao
core: clarify list_agents excludes Agent Team teammates (#9432) by @yiliang114
core: reject upstream fail-fast placeholder responses (#8938) by @yiliang114
core: isolate image payload eviction state (#9423) by @yiliang114
core: treat duplicate provider tool-call ids as replays only when arguments match (#9436) by @doudouOUC
triage: compute the flake-gate diff before the env -i re-exec (#9468) by @yiliang114
sdk: route unrecognized diagnostics onto a bounded transcript sidechannel (#9202) by @yiliang114
ci: clone qwen-autofix into a recovery workflow entity (#9482) by @wenshao
ci: no-op touch to re-register the autofix workflow triggers (#9479) by @wenshao
review: keep the blocker in a COMMENT body every softening path reaches (#9416) by @wenshao
ci: keep qwen-autofix.yml under GitHub's 500 KB start-runs limit (#9517) by @wenshao
dingtalk: attach media from quoted messages (#9347) by @qqqys
cli: suppress Homebrew update notification when brew has nothing newer (#9493) (#9502) by @yiliang114
web-shell: keep sidebar sessions synchronized (#9533) by @ytahdn
cli: give the case-variant delete test the attachments mock (#9551) by @wenshao
review: run verifier probes in a private scratch worktree (#9207) (#9221) by @wenshao
serve: Harden standalone conversation primitives (#9512) by @doudouOUC
tests: retry acp-cron cleanup rm on transient ENOTEMPTY (#9559) by @yiliang114
autofix: make the brake's BLOCKED handoff a first-class round outcome (#9297) by @wenshao
web-shell: Stop repeated session title catalog refreshes (#9563) by @doudouOUC
daemon: avoid custom attachment upload header (#9567) by @ytahdn
ci: stop counting wedged queued runs as in-flight in the shepherd (#9518) by @wenshao
ci: heal a symlinked workspace instead of wedging the runner on it (#9498) by @wenshao
autofix: mutation-probe new guards before a round commits (#9578) by @wenshao
ci: make autofix finding replies idempotent (#9463) by @wenshao
ci: author the release PR with a third bot PAT (#9592) by @yiliang114
cli: persist skipped duplicate tool results (#9593) by @yiliang114
web-shell: fall back to execCommand copy in non-secure contexts (#9540) by @yiliang114
ui: collapse duplicate in-flight tool_group rendered from history + pending (#9421) by @qwen-code-dev-bot

Performance

web-shell: keep streaming output responsive (#9405) by @ytahdn

Internal Changes

refactor(cli): consolidate shared helpers ahead of the legacy audit skill (#9345) by @wenshao
refactor(review): define each certification-bar atom exactly once (#9473) by @wenshao
refactor(review): route the certification path atoms through one needle (#9484) by @wenshao
chore(ci): Add --provenance to npm publish and id-token permission (#9532) by @yiliang114
refactor: centralize cross-package contracts (#9497) by @yiliang114
chore(ci): Drop NPM_TOKEN in favor of npm Trusted Publishing (#9552) by @yiliang114
test(review): single-encode the diff-read fixture and pin the failed-read gate (#9539) by @wenshao
refactor(review): build the incremental scope from the PR's diff, not a check (#9267) by @wenshao
test(ci): stage on-disk session state in the serve A/B (#9444) by @wenshao

New Contributors

@qwen-code-review-bot made their first contribution in #9594

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.14...v0.21.15

0.21.14 - 2026-08-19

Highlights

Added qwen sessions ps command and live-state API to list and monitor running interactive sessions with JSON output. (#8969, #9261, #9366)
Introduced /advisor slash command for independent read-only opinions and enhanced review skills for GitLab and CI script analysis. (#7567, #9226, #9263)
Improved Web Shell resilience by allowing prompt submission during disconnection and preventing session crashes on render errors. (#9323, #9292)
Minimized spam visibility gaps by checking new comments against blocklists immediately upon creation. (#9266)
Added end-to-end support for session-scoped media references ensuring image previews persist across refreshes. (#9310)
Enabled workflow agents to pin to specific working directories using the workingDir parameter to extend their lifecycle. (#8972)

Breaking Changes

No known breaking changes.

Session Management & Web Shell

Enhanced live session tracking, media persistence, and file handling in Web Shell with improved state synchronization and UI controls.

Adds a live-session registry and the qwen sessions ps command to list running interactive sessions with optional JSON output. (#8969)
Improves Web Shell sidebar session management with consistent hover details, compact status indicators, and persistent workspace expansion. (#9311)
Added end-to-end support for session-scoped media references, ensuring image previews persist across refreshes and reconcile consistently. (#9310)
Adds a trusted-only GET /workspaces/:workspace/sessions/live-state endpoint returning volatile session snapshots and a catalog version token to reduce polling. (#9261)
WebShell now consumes workspace-scoped session live-state to reduce polling overhead and only refresh the session catalog when necessary. (#9366)
Web Shell now fully disables file drag-and-drop when fileUploadEnabled is false and adds support for uploading directories via fileUploadDirectory. (#9382)
The exported HTML viewer now includes a global Expand all/Collapse all toolbar to simultaneously toggle thinking blocks, tool outputs, and file references. (#9367)
revert(web-shell): restore pre-#8098 composer animations at 50% opacity (#9349)

Review Pipeline & Automation

Improved review accuracy with better anchor handling, multi-model support, and automated workflows for SWE-bench and Terminal-Bench.

Chains Terminal-Bench release evaluation by submitting SWE-bench runs first and dispatching TB runs only after SWE results are published. (#9120)
Repairs seven review pipeline defects found in live runs, including fixing incremental anchor withholding and enabling multi-call build-and-test dimensions. (#9175)
Enhanced the review skill to analyze shell and CI scripts against the specific lanes and environments that execute them. (#9263)
Updated review skill documentation and tests to reflect the settled 3-round cap state and improve coverage for chunk gating logic. (#9258)
Incremental review anchors now record the certifying model, preventing incorrect skip behavior when re-running with a different model. (#9184)
Added Aone Code read path support to /review, enabling meta, issue-context, and fetch-pr commands for GitLab-based repositories. (#9226)
The compose-review command now enforces GitHub's 65,536-character review limit by trimming Chinese translations and deferral notes before truncating essential blockers. (#9247)
Review comments posted via --comment now use plain reviewer prose instead of templated scaffolding, while severity markers continue to follow review.attribution rules. (#9027)
Sandboxed verification now includes a deterministic flakiness gate that re-runs modified unit tests multiple times to detect and report non-deterministic failures. (#9130)
Added --resume flag to fetch-pr to resume interrupted reviews by validating on-disk state and reusing the worktree. (#9092)
Enabled pagination for review thread fetching to ensure all threads are resolved instead of only the oldest 100. (#9390)
Simplified the review checkout self-heal logic by removing complex guard layers and retaining the core wipe-and-retry mechanism. (#9327)

Agent Capabilities & Orchestration

Expanded agent functionality with directory pinning, team task routing, and robust error handling for foreground processes.

daemon: attach skill-toggle mutation metadata to settings_changed (#9051)
Enabled workflow agents to pin to a specific working directory using the workingDir parameter, allowing them to outlive default bounds. (#8972)
Fixed an issue where foreground agents were incorrectly marked as failed due to missing routing fields in SSE events. (#9330)
Updated agent-team prompts and TeamCreate descriptions to accurately reflect automatic final answer delivery when teammates go idle. (#9284)
core: dispatch manually assigned team tasks to their owner (#9289)
autofix: seed the takeover round counter with /takeover from N (#9321)
The autofix convergence brake now correctly instructs the agent to write handoff details to failure.md instead of restricted wrapper files. (#9371)
The autofix fleet scan now fails closed on API enumeration errors to prevent dispatching jobs to busy PRs and marks dispatched PRs clearly. (#9329)
Certification bars in the reverse-audit path now report specific failure names like 'receipt lead contradicts the phrase' to improve diagnostic clarity for retirement causes. (#9272)

System Reliability & Performance

Strengthened system stability with retry logic for I/O errors, memory cache bounds, and graceful degradation for render failures.

Makes transient resource-exhaustion and read I/O errors retryable while keeping malformed record errors terminal to prevent false corruption flags. (#9362)
Bounds text utility caches to 500 entries with oldest-entry eviction to prevent unbounded memory growth in long sessions. (#9185)
Clamps compression output budget to the remaining context window size to ensure valid requests when prompt estimates exhaust available tokens. (#9109)
Wraps the agent-tab view in a non-fatal ErrorBoundary so render errors degrade gracefully instead of exiting the entire session. (#9292)
Images with unsupported MIME types or decoding errors are now omitted with a text notice instead of causing the entire session to abort. (#9295)
Memory recall now waits up to 100ms for results before injecting deterministic candidates, improving reliability and non-ASCII coverage. (#8716)
The web-shell now uses backend-authoritative queue states to prevent duplicate messages and ensure draft payloads are only restored after proven delivery failures. (#9407)
Cleared a backlog of nineteen deferred suggestions and fixed behavior issues including persistRecoveredLedger flag handling. (#9342)

Daemon & Local Control

Consolidated Local Control architecture and added configurable modes and pollable routes for daemon status and answers.

Consolidates Local Control into a single daemon-owned implementation with a secondary listener, unified security model, and revocable pairing credentials. (#9106)
daemon: make serve new-file mode configurable (QWEN_SERVE_NEW_FILE_MODE) (#9364)
Added pollable HTTP routes to check daemon turn status and retrieve final model answers without requiring an SSE subscription. (#9080)

Security & Spam Prevention

Reduced spam visibility gaps with instant blocklist checks and added workspace wipe guards to prevent unsafe directory removal.

Minimizes new spam comments immediately upon creation by checking against the blocklist, reducing visibility gaps from over an hour to near zero. (#9266)
Added workspace wipe guards to triage and Serve A/B workflows to prevent unsafe directory removal in non-canonical runner environments. (#9277)

User Commands & Interfaces

Introduced the /advisor command for second opinions and improved CLI behavior for severity floors and resume flags.

Added the /advisor slash command to request an independent, read-only second opinion on the current conversation without mutating history. (#7567)
When the severity floor resolves to Critical-only, the CLI automatically moves inline Suggestion comments to the review body deferral list instead of posting them to GitHub. (#9279)
Autofix failure comments now include bilingual content with Chinese analysis in a collapsed details block. (#9386)

Diagnostics & Observability

Added privacy-safe diagnostic events and fixed context reporting to exclude disabled skills for accurate consumption metrics.

Introduced privacy-safe diagnostic events to correlate oversized or mutated tool-result representations without exposing sensitive content. (#9039)
Fixed context usage details to exclude disabled skills, ensuring accurate reporting of context consumption. (#9346)
Unit tests in packages/cli now fail immediately with an actionable error message and the exact npm run build command if required dist/ outputs or generated files are missing. (#9171)
artifacts: verify and canonicalize record_artifact workspace paths (#9142)

Other Changes

ci: drop pull_request_review events on closed PRs at the route gate (#9299)
Decouples the composer from SSE catch-up to keep input enabled during reconnection and allows prompt submission even when disconnected. (#9323)
The Weixin channel now refreshes the typing indicator every 4 seconds during long turns to prevent it from expiring prematurely. (#9358)
Fixed a bug where the enableCacheSharing setting default was ignored, ensuring cache-aware suggestions work without explicit user configuration. (#9233)
Removed thirteen unused internal helpers from the settings utility module to clean up legacy code. (#9379)

中文摘要

亮点

新增 qwen sessions ps 命令和 live-state API，支持以 JSON 格式列出和监控运行中的交互式会话。 (#8969, #9261, #9366)
新增 /advisor 斜杠命令获取独立只读意见，并增强 review 技能以分析 GitLab 仓库和 CI 脚本。 (#7567, #9226, #9263)
提升 Web Shell 韧性，支持断开连接时提交提示，并防止因渲染错误导致会话崩溃。 (#9323, #9292)
通过在创建时即时检查黑名单，将新垃圾评论的可见间隔缩短至接近零。 (#9266)
新增会话级媒体引用端到端支持，确保图片预览在刷新后持久保留。 (#9310)
允许工作流代理通过 workingDir 参数锁定特定目录，从而延长其生存周期。 (#8972)

会话管理与 Web Shell

增强了 Web Shell 中的实时会话跟踪、媒体持久化和文件处理，改进了状态同步和 UI 控制。

新增实时会话注册表和 qwen sessions ps 命令，用于列出正在运行的交互式会话并支持 JSON 输出。 (#8969)
改进了 Web Shell 侧边栏会话管理，提供一致的海悬停详情、紧凑状态指示器和持久的工作区展开功能。 (#9311)
新增会话级媒体引用端到端支持，确保图片预览在刷新后保留并一致协调。 (#9310)
新增受信任的 GET /workspaces/:workspace/sessions/live-state 端点，返回实时会话快照和目录版本令牌以减少轮询。 (#9261)
WebShell 现使用工作区会话实时状态以减少轮询开销，仅在必要时刷新会话目录。 (#9366)
Web Shell 现在在 fileUploadEnabled 为 false 时完全禁用文件拖放，并通过 fileUploadDirectory 支持目录上传。 (#9382)
导出的 HTML 查看器现在包含一个全局的 Expand all/Collapse all 工具栏，可同时切换思考块、工具输出和文件引用。 (#9367)
revert(web-shell): restore pre-#8098 composer animations at 50% opacity (#9349)

审查管道与自动化

通过更好的锚点处理、多模型支持以及 SWE-bench 和 Terminal-Bench 的自动化工作流，提高了审查准确性。

通过先提交 SWE-bench 运行并在发布结果后分派 TB 运行，实现了 Terminal-Bench 发布评估的链式处理。 (#9120)
修复了实时运行中发现的七个审查管道缺陷，包括解决增量锚点扣留问题并启用多调用构建测试维度。 (#9175)
增强了 review 技能，使其能针对执行 shell 和 CI 脚本的具体 lane 和环境进行分析。 (#9263)
更新了 review 技能文档和测试以反映确定的 3 轮上限状态，并改进 chunk gating 逻辑的覆盖率。 (#9258)
增量审查锚点现在记录认证模型，防止在不同模型下重运行时出现错误的跳过行为。 (#9184)
为 /review 添加 Aone Code 读取路径支持，使基于 GitLab 的仓库可使用 meta、issue-context 和 fetch-pr 命令。 (#9226)
compose-review 现在强制执行 GitHub 65,536 字符限制，优先裁剪中文翻译和延期注释，最后才截断关键的 blockers。 (#9247)
通过 --comment 发布的审查注释现在使用纯审查员散文而非模板脚手架，而严重性标记继续遵循 review.attribution 规则。 (#9027)
沙盒验证现在包含一个确定性 flakiness 门控，可多次重新运行修改后的单元测试以检测并报告非确定性失败。 (#9130)
为 fetch-pr 添加 --resume 标志，通过验证磁盘状态和重用工作树来恢复中断的审查。 (#9092)
启用了审查线程获取的分页功能，确保解析所有线程而不仅是最旧的 100 个。 (#9390)
通过移除复杂的防护层并保留核心的 wipe-and-retry 机制简化了审查检出自愈逻辑。 (#9327)

代理能力与编排

通过目录锁定、团队任务路由和前台进程的健壮错误处理，扩展了代理功能。

daemon: attach skill-toggle mutation metadata to settings_changed (#9051)
允许工作流代理通过 workingDir 参数锁定特定目录，使其生存期超出默认限制。 (#8972)
修复了因 SSE 事件中缺少路由字段导致前台代理被错误标记为失败的问题。 (#9330)
更新了 agent-team 提示和 TeamCreate 描述，以准确反映队友空闲时自动交付最终答案的行为。 (#9284)
core: dispatch manually assigned team tasks to their owner (#9289)
autofix: seed the takeover round counter with /takeover from N (#9321)
autofix 收敛制动现在正确指示代理将交接详情写入 failure.md 而非受限的包装文件。 (#9371)
autofix 集群扫描现在在 API 枚举错误时失败关闭，防止向忙碌的 PR 分发任务，并清晰标记已分发的 PR。 (#9329)
逆向审计路径中的认证条现在报告具体的失败名称（如'receipt lead contradicts the phrase'），以提高退休原因的诊断清晰度。 (#9272)

系统可靠性与性能

通过 I/O 错误的重试逻辑、内存缓存限制和渲染失败的优雅降级，加强了系统稳定性。

使临时资源耗尽和读取 I/O 错误可重试，同时保持格式错误为终止状态，以防止误报损坏。 (#9362)
将文本工具缓存限制为 500 个条目并淘汰最旧 entry，以防止长会话中内存无限增长。 (#9185)
将压缩输出预算限制在剩余上下文窗口大小内，确保提示估算耗尽可用 token 时请求仍有效。 (#9109)
将 agent-tab 视图包裹在非致命 ErrorBoundary 中，使渲染错误优雅降级而非退出整个会话。 (#9292)
不支持的 MIME 类型或解码错误的图像现在会被省略并提示文本，避免导致整个会话中断。 (#9295)
内存召回现在最多等待 100ms 再注入确定性候选项，提升了可靠性和非 ASCII 内容的覆盖范围。 (#8716)
web-shell 现在使用后端权威的队列状态以防止消息重复，并确保仅在确认交付失败后恢复草稿负载。 (#9407)
清除了十九个延迟建议的积压并修复了包括 persistRecoveredLedger 标志处理在内的行为问题。 (#9342)

守护进程与本地控制

整合了本地控制架构，并为守护进程状态和答案添加了可配置模式和可轮询路由。

将 Local Control 整合为单一的 daemon 实现，包含辅助监听器、统一安全模型和可撤销的配对凭证。 (#9106)
daemon: make serve new-file mode configurable (QWEN_SERVE_NEW_FILE_MODE) (#9364)
添加了可轮询的 HTTP 路由以检查 daemon 轮次状态并获取最终模型答案，无需 SSE 订阅。 (#9080)

安全与垃圾信息防护

通过即时黑名单检查减少了垃圾信息可见性差距，并添加了工作区清理保护以防止不安全的目录删除。

通过创建时即时检查黑名单来最小化新垃圾评论，将可见间隔从一小时以上缩短至接近零。 (#9266)
为 triage 和 Serve A/B 流程添加工作区清理保护，防止在非规范运行环境中发生不安全的目录删除。 (#9277)

用户命令与界面

引入了用于获取第二意见的 /advisor 命令，并改进了 CLI 在严重性下限和恢复标志方面的行为。

新增 /advisor 斜杠命令，可在不修改历史记录的情况下获取对当前对话的独立只读评审意见。 (#7567)
当严重性下限解析为 Critical-only 时，CLI 会自动将内联 Suggestion 注释移至审查正文的延期列表，而不是发布到 GitHub。 (#9279)
Autofix 失败评论现在包含双语内容，在折叠的详情块中提供中文分析。 (#9386)

诊断与可观测性

添加了隐私安全的诊断事件，并修复了上下文报告以排除已禁用的 skills，从而获得准确的消耗指标。

引入了隐私安全的诊断事件，用于关联过大或变异的工具结果表示，同时不暴露敏感内容。 (#9039)
修复了上下文使用详情，排除已禁用的 skills，确保上下文消耗报告准确。 (#9346)
如果缺少必需的 dist/输出或生成文件，packages/cli 中的单元测试现在会立即失败，并提供可操作的错误消息及确切的 npm run build 命令。 (#9171)
artifacts: verify and canonicalize record_artifact workspace paths (#9142)

其他变更

ci: drop pull_request_review events on closed PRs at the route gate (#9299)
将 composer 与 SSE 追赶解耦，确保重连期间输入可用，并允许在断开连接时继续提交提示。 (#9323)
Weixin 通道现在每 4 秒刷新一次 typing 指示器，防止其在长轮次中过早消失。 (#9358)
修复了 enableCacheSharing 设置默认值被忽略的问题，确保无需用户显式配置即可使用缓存感知建议。 (#9233)
移除了设置工具模块中十三个未使用的内部辅助函数以清理遗留代码。 (#9379)

Complete Change List (54 pull requests)

Features

core: add a live-session registry and qwen sessions ps (#8969) by @qqqys
daemon: attach skill-toggle mutation metadata to settings_changed (#9051) by @samuelhsin
chain Terminal-Bench release evaluation (#9120) by @DennisYu07
web-shell: improve sidebar session management (#9311) by @ytahdn
web-shell: decouple composer from catch-up and rebuild SSE on disconnected submit (#9323) by @ytahdn
support session media references end-to-end (#9310) by @ytahdn
core: let a workflow agent pin a directory and outlive the default bounds (#8972) by @qqqys
review: review shell and CI scripts against the lanes that run them (#9263) by @wenshao
cli: add /advisor command for second-opinion conversation review (#7567) by @yiliang114
core: Add privacy-safe tool-result boundary diagnostics (#9039) by @doudouOUC
serve: Add workspace session live-state endpoint and catalog version (#9261) by @doudouOUC
consolidate Local Control into one daemon-owned implementation (#9106) by @yiliang114
autofix: seed the takeover round counter with /takeover from N (#9321) by @wenshao
daemon: make serve new-file mode configurable (QWEN_SERVE_NEW_FILE_MODE) (#9364) by @yiliang114
web-shell: support upload directory and hard-disable drag-in when fileUploadEnabled=false (#9382) by @ytahdn
serve: add pollable daemon turn status (#9080) by @BenGuanRan
web-shell: Consume workspace session live-state (#9366) by @doudouOUC
review: Aone Code read path (second review-platform provider) (#9226) by @wenshao
webui: add global expand/collapse control to exported HTML viewer (#9367) by @yiliang114
review: enforce the resolved severity floor at the posting boundary (#9279) by @wenshao
cli: plain-prose /review comments; severity markers follow review.attribution (#9027) by @wenshao
triage: add a deterministic flakiness gate to sandboxed verification (#9130) by @wenshao
review: resume an interrupted PR review from its on-disk state (#9092) by @wenshao
ci: post autofix failure-path handoff comments bilingually (#9386) by @wenshao

Bug Fixes

ci: minimize new spam comments on creation (#9266) by @yiliang114
ci: drop pull_request_review events on closed PRs at the route gate (#9299) by @wenshao
review: repair seven pipeline defects found by live runs (#9175) by @wenshao
web-shell: keep foreground agent status on SSE (#9330) by @ytahdn
cli: exclude disabled skills from context usage details (#9346) by @callmeYe
core: align agent-team prompts and TeamCreate description with actual delivery (#9284) by @yiliang114
cli: Keep transient runtime record I/O retryable (#9362) by @doudouOUC
cli: contain agent-tab render errors instead of exiting the session (#9292) by @yiliang114
cli: bound string width and code point caches (#2128) (#9185) by @yiliang114
core: Clamp compression output budget to remaining context window (#9109) by @ZijianZhang989
weixin: keep typing indicator alive during long turns (#9358) by @yiliang114
ci: route the autofix convergence-brake handoff through failure.md (#9371) by @wenshao
ci: make autofix busy detection fail closed and mark dispatched PRs (#9329) by @wenshao
cli: honour the declared enableCacheSharing default in both suggestion gates (#9233) by @yiliang114
core: dispatch manually assigned team tasks to their owner (#9289) by @yiliang114
ci: back-port the checkout-heal wipe guard to the triage and serve-ab wipes (#9277) by @yiliang114
review: gate the recovered incremental anchor on the model that certified it (#9184) by @wenshao
artifacts: verify and canonicalize record_artifact workspace paths (#9142) by @zjgzx1988
core: omit image media the model endpoint cannot safely consume (#9291) (#9295) by @yiliang114
memory: improve recall reliability and candidate coverage (#8716) by @yiliang114
review: budget the composed body against GitHub's review limit (#9247) by @wenshao
web-shell: use backend-authoritative queue state (#9407) by @ytahdn
review: name each certification bar and defer degrade notes past admission (#9259) (#9272) by @wenshao
devx: fail with actionable message when unit-test build prerequisites are missing (#9149) (#9171) by @yiliang114
review: clear the deferred-suggestion backlog from #9175's review rounds (#9342) by @wenshao
autofix: paginate review threads instead of reaching the oldest 100 (#9390) by @qqqys

Internal Changes

revert(web-shell): restore pre-#8098 composer animations at 50% opacity (#9349) by @ytahdn
test(review): sync round-cap prose and pin the deferred coverage gaps (#9256) (#9258) by @yiliang114
refactor(cli): remove superseded settings dialog helpers (#9379) by @qqqys
refactor(ci): simplify the review checkout self-heal back to wipe-and-retry (#9327) by @wenshao

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.13...v0.21.14

0.21.13 - 2026-08-17

Highlights

Web Shell composer now supports dragging, dropping, and pasting text files as named attachments alongside images. (#9180)
Users can now fork conversations from any specific Assistant response using durable checkpoints to ensure branch accuracy. (#8817)
Split-view panes now inherit the host's @ mention configuration, ensuring custom categories and exclusions apply consistently. (#9052)
The /review skill now uses dedicated platform subcommands like meta and fetch-diff instead of executing raw gh commands. (#9096)
Stopped takeover PRs now receive an autofix/needs-human label and appear in a new Takeover pool table on the dashboard. (#8960)
Review sessions now record session IDs and diff hashes to enable crediting agent work across interrupted runs. (#9091)

Breaking Changes

No known breaking changes.

Review Workflow & /review Skill

Enhanced the /review skill with dedicated subcommands, dynamic finding limits, and improved concurrency handling to prevent loops and ensure accurate reporting.

Split-view panes now inherit the host's @ mention configuration, ensuring custom categories appear and builtinAtProviders exclusions apply consistently. (#9052)
The /review skill now uses dedicated platform subcommands like meta and fetch-diff instead of executing raw gh commands via prompt prose. (#9096)
The /review command now limits posted suggestions to Critical findings after round 5 to prevent review loops, while deferring other findings to the final report. (#9118)
Review workflow concurrency now isolates no-op human review requests to prevent them from blocking active PR review jobs. (#9210)
Duplicate suggestions in /review are now listed in a dedicated paragraph with links to existing comments instead of being counted as anchor failures. (#9215)
The /review presubmit gate now correctly handles carried-id re-posts to prevent dropping valid findings that match existing comment IDs. (#9212)
Fixed the /review pipeline to accept bracketed source tags and added a --to-anchors option to normalize inputs for final gates. (#9222)
The PR review workflow now posts a fallback comment with retry guidance if the main review job dies abnormally. (#9255)
Review sessions now record session IDs and diff hashes to enable crediting agent work across interrupted runs. (#9091)
Review runners now automatically wipe and retry failed checkouts to self-heal from persistent workspace corruption. (#9220)
PR review worktree leases now act as locks to prevent concurrent sessions from destroying active review states during setup or cleanup. (#9211)

Autofix & Takeover Management

Improved Autofix visibility with new dashboard pools and labels, while refining footprint gates and growth tracking for better takeover handling.

autofix: deny-by-default footprint gate and positional window censuses (#9156)
Stopped takeover PRs now receive an autofix/needs-human label and appear in a new Takeover pool table on the dashboard for better visibility. (#8960)
The autofix-growth-now marker now uses the prepare-time measurement instant to ensure growth divergence reports accurately reflect the correct base version. (#9192)
Prevented the triage agent from processing tracking issues created by the autofix bot by adding a user login guard to the workflow trigger. (#9271)

Reverse-Audit & Findings Tracking

Optimized reverse-audit rounds based on diff size and ensured verified findings outside PR footprints are tracked in dedicated issues.

The reverse-audit round cap now scales dynamically based on diff topology, allowing more rounds for small diffs and fewer for huge ones. (#9183)
The reverse-audit round cap for huge diffs is now reduced to three only when the run has a clock; otherwise, it remains at five. (#9203)
Verified findings outside the PR footprint are now deferred to a follow-up queue and tracked in a dedicated issue instead of being lost. (#9189)
Reverse-audit now reports retirement failures with specific diagnostics and accepts additional punctuation separators in dry-receipt parsing. (#9213)
Presubmit overlap lists are now written to a separate file to prevent overwriting the canonical findings artifact. (#9268)

Web Shell & User Interface

Added support for dragging and pasting text files in Web Shell and improved release note presentation with bilingual digests.

The Web Shell composer now supports dragging, dropping, and pasting text files as named attachments alongside images. (#9180)
Release notes are now presented as a user-friendly digest grouped by capability themes with bilingual English and Chinese summaries and attached screenshots. (#9216)
Skill bodies are now redacted from Web Shell event surfaces to reduce payload size while remaining available for native ACP clients. (#9235)

Conversation & Session Control

Enabled forking conversations from specific responses and improved session resilience to preserve active work during shutdowns.

Users can now fork conversations from any specific Assistant response using durable checkpoints to ensure branch accuracy. (#8817)
Established a hidden runtime boundary for Conversations to isolate ownership and lifecycle while preserving existing owner-routed compatibility paths. (#9181)
Sessions now preserve active work when close is refused by draining queued tasks within an 8-second budget before tearing down the session. (#9134)

CLI Tools & Extensions

Introduced External Context Provider profiles and added flags to qwen review commands for incremental validation and scoping.

Introduced the External Context Provider Extension Profile v1 to enable provider-owned retrieval integrations via Qwen Extension and MCP boundaries. (#9068)
Added --since flag to qwen review fetch-pr for validating incremental review anchors and scoping diffs based on local cache or ledger markers. (#9100)
The runAllChunks command now outputs a diagnostic message on stderr when --all-chunks fans out a plan identified as Step 3A. (#9249)
Fixed a bug where the findings command could silently overwrite input files when using --to-anchors and added validation to prevent flag wiring mismatches. (#9270)

Infrastructure & Reliability

Strengthened CI pipelines, resource limits, and automation workflows to prevent build failures and ensure consistent agent settings.

ci: skip non-bot review_requested siblings before jobs spend compute (#9204)
The hourly spam-minimization sweep now includes inline pull request review comments to block unwanted content effectively. (#9229)
Increased the browser daemon SDK bundle size budget to 191 KiB to accommodate new attachment metadata and fix build failures. (#9238)
ACP HTTP pre-attach buffers are now strictly bounded by byte count and frame limits to prevent resource exhaustion. (#9007)
Release jobs now force-push release branches to prevent non-fast-forward errors during retries after previous failed publication attempts. (#9082)
Fixed automation workflows to correctly pass agent settings like turn caps and tool allowlists that were previously silently dropped. (#9252)

Other Fixes & Improvements

Addressed various edge cases in tracing, mocking, and goal summarization to ensure system stability.

goal: summarise the last Goal when a turn holds no permit (#9164)
Fixed main-agent tracing edge cases regarding budget-triggered aborts, non-streaming calls, and deferred TUI tool batch ownership. (#9121)
Fixed mock ACP child fixtures in integration tests to correctly handle the tool-guard handshake required by qwen serve. (#9161)

Other Changes

Added an internal limitKind field to GoalRecord to improve how stopped Goals are typed, with no change to user-facing resume behavior. (#9165)
Added test-only pins to verify ordering invariants and write-target paths without changing production behavior. (#9225)
Tests now verify that background artifact refresh failures silently preserve the last successful state without showing errors or clearing the panel. (#9227)
Fixed skill-parity tests on macOS by resolving the fixture root with realpath to ensure path consistency when tmpdir is a symlink. (#9269)

中文摘要

亮点

Web Shell 编辑器现在支持拖放和粘贴文本文件作为命名附件，与图片并列显示。 (#9180)
用户现在可以使用持久化检查点从任意 Assistant 回复分叉对话，以确保分支准确性。 (#8817)
分屏视图现在继承主机的 @ 提及配置，确保自定义类别显示且 builtinAtProviders 排除项一致生效。 (#9052)
/review 技能现在使用 meta 和 fetch-diff 等专用平台子命令，不再通过提示文本执行原始 gh 命令。 (#9096)
停止的接管 PR 现在获得 autofix/needs-human 标签，并在仪表板的 Takeover pool 表中显示。 (#8960)
审查会话现在记录会话 ID 和差异哈希，以便在中断的运行中确认代理工作。 (#9091)

审查工作流与 /review 技能

增强了 /review 技能，引入专用子命令、动态发现限制及改进的并发处理，以防止循环并确保报告准确。

分屏视图现在继承主机的 @ 提及配置，确保自定义类别显示且 builtinAtProviders 排除项一致生效。 (#9052)
/review 技能现在使用 meta 和 fetch-diff 等专用平台子命令，不再通过提示文本执行原始 gh 命令。 (#9096)
/review 命令在第 5 轮后仅发布 Critical 建议以避免循环，其他发现将延迟至最终报告。 (#9118)
审查工作流并发现在隔离无效的人类审查请求，防止其阻塞活跃的 PR 审查作业。 (#9210)
/review 中的重复建议现在列在带有现有评论链接的专用段落中，不再计为锚点失败。 (#9215)
/review 预提交网关现在正确处理携带 ID 的重新发布，防止丢弃匹配现有评论 ID 的有效发现。 (#9212)
修复了 /review 管道以接受带括号来源标签，并添加了 --to-anchors 选项以规范化最终网关的输入。 (#9222)
如果主审查作业异常终止，PR 审查工作流现在会发布包含重试指南的备用评论。 (#9255)
审查会话现在记录会话 ID 和差异哈希，以便在中断的运行中确认代理工作。 (#9091)
审查运行器现在会自动清除并重试失败的检出，以从持久性工作区损坏中自我修复。 (#9220)
PR 审查工作树租约现在充当锁，防止并发会话破坏正在进行的审查状态。 (#9211)

Autofix 与接管管理

通过新仪表板池和标签提升 Autofix 可见性，同时优化足迹门控和增长追踪以更好地处理接管任务。

autofix: deny-by-default footprint gate and positional window censuses (#9156)
停止的接管 PR 现在获得 autofix/needs-human 标签，并在仪表板的 Takeover pool 表中显示。 (#8960)
autofix-growth-now 标记现在使用准备时的测量时刻，确保增长差异报告准确反映正确的基准版本。 (#9192)
通过在工作流触发器中添加用户登录守卫，防止审查代理处理 autofix bot 创建的跟踪问题。 (#9271)

逆向审计与发现追踪

根据差异大小优化逆向审计轮次，并确保 PR 范围外的已验证发现在专用 issue 中追踪。

reverse-audit 轮次上限现在根据 diff 拓扑动态调整，小 diff 允许更多轮次，大 diff 则减少。 (#9183)
只有当运行有时钟时，巨大差异的反向审计轮次上限才会降至三，否则保持为五。 (#9203)
PR 范围外已验证的发现现在推迟到后续队列，并在专用 issue 中跟踪，避免丢失。 (#9189)
逆向审计现在报告具体的退休失败诊断信息，并在干接收解析中接受更多标点分隔符。 (#9213)
预提交重叠列表现在写入单独的文件，以防止覆盖规范 findings 工件。 (#9268)

Web Shell 与用户界面

在 Web Shell 中支持拖放和粘贴文本文件，并通过双语摘要改进发布说明展示。

Web Shell 编辑器现在支持拖放和粘贴文本文件作为命名附件，与图片并列显示。 (#9180)
发布说明现在按功能主题分组，提供双语摘要和截图，更易于用户阅读。 (#9216)
已从 Web Shell 事件表面中剔除技能正文以减少负载大小，同时保留对原生 ACP 客户端的可用性。 (#9235)

对话与会话控制

支持从特定回复分叉对话，并增强会话弹性以在关闭时保留活跃工作。

用户现在可以使用持久化检查点从任意 Assistant 回复分叉对话，以确保分支准确性。 (#8817)
为 Conversations 建立隐藏运行时边界以隔离所有权和生命周期，同时保留现有的所有者路由兼容路径。 (#9181)
当关闭被拒绝时，会话现在会在 8 秒内排空排队任务再销毁会话，从而保留正在进行的活跃工作。 (#9134)

CLI 工具与扩展

引入外部上下文提供者配置，并为 qwen review 命令添加标志以支持增量验证和范围限定。

引入 External Context Provider Extension Profile v1，支持通过 Qwen Extension 和 MCP 边界提供独立的检索集成。 (#9068)
为 qwen review fetch-pr 添加 --since 标志，用于验证增量审查锚点并基于本地缓存或账本标记限定差异范围。 (#9100)
当 --all-chunks 分发被识别为 Step 3A 的计划时，runAllChunks 命令现在会在 stderr 输出诊断信息。 (#9249)
修复了 findings 命令在使用 --to-anchors 时可能静默覆盖输入文件的问题，并增加了标志验证。 (#9270)

基础设施与可靠性

强化 CI 流水线、资源限制及自动化工作流，以防止构建失败并确保代理设置一致。

ci: skip non-bot review_requested siblings before jobs spend compute (#9204)
每小时垃圾邮件最小化扫描现在包含内联 PR 审查评论，以有效阻止不需要的内容。 (#9229)
将 browser daemon SDK 包大小预算提升至 191 KiB 以容纳新的附件元数据并修复构建失败。 (#9238)
ACP HTTP 预附加缓冲区现在严格按字节数和帧数限制，以防止资源耗尽。 (#9007)
发布任务现在强制推送 release 分支，防止因之前失败尝试导致的非快进错误在重试时阻塞发布。 (#9082)
修复了自动化工作流，正确传递之前被静默丢弃的代理设置（如轮次上限和工具允许列表）。 (#9252)

其他修复与改进

解决了追踪、模拟和目标摘要中的各种边缘情况，以确保系统稳定性。

goal: summarise the last Goal when a turn holds no permit (#9164)
修复了 main-agent 追踪中关于预算触发中止、非流式调用和延迟 TUI 工具批处理所有权的边缘情况。 (#9121)
修复了集成测试中的 mock ACP child 以正确处理 qwen serve 所需的 tool-guard 握手。 (#9161)

其他变更

在 GoalRecord 中添加了内部 limitKind 字段以改进已停止 Goal 的类型定义，不影响用户可见的恢复行为。 (#9165)
添加了仅用于测试的固定项以验证顺序不变量和写入目标路径，不改变生产行为。 (#9225)
测试验证后台构件刷新失败时静默保留上次成功状态，不显示错误也不清空面板。 (#9227)
通过在 macOS 上对 fixture 根目录使用 realpath 修复技能一致性测试，确保 tmpdir 为符号链接时的路径一致性。 (#9269)

Complete Change List (43 pull requests)

Features

autofix: deny-by-default footprint gate and positional window censuses (#9156) by @wenshao
review: absorb prose gh commands into platform-backed subcommands (#9096) by @wenshao
support fork from any conversation (#8817) by @water-in-stone
web-shell: support text file attachments in the composer (#9180) by @doudouOUC
review: adopt a round-aware convergence posture for posted findings (#9118) by @wenshao
autofix: escalate stopped takeover PRs and age out unanswered pauses (#8960) by @wenshao
review: scale the reverse-audit round cap to the diff topology (#9183) by @wenshao
review: apply the huge round reduction only when the run has a clock (#9203) by @wenshao
autofix: defer verified out-of-footprint findings to a surviving follow-up queue (#9189) by @wenshao
review: run-session ledger and cross-session agent evidence (#9091) by @wenshao
external-context: Add provider extension profile (#9068) by @doudouOUC
review: validate and scope the incremental anchor inside fetch-pr (#9100) by @wenshao
daemon: Isolate the Conversations runtime boundary (#9181) by @doudouOUC
release: user-facing bilingual digest for release notes (#9216) by @wenshao

Bug Fixes

web-shell: share at mention providers with split-view panes (#9052) by @samuelhsin
ci: skip non-bot review_requested siblings before jobs spend compute (#9204) by @yiliang114
ci: minimize spam inline review comments (#9229) by @yiliang114
ci: keep no-op review requests out of the PR review concurrency group (#9210) by @wenshao
integration-tests: ack daemon tool-guard handshake in the mock ACP child (#9159) (#9161) by @qwen-code-dev-bot
sdk: raise daemon browser bundle budget to 191KB (#9238) by @wenshao
review: note when --all-chunks fans out a plan whose numbers say 3A (#9249) by @yiliang114
telemetry: Address main agent tracing edge cases (#9121) by @doudouOUC
review: give duplicate-dropped Suggestions their own compose state and body sentence (#9215) by @wenshao
autofix: re-anchor growth divergence on measurement time and external head moves (#9192) by @wenshao
ci: stop dropping agent settings in resolve and follow-up workflows (#9252) by @wenshao
goal: summarise the last Goal when a turn holds no permit (#9164) by @qqqys
serve: redact skill bodies from the Web Shell event surface (#9235) by @wenshao
review: exempt carried-id re-posts from the presubmit overlap drop (#9212) by @yiliang114
review: normalize last-gate inputs and anchor mid-line fragments (#9222) by @wenshao
review: fix silent reverse-audit retirement failures and keep non-converged evidence (#9213) by @wenshao
ci: keep a fallback comment when the PR review runner dies (#9255) by @wenshao
serve: Bound ACP HTTP pre-attach buffers by bytes (#9007) by @doudouOUC
ci: self-heal failed checkouts on the reused review runners (#9220) by @wenshao
review: keep the presubmit overlap list out of the canonical findings artifact (#9268) by @wenshao
ci: force-push release branch so retries replace failed attempts (#9076) (#9082) by @qwen-code-dev-bot
ci: stop triaging the autofix bot's own deferred-finding tracking issues (#9264) (#9271) by @yiliang114
daemon: Preserve sessions when active-work close is refused (#9134) by @doudouOUC
review: close out the four leftover findings from the #9222 review (#9270) by @wenshao
review: lock the PR review worktree lease against concurrent sessions (#9211) by @wenshao

Internal Changes

refactor(goal): type the limit that stopped a Goal (#9165) by @qqqys
test(review): close confirmed pin gaps from #9194 (batch 1) (#9225) by @yiliang114
test(web-shell): pin silent failure of background artifact refreshes (#7427) (#9227) by @yiliang114
test(review): realpath the skill-parity fixture root (#9269) by @wenshao

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.12...v0.21.13

0.21.12 - 2026-08-14

Highlights

Added support for uploading workspace files to the Web Shell composer via drag-and-drop or the @ file panel with progress tracking. (#8874)
Implemented a diff growth brake in autofix reviews to limit source and test line increases per window using configurable budgets. (#8981)
Confirmed Critical findings now require an executed witness with observed output, automatically demoting unverified claims to low confidence. (#9065)
The daemon now adaptively grows live-journal caps up to 256 MiB per session to prevent data loss during long turns. (#8905)
Fixed visual jitter in the desktop app's sidebar and ensured external URLs open reliably through the system browser. (#9073, #9069, #9111)
Compact mode now displays model reasoning as a foldable summary, and background shell activity is tracked to prevent premature cleanup. (#9148, #9042)

Breaking Changes

No known breaking changes.

Complete Change List

Features

Added support for uploading workspace files directly to the Web Shell composer via drag-and-drop or the @ file panel with progress tracking. (#8874) by @ytahdn
Implemented a diff growth brake in autofix reviews to limit source and test line increases per window using configurable budgets. (#8981) by @wenshao
The daemon now adaptively grows live-journal caps up to 256 MiB per session before truncating replay entries, using a shared memory pool to prevent data loss during long turns. (#8905) by @wenshao
Confirmed Critical findings now require an executed witness with observed output, automatically demoting unverified claims to low confidence and hiding them from PR posts. (#9065) by @wenshao
Review ledger markers now include the anchor commit SHA to ensure accurate incremental diff scoping across environments and prevent certification of unreviewed ranges. (#9067) by @wenshao
Added user settings to control review attribution footers, default effort levels, and default comments, preventing repository files from overriding these policies. (#8994) by @wenshao
Requests routed through Alibaba Cloud API Gateway domains now correctly include metadata fields for session tracing and log correlation. (#9103) by @yiliang114
Added optional OpenTelemetry trace and span IDs to daemon logs to improve correlation and debugging capabilities for sampled requests. (#9084) by @doudouOUC
Enabled per-agent JSONL transcripts for all workflow agent dispatches to record prompts, tool calls, and results consistently. (#8971) by @qqqys
The /review command now identifies and reports entire classes of unbounded defects prospectively instead of listing individual instances one by one. (#9095) by @wenshao
Main agent invocations now generate OpenTelemetry-compliant traces with stable identities and correct status semantics for success, cancellation, and errors. (#9107) by @doudouOUC
Background shells are now tracked in activeWork, enabling explicit negotiation of shell categories and preventing premature automatic cleanup during shell activity. (#9042) by @doudouOUC
Web Shell Channel management now supports full policy configuration, workspace binding, and a redesigned interface consistent with other management surfaces. (#8848) by @qqqys
Added automatic escalation to maintainers when autofix diffs exceed growth budgets across multiple rounds instead of patching indefinitely. (#9104) by @wenshao
Updated the review loop to validate feedback based on content accuracy rather than relying solely on the author's identity. (#8996) by @wenshao
Added a guard to block cross-worktree Git mutations from model-issued commands that target directories outside the current session. (#8687) by @wenshao
Compact mode (Ctrl+O) now displays model reasoning as a foldable "Thinking…" summary instead of hiding it entirely. (#9148) by @ytahdn

Bug Fixes

Fixed an issue in the standalone Web Shell where the first prompt could fail to submit due to session target synchronization errors. (#9038) by @ytahdn
Updated the release workflow to allow automated bots to fully approve release pull requests without requiring manual human intervention. (#9056) by @yiliang114
Ensured OpenTelemetry session ownership is correctly preserved across model requests and asynchronous streams in daemon modes. (#9077) by @doudouOUC
Fixed visual jitter in the desktop app's sidebar project list by reserving space for the scrollbar gutter. (#9073) by @yiliang114
Fixed a security gap where inline-level quotations could bypass layer gates, ensuring that only properly walked block-level quotes can trigger approval caps. (#9020) by @wenshao
Autofix verification gates are now hermetic to runner git configurations, preventing host-level settings from poisoning subsequent test runs. (#8961) by @wenshao
Fixed an issue where restricted secondary workspace rows in the web-shell displayed duplicate archive buttons, ensuring only one accessible action remains visible. (#9066) by @yiliang114
Enabled opening external URLs from Markdown links and artifacts in the desktop app by routing them through the system browser with improved error handling. (#9069) by @yiliang114
Prevented the Windows runtime terminal window from appearing during startup and aligned the reduced-motion bootstrap view for consistent visual centering. (#9064) by @yiliang114
Extended the one-time migration bridge from Electron to Tauri to support Windows and Linux, ensuring seamless updates while preserving user data. (#9079) by @yiliang114
Reduced CI test flakes caused by disk space and system load by optimizing fixture cleanup and using disk-backed temporary directories on Linux. (#8982) by @yiliang114
Improved error messages for review comments when pull request binding is missing and added tests to enforce operator-scope invariants. (#9102) by @wenshao
The Windows standalone installer now uses built-in .NET hashing instead of PowerShell commands to prevent failures when verifying checksums. (#9112) by @MichaelYochpaz
Automatic fixes now wait for in-flight code reviews to complete before updating branches, ensuring human feedback is incorporated without losing context. (#8899) by @yiliang114
The daemon now offers a compact conversation summary for web clients that excludes detailed subagent events to improve load times and reduce data usage. (#9057) by @ytahdn
The desktop app now reliably opens all external links, including OAuth and documentation URLs, through the system browser instead of silently dropping them. (#9111) by @yiliang114
Tool execution failures in the web shell no longer display prominent text labels in collapsed summaries, showing only a subtle icon count instead. (#9053) by @ytahdn
The review pipeline now isolates concurrent runs to prevent verdict overwrites and includes regression tests for four previously observed live-run failures. (#9086) by @wenshao
Tool-loop protection stops now surface as structured turn errors with localized guidance, ensuring errors persist across page reloads without offering invalid retry actions. (#8853) by @ytahdn
Assistant footer actions like Copy and Branch now remain hidden until background agents complete and the main agent provides a final summarized response. (#8787) by @carffuca
The review run command now rejects targets consisting only of path separators and fixes the composed-name oracle anchoring to prevent slow failure paths. (#9128) by @wenshao
Reverted transactional session switching to restore the loading-skeleton model, ensuring transcripts clear and skeletons display during session loads. (#9129) by @ytahdn
Fixed spam minimization workflows by using the repository-scoped GITHUB_TOKEN to prevent permission errors when minimizing comments. (#9140) by @yiliang114
Fixed Shell to correctly honor the tools.truncateToolOutputThreshold setting instead of hardcoding a 30,000-character limit. (#9014) by @cxruan
Enabled workspace batch Skill toggles to accept uninstalled Skill names, allowing users to declare disabled states before installation. (#9139) by @callmeYe
fix(core): detect line-continuation and @P shell substitutions (#8582) (#8590) by @yiliang114
Fixed E2E test failures by updating the mock ACP child to correctly acknowledge the daemon tool guard handshake. (#9162) by @qwen-code-dev-bot

Performance

Daemon session restore is now selective, reading only necessary records to reconstruct state and significantly improving performance for large sessions. (#9055) by @doudouOUC

Internal Changes

Upgraded the sharp image library to version 0.35.0 to resolve a known security vulnerability flagged by npm audit. (#8952) by @yiliang114
Fixed a flaky test in the web UI by improving the timing logic for draining batched transcript dispatches. (#9058) by @wenshao
Release workflows now require designated approvers, use least-privilege permissions, and include automated security scans for dependencies and secrets. (#9008) by @yiliang114
The Conversations runtime foundation has been generalized to support both the standalone daemon and Live Voice sessions within a unified manager. (#8890) by @doudouOUC
VSCode companion sync publishing can now be paused by setting the RELEASE_VSCODE_SYNC_PUBLISH repository variable to false without affecting manual releases. (#9132) by @yiliang114
Refactored internal CLI dependencies to remove circular imports between utils, serve, and UI layers for better module isolation. (#9147) by @yiliang114

New Contributors

@MichaelYochpaz made their first contribution in #9112

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.11...v0.21.12

0.21.11 - 2026-08-13

Highlights

Added support for Agent Plugins v1 to extend agent capabilities. (#8834)
Enabled native multi-agent workflows with read-only teammates via the /coordinate command. (#8804)
Improved text selection with word-wise drag on double-click and line-wise extension on triple-click. (#8739)
Fixed DashScope Qwen 3.8 request failures by preventing conflicting reasoning settings. (#8525)
Enhanced Web Shell interactivity with persistent chevrons, better hover states, and inline agent metrics. (#8780)
Added OpenTelemetry session lifecycle events to improve observability of session creation and shutdown. (#8616)

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(serve): bound daemon ACP NDJSON buffers (#8911) by @doudouOUC
feat(extensions): support Agent Plugins v1 (#8834) by @callmeYe
feat(ui): word-wise drag after double-click, line-wise extension after triple-click (#8739) by @qwen-code-dev-bot
Adds standard OpenTelemetry session.start and session.end lifecycle events to improve observability of session creation and shutdown. (#8616) by @zjunothing
Web Shell subagent rows are now more interactive with persistent chevrons, better hover states, and inline display of agent types and metrics. (#8780) by @carffuca
Session list reads now properly propagate request cancellation to prevent disconnected clients from leaving expensive background scans running. (#8954) by @doudouOUC
feat(desktop): add Aliyun OSS release mirror (#8976) by @yiliang114
feat(web-shell): improve compact tool activity (#8973) by @ytahdn
ACP sessions now use the unified Goal v3 runtime to support create, edit, pause, resume, and clear actions with improved turn scheduling. (#8732) by @qqqys
The Web Shell sidebar now includes a Channels view to track integration sessions from DingTalk, Feishu, and WeCom alongside standard tasks. (#8457) by @BZ-D
The /coordinate command now supports native multi-agent workflows with read-only teammates and automated result forwarding to the leader agent. (#8804) by @yiliang114
The review skill's reverse audit now detects defects in modeled system layers like sandboxes by comparing runtime state semantics against the model. (#8956) by @wenshao
Terminal window titles now display status symbols like ◐ and ✳ to indicate task state in multiplexers where color cues are unavailable. (#8970) by @qwen-code-dev-bot
The /doctor memory command now reports tool result retention stats, including character counts and warnings for results exceeding 30k characters. (#8875) by @ZijianZhang989
Background task notifications in the web shell are now localizable and display structured metadata within consistent chat-style bubbles. (#8989) by @ytahdn
Web Shell now supports Qwen 3.8 reasoning controls, allowing users to toggle Thinking mode and select effort levels directly from the model chip. (#8974) by @callmeYe

Bug Fixes

fix(web-shell): Enforce prompt-safe session navigation (#8931) by @doudouOUC
fix(desktop): consolidate 0.1.1 regressions (#8896) by @yiliang114
fix(serve): Keep restore request shapes distinct (#8933) by @doudouOUC
fix(web-shell): improve ask user question keyboard interactions (#8876) by @carffuca
Prevents DashScope Qwen 3.8 requests from failing by ensuring conflicting reasoning_effort and thinking_budget settings are not sent together. (#8525) by @DragonnZhang
Fixes workspace path containment checks in tests to correctly handle canonicalized paths on macOS systems. (#8759) by @rbalachandar
Ensures the repair agent is warned to rebuild dist/ on all retryable A/B exit paths to prevent trusting stale baseline artifacts. (#8958) by @wenshao
Fixes parsing of dotted-minor Claude model aliases and adds token limit support for Opus 5 models. (#8585) by @netbrah
Correctly identifies OpenAI SDK APIUserAbortError as a user cancellation to prevent false API error reporting when requests are aborted. (#8399) by @harjothkhara
Virtual subagent session IDs now support reserved characters like colons and slashes to fix detail view resolution for certain provider task IDs. (#8717) by @carffuca
Closed resource ownership gaps in the daemon ACP transport by validating envelopes earlier and preventing reuse of failed channel generations. (#8947) by @doudouOUC
Same-session refresh operations are now transactional to ensure visible session state remains unchanged if a candidate restore fails or times out. (#8939) by @doudouOUC
Extended defense against content-only thinking-tag leaks to all OpenAI-compatible providers to prevent unclosed tags from breaking streams. (#8818) by @yiliang114
Updated review body wording to clearly disclose coverage gaps and prevent contradictions when agents cannot certify the entire diff. (#8857) by @yiliang114
fix(web-shell): keep workspace picker suggestions closed (#8844) by @ytahdn
fix(desktop): add safe area to macOS app icon (#8987) by @yiliang114
fix(webui): Close same-session refresh race gaps (#8990) by @doudouOUC
fix(web-shell): Harden prompt admission ownership (#8955) by @doudouOUC
fix(desktop): follow-up review fixes from #8896 (#8951) by @yiliang114
Text selection in Virtualized History mode now includes the footer and statusline while keeping other controls excluded from the selection region. (#8329) by @DragonnZhang
The desktop app now displays a minimal icon during startup and hides the internal workspace until loading or recovery actions are complete. (#8988) by @yiliang114
Headless tool result content is now bounded to 65,536 bytes, displaying deterministic previews for oversized outputs without altering semantic data. (#9012) by @doudouOUC
The desktop release pipeline now enforces stricter version checks, verifies Node.js archives, and ensures safe runtime assembly during updates. (#9009) by @yiliang114
Transient slash commands like authentication and settings no longer clutter history, while model picker actions now explicitly report their outcomes. (#8365) by @DragonnZhang
Removed web-shell e2e test paths from the review context manifest to ensure reviewers only see relevant source code files. (#9028) by @wenshao
Improved CI reliability by caching linter downloads on ECS runners with strict checksum verification to speed up builds. (#9001) by @yiliang114

Performance

Reverse-audit convergence pairs now launch rounds 1 and 2 concurrently for 3B chunked reviews to reduce wait times on long CI runs. (#8903) by @wenshao

Documentation

docs(agents): drop mandatory /review step from the general workflow (#9000) by @wenshao
Documentation now defines the implementation contract for selective daemon session restore, replacing full transcript materialization with targeted projections. (#8743) by @doudouOUC

Internal Changes

chore(serve): Log session continuation admissions (#8932) by @doudouOUC
Project memory isolation now defaults to workspace scope for qwen serve runtimes, while standalone CLI behavior remains unchanged. (#8856) by @qqqys
Fixed a deterministic test failure in the ACP bridge transport failure scenario caused by a logical merge conflict in history page sizing. (#8984) by @wenshao
A new regression test ensures model selection remains stable during multi-provider template updates to prevent unintended provider overwrites. (#8879) by @ComplexSimply

New Contributors

@rbalachandar made their first contribution in #8759

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.10...v0.21.11

0.21.10 - 2026-08-11

Highlights

Added ACP support for configuring reasoning effort levels from Default to Max via session configuration. (#8526)
Clicking uploaded or pasted images in the Web Shell now opens a preview in the artifact panel with download support. (#8930)
Fixed AutoFix timeouts by enabling streamed progress output to detect active work during long-running headless tasks. (#8895)
Fixed Desktop Local Control to support enterprise LAN addresses by allowing non-private IPv4 routes on verified interfaces. (#8866)
Improved Web Shell responsiveness by fixing animation stutter, scrolling stability, and line-change statistics for large files. (#8915, #8914, #8924)
Fixed Windows bug where the desktop app failed to spawn the Node runtime due to unhandled verbatim path prefixes. (#8936)

Breaking Changes

No known breaking changes.

Complete Change List

Features

OpenAI API log cleanup now applies to non-interactive sessions, headless invocations, and daemon modes to reduce disk usage. (#8893) by @doudouOUC
Web Shell session lists now share cached data across components to improve loading performance and reduce network requests. (#8891) by @doudouOUC
Added ACP support for configuring reasoning effort levels, allowing clients to set options from Default to Max via session configuration. (#8526) by @zjunothing
Clicking uploaded or pasted images in the Web Shell now opens a preview in the right-hand artifact panel with download support. (#8930) by @ytahdn

Bug Fixes

Fixed AutoFix timeouts by enabling streamed progress output so the system can detect active work during long-running headless tasks. (#8895) by @qqqys
Changed @ completion to use bare Left and Right arrow keys for switching category tabs instead of Ctrl+arrow or Ctrl+Tab. (#8576) by @LaZzyMan
Corrected the round-cap marker lifecycle to prevent contradictory stop disclosures and ensure markers clear properly upon convergence. (#8850) by @wenshao
Improved Web Shell subagent panel responsiveness by fixing animation stutter, elapsed time resets, and output scrolling behavior. (#8915) by @ytahdn
Fixed a bug where session load timeouts prevented retrying the same session by clearing the stale target identity upon expiration. (#8883) by @yiliang114
Restored Live Host release mirroring to Aliyun OSS by correcting workflow permissions and credential passing. (#8917) by @LaZzyMan
Context usage indicators no longer appear twice in the UI when the status line already displays context information. (#8749) by @yiliang114
Hyperlinks in chat output now correctly stop at full-width CJK punctuation to prevent broken URLs in Chinese text. (#8755) by @yiliang114
Web Shell now reliably reconciles mid-turn messages with daemon state to prevent duplicate submissions after refreshes. (#8798) by @ytahdn
Fixed banner duplication and screen flickering issues when resizing the terminal window or waking the application. (#8831) by @chiga0
Scrolling through long Web Shell transcripts is now stable and preserves visible messages during history pagination. (#8914) by @ytahdn
Made WebUI cross-session switching transactional to prevent data loss or state corruption when resuming sessions fails or times out. (#8882) by @doudouOUC
Fixed Desktop Local Control to support enterprise LAN addresses by allowing non-private IPv4 routes on verified physical interfaces. (#8866) by @yiliang114
Fixed Web Shell to correctly display line-change statistics for large edited files by replacing the previous comparison limit with a linear-time algorithm. (#8924) by @ytahdn
Fixed an issue where deferred MCP tools were missing in resumed sessions by re-revealing them when tool declarations are refreshed. (#8475) by @zjunothing
Fixed CLI VP mode to fully expand static history items when pressing Ctrl+S, ensuring long tables and output are no longer truncated. (#8704) by @zjunothing
Automatic session titles now exclude hook context to prevent long generic blocks from displacing the user's actual request. (#8781) by @zjunothing
Fixed a Windows bug where the desktop app failed to spawn the Node runtime due to unhandled verbatim path prefixes. (#8936) by @yiliang114
Added a structured error code for closing sessions to ensure reliable retry handling in the Web UI and Java clients. (#8884) by @yiliang114
Fixed provider version synchronization to correctly distinguish between installed model hashes and template refresh states. (#8889) by @yiliang114

Performance

Improved CLI performance by caching persisted session catalogs for organized and filtered daemon lists, with automatic invalidation on metadata changes. (#8892) by @doudouOUC

Documentation

Updated documentation to correct session resume and screen-reader verification steps for inline image testing. (#8746) by @zjunothing

Internal Changes

Added regression tests to ensure the /remember command context refresh marker persists correctly during retry and notification turns. (#8809) by @ZijianZhang989
Refactored internal toolchain code for qwen review build-test without changing any CLI arguments, outputs, or npm behaviors. (#8776) by @wenshao
No user-facing changes; this update improves test stability for plan mode exits during LLM timeouts. (#8881) by @yiliang114
Fixed an infinite render loop in the Web Shell test harness that previously caused CI jobs to fail due to heap exhaustion. (#8934) by @ytahdn

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.9...v0.21.10

0.21.9 - 2026-08-10

Highlights

Added native support for installing Qoder plugins from directories, archives, Git repos, URLs, and npm packages with automatic system-prompt loading. (#8661)
Enabled Local Control pairing via QR code in CLI and Desktop apps for secure LAN access and added automatic default workspace creation on first launch. (#8727, #8814)
Added drag-and-drop support for images in Web Shell and a fullscreen toggle for the right panel to improve artifact and subagent visibility. (#8696, #8614)
Fixed Linux Wayland text copying to prefer native wl-copy and enabled microphone access for the macOS Desktop app with required entitlements. (#8481, #8715)
Prevented telemetry startup failures by ignoring unsupported OpenTelemetry exporter environment variables and fixed session attribution marker logic. (#8703, #8712)
Improved code review performance for large diffs and guaranteed composition survival during budget stops by reserving a 20-minute floor. (#8773, #8791)

Breaking Changes

No known breaking changes.

Complete Change List

Features

Adds native support for installing Qoder plugins from directories, archives, Git repos, URLs, and npm packages, automatically loading system-prompt.md as extension context. (#8661) by @callmeYe
Automatically assigns issues to area owners based on labels using a round-robin strategy that prefers owners with the fewest open assigned issues. (#8668) by @yiliang114
Adds a daemon API endpoint and SDK helpers to enable or disable up to 100 Skills in a single batch request with per-target error reporting. (#8664) by @callmeYe
The qwen review submit command now outputs the direct URL to posted reviews in both stderr and JSON stdout. (#8770) by @wenshao
Added Local Control pairing to the CLI and Desktop app, allowing secure LAN access via QR code and a new Control menu option. (#8727) by @yiliang114
Added a fullscreen toggle to the Web Shell right panel for easier viewing of artifacts and subagent details. (#8614) by @wenshao
Added a guard to pause tool execution after repeated failures within a single interactive ACP session. (#8469) by @doudouOUC
Enhanced the Workflow tool description with orchestration policies and default pipelining guidance for better model behavior. (#8694) by @qqqys
Desktop now automatically creates a default workspace at ~/Documents/Qwen and starts the runtime on first launch without blocking the main thread. (#8814) by @yiliang114
Web Shell now displays context window usage as a mini progress pill in the status bar with tooltips and accessible labels. (#8794) by @wenshao
Web Shell now supports dragging and dropping PNG, JPEG, GIF, WebP, and BMP images into the composer with full attachment management and concurrency limits. (#8696) by @water-in-stone
Stable Qwen Live Host packages are now mirrored to Aliyun OSS with automatic fallback to GitHub and support for up to one-hour archive downloads. (#8674) by @LaZzyMan
Added automatic background cleanup for expired OpenAI API logs based on the new model.openAILogRetentionDays setting, which defaults to seven days. (#8862) by @doudouOUC

Bug Fixes

Requires explicit confirmation for read-only Git commands when repository configuration executes external programs via diff.external or core.fsmonitor. (#8645) by @yiliang114
Prevents telemetry initialization failures by ignoring unsupported OTEL_TRACES_EXPORTER, OTEL_LOGS_EXPORTER, and OTEL_METRICS_EXPORTER environment variables during startup. (#8703) by @zjunothing
Improves the WebSearch startup notice to include a copy-pasteable settings.json example and environment variable alternative when no search model is configured. (#8665) by @qwen-code-dev-bot
Prefers the native wl-copy command for text copying on Linux Wayland sessions, falling back to xclip, xsel, or OSC 52 if unavailable. (#8481) by @zjunothing
Fixes session attribution to require exact value 1 for QWEN_CODE_SERVE and QWEN_CODE_DESKTOP markers, preventing false positives from values like 0 or false. (#8712) by @yiliang114
Fixed a rendering issue where the queued-acknowledgement comment on pull requests displayed raw text instead of formatted Markdown with working links. (#8726) by @wenshao
Standardized caller-supplied session IDs across all daemon interfaces to ensure consistent session creation and validation. (#8415) by @doudouOUC
Reduced noise in the demo event log by aggregating usage_update frames into a single context meter display. (#8762) by @wenshao
Fixed a compatibility issue in external context reading by switching to an explicit reader loop for response bodies. (#8764) by @wenshao
Enabled microphone access for the macOS Desktop app by adding the required usage description and audio-input entitlement. (#8715) by @yiliang114
Fixed a race condition in the Qoder plugin install integration test by properly awaiting the test rig setup. (#8793) by @yiliang114
Fixed flaky CI tests by updating memory extraction timeouts and extending manifest fixture teardown limits. (#8797) by @wenshao
Hidden raw ACP usage update notifications from Web Shell transcripts while retaining token accounting functionality. (#8790) by @carffuca
Compacted the Local Control dialog to ensure the QR code, pairing link, and disconnect button remain visible without scrolling. (#8800) by @yiliang114
Fixed workflow label mutations by switching to REST endpoints to avoid errors with older GitHub CLI versions. (#8761) by @wenshao
Implemented a dedicated 60-second timeout for ACP session restoration to prevent hangs and improve error handling. (#8691) by @doudouOUC
Web Shell no longer displays debug projections for unrecognized daemon events as conversation content in transcripts. (#8812) by @wenshao
Background shell tests now use unique temporary paths to prevent file permission errors caused by shared sidecar files. (#8813) by @wenshao
Local Control now opens the active Desktop session on mobile instead of a blank Web Shell and improves network address verification security. (#8806) by @yiliang114
Desktop now displays specific error messages when automatic updates fail instead of silently returning or attempting unsafe retries. (#8807) by @yiliang114
The floating Todo panel now respects the Session Workflow setting, appearing as non-interactive progress when disabled and opening the plan execution view when enabled. (#8828) by @yiliang114
Workspace trust is now evaluated separately for each project .env file to prevent untrusted parent directories from leaking secrets into trusted child workspaces. (#8706) by @zjunothing
On macOS, closing the main window now hides it instead of destroying it, allowing instant restoration from the Dock while preserving focus behavior. (#8802) by @yiliang114
Session work is now fenced by specific attachment identity to prevent stale asynchronous operations from corrupting newer attachments sharing the same session ID. (#8833) by @doudouOUC
Shell registry tests now use isolated temporary directories to prevent conflicts, and notifications are sanitized using a shared helper for consistent display. (#8795) by @wenshao
Bounded replay snapshots now compact consecutive assistant text and thought chunks into entries of at most 256 source events while preserving metadata boundaries. (#8801) by @wenshao
Added an idle watchdog to kill silent sandbox hangs after 20 minutes and implemented stale container reaping to prevent leaked runners from consuming resources. (#8816) by @wenshao
Extended the environment variable denylist to prevent untrusted workspace .env values from leaking into session subprocesses and hardened the scrub lifecycle. (#8763) by @wenshao
Session-switch errors now list specific blocking background tasks with their IDs and statuses, directing users to the correct commands to stop them. (#8742) by @yiliang114
Daemon-owned runtimes can now complete authorized external text writes via built-in tools without disabling ACP delegation or widening workspace boundaries. (#8852) by @doudouOUC
Fixed a bug where setting QWEN_CODE_SERVE to 0 or false incorrectly removed NODE_OPTIONS and NODE_PATH during direct ACP launches. (#8811) by @yiliang114
Fixed an issue where refreshing a provider template incorrectly reset the user's selected model if that model belonged to a different provider. (#8868) by @yiliang114
Ported remaining hardening improvements to the verify gate to prevent unnecessary full re-runs caused by identity-less failures. (#8878) by @wenshao
Fixed sandbox container name collisions in shared daemon environments by switching to random 8-character hex suffixes for container names. (#8880) by @wenshao
Fixed the provider update prompt to respect the 'Remind me later' choice by persisting a 24-hour cooldown instead of re-prompting on every startup. (#8829) by @qwen-code-dev-bot
Review comments posted via /review are now formatted with proper paragraphs and lists to improve readability when unresolved Criticals or coverage disclosures are present. (#8825) by @wenshao

Performance

The review process now guarantees compose and submission survive budget stops by reserving a 20-minute floor for composition before verification. (#8791) by @wenshao
Automatic review timeouts for micro diffs under 25 lines are now halved to reduce latency while maintaining high effort and inline comments. (#8774) by @wenshao
Code review performance is improved for diffs over 3000 lines by reducing audit rounds and disabling the specialist agent to prevent timeouts. (#8773) by @wenshao
Made the triage job timeout configurable via the QWEN_TRIAGE_TIMEOUT_MINUTES repository variable to prevent premature cancellations of long-running checks. (#8810) by @wenshao

Documentation

Korean (한국어) has been added to the documentation language bar in the README to provide direct access to localized guides. (#8836) by @dss1222

Internal Changes

Synchronized the external-context workspace version in the dependency lockfile to prevent unnecessary local install churn and working tree dirtiness. (#8858) by @wenshao
Removed the legacy /demo debug page from the daemon as its functionality is fully covered by the main Web Shell interface. (#8805) by @wenshao
Improved Web Shell session switching to retry when a target session is still closing instead of immediately reporting a permanent error. (#8864) by @yiliang114

New Contributors

@dss1222 made their first contribution in #8836

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.8...v0.21.9

0.21.8 - 2026-08-08

Highlights

Restored real-time autofix support for pull requests opened from forks by bridging review events to credentialed workflows. (#8676)
Enabled compression cache sharing for OpenAI, Gemini, and Vertex AI to reuse conversation prefixes and reduce redundant input processing. (#8418, #8425)
Added repository context manifests to guide the /review command with bounded domains, related paths, and recommended tests. (#8654)
Fixed a security issue where explicitly distrusted workspaces were incorrectly inheriting trust from parent directories. (#8628)
Improved /review performance by moving remote matching to a deterministic CLI subcommand, achieving up to 93.3% prompt cache hit rates. (#8658)
Allowed ACP agent tool calls to run concurrently at the configured limit, removing artificial serialization that slowed down fan-out operations. (#8631)

Breaking Changes

No known breaking changes.

Complete Change List

Features

Review runs now warn users if the executing bundle is older than the current code and document the findings --test-delta flag for severity adjustments. (#8390) by @wenshao
The daemon now observes and reports memory pressure levels and ratios using real denominators for both the root process and child heaps. (#8423) by @doudouOUC
Compression cache sharing is now enabled for all OpenAI-compatible providers, including stable session keys for the official OpenAI API. (#8418) by @DragonnZhang
Compression cache sharing is now enabled for Gemini and Vertex AI to reuse conversation prefixes and reduce redundant input processing. (#8425) by @DragonnZhang
Group chats can now be approved once via a stable chat ID using the new group pairing policy, allowing access for all members. (#8440) by @qqqys
Added a repository context manifest to guide the /review command with bounded domains, related paths, and recommended tests for specific repository areas. (#8654) by @wenshao
Enhanced DingTalk integration to include stable identifiers of mentioned members in the inbound context when the bot is mentioned alongside other users. (#8639) by @BenGuanRan
Restores real-time autofix support for pull requests opened from forks by bridging review events to the credentialed workflow lane. (#8676) by @wenshao
Enriches Feishu contact observations with sender display names and group names to replace opaque IDs with recognizable labels. (#8569) by @BenGuanRan
Improves Web Shell feedback for parallel subagents by keeping status visible, auto-expanding details during work, and collapsing groups upon completion. (#8559) by @carffuca
Adds optional Mem0 memory write support to the Direct External Context integration for approved content when explicitly enabled in configuration. (#8507) by @doudouOUC
Improves telemetry attribution to distinguish daemon-spawned sessions from direct CLI launches in usage statistics. (#8670) by @yiliang114
Added support for installing Web Shell Extensions directly from local .zip or .tar.gz archive files via the Extension manager. (#8621) by @callmeYe
Feishu users can now answer structured single-select and multi-select questions directly via native Card V2 forms instead of text replies. (#8578) by @BenGuanRan
Dynamic Workflows now support cooperative pause and resume via the 'p' shortcut in Background Tasks or the '/workflows p' command in the TUI. (#8320) by @qqqys
Added activeWork, activeWorkReporting, and activeWorkStaleMs fields to the GET /health?deep=1 endpoint to expose current work state. (#8588) by @doudouOUC
Implemented durable evidence checkpointing for long-running Goals to prevent data loss and manage evidence limits during execution. (#8465) by @qqqys

Bug Fixes

Forced AutoFix review admission now fails closed with explicit validation and stable reason codes when takeover permissions cannot be verified. (#8410) by @qqqys
Automatic recap results are now discarded if a new user message starts while the recap is still processing to prevent output from appearing in the wrong turn. (#8573) by @carffuca
File caching and session leases now fail closed when inode values are zero to prevent unrelated files from being incorrectly treated as identical. (#8290) by @xianjianlf2
Backward transcript pagination now caps page expansion to prevent single large turns from inflating pages beyond the requested size and byte budget. (#8553) by @wenshao
Signal-terminated foreground shell commands are now correctly reported as errors instead of being treated as successful executions. (#8501) by @daleselaji-dev
The npm cache producer now runs as a non-root user to prevent file permission issues on persistent self-hosted CI runners. (#8669) by @yiliang114
Same-host daemon bridges now use the regular CLI filesystem service for text reads while keeping text writes delegated through the workspace boundary. (#8620) by @doudouOUC
Automated fix jobs backed by personal access tokens are now skipped for fork pull requests that lack repository secrets. (#8671) by @wenshao
The triage status comment now finalizes correctly even when the workflow is cancelled or times out, preventing stale running indicators. (#8436) by @wenshao
Fixed an issue where slash command names were truncated in narrow terminals, ensuring full command names like 'review' and 'doctor' remain visible in completion menus. (#8657) by @carffuca
Removed a blocking disk flush command from directory E2E tests to prevent Vitest worker timeouts on busy self-hosted Linux runners. (#8685) by @wenshao
Added a timeout to silent MCP SSE startup attempts in 'qwen mcp list' to prevent the command from hanging indefinitely on unresponsive endpoints. (#8555) by @daleselaji-dev
Enabled management of DingTalk interactive card configurations in the daemon channel catalog and ensured Web Shell preserves these object-valued settings. (#8517) by @BenGuanRan
Increased SDK request timeouts and stream limits for CI review runs to prevent failures during long upstream processing or large context generation. (#8673) by @wenshao
Fixes an issue on Windows where workspace paths with verbatim prefixes caused failures during runtime startup and workspace resolution. (#8619) by @yiliang114
Ensures links in assistant replies open in the system browser when the built-in browser pane fails to load or navigate. (#8594) by @yiliang114
Allows ACP agent tool calls to run concurrently at the configured limit, removing artificial serialization that slowed down fan-out operations. (#8631) by @wenshao
Fixes mobile layout issues to keep the composer anchored at the bottom of the chat pane on screens up to 760px wide. (#8601) by @dreamWB
Fixes an issue where resuming a session after a connection cut would display incomplete responses by correctly recording the delivered text prefix. (#8624) by @harjothkhara
Ensures live system instructions refresh immediately after memory writes so new context is applied without requiring a session restart. (#8640) by @ZijianZhang989
Hardens QQ group sender attribution to consistently display neutral labels for username-less senders and prevent identity exposure when mentions are disabled. (#8477) by @zjunothing
Fixes stream-json sessions to remain alive after an interrupt signal, allowing users to continue interactions without restarting the CLI. (#8509) by @zjunothing
Corrects integration test configuration to enforce worker limits and prevent unbounded parallelism during test execution. (#8689) by @wenshao
Emits standard ACP usage update notifications after each model round to accurately report prompt context occupancy and window size. (#8528) by @zjunothing
Fixed an issue where changing trust or tool settings now correctly refreshes MCP session metadata without requiring a full reconnection. (#8522) by @zjunothing
Fixed a layout issue where collapsing thought blocks in the terminal buffer now correctly releases reserved vertical space immediately. (#8570) by @chiga0
Fixed timeout error handling to preserve underlying cause and HTTP status codes, ensuring retry policies function correctly for network failures. (#8531) by @zjunothing
Separated internal hook context from user-visible transcript text to ensure clean display and accurate telemetry across all interfaces. (#7948) by @destire-mio
Integration test cleanup now runs asynchronously and stops waiting immediately if telemetry fails to become ready, preventing hangs during test execution. (#8688) by @wenshao
Review agent transcripts are now wrapped to prevent accidental execution of workflow commands found in logged file contents. (#8683) by @wenshao
The resume session command is now echoed to the main terminal buffer on exit so it remains visible in scrollback when chat recording is enabled. (#8455) by @chiga0
A persistent 'N queued' badge now appears in the Footer status row to indicate pending messages even when the main queue display is clipped during streaming. (#8667) by @qwen-code-dev-bot
Pressing ESC once now immediately cancels ongoing agent work instead of requiring multiple presses to clear queued messages first. (#8353) by @C0d3N1nja97342
The Alibaba Token Plan preset now uses the correct Singapore-region model ID 'deepseek-v4-flash-0731' to prevent HTTP 403 errors. (#8705) by @zjunothing
Fixed a startup failure in the review workflow caused by exceeding GitHub's maximum expression length limit. (#8720) by @wenshao
Fixed a security issue where explicitly distrusted workspaces were incorrectly inheriting trust from parent directories. (#8628) by @daleselaji-dev
Fixed an issue where multi-line /review commands followed by a newline failed to trigger the review process. (#8723) by @wenshao
Changed the autofix loop to enter Critical-only mode after five change rounds to prevent excessive automated modifications. (#8751) by @wenshao
Prevents daemon sessions from inheriting loader-affecting environment variables like NODE_OPTIONS and LD_* that could interfere with subprocess execution. (#8663) by @wenshao
Enables successful type checking for integration tests by fixing configuration errors and resolving previously undetected type issues. (#8693) by @doudouOUC

Performance

Stopped restoring the large remote npm cache on self-hosted runners to improve performance, as the restore time exceeded the installation time saved. (#8681) by @wenshao
Optimizes CI by running automatic reviews for documentation-only pull requests at medium effort while maintaining high effort for all other changes. (#8648) by @wenshao
Improved /review performance by moving remote matching to a deterministic CLI subcommand and achieving up to 93.3% prompt cache hit rates. (#8658) by @wenshao
Made autofix fleet caps tunable via repository variables and raised default limits to improve CI throughput without workflow edits. (#8731) by @wenshao
Introduced a soft tool-call budget into review plans to optimize resource usage during finder and auditor operations. (#8708) by @wenshao

Documentation

Documentation now covers the per-caller and workspace-wide concurrency settings for the qwen serve command, including defaults and accepted ranges. (#8404) by @DragonnZhang
Added Aliyun Model Studio CLI (bailian-cli) to the Ecosystem section to support image generation, knowledge retrieval, and agent orchestration. (#8710) by @Maddock-MDF
Clarified SDK documentation to confirm that reusable queries remain open for further prompts after an interruption, unless the session is explicitly closed. (#8711) by @DragonnZhang

Internal Changes

Markdown parsing during message streaming is now throttled to 80ms intervals to prevent performance degradation while maintaining immediate updates when streaming stops. (#7904) by @PratikWayase

New Contributors

@daleselaji-dev made their first contribution in #8501
@Maddock-MDF made their first contribution in #8710

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.7...v0.21.8

0.21.7 - 2026-08-06

Highlights

Removed the 50-turn limit for Goals, allowing tasks to resume and continue beyond previous boundaries. (#8421)
Enabled rendering inline terminal images from model outputs in the interactive CLI for Kitty, Ghostty, and chafa. (#8305)
Introduced a declarative manifest and command to customize review plans with repository-specific context. (#8401)
Fixed Live Host release signing by normalizing certificate names to match Electron Builder expectations. (#8579)
Prevents silent hangs in GitHub-triggered review runs by capping the total lifetime of streaming responses. (#8602)
Allows managed deployments to route voice transcription through specific HTTP or private-network ASR gateways. (#8350)

Breaking Changes

No known breaking changes.

Complete Change List

Features

Adds the security.allowedInsecureVoiceBaseUrls setting to allow managed deployments to route voice transcription through specific HTTP or private-network ASR gateways. (#8350) by @rockybot2026
Enables rendering inline terminal images from model and tool outputs in the interactive CLI with support for Kitty, Ghostty, and chafa. (#8305) by @tlysanhuo
Introduces a declarative .qwen/review-context.json manifest and the review repo-context command to customize review plans with repository-specific context. (#8401) by @wenshao
Added observability for REST SSE connections with stable UUIDs and telemetry for stream lifecycle events including slow-client warnings and evictions. (#8572) by @doudouOUC

Bug Fixes

Fixed the review CLI bundle to include the core package build output, ensuring verification checks run correctly in review phases. (#8612) by @wenshao
Fixed Live Host release signing by normalizing the Developer ID certificate name to match Electron Builder expectations. (#8579) by @LaZzyMan
Enhanced sandbox runtime selection to probe availability before use, providing clearer errors when no working runtime is found. (#7734) by @harjothkhara
Fixed a race condition in autofix workflows by ensuring scan-and-pick runs execute within a single concurrency group. (#8435) by @wenshao
Fixed file read permissions to resolve symbolic links before checking workspace boundaries, ensuring accurate access decisions. (#8636) by @doudouOUC
Removed the fixed 50-continuation limit for Goals, allowing them to resume and continue beyond previous turn count boundaries. (#8421) by @qqqys
Prevents silent hangs in GitHub-triggered /review runs by capping the total lifetime of streaming responses with the new QWEN_STREAM_MAX_LIFETIME_MS setting. (#8602) by @wenshao
Updates the Web Shell sidebar branch chip immediately after a checkout to reflect the new branch name without waiting for the next poll. (#8600) by @wenshao
Allows refreshing Web Shell session pages in the browser address bar without authentication errors while keeping API subpaths secured. (#8445) by @BZ-D
Scopes artifact previews, downloads, and review reports to their owning workspace to prevent access issues after workspace changes. (#8510) by @zjunothing
fix(cli): accept scope flags in /language ui subcommands (#8633) by @yiliang114
DingTalk tasks now use a single continuous status card for updates and final answers, preventing clutter and ensuring correct user mentions. (#8565) by @qqqys

Performance

Reduces /review pipeline latency by removing unnecessary serial delays in the audit loop and verification steps. (#8642) by @wenshao

Documentation

Added a design document for the legacy code audit skill which applies review machinery to existing merged code. (#8397) by @wenshao

Internal Changes

Improved test reliability by using a dedicated empty directory for external-path glob tests to prevent timeouts on busy systems. (#8604) by @wenshao

New Contributors

@rockybot2026 made their first contribution in #8350
@tlysanhuo made their first contribution in #8305

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.6...v0.21.7

0.21.6 - 2026-08-05

Highlights

Added experimental native Live Voice support to WebShell on macOS for real-time audio interactions via a global shortcut. (#7859)
Web Shell now keeps conversation turns expanded during active background subagent tasks and allows immediate execution of read-only info commands. (#8413, #8496)
Restored desktop app release capabilities by fixing macOS notarization and updating the Tauri signing key for valid release signatures. (#8511, #8518)
Resolved DashScope API request failures for Qwen models by correcting conflicting reasoning parameters and honoring explicit opt-outs. (#8488, #8536)
Improved autofix and review performance by optimizing bundle reuse, parallel context loading, and reverse audit pipelines for large pull requests. (#8487, #8548, #8498)
Fixed GitHub integration issues including paginated API handling for large PRs, credential reuse for Channels, and accurate version reporting. (#8438, #8461, #8431)

Breaking Changes

No known breaking changes.

Complete Change List

Features

The Chrome extension alpha now includes daemon and browser-automation onboarding states, runtime MCP diagnostics, and an automated acceptance flow for real-Chrome testing. (#6739) by @yiliang114
The record_artifact tool now explicitly guides users to register URLs for pull requests, issues, and comments as link artifacts for later access. (#8453) by @wenshao
Bound web-shell plan approvals to specific Todo revisions to prevent stale snapshots from validating outdated plans. (#8393) by @yiliang114
Added an optional external tool guard provider for managed serve deployments to enforce pre-execution allow/deny policies. (#8125) by @chiga0
Added the qwen review cost-ledger command to aggregate model usage statistics from existing review records on disk. (#8471) by @wenshao
Adds experimental native Live Voice support to WebShell on macOS, enabling real-time audio interactions via a dedicated global shortcut. (#7859) by @LaZzyMan
GitHub Channels can now reuse the daemon host's existing gh auth login credentials when no personal access token is explicitly configured. (#8461) by @wenshao
Read-only info commands like /stats, /about, and /context now execute immediately mid-turn in Web Shell instead of waiting for streaming to finish. (#8496) by @wenshao
Review tests now cover the full reverse-dependency closure of code changes to catch behavioral regressions in dependent workspaces. (#8490) by @wenshao

Bug Fixes

Web Shell now keeps conversation turns expanded while any background subagent remains active, preventing premature collapse during parallel tasks. (#8413) by @carffuca
The desktop app updater now uses a newly rotated Tauri signing key to restore the ability to publish signed releases. (#8511) by @yiliang114
Added a CSS rule to restore visible text selection highlights for message content in Firefox that were previously missing. (#8417) by @C0d3N1nja97342
Fixed DashScope API requests for Qwen 3.8 models to prevent conflicting reasoning parameters that caused request rejections. (#8488) by @wenshao
Prevented review jobs from timing out without reporting results by stopping the reverse-audit loop before the hard kill limit. (#8468) by @wenshao
Fixed autofix workflows to correctly handle paginated GitHub API responses for PRs with over 100 comments or events. (#8438) by @wenshao
Resolved DashScope thinking parameter conflicts by correctly honoring explicit opt-outs and preserving legacy budget settings. (#8536) by @wenshao
Stabilized review test-efficacy tests to prevent failures caused by ambient vitest binaries in temporary directories. (#8537) by @wenshao
Fixed macOS notarization failures by codesigning bundled ripgrep and Node.js binaries before the Tauri build. (#8518) by @yiliang114
Enabled prompt cache reuse for chat compression with media-bearing histories to improve efficiency while maintaining safety fallbacks. (#8419) by @DragonnZhang
Ensured qwen review submit consistently reports the startup CLI version in both inline comments and summary review bodies. (#8431) by @yiliang114
Fixed line ending detection to analyze the entire file instead of a single slice, preventing silent CRLF-to-LF conversion errors. (#8383) by @doudouOUC
Secured evidence image uploads by validating file content via magic bytes instead of relying solely on file extensions. (#8459) by @wenshao
Prevents CI failures on reused runners by automatically cleaning up stale Git worktrees and branches left behind after cancelled or timed-out reviews. (#8474) by @yiliang114
Fixes WebUI session recovery to correctly reconstruct complete conversation turns after live journal truncation events. (#8414) by @doudouOUC
Prevents daemon crashes caused by missing lock files by logging warnings instead of throwing errors when lock compromises occur. (#8442) by @wenshao
Fixes the Qwen Live Host release workflow to correctly reuse existing Apple signing secrets and generate ephemeral keychain passwords. (#8574) by @LaZzyMan
Textual tool-result payloads in the CLI are now bounded to 65,536 bytes to prevent excessive output sizes in ACP transport. (#8450) by @doudouOUC

Performance

Reduced review setup time by issuing independent context and rule loading calls in a single response instead of serially. (#8487) by @wenshao
Optimized prompt cache retention by clearing old tool results to a low watermark instead of stopping just below the threshold. (#8464) by @doudouOUC
Speeds up autofix reviews by building the CLI bundle once per scan and reusing it across all parallel review legs. (#8548) by @wenshao
Improves reverse audit performance by retiring dry chunks and optimizing the pipeline verification loop for large pull requests. (#8498) by @wenshao

Documentation

Documentation now covers the Goal v3 lifecycle for headless CLI runs, including state persistence, autonomous continuation limits, and streaming event handling. (#8503) by @DragonnZhang

Internal Changes

Trusted fork PRs and no-checkout jobs now route to the ECS runner pool when the maintainer kill-switch allows, ensuring consistent Linux CI execution. (#8502) by @wenshao
Moved detailed incident narratives from SKILL.md to DESIGN.md to reduce runtime context size while preserving rule justifications via references. (#8499) by @wenshao
Updated CI tests to align timeout expectations with externalized repository variables for review workflows. (#8485) by @wenshao
Updates the vendored CUA Driver to upstream version 0.17.0, adding support for typed browser automation and native menu operations. (#8564) by @LaZzyMan
Windows merge queue tests now run on the validated ecs-win self-hosted runner by default to reduce reliance on hosted pools. (#8386) by @yiliang114
The GitHub-triggered review workflow now optionally installs tmux and freeze tools to enable higher-fidelity evidence image capture. (#8454) by @wenshao

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.5...v0.21.6

0.21.5 - 2026-08-04

Highlights

Adds an opt-in one-time update bridge for macOS users to migrate from the Electron desktop app to the new Tauri shell. (#8392)
Introduces detailed execution-specific outcome tracking for tool calls to distinguish between invocation success, failure, and cancellation. (#8180)
Prevents unsafe replay of MCP tool calls after connection loss unless the tool is explicitly marked idempotent and the workspace is trusted. (#8387)
Stops infinite Goal mode retries after evidence catalog exhaustion by transitioning the Goal to a usage_limited state requiring user intervention. (#8430)
Introduces a structured, finding-centric view in Web Shell for review results, displaying severity, confidence, and suggested fixes. (#8402)
Prevents unexpected page scrolling when closing cell-value dialogs in enhanced Markdown tables while preserving keyboard focus. (#8407)

Breaking Changes

No known breaking changes.

Complete Change List

Features

Adds an opt-in one-time update bridge for macOS users to migrate from the Electron desktop app to the new Tauri shell. (#8392) by @yiliang114
Introduces detailed execution-specific outcome tracking for tool calls to distinguish between invocation success, failure, and cancellation. (#8180) by @doudouOUC
Introduces a structured, finding-centric view in Web Shell for review results, displaying severity, confidence, and suggested fixes alongside durable reports. (#8402) by @wenshao
Enables support for Qwen 3.8 reasoning effort levels by mapping existing effort flags to the provider-specific reasoning_effort parameter. (#8472) by @DragonnZhang

Bug Fixes

Prevents unexpected page scrolling when closing cell-value dialogs in enhanced Markdown tables while preserving keyboard focus. (#8407) by @carffuca
Clarifies write_file guidance to explicitly require reading a target file before writing when its existence or contents are unknown. (#8428) by @doudouOUC
Fixes the Windows desktop release smoke test by reading logs from the correct LocalAppData path used by the Tauri runtime. (#8381) by @yiliang114
Prevents unsafe replay of MCP tool calls after connection loss unless the tool is explicitly marked idempotent and the workspace is trusted. (#8387) by @doudouOUC
Stops infinite Goal mode retries after evidence catalog exhaustion by transitioning the Goal to a usage_limited state requiring user intervention. (#8430) by @qqqys
Prevents the review system from unnecessarily re-running agents for launches that were already successfully delivered, saving time and tokens. (#8466) by @wenshao
Fixes a failing unit test for MCP reconnection to ensure it correctly validates safe replay policies with trusted server configurations. (#8478) by @wenshao
Updates review workflow tests to correctly assert against externalized timeout variables, resolving failures in the Quality Checks job. (#8486) by @wenshao

Internal Changes

Removes the broken legacy scheduled PR triage workflow that previously failed to sync labels due to incorrect issue reference parsing. (#8434) by @wenshao
Reduces queue times for SDK Java tests by canceling stale runs on new commits and routing trusted Linux jobs to faster ECS runners. (#8441) by @yiliang114

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.4...v0.21.5

0.21.4 - 2026-08-03

Highlights

Web Shell is now a release-ready desktop app with native lifecycle management, single-instance behavior, and automatic updates. (#8132)
Web Shell history pagination now handles oversized turns gracefully and includes a retry button to reload failed pages without restarting sessions. (#8335)
Forked subagents are now isolated from sibling forks, ensuring each agent accesses only its own assigned instructions and directives. (#8344)
Chat compression now reuses the main conversation prompt cache on supported providers, reducing latency without executing tools. (#8339)
Fixed a Windows issue where pasting sensitive extension settings like API keys was ignored by enabling multi-character paste events. (#8342)
The /review skill now correctly follows the user's configured output language for Tip lines, saved reports, and review labels. (#8370)

Breaking Changes

No known breaking changes.

Complete Change List

Features

The /summary command now accepts an optional path argument to save project summaries to custom locations, automatically creating parent directories if needed. (#8116) by @qwen-code-dev-bot
Updated the review verifier to treat unverified findings as low-confidence confirmations rather than rejections, instructing it to check cited sources first. (#8346) by @wenshao
Added the qwen review drive command to poll for service readiness and verify completion facts instead of relying on fixed sleep delays. (#8349) by @wenshao
The daemon now resolves and reports its memory budget in /daemon/status to indicate proximity to exhaustion. (#8245) by @doudouOUC
Added the qwen review mock-provider command to record OpenAI-compatible requests as JSONL for testing against a faithful outside world simulation. (#8355) by @wenshao
The Web Shell is now packaged as a release-ready desktop app with native lifecycle management, single-instance behavior, and automatic updates. (#8132) by @yiliang114
feat(serve): make sub-session concurrency caps configurable (#8341) by @wenshao
Add a repo-hygiene skill and weekly workflow to automatically scan for and propose fixes for documentation and code quality issues. (#7908) by @ZijianZhang989
Adjust the automated PR review timeout based on change size, allowing up to 240 minutes for large pull requests exceeding 300 lines. (#8377) by @wenshao
Enable full Web Shell management for GitHub and GitLab channels, allowing users to configure tokens and policies without editing settings files. (#8310) by @OrbitZore
Adds the qwen review publish-assets command to host evidence images in a user-designated repository for embedding in PR review comments. (#8351) by @wenshao
Adds a built-in Java/JVM performance checklist to the review tool that flags correctness traps and JVM-cost defects in Java files. (#8379) by @wenshao
feat(ci): expand code owner pool for packages/core (#8347) by @wenshao
Introduced the experimental.sessionWorkflow setting to optionally enable Session Workflow features like Plan & Review mode and the Workflow DAG. (#8391) by @yiliang114
Updated non-interactive CLI /goal commands to use the Goal v3 runtime, ensuring consistent state persistence and improved streaming behavior. (#8324) by @qqqys
Added the memory.agentMaxTurns setting to configure turn limits for all managed memory agents, with 0 disabling the limit entirely. (#8171) by @tomatotomata

Bug Fixes

Web Shell history pagination now proceeds even when a single turn exceeds the page budget, and a retry button allows reloading failed history pages without restarting the session. (#8335) by @wenshao
The CI triage job now ensures the qwen CLI is installed before running actions to prevent redundant installations and fix fleet-wide failures on self-hosted runners. (#8337) by @yiliang114
Mutation testing now correctly marks mutants as inconclusive instead of survived when their collocated tests failed in the unmutated baseline, preventing false positive findings. (#8345) by @wenshao
Forked subagents can no longer see the directives of sibling forks launched in the same turn, ensuring each subagent only accesses its own assigned instructions. (#8344) by @harjothkhara
Todo behavior outside Session Workflow views is restored to ensure agent association is opt-in and historical dependency references do not incorrectly mark plans as blocked. (#8334) by @yiliang114
Fixed a flaky Java daemon test by accepting ERROR terminal states during session teardown races in addition to COMPLETE cancelled states. (#8354) by @wenshao
Enabled chat compression to reuse the main conversation prompt cache when using supported providers, reducing latency without executing tools. (#8339) by @DragonnZhang
Fixed an issue on Windows where pasting sensitive extension settings like API keys was ignored by allowing multi-character paste events. (#8342) by @DragonnZhang
GitHub channel inbound tasks are now restart-safe, ensuring interrupted work is recovered and pending comments are retried without rerunning agents. (#8306) by @yiliang114
Prevented malformed JSON tool responses with leaked protocol tags from reaching the UI by routing them through the existing retry path. (#8301) by @yiliang114
Fix CI failures on older branches by correctly calculating PR file changes instead of comparing against the base branch history. (#8372) by @wenshao
Ensure ECS runner fleets update automatically by triggering the reconciliation workflow whenever the updater logic changes on main. (#8373) by @yiliang114
Ensure Tip lines, saved reports, and review labels in the /review skill correctly follow the user's configured output language. (#8370) by @wenshao
Fixes qwen review run to correctly handle the QWEN_CODE_CLI environment variable when spawning child processes to ensure proper build stamping. (#8378) by @wenshao
Enables recovery of long response streams interrupted by socket closures by distinguishing delivered output from internal reasoning steps. (#7896) by @LHMQ878
Ensures Auto Recall hooks properly dispose of proxy dispatchers after retrieval completes to prevent resource leaks. (#8352) by @doudouOUC
Updates review reports to clearly distinguish between tests that failed and tests that produced no results when excluding mutants due to pre-existing issues. (#8374) by @wenshao
Downgrades findings to Suggestion severity when tests blamed on a pull request are confirmed to already fail on the merge base. (#8380) by @wenshao
Fixed /review to deprioritize Maven generated test sources, preventing them from crowding out production Java paths in rule headings. (#8405) by @wenshao

Documentation

docs: complete TUI keyboard shortcut reference (#8327) by @DragonnZhang
Updated the architecture overview to reflect Qwen Code as a multi-surface monorepo, detailing CLI, ACP, and daemon execution models. (#8325) by @DragonnZhang
Documentation now explains how to select models for chat compression and image generation, including defaults and provider requirements. (#8348) by @DragonnZhang
Update agent documentation to include the drive and mock-provider commands and clarify how verification tests should be structured. (#8369) by @wenshao

Internal Changes

ci: gate merges on deterministic no-AK E2E (#8313) by @yiliang114
Made the SDK permission control end-to-end tests deterministic by scripting model responses while retaining real tool and CLI interactions. (#8302) by @yiliang114
Automated ECS runner updates to the latest stable Qwen CLI version immediately after publish and prevented accidental downgrades to prerelease builds. (#8343) by @wenshao
Fixed a flaky test in the extension manager that previously caused intermittent CI failures due to clock racing. (#8362) by @wenshao
Fixed a drive test case on macOS by asserting a shell-invariant behavior instead of relying on specific bash version exit codes. (#8366) by @wenshao
Improves the stability of acp-cron integration tests by selecting notifications based on source metadata instead of wall-clock timestamps. (#8336) by @qwen-code-dev-bot

New Contributors

@LHMQ878 made their first contribution in #7896
@tomatotomata made their first contribution in #8171

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.3...v0.21.4

0.21.3 - 2026-08-01

Highlights

Enhanced /review command with test plan validation, measured failure attribution, and new verification lenses to improve code change analysis. (#8215, #8218, #8225, #8261, #8315)
Added support for project-level named fork profiles to define tool allowlists and prompt hints via markdown configuration files. (#8148)
Enabled workflow agents to surface approval requests for shell commands and edits directly to the parent interface with background run support. (#8240, #8303)
Fixed Anthropic API integration issues by sanitizing tool IDs, preventing duplicate result blocks, and ensuring correct message ordering. (#8164, #8165, #8163, #8040)
Improved Web Shell usability with artifact downloads, fixed text pasting visibility, and resolved session recap context switching errors. (#8234, #8230, #8262)
Added native terminal image rendering via a new display_image tool and restored right-click menus with URL hyperlink handling. (#8217, #8198)

Breaking Changes

No known breaking changes.

Complete Change List

Features

Lifecycle hooks now include optional source_type and source_id fields to help platforms distinguish sessions created through different entry points. (#8155) by @xurik
The review workflow now verifies cache identity consistency to prevent mismatches between cache writing and reading agents in GitHub Actions. (#8205) by @wenshao
Daemon channel adapter state is now isolated by workspace to safely support persistent browser authentication across multiple workspaces. (#8178) by @qqqys
Added the verify-capture.mjs script to generate evidence images for PR verification with a single command instead of a complex pipeline. (#8114) by @wenshao
Added generationConfig.cacheRetention settings to support Anthropic's extended 1-hour prompt-cache tier alongside the default 5-minute retention. (#8048) by @netbrah
The CI startup bundle check now fails if the CLI entry point is incorrectly hoisted into a shared chunk, preventing silent execution failures. (#8203) by @wenshao
Adds a transient 👀 emoji to GitLab notes while the agent is working and removes it upon completion. (#8119) by @OrbitZore
Normalizes tool-call telemetry data to ensure consistent status reporting and error classification across all consumers. (#8176) by @doudouOUC
Added a SessionDelete hook event triggered after successfully deleting a historical session via /delete or ACP. (#8059) by @xurik
Enabled POST /session to accept and validate a caller-supplied sessionId instead of silently ignoring it. (#7836) by @qwen-code-dev-bot
Allow safe slash commands like /status, /settings, and /help to run immediately while model responses are streaming. (#8130) by @DragonnZhang
Adds an optional host tool invocation guard that can deny execution before a tool runs, preventing calls when configured to do so. (#8032) by @chiga0
Adds OpenTelemetry GenAI streaming attributes to LLM spans, recording time-to-first-chunk for streaming requests while removing the private stream attribute. (#8150) by @doudouOUC
Running the /triage command on a pull request now triggers the sandboxed verify lane in parallel to start building and running tests immediately. (#8249) by @wenshao
The daemon default maximum session limit per workspace has increased from 20 to 32 to better support heavy multi-session workflows. (#8235) by @wenshao
The Web Shell transcript and review views now include a Download action for artifacts, allowing users to save HTML, Markdown, and workspace files locally. (#8234) by @ytahdn
Forked Dream workers now respect an opt-in gate that prevents writing to or editing files in top-level pinned directories during scheduled cleanup and workspace operations. (#7714) by @destire-mio
Added support for project-level named fork profiles that define tool allowlists and prompt hints via markdown files in the .qwen/fork-profiles directory. (#8148) by @destire-mio
Adds the skills.disabledLevels setting to hide bundled, project, user, or extension skills without affecting host-provided skills. (#8057) by @zhangxy-zju
Extends the /autofix skill to review and repair local working trees with explicit user confirmation while retaining existing GitHub Actions support. (#8121) by @yiliang114
Enabled workflow agents to surface approval requests for shell commands and edits directly to the parent interface. (#8240) by @qqqys
Enhanced the verify skill to measure suggested fixes and calibrate replay tests against live code mutations. (#8242) by @wenshao
Auto-generated Skills are now tracked for usage, marked stale after 30 days of inactivity, and archived after 90 days via a new project-scoped curator. (#7846) by @DragonnZhang
The /review command now validates Test Plan assertions in PR descriptions against the actual code changes and workspace state. (#8215) by @wenshao
Updated verification rules to explicitly check acceptance criteria and distinguish between empty results and unmeasured states. (#8295) by @wenshao
Added the foundational runtime supervisor for Agent View, enabling local session management and terminal stream bridging. (#7799) by @ZijianZhang989
Review output footers now include the Qwen Code CLI version to help trace findings to specific releases. (#8294) by @wenshao
Plain-text messages sent during an active turn now enter the running turn by default with visible queue management. (#8229) by @ytahdn
Added a Session Workflow view that visualizes plan execution, agent calls, and transcripts as a dependency graph. (#7580) by @yiliang114
Added the --compaction flag to the /model command to configure a dedicated model for chat compression. (#7818) by @Aleks-0
Connected the interactive TUI to the Goal v3 runtime with new lifecycle commands, status cards, and improved input queuing. (#8005) by @qqqys
Workflows now support an opt-in background run mode that returns a run ID and reports results via a dedicated channel. (#8303) by @qqqys
Added measured test-failure attribution to /review to accurately distinguish new failures from pre-existing ones. (#8218) by @wenshao
Added a display_image tool to the TUI that renders PNGs using native terminal features or chafa fallbacks with an 8 MiB limit. (#8217) by @DragonnZhang
Enhanced the /review command with adjudication rendering, workflow step extraction, and three new verification lenses. (#8225) by @wenshao
The /review command now borrows recall mechanics, a fix loop, and size-derived budgeting from Claude Code to improve finding surfacing and diff cost estimation. (#8315) by @wenshao
Review round ledgers are now embedded in the posted review body to persist across environments and enable the default effort level to recover previous round data. (#8255) by @wenshao
The review process now detects empty or collapsed diffs to stop early and recommends closing superseded branches while applying seven new verification lenses. (#8261) by @wenshao

Bug Fixes

Fixed an issue preventing the Web Shell from creating scratch workspaces on loopback daemons when bearer authentication is not configured. (#8204) by @wenshao
Updated setPermissionMode E2E tests to use the shared TEST_TIMEOUT constant, resolving intermittent timeouts on CI runners. (#8135) by @qwen-code-dev-bot
GitHub channel final replies are now queued and retried on restart if GitHub definitely rejected the initial write due to rate limits. (#8087) by @yiliang114
fix(core): Tolerate transcript timestamp drift (#7886) by @doudouOUC
Added Ctrl+Tab and Ctrl+Shift+Tab as alternative shortcuts for switching @ completion tabs to avoid conflicts with terminal word-movement bindings. (#8074) by @qwen-code-dev-bot
Added an uncaught exception handler to prevent silent crashes in VP mode by ensuring errors are logged and displayed on the terminal for debugging. (#8088) by @chiga0
Fixed compactString to strictly respect character limits even when the truncation marker itself exceeds the specified budget. (#7872) by @chinesepowered
Localized built-in agent type names in the Web Shell UI for Chinese users to prevent mixed-language display issues. (#8209) by @wenshao
Fixed the release workflow to anchor notes correctly and cap the release body length to prevent GitHub API validation errors. (#8199) by @wenshao
Fixes 400 errors for assistant-turn prefill and restores visible thinking output on Claude 4.6+ and 5.x models. (#8040) by @netbrah
Ensures tool results appear before other content in user messages to prevent Anthropic API rejections. (#8165) by @netbrah
Sanitizes tool IDs to meet Anthropic character requirements and prevents empty ID errors. (#8164) by @netbrah
Fixes model selector dropdown truncation by adapting width to long model names and adding hover tooltips. (#8220) by @wenshao
Stabilizes a flaky integration test for async SDK MCP tool handlers by asserting on deterministic tool results. (#8223) by @qwen-code-dev-bot
Fixed a test isolation issue to ensure temporary directories for worktree symlink tests are unique per run and fully cleaned up. (#8228) by @wenshao
Fixed memory usage display to correctly show units like MB or GB when rounded values reach the next boundary. (#7871) by @chinesepowered
Prevented subagents from asking users interactive questions to avoid indefinite waiting during background tasks. (#8219) by @DragonnZhang
Fixed command splitting to correctly treat the bare & operator as a command boundary for permission checks. (#7864) by @chinesepowered
Added Option+V as a macOS shortcut for pasting clipboard images alongside the existing Ctrl+V binding. (#8120) by @qwen-code-dev-bot
Fixes a bug where mouse wheel events could scroll the background viewport briefly while a dialog was opening. (#8089) by @kagura-agent
Fixes a CI failure where conflicting color environment variables caused extra warning output that broke PNG capture tests. (#8236) by @ytahdn
Adds workspace-qualified memory operations and a new CLI option to isolate managed project memory by selected workspace. (#8056) by @qqqys
Fixes the Web Shell to ensure pasted plain text remains fully visible and editable in the composer regardless of length. (#8230) by @ytahdn
Qwen Autofix now resolves review threads only when tied to a verified commit, preventing resolution if the PR head changes or results are ambiguous. (#8231) by @wenshao
Autofix now allows up to ten rounds of suggestion-level changes before restricting further edits to critical findings, failed checks, or base conflicts. (#8247) by @wenshao
The system now recovers XML-style tool calls embedded in plain text model responses, preventing agent loops from breaking during long sessions. (#8037) by @qwen-code-dev-bot
Upgraded external-context dependencies to MCP SDK 1.30.0 and patched Hono versions to resolve security advisories while maintaining Node 18 compatibility for mobile packages. (#8206) by @doudouOUC
Fixed an issue where duplicate tool result blocks sharing the same ID caused Anthropic API requests to fail with a 400 error by ensuring only the first result is retained. (#8163) by @netbrah
Background task polling in web-shell now silently handles transient network failures to prevent repetitive error notices while still reporting persistent hard failures. (#7923) by @han-dreamer
Channel ACP bridges now automatically recover after long host sleep periods or event-loop stalls without requiring a full messaging adapter reconnection. (#8211) by @yiliang114
Fixed an issue where raw SGR mouse escape sequences appeared in the input box at startup by correctly filtering them during early input capture. (#8268) by @qwen-code-dev-bot
Stabilizes the thinking block height to prevent layout shifts and replaces the full-screen transcript overlay with an inline Ctrl+O toggle. (#8077) by @chiga0
Completes image @ reference routing across TUI, ACP, and non-interactive CLI entry points with consistent security validation. (#7206) by @yiliang114
Fixes flaky ACP cron integration tests by using QWEN_CODE_TEST_CRON_FAST to trigger jobs after a 5-second delay instead of waiting for real time. (#8243) by @qwen-code-dev-bot
Prevents stale thinking blocks from appearing by removing them when their associated tool calls are orphaned or contain empty text. (#8166) by @netbrah
Compacts the advanced table toolbar in narrow message areas by hiding labels and statistics while keeping essential actions visible. (#8264) by @ytahdn
Fixes the mobile composer display after resuming by removing broken WebGL overlays and limiting animated placeholders to new sessions. (#8263) by @ytahdn
Fixed test suite failures on Windows by handling path separators, line endings, and temporary directories correctly. (#8050) by @yiliang114
Rendered verification reports as formatted Markdown instead of escaped raw text to improve readability in comments. (#8147) by @wenshao
Prevented automatic session recaps from appearing in the wrong Web Shell session when switching contexts rapidly. (#8262) by @wenshao
Corrected re-run summary messages to accurately describe existing bot reviews that deferred without voting. (#8273) by @wenshao
Fixed self-hosted runner failures caused by file permission errors left behind by previous containerized jobs. (#8115) by @qwen-code-dev-bot
Fixed an issue in the Web Shell where duplicate permission buttons with identical labels appeared in the approval dialog. (#8250) by @qwen-code-dev-bot
Fixed the notices generator to correctly include license text for packages installed at multiple distinct versions within the dependency tree. (#8272) by @yiliang114
QQ Bot group messages now display the full sender openid in prompts when mention support is enabled to improve model context. (#8233) by @Eric-GoodBoy-Tech
Fixed AutoFix timeouts by explicitly setting the primary agent budget to align with the enclosing step's time limits. (#8257) by @wenshao
Restored right-click menus and URL clicks by adding the ui.mouseTracking setting and implementing application-level hyperlink handling. (#8198) by @qwen-code-dev-bot
Replaced hard truncation for long tool outputs with a collapsible view that preserves full content and improves scrolling. (#8251) by @destire-mio

Performance

File search crawling is now faster by caching directory ignore lookups to avoid redundant checks for sibling files. (#8253) by @dexhunter

Documentation

Adds a runnable Python example demonstrating how to implement an external judgment service for PreToolUse HTTP hooks. (#8202) by @babyblueviper1
Reorganized Web Shell design documents into a dedicated directory to improve navigation and naming consistency. (#8304) by @water-in-stone
Documentation now covers the /learn command, Skill discovery sources, and clarifies that personal and project Skill edits hot-reload without restarting unless in bare mode. (#8298) by @DragonnZhang

Internal Changes

Simplified plugin manager button labels in the Web Shell to Add, Upload, and Create for a more concise interface in English and Chinese. (#8174) by @ytahdn
Refactors internal workflow execution ownership to improve session management and cancellation handling. (#8140) by @qqqys
Migrates the acp-cron integration test to use a fake OpenAI server for deterministic responses and isolates agent home directories. (#8082) by @qwen-code-dev-bot
Subagent execution E2E tests now inherit the suite's default timeout instead of a restrictive 60-second limit, preventing failures during multi-turn model workflows. (#8246) by @qwen-code-dev-bot
Two flaky SDK E2E cases relying on specific live model tool choices have been skipped to stabilize the main branch test suite. (#8259) by @qwen-code-dev-bot
No user-facing changes in this release. (#7967) by @doudouOUC
No user-facing changes; this release refactors internal CLI dependencies to improve code organization. (#8141) by @yiliang114
Fixed a flaky E2E test for abort signals in tool permission callbacks to ensure deterministic execution. (#8300) by @qwen-code-dev-bot
Fixed a test harness argument order to correctly pass the locale parameter, resolving failing Chinese localization checks. (#8314) by @yiliang114
Fixed a silent startup failure for the ACP process when the extension is loaded from a symlinked directory. (#8309) by @Wchoi189
SDK orchestration end-to-end tests are now deterministic by using scripted local responses, reducing test cases from 22 to 8 while maintaining core coverage. (#8312) by @yiliang114

New Contributors

@babyblueviper1 made their first contribution in #8202
@Wchoi189 made their first contribution in #8309

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.2...v0.21.3

0.21.2 - 2026-07-31

Highlights

Autofix now defers lower-severity suggestions after five rounds and posts visible notices when refusing to proceed due to round limits. (#7913, #8067)
Added an opt-in Auto Recall profile that automatically searches external context with built-in security limits. (#7877)
Enhanced the /verify command with increased time budgets, evidence screenshots, and new maintainer verification techniques. (#8010, #8014, #8016)
Web Shell now supports contextual task panels, theme-aware visuals, and correctly handles artifact previews and session states. (#7929, #8098, #8078, #8106)
GitHub channels now emit exactly one final comment per event and display eyes reactions to indicate active agent processing. (#8033, #8061)
Added APIs and UI controls to view, approve, and revoke channel pairing approvals within specific workspaces. (#8045, #8081)

Breaking Changes

No known breaking changes.

Complete Change List

Features

Autofix now defers lower-severity suggestions after five change rounds, allowing only critical findings and failed checks to drive further code modifications. (#7913) by @qqqys
Goal v3 is now connected to the turn engine with deterministic permit handling, ensuring runtime continuations do not consume session or recursive turn budgets. (#7895) by @qqqys
Static image reads now return a canonical, auto-oriented JPEG overview with source dimensions to support reliable zooming within shared resource budgets. (#7911) by @qqqys
The triage system now mechanically triggers the 2b-bis sandboxed-lane recommendation when a Stage 2 draft explicitly contains a not-verified sentence. (#7965) by @wenshao
Adds an opt-in Auto Recall profile that automatically searches external context when you submit a prompt, with built-in security limits. (#7877) by @doudouOUC
Updates WebShell to use a shared renderer for streaming charts, ensuring canonical markdown-chart blocks work without extra host configuration. (#7916) by @zhangxy-zju
Improves ripgrep reliability by retrying failed searches and correctly distinguishing between no matches found and incomplete search results. (#7888) by @water-in-stone
feat(channels): add DingTalk interactive cards (#6930) by @BenGuanRan
feat(web-shell): refine advanced table controls (#7999) by @ytahdn
Updated triage comments to lead with a clear pass or fail verdict and display English by default with Chinese translations folded. (#7974) by @wenshao
feat(triage): run external /verify on ECS behind a workspace wipe (#7985) by @wenshao
Added the security.allowPrivateNetworkHooks setting to allow HTTP hooks to access private network addresses in trusted platform-managed environments. (#7968) by @xurik
Added a customizable action slot to split pane headers that automatically overflows into a menu when space is limited. (#7808) by @samuelhsin
Added a GitLab polling channel adapter that converts GitLab todos into inbound messages for automated processing. (#7862) by @OrbitZore
Added APIs and SDK helpers to list approved pairing senders and revoke access within a specific workspace. (#8045) by @qqqys
Introduced an optional reasonFilter setting for GitHub channels to skip unwanted notification reasons and prevent unintended agent actions. (#8031) by @xianjianlf2
Review approvals with zero findings on non-trivial diffs now explicitly disclose low signal status in the verdict line. (#7987) by @wenshao
Added a threshold setting to automatically preload deferred tools into the context window when their total size fits within limits. (#7922) by @DragonnZhang
feat(review): add review run — headless review with a machine-readable verdict (#7983) by @wenshao
Enhanced the verify-pr skill with seven new techniques from maintainer verification rounds to improve change validation. (#8010) by @wenshao
Increased the /verify agent budget from 25 to 120 minutes to allow comprehensive verification matching local maintainer rounds. (#8014) by @wenshao
Added automatic milestone summaries every tenth takeover round to provide visibility into long-running fix attempts. (#8046) by @wenshao
Adds a temporary eyes reaction to GitHub issues and comments while an agent turn is running to indicate active processing. (#8061) by @yiliang114
Reduces scan delays by skipping inspection of idle autofix candidates to prioritize fresh engagements. (#8049) by @wenshao
The /verify command now successfully captures and includes evidence screenshots in its reports. (#8016) by @wenshao
Ensures maintainer feedback containing specific phrases is not deferred in Critical-only mode by implementing a per-source feedback budget. (#8071) by @wenshao
Tags UserPromptSubmit hook context in model requests and records display provenance to ensure session replays accurately reflect what the model saw. (#7956) by @zjgzx1988
Adds byte-cursor paging to large text file reads across HTTP, ACP, and SDK surfaces to efficiently retrieve subsequent content without rescanning. (#8002) by @doudouOUC
The qwen review test-efficacy command now detects unprotected safety statements using statement-level mutation probes that delete single lines to verify test coverage. (#8020) by @wenshao
feat(web-shell): add contextual task panels (#7929) by @ytahdn
Subagents using the fork type now support an optional fork_tools allowlist to restrict execution to specific canonical tool names or MCP server patterns. (#8066) by @destire-mio
The Channel editor now allows operators to view, approve, and revoke pairing approvals with explicit confirmation dialogs distinct from the configured allowlist. (#8081) by @qqqys
Enhanced Web Shell visuals with theme-aware composer highlights, interactive dot animations for empty sessions, and a new typewriter effect for placeholders. (#8098) by @ytahdn

Bug Fixes

Interactive end-to-end tests now scale read-then-write waits with the environment timeout instead of using a fixed 15-second limit to prevent flakiness. (#7943) by @qwen-code-dev-bot
CI now cleans stale .qwen/ directories before checkout to prevent permission denied errors caused by restrictive file modes left by previous jobs. (#7977) by @qwen-code-dev-bot
CI verify jobs now correctly restore write permissions on the .qwen tree before returning workspace ownership to prevent checkout failures on self-hosted runners. (#7992) by @yiliang114
Fixes an issue where ECS runners on specific hosts failed to update the Qwen binary to the requested version. (#8000) by @yiliang114
Fixes directory listing to clearly distinguish between folders that are empty and those that were skipped due to item budget limits. (#7868) by @chinesepowered
Fixes a bug where code blocks in Feishu messages could exceed size limits by incorrectly calculating space needed for closing fences. (#7850) by @chinesepowered
Ensures standalone WebShell URLs preserve authentication tokens and deployment base paths when navigating between sessions. (#7926) by @ytahdn
fix(web-shell): polish Channel pairing requests (#7997) by @qqqys
fix(cli): correct hardware cursor off-by-one in fullscreen mode (#7998) by @chiga0
fix(cli): prevent SGR mouse events from being swallowed as paste on Windows (#7988) by @chiga0
fix(serve): allow bounded reads of large text files (#7947) by @doudouOUC
fix(web-shell): prefer artifact type metadata in cards (#7973) by @ytahdn
fix(web-shell): reduce composer input latency (#8015) by @ytahdn
Fixed session history pagination to prevent failures when loading earlier records by using stable record boundaries instead of opaque cursors. (#8001) by @ytahdn
Fixed release note generation to correctly handle cases where the previous release tag diverges from the current release target. (#7970) by @qwen-code-dev-bot
Increased the browser daemon SDK bundle size budget to 177KB to accommodate recent feature additions and restore successful builds. (#8024) by @wenshao
Fixed keyboard handling in Kitty protocol terminals to correctly map the Command or Super key modifier to the meta flag for shortcuts. (#7996) by @chiga0
Improved diagnostic messages to distinguish between a missing channel worker and a worker that is intentionally draining during workspace reloads. (#7932) by @destire-mio
Added preflight disk space checks to the build-test command to prevent installation and build failures caused by insufficient storage. (#7986) by @wenshao
Fixed Ctrl+Shift+C to correctly copy text in the terminal instead of triggering quit or clear actions. (#8011) by @chiga0
Artifact file writes are now automatically recorded upon success, eliminating the need for a separate manual registration step. (#7914) by @chiga0
Fixed an issue where pressing Enter during MCP prompt completion incorrectly treated optional parameters as mandatory. (#7995) by @qwen-code-dev-bot
Disabled native cron jobs in daemon-managed Channel sessions to ensure scheduled tasks are correctly tracked and delivered. (#8034) by @qqqys
GitHub channels now fail startup with guidance if configured with a self-only operator allowlist that cannot receive usable notifications. (#8055) by @zjunothing
Removed a schema combinator from the send_message tool to fix compatibility with Anthropic models that previously rejected the request. (#7989) by @netbrah
Fixed a terminal resize issue that caused excessive scrolling and history re-rendering during panel toggle animations. (#8009) by @chiga0
Forked background agents now correctly refresh tool capabilities and system instructions when resumed while preserving conversation history. (#7927) by @DragonnZhang
GitHub channel publications now emit exactly one final comment per event, preventing duplicate or intermediate outputs while recording detailed audit metadata for every attempt. (#8033) by @yiliang114
The review-pr job now restores workspace ownership before checkout to prevent permission denied errors on reused self-hosted runners. (#8062) by @yiliang114
Preview version generation now detects existing stable releases and bumps the patch number to prevent npm publishing conflicts for channel packages. (#7978) by @yiliang114
Daemon-managed session writers now use an integrity-protected handoff protocol with sealed locks to ensure safe ownership transfer during managed shutdowns. (#7976) by @doudouOUC
Transport stream retries are now allowed during the thinking-only phase by distinguishing non-thought content chunks from intermediate processing steps. (#7938) by @ComplexSimply
The reasonFilter setting now validates input arrays, rejects unknown reasons, and treats empty arrays as unset to ensure reliable notification routing. (#8035) by @yiliang114
Fixed an issue where CJK-heavy text could cause output token limits to be exceeded, preventing API errors during generation. (#7963) by @zambalee
Ensured active Todo lists persist correctly across tool turns to maintain context without interfering with user input priority. (#7919) by @yiliang114
Fixed environment variable propagation to ensure skill subprocesses use the correct CLI build and model configuration. (#7993) by @wenshao
Fixed the autofix loop to properly count timeouts toward failure limits and corrected status messages during handoffs. (#8044) by @wenshao
Fixes takeover acknowledgments by posting confirmations directly from the command to prevent event loss and long delays. (#8043) by @wenshao
Stabilizes web shell table controls by fixing column sizing, frozen-column shadows, and scroll position during row expansion. (#8041) by @ytahdn
Makes the interactive read-then-write integration test deterministic by using a fake server instead of a live LLM. (#8064) by @qwen-code-dev-bot
Adds a visible Queued on server status in the web shell for messages waiting in the daemon queue before execution. (#8065) by @wenshao
Fixes web shell artifact previews by enabling scripts in sandboxed iframes and correctly handling binary image files. (#8078) by @ytahdn
Optimized the Comment Attachment Guard to skip unnecessary runner allocation, reducing queue congestion for hosted jobs. (#8095) by @wenshao
Web Shell now correctly translates legacy /skills invocations with arguments into direct skill commands. (#8103) by @ytahdn
Updated the verify-pr agent to account for evidence capture costs within its execution budget to ensure images are generated. (#8104) by @wenshao
Web Shell now displays a clear failure status and Retry action for prompts that fail before daemon admission. (#8106) by @ytahdn
Added retry capability and in-progress states to Web Shell question submissions to prevent silent failures. (#8096) by @ytahdn
Fixed Web Shell to correctly distinguish and label one-time tool approvals that also switch the session to Default mode. (#8099) by @ytahdn
Autofix now posts visible notices to PRs when refusing to proceed due to round-cap limits instead of logging only. (#8067) by @wenshao
Prevents loss of verified autofix results by merging concurrent pushes and retrying when the PR head moves during a long agent run. (#8042) by @wenshao
Properly aborts active dynamic workflow runs during session shutdown to prevent orphaned dispatches and unnecessary token usage. (#8107) by @qqqys
Stabilizes the setModel E2E test by detecting turn completion via result messages instead of counting assistant messages. (#8075) by @qwen-code-dev-bot
Increases the per-turn model response timeout in multi-model E2E tests from 30s to 60s to reduce flakiness on CI. (#8111) by @qwen-code-dev-bot
Prevents repeated workspace skill rescans by making status reads side-effect free and implementing generation-guarded caching with ETag support. (#8080) by @doudouOUC
Daemon session maintenance now uses a writer-lease protocol to isolate transcript updates and prevent conflicts during session deletion, archiving, and cleanup operations. (#7975) by @doudouOUC
Fixed a build failure by routing side-task rollback operations through the workspace session service to resolve an unbound identifier introduced by recent maintenance changes. (#8144) by @wenshao
Web Shell worktree sessions now consistently execute commands in the session's effective working directory and defer MCP discovery until trusted relocation completes. (#8068) by @wenshao
Permission-control E2E tests now use shared response timeouts to prevent false failures caused by slow model responses during dynamic permission mode changes. (#8149) by @wenshao
Fixed a flaky end-to-end test for auto-edit permissions to ensure deterministic results without relying on live model behavior. (#8154) by @wenshao
Fixed session details menus overflowing on narrow layouts and added a keyboard-accessible action to copy the full session ID. (#8127) by @dreamWB

Internal Changes

The asyncGenerator canUseTool test now validates tool-call arguments instead of strict file content equality to stabilize assertions against model wording variations. (#7939) by @qwen-code-dev-bot
Adds an isolated CI pipeline to automatically run SWE-bench benchmarks on stable Qwen Code releases. (#7656) by @DennisYu07
Migrated flaky end-to-end tests to a deterministic fake server to eliminate failures caused by model output variance and latency. (#7934) by @yiliang114
Expanded regression tests now verify session history pagination behavior, including active record tracking and edge cases for page-size parsing. (#7907) by @PratikWayase
Opt-in daemon benchmarks now measure immediate prompt dispatch stages, including HTTP acceptance, message echo, and queue-wait durations. (#7994) by @doudouOUC
Stabilizes a flaky E2E test case for subagent delegation by refining prompt instructions without changing production code. (#8073) by @qwen-code-dev-bot

New Contributors

@xianjianlf2 made their first contribution in #8031
@zambalee made their first contribution in #7963

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.1...v0.21.2

0.21.1 - 2026-07-28

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(core): Align GenAI content telemetry fields (#7667) by @doudouOUC
feat(core): add Goal v3 runtime orchestration (#7664) by @qqqys
feat(triage): stop in-agent CI polling, finalize evidence and approval after CI completes (#7693) by @wenshao
feat(serve): expose workspace Channel management API (#7637) by @qqqys
feat(web-shell): add read-only GitHub pull requests panel (#7683) by @wenshao
Adds a retrieval-only context_search tool for external corpora, configured by administrators without automatic recall or write capabilities. (#7586) by @doudouOUC
Introduces the qwen review comment-status subcommand to quickly triage existing inline comments and reduce API calls during review runs. (#7690) by @wenshao
Enforces a strict write contract for review submissions and adds a tripwire to detect and flag any bypass attempts via terminal commands. (#7691) by @wenshao
Enables hot-reloading of workspace trust changes in the running daemon, applying new policies immediately without requiring a process restart. (#7268) by @doudouOUC
Adds retryInitialDelayMs and retryMaxDelayMs settings to configure stream-side rate-limit retry delays for better provider compatibility. (#7674) by @jay666mnj
Updates the /stats command and Session tab to display generation timing metrics including TTFT, duration, output tokens, and TPS. (#7677) by @destire-mio
Adds a GitHub channel adapter that polls notifications and responds to mentions by posting comments using a signal-based wakeup architecture. (#7632) by @OrbitZore
Adds optional retryInitialDelayMs and retryMaxDelayMs settings to configure SSE stream rate-limit retry delays for specific provider quota windows. (#7666) by @hogeheer499-commits
Introduces an overridable default-disabled state for skills, allowing soft defaults that yield to explicit enablement while hard disables remain absolute. (#7357) by @samuelhsin
feat(webui): add workspace Channel management hook (#7728) by @qqqys
feat(review): redefine medium effort as a balanced verified pass (#7733) by @wenshao
feat(review): mutation-test the tests in the test-coverage pass (Agent 5) (#7735) by @wenshao
feat(review): borrow maintainer review lenses into the agent briefs (#7736) by @wenshao
feat(web-shell): persist terminal history pagination errors (#7709) by @PratikWayase
feat(triage): add sandboxed /verify deep-verification lane (#7710) by @wenshao
feat(review): give the verifier a probe capability — run a runnable claim, don't just read it (#7756) by @wenshao
feat(core): add model grade selection for subagent spawn (#7685) (#7702) by @yiliang114
feat(dingtalk): support outbound image delivery (#7698) by @qqqys
feat(web-shell): allow widening sidebar up to half the window width (#7778) by @wenshao
feat(core): add Goal v3 worker tools (#7729) by @qqqys
feat(review): script-lint as a deterministic gate — compose-review reads the report, no agent (#7751) by @wenshao
feat(web-shell): add monitor task details (#7817) by @ytahdn
feat(web-shell): Scope voice to composer workspace (#7754) by @doudouOUC
feat(hooks): Add submitted prompt provenance (#7762) by @doudouOUC
feat(autofix): retry deterministic rejection once (#7796) by @qqqys
feat(web-shell): add Channel management page (#7793) by @qqqys
feat(acp): add session-scoped runtime MCP (#7847) by @qqqys
feat(core): persist and replay Goal v3 state (#7815) by @qqqys
feat(core): add full-resolution image zoom tool (#7809) by @qqqys
feat(web-shell): add composer footer renderer (#7856) by @dreamWB
feat: Gate session writer lease behind opt-in (#7894) by @doudouOUC
feat(ci): Deduplicate E2E failure issues by commenting on existing issue (#7792) by @yiliang114
feat(triage): add revert-pattern high-risk path detection (#7414) by @yiliang114
feat(web-shell): add native workspace folder picker (#7849) by @qqqys
feat(web-shell): add Channel configuration flows (#7893) by @qqqys
feat(core): Add ARMS session user ID (#7921) by @doudouOUC
feat(channels): expose loop tools in daemon sessions (#7891) by @qqqys
feat(web-shell): honor voice hold mode (#7839) by @callmeYe
feat(web-shell): manage Channel pairing requests (#7909) by @qqqys
feat(channels): dispatch GitHub notifications by reason (#7826) by @yiliang114
feat(web-shell): add git branch picker, commit dialog, and create PR flow (#7731) by @wenshao
feat(triage): surface the sandboxed lanes on the CI path (#7917) by @wenshao
feat(web-shell): suggest BTW for side questions (#7935) by @carffuca
feat(triage): make the verify report readable in Chinese (#7918) by @wenshao

Bug Fixes

fix(cli): measure insight days and hours in local time everywhere (#7670) by @ComplexSimply
fix(ci): don't fail triage cleanup when there is nothing to clean (#7688) by @wenshao
fix(ci): update qwen in the runner's active npm prefix (#7689) by @yiliang114
fix(acp): sweep review worktree leases at the end of each prompt turn (#7694) by @wenshao
fix(core): write a status sidecar so models stop misreading quiet background shells (#7669) by @ComplexSimply
fix(core): exit_plan_mode returns guidance error from execute() instead of permission deny (#7673) by @qwen-code-dev-bot
fix(core): tell the model when the user manually exits plan mode (#7682) by @zjunothing
fix(core): give plugins from the same repository distinct extension ids (#7676) by @zjunothing
fix(core): allow reading saved plan files without a confirmation prompt (#7678) by @zjunothing
fix(cli): clear stale retry error when agent auto-recovers mid-turn (#7681) by @qwen-code-dev-bot
fix(mcp): harden OAuth callback handling (#7510) by @gauravyad86
fix(web-shell): add :focus-visible outline to GitHub PR list rows (#7704) by @wenshao
fix(triage): resolve stage comment ids by marker at patch time, harden model injection (#7703) by @wenshao
fix(triage): resolve finalize PRs from the open-PR list, not the commit association (#7706) by @wenshao
Fixes inline math recognition to correctly handle single-character expressions, escaped dollars, and code spans across prose and tables. (#7701) by @CubeLander
Fixes desktop file size display to correctly render terabyte and larger values instead of showing undefined for huge files. (#7623) by @chinesepowered
Ensures const-derived enums are correctly stringified during OpenAPI 3.0 conversion to meet strict schema requirements. (#7547) by @chinesepowered
Fixes schema conversion to properly handle nested objects even when property names match JSON Schema constraint keywords like maximum. (#7546) by @chinesepowered
Silences xterm.js parser diagnostic logs in headless shell terminals to prevent error messages from leaking when commands emit invalid ANSI escape sequences. (#7663) by @mvanhorn
Hardens the review skill by declaring the optional host argument in CommentStatusArgs and improving error handling for authentication or network failures. (#7708) by @wenshao
Ensures StopFailure hooks fire correctly when loop detection triggers an early return during the streaming loop instead of only on API errors. (#7592) by @qwen-code-dev-bot
Enables the Changes and History dialogs for worktree sessions in the Web Shell by threading the correct git working directory through the entire stack. (#7695) by @wenshao
Strictly parses the heatmapDays query parameter to reject malformed values like negative numbers or decimals, falling back to the default instead of clamping invalid input. (#7218) by @VectorPeak
Raises default live journal caps to 10,000 events and 8 MiB while exposing --max-journal-events and --max-journal-bytes flags for configuration. (#7715) by @wenshao
Allows pinning and grouping secondary workspace sessions in the Web Shell sidebar without requiring the workspace to be locked first. (#7716) by @wenshao
Corrects the review submit-gate audit to avoid falsely claiming a bypass when detecting valid same-account writes from other sources like triage bots. (#7718) by @wenshao
Fixes QQ Bot session restoration by returning the input session ID from AcpBridge and ensuring session patching runs even when validation fails. (#7722) by @Eric-GoodBoy-Tech
fix(core): prevent updates to extension-provided agents (#7245) by @destire-mio
fix(core): fall back to system rg when bundled ripgrep cannot run (#7203) by @harjothkhara
fix(core): avoid required tools in DashScope thinking (#7661) by @hogeheer499-commits
fix(channels): use username as senderId in GitHub adapter to fix allowlist gate (#7727) by @OrbitZore
fix(web-shell): parse 256-color and truecolor SGR sequences in parseAnsi (#7620) by @chinesepowered
fix(triage): only the bot's own approval counts as already approved (#7737) by @wenshao
fix(core): stop humanReadableCron naming intervals that never happen (#7529) by @chinesepowered
fix(cli): keep IME cursor aligned after footer updates (#7711) by @water-in-stone
fix(core): redact the plan argument from history after an approved exit_plan_mode (#7197) by @zjunothing
fix(review): correct the borrowed lenses and vacuous-test severity (follow-up to #7735/#7736) (#7746) by @wenshao
fix(core): reliably deliver manual plan-exit notices (#7744) by @doudouOUC
fix(review): recover bilingual register from the live PR when the plan omits the Han flag (#7739) by @wenshao
fix(cli): complete repeated skill slash commands (#7720) by @Sparkle6979
fix(cli): handle escaped dollars around inline math (#7741) by @CubeLander
fix(cli): show tool descriptions in multi-tool compact summaries (#7589) by @ovochouovo
fix(ci): rename triage status marker to avoid duplicate-guard collision (#7723) by @yiliang114
fix(core): route id-less continuation chunks to a colliding tool-call opener's slot (#6981) by @he-yufeng
fix(autofix): answer every review thread, resolve the ones actually fixed (#7758) by @wenshao
fix(core): treat properties as a name map in toOpenAPI30 (#7760) by @chinesepowered
fix(core): keep leading whitespace in gitignore patterns (#7763) by @chinesepowered
fix(core): stop trailing slash from anchoring nested gitignore patterns (#7764) by @chinesepowered
fix(core): keep the model name when a model id carries a variant tag (#7766) by @chinesepowered
fix(weixin): create the account credential file already private (#7726) by @chinesepowered
fix(core): stop rewriting backslash escapes in gitignore patterns (#7765) by @chinesepowered
fix(core): scope the timeout veto to the fragment it appears in (#7776) by @chinesepowered
fix(core): decline sed patterns whose bracket expression starts with ] (#7775) by @chinesepowered
fix(web-shell): stabilize mobile voice input (#7806) by @ytahdn
fix(test): give every E2E case a clean directory again (#7811) by @wenshao
fix(web-shell): allow shell commands in new tasks without a session (#7724) by @wenshao
fix(triage): carry the /verify lane's hardening across to /tmux (#7753) by @wenshao
fix(web-shell): render task notifications as system messages (#7822) by @ytahdn
fix(ci): add default bash shell to container jobs in qwen-triage (#7838) by @qwen-code-dev-bot
fix(web-shell): preserve pasted text in composer (#7824) by @ytahdn
fix(ci): add git safe.directory for container jobs (#7843) by @qwen-code-dev-bot
fix(ci): add --init to container jobs to reap zombie processes (#7848) by @qwen-code-dev-bot
fix(core): wait for output stream flush before settling background shells (#7833) by @ComplexSimply
fix(scripts): retry model calls and surface degraded release notes (#7535) by @he-yufeng
fix(ci): prevent worktree cleanup from failing the verify job (#7857) by @qwen-code-dev-bot
fix(release): publish all channel packages, not just channel-base (#7845) by @yiliang114
fix(scripts): harden retry classification and preserve deadline error context (#7854) by @yiliang114
fix(core): fast-fail permanent quota-exhaustion 429s instead of silent retry (#7842) by @yiliang114
fix(web-shell): isolate history and session drafts (#7810) by @ytahdn
fix(triage): retry a transient npm ci before blaming the PR for it (#7884) by @wenshao
fix(webui): fall back to history_truncated marker recordId for transcript pagination anchor (#7829) by @wenshao
fix(review): give the review retry the remaining time budget (#7852) by @wenshao
fix(integration): configure Docker sandbox networking for submitted-prompt provenance test (#7879) (#7881) by @qwen-code-dev-bot
fix(cli): report a genuine $0.00 cost instead of N/A (#7784) by @chinesepowered
fix(core): reject socks5h and socks4a proxy URLs (#7786) by @chinesepowered
fix(core): correct the character classes in checkContentLoop (#7788) by @chinesepowered
fix(web-shell): make /copy with a bare index work (#7789) by @chinesepowered
fix(core): decline combined sed flags where -i is not last (#7790) by @chinesepowered
fix(core): pass the Grep pattern behind -e so a leading dash is not an option (#7863) by @chinesepowered
fix(core): cap a bare Error's message like every other getErrorMessage path (#7865) by @chinesepowered
fix(cli): make wrapToVisualLines count zero-width characters like its sibling (#7873) by @chinesepowered
fix(core): charge the separator and ellipsis to the preview budget (#7874) by @chinesepowered
fix(cli): do not count a partial trailing line when re-opening a split fence (#7875) by @chinesepowered
fix(cli): make /copy select the code block (#7883) by @chinesepowered
fix(test): Restore first-output benchmark measurement validity and correct its artifact schema (#7820) by @doudouOUC
fix(daemon): harden Todo Stop Guard continuations (#7821) by @doudouOUC
fix(core): read the stash reflog from the common git dir (#7774) by @chinesepowered
fix(core): keep Draft 4 boolean exclusive bounds in toOpenAPI30 (#7782) by @chinesepowered
fix(core): apply maxDepth to flat-format memory imports (#7851) by @chinesepowered
fix(core): render a thought part's reasoning instead of the boolean flag (#7866) by @chinesepowered
fix(core): bridge tool-result images for text-only models (#7484) by @LaZzyMan
fix(cli): patch ink to clear staticNode on indirect subtree removal (#7816) by @chiga0
fix(core): auto-retry transient network errors during API calls (#7898) by @chiga0
fix(cli): hide stale sticky todos from previous turns (#7900) by @chiga0
fix(serve): Release managed session writer locks on shutdown (#7812) by @doudouOUC
fix(cli): add polling fallback for git branch name display (#7830) by @qwen-code-dev-bot
fix(cli): remove redundant 'Read file' prefix from @mention tool card (#7902) by @qwen-code-dev-bot
fix(safe-mode): preserve caller-supplied top-tier MCP servers (#7827) by @VitaliBabkin
fix(ci): keep the post-merge E2E signal on main alive (#7795) by @wenshao
fix(core): short-circuit the flush wait when the output stream cannot flush (#7905) by @ComplexSimply
fix(core): track quotes inside a command substitution in splitCommands (#7870) by @chinesepowered
fix(core): count the per-server and per-tool always-allow outcomes as approvals (#7869) by @chinesepowered
fix(web-shell): report intended workspace to host when starting a new chat (#7910) by @wenshao
fix(cli): default to virtualized terminal history (#5738) by @ZevGit
fix(ci): restore workspace ownership in cleanup to prevent EACCES (#7931) by @qwen-code-dev-bot
fix(review): recover the resolved effort when --effort is not re-threaded (#7855) by @wenshao
fix(scripts): slim release-note model prompts and log request timing (#7941) by @yiliang114
fix(release): pin channel-base dep to exact version during release bump (#7953) by @yiliang114
fix(triage): make the build-process guard diagnosable and zombie-aware (#7858) by @wenshao
fix(ci): give each job its own proxy wrapper directory (#7951) by @wenshao

Performance

perf(cli): cache GitHub PR list in the daemon route with a 60s TTL (#7705) by @wenshao
perf(core): keep the volatile auto-memory section last in the system prompt (#7651) by @DragonnZhang
perf(web-shell): paint the composer git chip before git status completes (#7680) by @wenshao
perf(core): Lazy-load first-use dependencies (#7686) by @doudouOUC
perf(cli): replace comment-json settings parser (#7747) by @doudouOUC
perf(acp): Preload providers after session creation (#7767) by @doudouOUC
perf(core): add early Anthropic cache breakpoint on the stable system prefix (#7912) by @DragonnZhang
perf(ci): cut the E2E suite from ~40min to ~24min (#7798) by @wenshao

Documentation

docs(channels): Document loops and proactive delivery (#7628) by @wenshao

Internal Changes

refactor(autofix): extract review verification runner (#7644) by @qqqys
test(web-shell): capture the git-mode new-branch sub-state in the visuals suite (#7672) by @wenshao
Refactors system prompt assembly into a layered builder to explicitly manage stable, context, and volatile instruction layers. (#7707) by @DragonnZhang
Adds regression tests to verify that restored-session transcript pagination correctly URL-encodes boundaries and preserves state during retry attempts. (#7657) by @jay666mnj
test(cli): cover bottom-stuck virtualized list behavior (#7652) by @jay666mnj
ci: keep the critical-audit gate honest when npm cannot answer (#7743) by @wenshao
test(integration): deflake tool-control permission cases (#7725) by @yiliang114
revert: drop the stale-base un-park recovery (#7602) (#7640) by @wenshao
test(serve): Add first-output latency benchmark (#7761) by @doudouOUC
test(channels): run the feishu, weixin and qqbot suites in CI (#7853) by @chinesepowered

New Contributors

@jay666mnj made their first contribution in #7674
@harjothkhara made their first contribution in #7203
@PratikWayase made their first contribution in #7709
@Sparkle6979 made their first contribution in #7720
@VitaliBabkin made their first contribution in #7827

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.21.0...v0.21.1

0.21.0 - 2026-07-24

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(web-shell): add workspace selector button with add/switch dropdown in composer toolbar (#7390) by @water-in-stone
feat(web-shell): show subagent sessions in detail panel (#7380) by @ytahdn
feat(web-shell): add rendered file previews (#7467) by @ytahdn
feat(core): add memory recall delivery telemetry (#7393) by @ZijianZhang989
feat(core): keep completed background agents resident (#7426) by @DragonnZhang
feat(serve): support forced MCP reconnects (#7488) by @BZ-D
feat(prompts): allow overriding core identity via QWEN_SYSTEM_IDENTITY_MD (#7478) by @zjgzx1988
feat(autofix): stop a PR that fails to push for N rounds in a row (#7482) by @wenshao
feat(core): restore background agent roster (#7459) by @DragonnZhang
feat(cli): support custom skill directories via settings (#7395) by @qwen-code-dev-bot
feat(cli): preserve semantic text when copying VP selections (#7286) by @chiga0
feat(web-shell): add selective Shadow DOM isolation (#7551) by @ytahdn
feat(web-shell): add renderChatHeader slot for custom session header (#7553) by @yuanyuanAli
feat(serve): add workspace-level generation (#7552) by @ytahdn
feat(serve): persist workspace channel configuration (#7514) by @qqqys
feat(core): propagate trusted daemon invocation context (#7279) by @callmeYe
feat(cli): post the review body bilingually when the PR description is Chinese (#7564) by @wenshao
feat(autofix): auto-rerun a check that died on infrastructure, once (#7562) by @wenshao
feat(core): Align GenAI telemetry with ARMS (#7536) by @doudouOUC
feat(web-shell): add workspace agent management (#7572) by @ytahdn
feat(autofix): update a stale base when the gate rejects a behind-main fix (#7595) by @wenshao
feat(sdk-java): Add daemon transport (#7463) by @doudouOUC
feat(autofix): auto-update a PR red only from a stale, since-fixed base (#7554) by @wenshao
feat(autofix): auto-recover a PR parked on a stale base (#7602) by @wenshao
feat(core): add Goal v3 state protocol (#7517) by @qqqys
feat(daemon): add explicit channel delivery (#7388) by @BenGuanRan
feat(serve): scope channel lifecycle to workspace runtimes (#7577) by @qqqys
feat(cli): add usage statistics environment override (#7579) by @tanzhenxin
feat(core): emit OAuth login URL as a single OSC 8 hyperlink (#7255) by @chinesepowered
feat(web-shell): add git mode selector for new session creation (#7471) by @wenshao
feat(cli): support native video input in /learn (#7497) by @LaZzyMan
feat(core): Align GenAI request telemetry with ARMS (#7635) by @doudouOUC
feat(cli): reference prior sessions via @ and add completion tabs (#7302) by @LaZzyMan
feat(review): follow the session output language for runtime task names (#7653) by @wenshao
feat(channels): run loops in daemon workers (#7641) by @qqqys
feat(core): add configurable image generation models (#7607) by @qqqys
feat(core): add bounded Goal evidence verification (#7639) by @qqqys

Bug Fixes

fix(autofix): keep a still-red check visible until its head is judged (#7438) by @wenshao
fix: normalize empty working_dir to unset when isolation:worktree is set on AgentTool (#7403) by @mvanhorn
fix(core): Advertise completed task revival (#7454) by @DragonnZhang
fix(cli): narrow update-check error classification (#7431) by @yiliang114
fix(web-shell): isolate component styles from host CSS (#7466) by @ytahdn
fix(web-shell): polish embedded shell interactions (#7477) by @ytahdn
fix(release): exclude mobile-mcp from core version bump (#7474) by @yiliang114
fix(ci): inject actual model name into triage signature (#7475) by @yiliang114
fix(core): align stepped day fields with Vixie cron semantics (#7464) by @destire-mio
fix(acp-bridge): close prompt-terminal follow-ups from the PR #7400 self-review (#7453) by @doudouOUC
fix(core): strip Qwen-internal daemon secrets from agent-spawned child env (#7256) by @chinesepowered
fix(cli): insert newline on Shift+Enter and stop streaming thinking-block flicker (#7397) by @chiga0
fix(web-shell): open singleton subagent details (#7495) by @ytahdn
fix(web-shell): avoid redundant Git status requests (#7496) by @ytahdn
fix(agent): ignore empty working_dir placeholders (#7343) by @Truraly
fix(cli): yield to single-slot background agents (#7258) by @hogeheer499-commits
fix(core): add image modality support for qwen3.8-max and kimi-k3 models (#7491) by @yiliang114
fix(dingtalk): preserve non-bot mention context (#7473) by @qwen-code-dev-bot
fix(core): harden the usage salvage around session deletion (#7425) by @zjunothing
fix(core): make fork subagents discoverable (#7460) by @DragonnZhang
fix(ci): autofix route checks existing labels on non-trigger label events (#7481) by @yiliang114
fix(vscode): use file picker image paths for vision input (#7493) by @yiliang114
fix(cli): open the actual serve fallback port (#7501) by @yiliang114
fix(ci): don't let one failing scenario sink the whole visual preview (#7511) by @wenshao
fix(cli): say review coverage gaps in the author's units, not chunk ids (#7550) by @wenshao
fix(autofix): retry a skipped-Prepare instead of stranding the PR terminal (#7490) by @wenshao
fix(cli): keep role codenames and brief paths out of the posted review body (#7560) by @wenshao
fix(autofix): retry an agent timeout instead of advancing past its feedback (#7563) by @wenshao
fix(web-shell): expose managedId in artifact open requests (#7570) by @ytahdn
fix(sdk-python): require canonical form in validate_session_id (#7532) by @chinesepowered
fix(web-shell): sync background agent status (#7561) by @ytahdn
fix(feishu): await stream cancels in media download teardown (#7465) by @chinesepowered
fix(autofix): make the review-address report comment fully bilingual (#7569) by @wenshao
fix(serve): detect stale SSE cursors across daemon restarts via epoch token; preserve turn attribution and surface compaction failures in replay (#7458) by @doudouOUC
fix(serve): avoid TOCTOU race dropping live sessions from list response (#7556) by @yiliang114 with @Copilot
fix(cli): prevent monitor notifications after task_stop (#7573) by @yiliang114
Fix(cli): use npm view for update check instead of update-notifier (#7515) (#7528) by @dtometzki
fix(core): avoid empty transcript history pages (#7582) by @ytahdn
fix(cli): surface unhandled rejections and render errors instead of swallowing them (#7406) by @chiga0
fix(web-shell): isolate slash command plugin pages (#7581) by @ytahdn
fix(sdk-python): validate max_tool_calls and max_subagent_depth as integers (#7548) by @chinesepowered
fix(cli): correct queued message display style and ordering (#7381) by @chiga0
fix(core): persist usage for tool-only subagent rounds (#7557) by @DragonnZhang
fix(core): retry requests when providers require thinking (#7534) by @yiliang114
fix(core): record auto-memory index reads in FileReadCache (#7468) by @han-dreamer
fix(web-shell): initialize workspace selector from ID (#7518) by @patrick-andstar
fix(core): reject nested background requests (#7593) by @patrick-andstar
fix(web-shell): prevent React measure detail OOM (#7596) by @ytahdn
fix(core): jsonl write([]) should leave an empty file, not a stray newline (#7533) by @chinesepowered
fix(core): strip daemon secrets from hook and tool-discovery child env (#7527) by @chinesepowered
fix(core): preserve disabled reasoning effort (#7541) by @WladmirJunior
fix(web-shell): render a plain textarea composer on touch devices (#7587) by @ComplexSimply
fix(core): treat backslash as literal inside single quotes in splitCommands (#7526) by @chinesepowered
fix(cli): stop treating version-manager npm shims as npm-cli.js (#7545) by @nerdalytics
fix(core,cli): isolate teammate leader turns from agent context (#7576) by @yiliang114
fix(sdk-java): let a terminal continuation start the next prompt (#7615) by @wenshao
fix(channels): route Telegram replies to forum topics (#7612) by @hogeheer499-commits
fix(acp): hide discontinued OAuth model for other auth types (#7522) by @hogeheer499-commits
fix(channels): stop dropping multi-task messages when a channel memory is saved (#7608) by @zjunothing
fix(channels): ignore idle ACP cancellation errors (#7598) by @patrick-andstar
fix(cli): optimize large paste performance and add progress indicator (#6506) by @LaZzyMan
fix(mcp): use a dedicated undici fetch for Streamable HTTP transports (#7195) by @zjunothing
fix(daemon): address epoch cursor review follow-ups (#7619) by @doudouOUC
fix(sdk-java): Harden daemon transport reliability (#7603) by @doudouOUC
fix(acp-bridge): resource hardening for the session event pipeline (DAEMON-009/010/011) (#7622) by @doudouOUC
fix(cli): clean orphaned managed npm update artifacts (#7539) by @patrick-andstar
fix(web-shell): honor locked workspace session actions (#7629) by @dreamWB
fix(core): Preserve usage after empty OpenAI stream frames (#7650) by @doudouOUC
fix(triage): make unattended PR review static — read CI via API, never run PR code (#7646) by @wenshao
fix(triage): actually restrict the CI review agent's tools (#7647) by @wenshao
fix(cli): align all TUI icon columns to a uniform 2-col width (#7633) by @chiga0
fix(web-shell): show full session names on hover (#7662) by @wenshao
fix(web-shell): keep git mode popover open when picking branch/worktree (#7668) by @wenshao

Performance

perf(startup): Load undici lazily behind package-local dynamic imports (#7455) by @doudouOUC
perf(web-shell): optimize long session rendering (#7408) by @ytahdn
perf(startup): lazy-load Google GenAI SDK on first use (#7512) by @doudouOUC
perf(cli): Defer ACP telemetry initialization (#7558) by @doudouOUC
perf(cli): Propagate compile cache to ACP children (#7594) by @doudouOUC

Documentation

docs(core): align JSDoc @param names with actual function signatures (#7492) by @ovochouovo
docs(autofix): require evidenced pre-commit verification, not a bare "verified" (#7486) by @wenshao
docs: refresh subagent lifecycle guidance (#7624) by @wenshao
docs(autofix): apply Simplicity First when addressing review feedback (#7643) by @wenshao
docs(autofix): let the agent escalate a maintainer's decision, not decide it (#7636) by @wenshao
docs(triage): scale PR verification to the change, add real-run depth (#7648) by @wenshao

Internal Changes

test(telemetry): Cover daemon metrics init ordering and document metricReader asymmetry (#7456) by @doudouOUC
test(core): Cover Shell truncation without an artifact (#7470) by @doudouOUC
test(core): stub the registry methods agent.ts actually calls (#7538) by @chinesepowered
test(autofix): single-source the infra-signature list from the workflow (#7565) by @wenshao
test: deflake write_file content assertion in tool-control E2E test (#7613) by @yiliang114 with @Copilot
test(sdk-java): widen the SSE idle-watchdog margins in the slow-line test (#7617) by @wenshao
test(core): pin the archived-copy usage salvage in the conflict deletion test (#7604) by @zjunothing
test(triage): regression-guard the triage workflow, and make the git cleanup an allowlist (#7660) by @wenshao

New Contributors

@ovochouovo made their first contribution in #7492
@Truraly made their first contribution in #7343
@zjgzx1988 made their first contribution in #7478
@hogeheer499-commits made their first contribution in #7258
@dtometzki made their first contribution in #7528
@patrick-andstar made their first contribution in #7518
@WladmirJunior made their first contribution in #7541
@nerdalytics made their first contribution in #7545

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.20.1...v0.21.0

0.20.1 - 2026-07-21

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(autofix): label-driven takeover and release; fix forced-dispatch green no-op (#7165) by @wenshao
feat(autofix): direct takeover of maintainer-fork PRs (#7213) by @wenshao
feat(daemon): Advertise ACP preheat readiness (#7200) by @doudouOUC
feat(autofix): surface the running model in every autofix report (#7226) by @wenshao
feat(review): retry transient API failures once; surface quota clearly (#7233) by @wenshao
feat(core): inspect persisted conversation branches (#7185) by @doudouOUC
feat(core): Route Plan-mode shell commands by safety (#7172) by @doudouOUC
feat(ci): auto-open a deflake fix issue for confirmed flaky tests (#7231) by @wenshao
feat(autofix): auto-manage the bot's own fork PRs without a label (#7243) by @wenshao
feat(web-shell): worktree-isolated sessions for parallel tasks (#7221) by @wenshao
feat(i18n): update catalan translaiton (#7253) by @jordimas
feat: add CODEOWNERS for core harness modules (#7304) by @pomelo-nwu
feat(web-shell): support custom slash command actions (#7267) by @ytahdn
feat(web-shell): add git commit history browser (#7204) by @wenshao
feat: support workspace display names (#7179) by @samuelhsin
feat(channels): add content-safe memory recall telemetry (#7338) by @qqqys
feat(daemon): restore worktree isolation on session load/resume (#7262) by @wenshao
feat(autofix): re-arm a stranded PR with @qwen-code /retry instead of deleting a marker (#7354) by @wenshao
feat(serve): make ACP initialize handshake timeout configurable (#7246) by @qwen-code-dev-bot
feat(autofix): pick up managed fork PRs in real time instead of waiting for the throttled schedule (#7350) by @wenshao
feat(autofix): resolve the review threads whose findings it implemented (#7364) by @wenshao
feat(autofix): render the managed fleet into the scan's run summary (#7355) by @wenshao
feat(core): add fork_turns to fork subagents (#7346) by @DragonnZhang
feat(auth): add Singapore Token Plan region (#7280) by @han-dreamer
feat(web-shell): surface worktree isolation in the new-session empty state (#7365) by @wenshao
feat(core): add opt-in built-in web_search backed by the DashScope Responses API (#7215) by @tanzhenxin
feat(web-shell): Add sidebar customization API for branding, navigation, session actions, and footer (#7379) by @yuanyuanAli
feat(autofix): raise the strict round cap from 5 to 10 (#7412) by @wenshao
feat(autofix): feed the gate's rejection back so the retry can fix what it broke (#7368) by @wenshao

Bug Fixes

fix(autofix): stage SKILL.md beside run-agent.mjs so review-address boots (P0, regression from #7165) (#7225) by @wenshao
fix(ci): consolidate issue triage ownership (#7180) by @yiliang114
fix(cli): allow goal controls during active loops (#7202) by @yiliang114
fix(cli): show mode indicator alongside steering hint during streaming (#7219) by @qwen-code-dev-bot
fix(scripts): allow multiple dev:daemon instances by probing Vite port (#7212) by @wenshao
fix(review): say an unread chunk once, under its cause (#7234) by @wenshao
fix(autofix): a no-output crash must not advance the review watermark (#7229) by @wenshao
fix(review): prohibit isolation param in roster output and SKILL.md (#7235) by @wenshao
fix(cli): align npm update checks with global registry (#7224) by @yiliang114
fix(test): deflake tool-control E2E content assertions (#7261) by @qwen-code-dev-bot
fix(sdk): abort SSE request on iterator exit to release daemon subscriber (#7257) by @chinesepowered
fix(core): Enforce Plan mode entry boundary (#7248) by @doudouOUC
fix(channels): exclude discrete ACP messages from replies (#7223) by @qwen-code-dev-bot
fix(ci): create remote-tracking ref for fork PRs in autofix verify gate (#7281) by @wenshao
fix(sdk): clean up SSE requests on errors and dispose (#7269) by @doudouOUC
fix(cli): repaint the TUI after OS sleep/wake or SIGCONT (#7265) by @wenshao
fix(mobile-mcp): restore bounds in UI hierarchy dumps (#7321) by @LaZzyMan
fix(test): stabilize 3 flaky tests (serve startup, usage-stats TTL, TasksStatusMessage keypress) (#7319) by @qwen-code-dev-bot
fix(cli): Preserve cancellation during permission prompts (#7295) by @doudouOUC
fix(core): estimate reasoning_tokens when completion_tokens_details is missing (#7239) by @yiliang114
fix(ci): tighten API error detection to avoid false positive on review prose (#7328) by @wenshao
fix(web-shell): localize extension tag labels (#7337) by @callmeYe
fix(test): stabilize list_directory E2E — accept text output when model skips tool call (#7342) by @qwen-code-dev-bot
fix(autofix): resolve owning package for nested paths; report verify-failed handoffs as not pushed (#7330) by @wenshao
fix(review): retry gh CLI on transient GitHub errors (5xx) and keyring failures (#7291) by @wenshao
fix(channels): deliver background agent replies (#7336) by @qwen-code-dev-bot
fix(web-shell): proxy extension APIs without intercepting modules (#7294) by @ytahdn
fix(dingtalk): retry transient emotion failures (#7329) by @qwen-code-dev-bot
fix(web-shell): respect voice enabled setting (#7345) by @callmeYe
fix(cli): map positional args to optional MCP prompt parameters (#7317) by @qwen-code-dev-bot
fix(cli): include typed directory in /cd tab completion (#7320) by @qwen-code-dev-bot
fix(review): make agent launches and cleanup resilient (#7259) by @wenshao
fix(ci): stop a slow patrol classifier from killing every flaky rerun (#7358) by @wenshao
fix(ci): tell a visuals coverage gap apart from "no visual change" (#7375) by @wenshao
fix: ask when Auto Mode classifier is unavailable (#7331) by @LaZzyMan
fix(autofix): retry a verification-gate crash instead of burying the agent's fix (#7351) by @wenshao
fix(core): validate goal judge terminal evidence (#7208) by @qwen-code-dev-bot
fix(core): hide interaction tools in plain headless mode (#7285) by @DragonnZhang
fix(cli): show worktree branch in status line instead of workspace branch (#7367) by @wenshao
fix(acp-bridge): make detachClient idempotent via per-clientId attach-ref ledger (#7386) by @doudouOUC
fix(autofix): refuse a non-main takeover out loud instead of only in the job log (#7382) by @wenshao
fix(cli): update npm installs safely in background (#7322) by @yiliang114
fix(core): support qwen3.8 side queries on DashScope (#7303) by @yiliang114
fix(autofix): retry a model API error instead of stranding the PR (#7247) by @wenshao
fix(ci): stop /resolve reports from being guillotined mid-sentence (#7389) by @wenshao
fix(web-shell): restore scheduled task reference interactions (#7313) by @BZ-D
fix(core): bound web-fetch post-processing and preserve fetched content on failure (#7305) by @tanzhenxin
fix(core): Fence concurrent ACP session writers (#7237) by @doudouOUC
fix(ci): serialise the two workflows that push to a PR head branch (#7392) by @wenshao
fix(web-shell): persist the daemon bearer token per-tab so it survives refresh (#7374) by @zjunothing
fix(core,cli): drain background notifications outside the subagent's ALS frame (#7194) by @zjunothing
fix(acp-bridge): map Windows-shaped workspace paths to their sandbox mount (#7228) by @zjunothing
fix(core): salvage session usage into the history before deleting transcripts (#7391) by @zjunothing
fix(core): clarify background agent continuation (#7300) by @DragonnZhang
fix(transcript): mark dangling tool history incomplete (#7340) by @cxruan
fix(mcp): add opt-in model payload filtering (#7413) by @LaZzyMan
fix(ci): tell a triage action crash apart from a silent agent (#7418) by @wenshao
fix(acp-bridge): guarantee exactly-once prompt terminal events in daemon serve mode (#7400) by @doudouOUC
fix(dingtalk): anchor @mention strip regex to start of text (#7401) by @qwen-code-dev-bot
fix: support context-inheriting subagents in headless mode (#7378) by @DragonnZhang
fix(cli): soften update-check failure UX — warning instead of error, raise timeout to 5s (#7409) by @ComplexSimply
fix(test): widen daemon boot timeout from 10s to 25s for docker sandbox (#7419) by @qwen-code-dev-bot
fix: worktree sessions unopenable in Web Shell while actively running (#7424) by @wenshao
fix(web-shell): restore context tags in queued and recalled prompts (#7312) by @dreamWB
fix(core): resolve artifact workspacePath against workspace root in worktree sessions (#7429) by @wenshao
fix(cli): classify nested update-check network errors (#7428) by @yiliang114
Fixed intermittent Docker CI test failures caused by session lock files resolving outside the isolated test directory. (#7439) by @wenshao
Regenerated the [email protected] patch to ensure it applies cleanly during fresh installations and prevents build errors. (#7407) by @chiga0
Relaxed OpenAI wire schema constraints for optional fields to prevent models from being forced to provide mutually exclusive arguments. (#7344) by @zjunothing
Added a 50MB size cap and 30-second timeout to DingTalk media downloads to match Feishu adapter behavior. (#7361) by @chinesepowered
Allowed simple-git to accept restricted protocol and global config settings required for public Git extension installations. (#7293) by @ytahdn
Enforced deterministic aggregate budgeting for batches of tool responses to prevent exceeding character limits across all runtimes. (#7323) by @doudouOUC
Fixed Docker CI session conflicts by clearing inherited sandbox session IDs to ensure each sub-session generates a unique identifier. (#7443) by @wenshao

Performance

perf(autofix): raise fleet simultaneity from 3 to 5 (#7396) by @wenshao
perf(telemetry): lazy-load the SDK and split OTLP exporter chains by protocol (#7276) by @doudouOUC
perf(autofix): stop the feedback gate waiting on the LLM review check (#7416) by @wenshao

Documentation

docs(cli): remove stale include directories limit (#7326) by @ZijianZhang989

Internal Changes

test: raise timeout ceiling for I/O-bound tests flaky under CI contention (#7230) by @wenshao
test(autofix): exercise the SKILL stage↔resolve contract end-to-end (#7227) by @wenshao
test(channels): add memory recall evaluation baseline (#7220) by @qwen-code-dev-bot
test(autofix): sync workflow assertions with split model vars (#7297) by @yiliang114
test(feishu): enforce markdown chunk limit assertion (#7324) by @ZijianZhang989
ci: move release-note classifier from per-PR workflow to release-time batch (#7339) by @yiliang114
chore: add CODEOWNERS for cua-driver and mobile-mcp (#7369) by @qwen-code-dev-bot
chore: simplify CODEOWNERS to package-level rules (#7376) by @pomelo-nwu
chore(docs,test): batch three small docs and test fixes (#7373) by @ZijianZhang989
Added tests to verify that artifact file paths resolve correctly in both ordinary and worktree sessions. (#7434) by @wenshao

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.20.0...v0.20.1

0.20.0 - 2026-07-19

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(cli): Add bounded daemon log rotation (#6969) by @doudouOUC
feat(review): bake the round label into a findings role's identity line and key (#7171) by @wenshao
feat(webshell): replay ChatRecord history in readonly WebShell (#6999) by @cxruan
feat(ui): let the user read the full plan from the exit_plan_mode confirmation (#7060) by @zjunothing
feat(providers): add qwen3.8-max-preview to Token Plan model list (#7199) by @qwen-code-dev-bot

Bug Fixes

fix(sdk-java): preserve exception cause in AcpClient init failures (#7189) by @chinesepowered
fix(web-shell): proxy /goals route in Vite dev server (#7187) by @wenshao
fix(sdk-java): correct TIMEOUT_30_MINUTES to actually be 30 minutes (#7188) by @chinesepowered
fix(cli): emit deferred stream-json startup warnings (#7174) by @barry166
fix(review): judge a CI check by its name's latest run, not by any leftover (#7183) by @wenshao
fix(review): count Step 6's inline findings from the drafted comments, never from typed numbers (#7173) by @wenshao
fix(web-shell): dedupe restored images and harden the sidebar shortcut handler (#7169) by @zjunothing
fix(mcp): normalize tool names for strict providers (#6976) by @ran411285752
fix(core): apply native tool calling schema for gemma 4 (#7177) by @ghisguth
fix(cli): share one process.stdout resize listener in useTerminalSize (#7186) by @mvanhorn
fix: surface underlying .cause of OpenAI-compatible connection errors in debug log and API error message (#7010) by @mvanhorn
fix(web-shell): prevent toolbar label clipping (#7196) by @carffuca
fix(review): one disclosure per subject — dedupe Not-reviewed, collapse an all-built-none-launched roster (#7190) by @wenshao
fix(review): an unverified Critical must not become a public blocker — soften the Request changes it rides (#7191) by @wenshao

Performance

perf(channels): cache channel memory recall (#7175) by @qwen-code-dev-bot
perf(cli): Defer TUI runtime from ACP startup (#7182) by @doudouOUC

Internal Changes

chore(vscode-ide-companion): sync third-party notices and guard against future drift (#7161) by @wenshao
ci(autofix): harden the address path against stale targets and untrusted route events (#7163) by @wenshao

New Contributors

@ghisguth made their first contribution in #7177

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.19.12...v0.20.0

0.19.12 - 2026-07-18

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(daemon): Trace cold first-session startup (#6907) by @doudouOUC
feat(web-shell): add archived session export (#6910) by @doudouOUC
feat(serve): add workspace session-info aggregate endpoint (#7077) by @samuelhsin
feat(web-shell): add skill management pages (#7018) by @ytahdn
feat(cli): mouse text selection and copy in VP mode (#6937) by @chiga0
feat(channels): stamp daemon sourceId with channel instance name on created sessions (#7078) by @xurik
feat(channels): confirm natural memory mutations (#7066) by @qqqys
feat(channels): save explicit multi-fact memory safely (#7092) by @qqqys
feat(serve): Complete legacy session workspace telemetry (#7003) by @doudouOUC
feat(core): Enable artifact defaults and write reminders (#7068) by @chiga0
feat(web-shell): suggest sending new-topic drafts in a new session (#7098) by @carffuca
feat(tools): add formatDisplayPath() and wire grep/glob/ripGrep descriptions (#7050) by @zjunothing
feat(daemon): propagate prompt IDs to turn events (#7082) by @makwingchi
feat(web-shell): paginate restored session history (#7064) by @ytahdn
feat(web-shell): toggle the session sidebar with Cmd+B / Ctrl+B (#7135) by @zjunothing
feat(web-shell): add directory autocomplete to the Add Workspace dialog (#7125) by @zjunothing
feat(cli): support same-turn message steering (#7090) by @LaZzyMan
feat: support full-turn multimodal routing for image prompts (#7045) by @yiliang114
feat(agents): support per-model sub-agent concurrency limits (#6984) by @qwen-code-dev-bot
feat(cli): add daemon Todo stop guard (#6945) by @doudouOUC
feat(cli): show active path in compact tool summaries (#7043) by @zjunothing
feat(vscode): route logs to the Qwen Code Companion output channel (#7121) by @yiliang114
feat(core): overhaul web_fetch — content fidelity, binary handling, security, and resilience (#7146) by @tanzhenxin
feat(channels): expose workspace-scoped observed contacts (#7109) by @BenGuanRan
feat(web-shell): persist the split view across refresh, per tab (#7136) by @wenshao
feat(web-shell): add a workspace Goals page, and stop losing /goal on daemon resume (#6561) by @wenshao
feat(core): improve subagent delegation defaults and guardrails (#7048) by @DragonnZhang
feat(review): build every Step 5 auditor of a round in one call, identity first (#7150) by @wenshao
feat(channels): observe group names from inbound messages (#7155) by @BenGuanRan
feat(web-shell): git status chip, visual working-tree diff, and sidebar git status (#7054) by @wenshao
feat(channels): recall relevant memory per message (#7157) by @qwen-code-dev-bot

Bug Fixes

fix(serve): Harden multi-workspace ownership guards (#7005) by @doudouOUC
fix: bound usage-only streams and abort on quit (#7038) by @yiliang114
fix(acp): disambiguate model routes (#7028) by @yiliang114
fix(web-shell): batch transcript dispatch to avoid tab-return freeze (#7012) by @wenshao
fix(core): Require explicit approval to exit Plan mode (#6967) by @doudouOUC
fix(web-shell): use formatSettingCategory for fallback UI category (#7055) by @wenshao
fix(integration): add missing session_info to E2E capabilities baseline (#7091) by @qwen-code-dev-bot
fix(tui): pin MaxSizedBox rows and gate the pending backstop for show-more diff (#6809) (#6957) by @azurecgx
fix(integration): harden flaky interactive read-then-write test (#7105) by @wenshao
fix(core): retry empty tool-result continuations (#7039) by @yiliang114
fix(core): align planning and response guidance (#7085) by @DragonnZhang
fix(web-shell): render built-in tag icons (#7024) by @callmeYe
fix(core): force tool_choice in generateJson to prevent auto-mode classifier deadlock (#6929) by @qwen-code-dev-bot
fix(ci): notify silent triage re-runs (#7079) by @yiliang114
fix(cli): pop the kitty keyboard protocol after leaving the alternate screen (#7115) by @zjunothing
fix(web-shell): optionally restart SSE after prompt admission (#7080) by @ytahdn
fix(core): accept subagents created after startup instead of rejecting on stale cache (#7112) by @zjunothing
fix(cli): keep streaming code blocks intact when split across commits (#7020) by @MikeWang0316tw
fix(i18n): correct "extenison" typo in extension enable/disable scope help (#7057) by @chinesepowered
fix(core): make the per-turn tool-call cap adaptive (#7052) by @wenshao
fix(vscode): preserve Electron Node mode for ACP launch (#7106) by @yiliang114
fix(core): preserve complete skill descriptions (#7032) by @callmeYe
fix(core): persist resolved subagent model in metadata (#7104) by @ARE404
fix(web-shell): stop stacking duplicate copies when restoring prompt text (#7134) by @zjunothing
fix(core): retry malformed repeated thinking tags (#7100) by @yiliang114
fix(cli): correct misspelled handleUpdateRecieved -> handleUpdateReceived (#7132) by @chinesepowered
fix(cli): hide sticky task panel when agent is idle (#7062) by @qwen-code-dev-bot
fix(cli): keep the model override when a background notification drains (#7119) by @zjunothing
fix(core): align prompt tool examples with schemas (#7088) by @DragonnZhang
fix(cli): require a second Ctrl+C within 1s before a real SIGINT exits the TUI (#7129) by @zjunothing
fix: keep quit and stream logging reliable (#7124) by @yiliang114
fix(ui): keep SkillReviewDialog right border inside the dialog container (#7047) by @zjunothing
fix(core): preserve existing work in system prompt (#7087) by @DragonnZhang
fix(mcp): terminate descendants after discovery timeout (#6926) by @morluto
fix(review): report what the transcripts prove; build the roster in one call (#7033) by @wenshao
fix(cli): establish extension store generation baseline on first read (#7072) by @qwen-code-dev-bot
fix(core): remove ask_user_question from the Explore agent's toolset (#7133) by @zjunothing
fix(web-shell): scope advanced table overlays (#7097) by @ytahdn
fix(core): correct "supercedes" typo in plan-mode system prompt (#7058) by @chinesepowered
fix(ask-user-question): accept long headers and size chips to the container width (#7063) by @tanzhenxin
fix(core): canonicalize restrictive permission paths (#6923) by @morluto
fix(core): align system prompt with interaction mode (#7089) by @DragonnZhang
fix(memory): resolve root symlinks in isAllowedMemoryPath before creation (#6842) by @wenshao
fix(core): add kimi-k3 token limits (1M context, 128K output) (#7144) by @tanzhenxin
fix(integration): use lenient assertion and harden poll in interactive file-system test (#7113) by @qwen-code-dev-bot
fix(core): resolve a parameter expansion in command position to its command root (#7143) by @wenshao
fix(cli): make auto output language follow user input (#6953) by @han-dreamer
fix(core): respect enableManagedAutoMemory in memory availability (#6941) by @han-dreamer
fix(cli): tighten VP-mode controls footprint and fix shell tool indicator overlap (#6931) by @chiga0
fix(acp): resolve textual @ image paths (#7123) by @yiliang114
fix: correct typos in comments, a tool description, and docs (#7131) by @chinesepowered
fix: harden desktop MCP permission-request lifecycle so pending prompts never hang or leak (#7013) by @mvanhorn
fix(cli): correct misspelled migratedInMemorScopes -> migratedInMemoryScopes (#7140) by @chinesepowered
fix(web-shell): recover new-session decisions wrapped in prose or fences (#7122) by @wenshao
fix(web-shell): make approval and question overlays keyboard accessible (#7074) by @wenshao
fix(cli): restore cancelled prompt after streamed output (#7149) by @barry166
fix(channels): scope pairing and allowlist state by workspace (#7065) by @zjunothing

Performance

feat(daemon): Profile ACP channel initialization (#7145) by @doudouOUC

Documentation

docs(serve): Close multi-workspace hardening gaps (#7019) by @doudouOUC
docs(cua-driver): fix broken relative-coordinate design link (#7130) by @chinesepowered
docs(autofix): make bot PR comments bilingual with collapsed Chinese (#7137) by @wenshao

Internal Changes

refactor(web-shell): drop redundant primary-workspace label (#7035) by @wenshao
test(web-shell): make visual-preview captures deterministic + add workspace-sidebar scenario (#7041) by @wenshao
ci(autofix): recover from generated-artifact CI gates and stop silent stalls (#6998) by @wenshao
ci(autofix): run the schema gate from a trusted staged copy, not the branch tree (#7076) by @wenshao
test(web-shell): align workspace sidebar visual smoke (#7107) by @yiliang114
test(cli): isolate sandbox-relaunch tests from ambient QWEN_SANDBOX_IMAGE (#7093) by @wenshao
ci(autofix): treat Suggestion-level review findings as actionable per AGENTS.md (#7094) by @wenshao
test(serve): cover session-info regressions (#7083) by @samuelhsin
test(cli): actually exercise the paste-workaround path in useKeypress (#7141) by @chinesepowered
ci(autofix): fan out review targets and stop route-scan starvation (#7127) by @wenshao
ci(shepherd): add Fleet Shepherd — automated unblocking of the bot-PR fleet (#7142) by @wenshao
refactor(core): Classify shell safety as read-only, write, or unknown (#7053) by @doudouOUC

New Contributors

@azurecgx made their first contribution in #6957
@makwingchi made their first contribution in #7082
@ARE404 made their first contribution in #7104

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.19.11...v0.19.12

0.19.11 - 2026-07-16

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

feat(web-shell): add workspace path lock (#6853) by @ytahdn
feat(web-shell): add extension management page (#6815) by @ytahdn
feat(core): emit liveness heartbeats for silent foreground shell commands (#6876) by @doudouOUC
feat(cli): VP mode UX improvements (#6885) by @chiga0
feat(acp): expose tool-call preparation lifecycle (#6819) by @ran411285752
feat(channels): add structured channel memory management (#6860) by @qqqys
feat(ci): add automated PR failure patrol (#6766) by @yiliang114
feat(scripts): add local PR verification gate (#6873) by @callmeYe
feat(web-shell): expose session controls to hosts (#6906) by @dreamWB
feat(channels): support DingTalk webhook delivery to direct messages (#6891) by @BenGuanRan
feat(core): add PDF vision bridge fallback (#6846) by @doudouOUC
feat(cli): add general.notificationMode to silence per-approval notifications (#6898) (#6922) by @C0d3N1nja97342
feat(web-shell): use popovers for composer controls (#6877) by @ytahdn
feat(cli): change default approval mode from default to auto (#6899) by @pomelo-nwu
feat(cli): add /learn command for user-initiated skill creation (#6440) by @LaZzyMan
feat(web-shell): auto-post visual previews (screenshots + flow GIFs) on PRs (#6880) by @wenshao
feat(daemon): add immutable session source metadata (#6932) by @ytahdn
feat(web-shell): add zoom, pan and drag controls to Mermaid diagrams (#6881) by @yuanyuanAli
feat(review): build the Step 4 verifier and Step 5 reverse-audit prompts in code (#6942) by @wenshao
feat(web-shell): maximize a single split pane (#6951) by @wenshao
feat(cli): Add archived session export (#6911) by @doudouOUC
feat(web-shell): show sessions awaiting user action (#6956) by @ytahdn
feat(review): prove Step 4 (verify) and Step 5 (reverse audit) actually ran (#6965) by @wenshao
feat(channels): support natural memory references (#6952) by @qqqys
feat(daemon): add stateless generation SSE (#6947) by @ytahdn
feat(daemon): Aggregate deep health across workspaces (#6961) by @doudouOUC
feat(serve): add workspace MCP management (#6954) by @ytahdn
feat(web-shell): color-code each split pane by workspace (#6971) by @wenshao
feat(review): fold the findings list into the verify/reverse-audit prompt (#6994) by @wenshao
feat(channels): tag daemon sessions with channel source (#6991) by @xurik

Bug Fixes

fix(web-shell): improve file search and composer focus (#6845) by @ytahdn
fix(web-shell): prevent composer tag update loop (#6859) by @ytahdn
fix(web-shell): make composer height adaptive (#6872) by @dreamWB
fix(web-shell): remove duplicate useWebShellPortalRoot import in ChatEditor (#6890) by @C0d3N1nja97342
fix(ci): skip empty SDK release PR (#6861) by @yiliang114
fix(ci): avoid apt on self-hosted Playwright smoke (#6865) by @yiliang114
fix(webui): honor follow-up accept callback suppression (#6862) by @yiliang114
fix(cli): wrap long compact tool summaries (#6847) by @han-dreamer
fix(web-shell): persist collapsed session group sections across reload (#6878) by @samuelhsin
fix(cli): avoid updating active CLI processes (#6874) by @yiliang114
fix(dingtalk): refresh token for inbound media (#6903) by @qqqys
fix(vscode): run ACP process in Electron Node mode (#6866) by @yiliang114
fix(cli): keep exit_plan_mode plan visible inside the pending viewport clamp (#6867) (#6882) by @C0d3N1nja97342
fix(test): isolate WeCom temporary files across concurrent CI jobs (#6908) by @yiliang114
fix(core): preserve display output for malformed tool results (#6925) by @morluto
fix(vscode-companion): accurate image-size messages and formatFileSize units (#6904) by @chinesepowered
fix(vscode-companion): don't let a non-boundary @ suppress / completion (#6902) by @chinesepowered
fix(cli): don't mutate cached trusted-folders config on preview trust check (#6900) by @AriaZhao-coder
fix(mcp): require trust for read-only auto-approval (#6924) by @morluto
fix(cli): apply FETCH_TIMEOUT_MS to /update version check and log fetchInfo results (#6857) (#6887) by @C0d3N1nja97342
fix(core): include skill results in microcompaction (#6788) by @han-dreamer
fix(core): handle unsigned Claude thinking from proxies (#6893) by @yiliang114
fix(config): reject fractional session and tool-call limits (#6920) by @morluto
fix(web-shell): Harden non-primary session archive actions (#6912) by @doudouOUC
fix(core): sanitize standalone closing thinking tags (#6854) by @yiliang114
fix(webui): route useLocalStorage functional updates through prev state (#6905) by @chinesepowered
fix(core): Classify shell timeouts as tool errors (#6864) by @doudouOUC
fix(web-shell): restore portal root hook import (#6934) by @yiliang114
fix(review): prove the diff was read, build every agent's prompt, and compute the verdict (#6892) by @wenshao
fix(core): roll back failed max-token continuation attempts (#6921) by @morluto
fix(cli): isolate submit tests from inherited QWEN_CODE_SESSION_ID (#6944) by @qwen-code-dev-bot
fix(web-shell): show workspace chip tooltip on narrow composer (#6958) by @wenshao
fix(test): widen second-turn phase timeouts in stdin-close E2E test (#6966) (#6973) by @qwen-code-dev-bot
fix(wecom): prevent requireMention from disabling group chat (#6948) by @BenGuanRan
fix(cua-driver): harden MCP tool reliability (#6968) by @LaZzyMan
fix(cron): add deterministic test seam for cron-interactive E2E (#6987) by @yiliang114
fix(test): widen model-response timeouts in SDK E2E tests for CI stability (#6979) (#6985) by @qwen-code-dev-bot
fix(cli): Preserve channel startup failure details (#6950) by @doudouOUC
fix(web-shell): filter sessions by source (#6995) by @ytahdn
fix(web-shell): land on the split's first pane when a shrink folds the split (#7000) by @wenshao
fix(headless): run concurrency-safe tool calls in parallel (#6993) by @wenshao
fix(shell): handle command-specific exit codes (#7011) by @ytahdn
fix(core): preserve MCP OAuth challenges from HTTP handshakes (#7022) by @ytahdn

Performance

perf(review): scope Agent 7's build/test to the workspaces the diff changed (#6955) by @wenshao

Documentation

docs(review): cap PR scope after repeated review rounds (#6848) by @wenshao
docs: make local PR verification optional (#7025) by @callmeYe

Internal Changes

ci(release): finalize stable releases asynchronously (#6868) by @yiliang114
ci(web-shell): stop visual previews firing on SDK-only PRs (#6959) by @wenshao
ci: quarantine cron-interactive from push E2E to nightly-only (#6986) by @yiliang114
chore: update default model to qwen3.7-max (#6978) by @qwen-code-dev-bot
test(web-shell): add mermaid, split-view + sidebar visual scenarios (#6964) by @wenshao
ci(serve): daemon A/B before/after preview on response-surface PRs (#6975) by @wenshao
ci(web-shell): before/after visual previews, showing only changed views (#6963) by @wenshao
revert: remove local PR verification gate (#7031) by @callmeYe
Added a new visual test scenario for the Extensions manager page to detect layout regressions in dark and light themes. (#6997) by @wenshao

New Contributors

@ran411285752 made their first contribution in #6819
@morluto made their first contribution in #6925
@AriaZhao-coder made their first contribution in #6900
@xurik made their first contribution in #6991

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.19.10...v0.19.11

0.19.10 - 2026-07-14

Highlights

Multi-workspace support now spans ACP transport, daemon workers, split-view sessions, and workspace-aware actions. (#6621, #6635, #6746, #6724)
Web Shell gains an artifact panel, a modernized sidebar and settings experience, and editable user-level model configuration. (#6591, #6804, #6817, #6768)
Session and model recovery is more resilient to malformed streams, leaked protocol turns, OAuth expiry, and daemon restarts. (#6794, #6683, #6732, #6680)
Subagents are easier to follow with richer live command context, transcript paths, a chronological timeline, and inherited Explore models. (#6580, #6772, #6807)
CLI workflows gain project-scoped prompt stashes, visible Git branches, configurable shell timeouts, and safer memory-pressure handling. (#6709, #6725, #6628, #6682)
SDK and daemon integrations can now control effort, models, usage, context, transport options, and runtime channels. (#6492, #6491, #6741)

Breaking Changes

No known breaking changes.

Complete Change List

Features

SDK-hosted agents now forward user answers from ask_user_question tool approvals back to the model, enabling interactive question flows in TypeScript and Python SDK integrations. (#6655) by @TianYuan1024
DingTalk channels can now optionally mention group message senders in bot replies using visible @ tokens, with Markdown rendering preserved for replies without mentions. (#6679) by @qqqys
Web shell now includes a right-side review panel for inspecting edited files, artifacts, and scheduled tasks with diffs, file navigation, and session-scoped tabs. (#6591) by @ytahdn
Daemon now supports workspace-qualified ACP endpoints, allowing SDK and web shell clients to open sessions scoped to specific workspaces in multi-workspace deployments. (#6621) by @doudouOUC
Adds a composer header render slot and an opt-in mobile welcome footer placement so embedders can show custom content above the composer on small screens. (#6584) by @yuanyuanAli
Adds SDK methods to control reasoning effort, list available models, and query account and context usage statistics at runtime. (#6492) by @juhuan
Expanding thinking blocks with Alt+T during streaming now displays the full reasoning content in real-time instead of a truncated preview. (#6678) by @huww98
Scheduled task prompts now support inline extension, skill, and MCP reference tags via floating pickers that serialize cleanly into the saved prompt text. (#6589) by @BZ-D
Pressing Ctrl+S with a non-empty prompt now stashes it for the current project and restores it on the next launch, clearing the stash upon submission. (#6709) by @destire-mio
Session recovery now uses a unified plan across all entrypoints, consistently handling interrupted prompts, dangling tool calls, and degraded history. (#6731) by @water-in-stone
Subagent views now show untruncated live commands, deeper progress history, execution transcript paths, and recent tool context on inline approvals. (#6580) by @TianYuan1024
The qwen serve daemon can now host channel workers for multiple trusted workspaces, binding each worker to its respective workspace directory. (#6635) by @doudouOUC
A new MessageDisplay hook fires incrementally during assistant streaming, allowing observers to track reply text before the turn completes. (#6489) by @yanchenko
Double-clicking a cell in a rendered Markdown table now opens a dialog with the full cell value for easy reading and copying. (#6530) by @jifeng
The daemon now exposes read-only session catalogs for untrusted workspaces, letting clients browse sessions without write access. (#6717) by @doudouOUC
Workspace registrations added at runtime are now persisted so they survive daemon restarts without manual reconfiguration. (#6716) by @doudouOUC
User messages in the web shell now render extension, skill, and MCP reference tags inline, matching the composer preview. (#6537) by @ever-o
Channel workers now reconnect automatically when the daemon restarts, restoring DingTalk and Feishu sessions without manual intervention. (#6680) by @qqqys
The composer toolbar now displays the current Git branch as a chip so you always know which branch you're working on. (#6725) by @han-dreamer
Foreground shell commands now respect a configurable default timeout, preventing long-running commands from blocking indefinitely. (#6628) by @Nas01010101
Both the TypeScript and Python SDKs now expose transport selection and query options for finer control over daemon communication. (#6491) by @juhuan
The web shell session sidebar is now configurable, letting embedders choose which session metadata and actions to display. (#6750) by @dreamWB
Workspace transcript reader now provides persisted conversation history per workspace for server-side session browsing. (#6740) by @doudouOUC
Session groups in the web shell now support custom Hex color codes for easier visual organization. (#6752) by @samuelhsin
The composer model selector has been redesigned with clearer model metadata and faster switching. (#6758) by @dreamWB
Code review now includes procedural correctness checks, adjustable effort levels, and guardrails that verify findings before posting. (#6711) by @wenshao
Multi-workspace split view now supports cross-workspace sessions, workspace labels, and a responsive layout for side-by-side editing. (#6746) by @wenshao
Scheduled tasks from all workspaces are now aggregated into a single view in the web shell for easier monitoring. (#6759) by @wenshao
The composer now accepts custom placeholder text, allowing embedders to show context-specific prompts to users. (#6765) by @dreamWB
Release notes are now drafted with AI assistance, summarizing changes from the full commit range into categorized, user-facing bullets. (#6756) by @yiliang114
Web shell now ships a shadcn-based UI foundation with consistent design tokens and accessible component primitives. (#6760) by @ytahdn
Sub-agent activity is now shown as a chronological transcript with a parallel-agent timeline for easier multi-task inspection. (#6772) by @wenshao
The CLI can now start, stop, and list daemon channel workers at runtime without restarting the daemon process. (#6741) by @doudouOUC
Persisted conversation transcripts are now bounded to prevent unbounded disk growth. (#6769) by @doudouOUC
Web shell fires a callback when a new session is created, enabling custom integrations. (#6703) by @ytahdn
Skill installation paths are now exposed so users can see where skills are stored. (#6811) by @callmeYe
Multi-workspace sidebar redesigned with a cleaner, more modern layout. (#6804) by @ytahdn
Settings page refreshed with a modern component library for a polished look and feel. (#6817) by @ytahdn
User-scope settings can now be edited directly in the panel, with in-panel model management. (#6768) by @wenshao
Rewind and shell actions now work across multiple workspaces. (#6826) by @doudouOUC
Workspaces can now be removed at runtime without restarting the server. (#6745) by @doudouOUC
Code review now captures untracked files, resolves anchors from snippets, and gates posting in code. (#6771) by @wenshao
PR triage comments now include a confidence score, sequence diagram, files overview, and review footer. (#6789) by @wenshao
Explore subagent now inherits the main model by default instead of using a fixed smaller model. (#6807) by @tanzhenxin
Daemon status now reports model API error counts and retry metrics. (#6837) by @wenshao
New API endpoint lets you toggle workspace skills programmatically. (#6816) by @callmeYe
Added xAI Grok as a built-in model provider preset. (#6805) by @TianYuan1024
Extension management upgraded to v2 with improved install, update, and removal flows. (#6825) by @doudouOUC
Voice input is now qualified per workspace for better multi-workspace support. (#6839) by @doudouOUC
Session export is now workspace-qualified so exports stay organized across workspaces. (#6844) by @doudouOUC
Markdown tables in web shell now show row, column, and cell selection statistics. (#6838) by @jifeng

Bug Fixes

YOLO approval mode is no longer silently disabled when the model enters plan mode. (#6630) by @Nas01010101
Approval mode UI labels and notices are now localized, preventing mixed-language output when cycling modes with Shift+Tab in non-English interfaces. (#6592) by @han-dreamer
Channel delivery now filters out nested subagent output, preventing intermediate research reports from being sent to messaging platforms before the root agent's final answer. (#6696) by @qqqys
Raised prepared npm package size limit from 80 MB to 96 MB to accommodate natural growth and unblock Docker sandbox builds. (#6691) by @qwen-code-dev-bot
Fixed Docker sandbox networking for protocol tag retry tests, enabling CLI to reach test servers via host.docker.internal when running in container sandbox mode. (#6692) by @qwen-code-dev-bot
Fixed cursor position being incorrectly overridden when set to the start of a line in VS Code. (#2971) by @chinesepowered
Fixes out-of-memory crashes on exit during long interactive sessions by running periodic memory-pressure checks even when no tool calls occur. (#6682) by @yiliang114
Reduces token usage in mobile UI dumps by stripping bounds attributes with negative coordinates for partially off-screen elements. (#6624) by @chinesepowered
Fixes leaked protocol tags in responses by discarding and retrying invalid assistant turns during max-token escalation and continuation recovery. (#6683) by @yiliang114
Updates test expectations to match the new automated PR review workflow timeout values, resolving continuous integration failures. (#6720) by @yiliang114
Improves plan mode reliability by returning a clear error response when non-read-only tools are blocked, preventing the model from attempting workarounds. (#6667) by @Alex-ai-future
Adds an Approve button to the /mcp server detail view, allowing users to approve pending or previously rejected workspace servers. (#6518) by @LaZzyMan
Fixes remote MCP connection failures by preserving URL query parameters and fragments that end with a trailing slash during normalization. (#6587) by @VectorPeak
Fixes subagent startup failures by restricting template placeholders to valid identifiers, treating numeric patterns like ${0} as literal text. (#6672) by @ksws00684315
When running as an ACP agent, the user's typed instruction is now placed after attached file content so models prioritize the actual request. (#6607) by @kaymeer
The ACP readTextFile fallback now rejects fractional line and limit values, returning consistent invalid parameter errors for malformed read windows. (#6704) by @VectorPeak
The Add Workspace dialog now respects light and dark themes, and multi-workspace session lists restore full row features and per-session actions. (#6705) by @wenshao
DingTalk Stream connections are now treated as ready when the socket is open, preventing healthy sessions from being disconnected due to missing registration frames. (#6715) by @qqqys
Trusted non-primary workspaces can now update session pin, group, and color state via a new workspace-scoped organization endpoint. (#6724) by @doudouOUC
Claude Opus 4.6, 4.7, and 4.8 models now default to a 1M context window and 128K output limit, preventing premature compaction. (#6718) by @yiliang114
Clipboard image pasting now works correctly in standalone desktop builds. (#6708) by @zjunothing
Saved memory instructions are now refreshed immediately after using the remember command. (#6497) by @han-dreamer
Goal evaluation is now lifecycle-safe, preventing errors during session teardown. (#6681) by @qqqys
Managed memory entries are now preserved during microcompaction instead of being dropped. (#6714) by @yiliang114
Claude output token limits now use decimal values for more accurate context budgeting. (#6735) by @yiliang114
Model and approval-mode changes now apply correctly to non-primary workspace sessions in the web shell. (#6737) by @wenshao
The agent no longer crashes when receiving repeated invalid model streams and recovers gracefully. (#6712) by @yiliang114
OAuth authentication for MCP servers now recovers automatically after an HTTP 401 response. (#6732) by @yiliang114
Inline tag tooltips in the web shell no longer appear as duplicates. (#6729) by @dreamWB
Goal judge verdicts now ignore reasoning content and evaluate only the final answer. (#6738) by @qqqys
The Scheduled Tasks dialog now shows correct tag icons instead of stale references. (#6748) by @wenshao
The Git branch chip in the composer no longer pushes toolbar controls off-screen on narrow windows. (#6753) by @wenshao
Chat recording failures are now persisted and surfaced to the user instead of failing silently. (#6743) by @doudouOUC
Malformed streamed responses from the model are now retried automatically. (#6754) by @yiliang114
When plan mode blocks write actions the agent is guided to use read-only tools instead of stopping. (#6764) by @Alex-ai-future
Feishu credentials are now validated before starting the WebSocket connection, preventing silent failures. (#6780) by @BenGuanRan
Desktop release notes are now truncated to avoid oversized payloads in CI. (#6792) by @DragonnZhang
Session actions are now routed to the correct owning workspace in multi-workspace setups. (#6798) by @doudouOUC
The web UI now links to the workspace-local SDK package, unblocking SDK publishing. (#6823) by @qwen-code-dev-bot
Code review no longer drops live blockers and now verifies that new tests actually gate the changed code. (#6790) by @wenshao
Slash-command output in channels is now visually distinguished from regular messages. (#6818) by @qqqys
Packaged dialog styles are restored under React 18 in the web shell. (#6827) by @ytahdn
Reasoning duration displays now show more accurate and refined timing information. (#6793) by @tanzhenxin
Session continue, language selection, and artifact actions are now routed to the correct workspace owner. (#6833) by @doudouOUC
LRU cache entries are now correctly reordered on access even when the stored value is falsy. (#6787) by @chinesepowered
The latest-active timestamp for sessions is now computed from the real activity time, not the current wall clock. (#6834) by @chinesepowered
Rewrites queued while waiting for pending rewrites to finish are now fully drained before proceeding. (#6800) by @chinesepowered
The LLM rewriter now limits its output history to the configured context turn window. (#6799) by @chinesepowered
Only a trailing .git suffix is stripped from GitHub repo names, preserving internal .git segments. (#6797) by @chinesepowered
Dotfiles such as .eslintrc are now detected and assigned the correct language from their file path. (#6785) by @chinesepowered
Fixed a security issue where angle brackets in insight report data could break out of script contexts. (#6802) by @chinesepowered
Review chunk agents now receive properly constructed prompts so they no longer run without context. (#6840) by @wenshao
Reintroduced retry logic for malformed streaming responses with more precise detection to avoid false positives. (#6794) by @yiliang114
Review coverage is now verified using the test harness's own records for accurate results. (#6843) by @wenshao
Increased the browser daemon bundle size limit to 156 KB to accommodate larger builds. (#6852) by @qwen-code-dev-bot

Performance

Improved startup performance by lazy-loading the tree-sitter parser runtime. (#6747) by @dexhunter
Reduced the number of Git snapshot processes spawned during sessions for better performance. (#6784) by @dexhunter

Documentation

Development workflow now includes a bounded self-audit step between build and review, requiring authors to verify changes with full context before declaring work complete. (#6685) by @wenshao
Corrected inaccurate token limit comment and fixed typos in core package code comments with no behavior changes. (#6698) by @chinesepowered

Internal Changes

Increases the default automated PR review timeout to 180 minutes and allows overrides up to 240 minutes to prevent timeouts on large pull requests. (#6706) by @wenshao
Removed obsolete DingTalk planning integration artifacts. (#6722) by @qqqys
Reverted the malformed streamed response retry logic due to issues. (#6783) by @wenshao
Stabilized end-to-end test cases for tool control and subagent scenarios. (#6803) by @yiliang114
Removed a flaky headless child-process recording test. (#6830) by @yiliang114
Review test-efficacy probes now run in isolated disposable worktrees. (#6836) by @wenshao
Shared a common worktree path helper across review probes and improved stale worktree cleanup. (#6841) by @wenshao

New Contributors

@juhuan made their first contribution in #6492
@ksws00684315 made their first contribution in #6672
@kaymeer made their first contribution in #6607
@destire-mio made their first contribution in #6709
@yanchenko made their first contribution in #6489
@ever-o made their first contribution in #6537

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.19.9...v0.19.10

0.19.9 - 2026-07-10

Added

memory: make background memory agent timeouts configurable (#6459)
cli: Add session owner index for workspace runtimes (#6540)
web-shell: polish stats table layout and todo panel UI (#6559)
cli: List persisted sessions for trusted workspaces (#6558)
core: render PDF pages to images when text extraction overflows or fails (#6585)
scheduled-tasks: add isolated run mode via create_sub_session tool (#6535)
cli: VP mode — inline thought expand on click + auto-hiding scrollbar (#6079)
review: post Suggestion findings as inline comments (#6593)
daemon: persist session artifacts across restarts (#6557)
cli: Add channel worker settings reload for serve --channel (#6598)
web-shell: add bottom status items (#6613)
cli: Add workspace-qualified core REST routes (#6567)
add qwen update and /update commands with auto-update support (#5780)
tui: Ctrl+O frozen transcript view and unified tool output rendering (#5666)
web-shell: add assistant turn footer slot (#6611)
scheduled-tasks: gate an isolated run behind a precondition (#6619)
cli: List archived and organized sessions for non-primary workspaces (#6631)
web-shell: add context mention customization (#6578)
daemon: expose session runtime status (#6645)
web-shell: add collapse/expand toggle to AskUserQuestion panel (#6588)
cli: allow long /goal conditions (#6665)
channels: support webhook-triggered channel tasks (#6495)
review: give every line of a large diff an accountable reviewer (#6612)
web-shell: improve markdown table readability (#6626)
web-shell: workspace management sidebar with dynamic registration (daemon multi-workspace phase 4) (#6625)
serve: Add cursor-paged transcript replay endpoint (#6525)
core: add forceGlobalCacheScope for Anthropic proxy providers (#6643)
qqbot: group message handling and cron-msg-experimental (#6457)
daemon: record & query sub-session parentSessionId; drop isolated scheduled-task mode (#6676)

Fixed

session: detect and mark broken history chains instead of silently truncating (#6502)
cli: prefer command name match over alias match regardless of recentScore (#6504)
channels: add chat payload diagnostics (#6539)
core: configurable vision bridge timeout + retry with fresh budget (#6541)
shell: avoid self-kill from pgrep selectors (#6544)
extension: clean tempDir before fallback git clone on Windows (#6545)
cli: align memory dialog with managed memory (#6434)
daemon: surface workspace memory task error details (#6431)
serve: stop cdp-mcp-command reading process.env directly (#6562)
mobile-mcp: strip bounds from UI hierarchy dump (#6568)
web-shell: make dialog backdrop z-index configurable (#6572)
ci: add retry logic to VSCode IDE Companion publish steps (#6574)
ci: detect silent triage failures with empty-response check (#6566)
cli: forward user input to MCP prompts with no declared arguments (#6571)
cua-driver: complete coordinate normalization for zoom/scroll/mouse tools (#6610)
channels: align memory access with channel gates (#6620)
vscode: normalize NOTICES.txt line endings to LF (#6634)
web-shell: align split view chat interactions (#6633)
cli: stabilize flaky UI tests (#6622)
mobile-mcp: reject out-of-range normalized coordinates (#6656)
channels: return only final ACP response text (#6615)
mobile-mcp: coord-norm audit fixes for 0.1.3 (#6659)
triage: require explicit defer comment and prevent hygiene-based defer on re-runs (#6652)
cli,core: Restore default debug log file output (#6605)
sdk: escalate process abort termination (#6653)
core: honor NO_PROXY for model requests (#6640)
core: apply cron step to a single starting value (N/step) (#6627)
channels: enable DingTalk stream keepalive (#6668)
dingtalk: preserve markdown tables (#6673)
channels: cap channel memory recall prompt (#6617)
core: fix tool_use/tool_result pairing for Anthropic-compatible providers (#6651)
channels: manage stale DingTalk Stream connections (#6675)
core: clamp max_tokens to the context window; retire the output reservation (#6556)
web-shell: polyfill Range layout APIs in tests (#6677)
core: retry leaked protocol turns (#6603)
release: raise package size budget to 85 MiB (#6688)
interactive: configure Docker sandbox networking for protocol tag retry test (#6689)

Performance

core: add pure-ASCII fast path to text token estimation (#6551)

Documentation

fix model-provider config shape and refresh feature/setting drift (#6552)
core: fix typos in ide notification comments (#6623)
document tools.disabled and tools.visible settings (#6641)
channels: add setup screenshots to WeCom robot guide (#6648)

Other

Stop repeated subagent tool-call loops (#6543)
Gate browser automation MCP on external adapter (#6472)
chore(core): remove stale refreshStartupContextReminder mocks from tool-search tests (#6423)
ci(autofix): Add single-target scheduler (#6547)
Add harness infrastructure for web-shell package (#6517)
Fix workspace skills for disabled extensions and ACP preheat (#6534)
Fix long session timeline scrolling (#6526)
Support voiceBridge for ACP audio prompts (#6576)
ci(autofix): per-issue concurrency, route cancel-in-progress, assigned trigger (#6609)
chore(cua-driver): update version refs to 0.7.1 + add fix doc (#6616)
ci: route full CI follow-up jobs to selected runner (#6608)
test(core): stabilize file history eviction test (#6637)
test(cli): isolate cli entry fallback fixture (#6658)
ci: add suspicious comment attachment guard (#6599)
Bound glob result collection (#6618)
test(mobile-mcp): fix coord-norm tests for 0.1.3 (#6664)

0.19.8 - 2026-07-08

Added

cli: Add serve env isolation and total admission (#6416)
cli: review auto-generated skills with an inline preview, editor handoff, and an in-dialog off switch (#6393)
cli: Show permission mode badge in footer for DEFAULT mode (#6498)
serve: Bound replay snapshot history (#6482)
web-shell: restore the full composer in split-view panes (#6510)
hooks: inject background tasks and cron jobs status into Stop/SubagentStop hook payloads (#6531)
cli: Enable multi-workspace session routing (#6511)
cli: auto-retry next port when serve port is in use (#6513)
extension file reload — watch for plugin changes and hot-reload runtime (#6347)
channels: add dmPolicy config to disable private/DM messages (#6521)
web-shell: expose external split controls (#6523)
core: add working_dir to the Agent tool for pinning subagents to an existing worktree (#6456)
autofix: extend review loop to all dev-bot PRs, add real-time triggers (#6528)

Fixed

core: reject fractional LSP limit inputs (#6455)
core: Match hook display-name matchers to tool ids (#6373)
web-shell: hide sidebar settings text when width is insufficient (#6494)
web-shell: count daemon sessions in Daemon Status usage dashboard (#6493)
channel: Relay ACP permission requests (#6446)
core: reject Windows-style workspace artifact paths (#6483)
cli: show file path in compact tool summary for single collapsible tools (#6448)
cua-driver: migrate Windows scripts + README rewrite (#6515)
cli: bound the live streaming-table pending height (fix scroll-to-top lock, stall-then-dump, header flash) (#6421)
cli: clean up IDE client after deferred timeout (#6509)
web-shell: prevent sidebar footer overflow (#6522)
web-shell: refine markdown table interactions (#6500)
web-shell: i18n for ~43 hardcoded English strings across 15 files (#6516)
cli: keep status line on session model (#6514)
cli: allow approval-mode changes without bearer token (#6527)
memory: allow forget to remove user managed memory (#6432)
core: omit deprecated temperature param for Claude 4.8+ (#6520)
core: detect non-SSE HTTP 200 responses in OpenAI streaming pipeline (#6466)
scripts: handle missing NPM dist-tags gracefully in release versioning (#6476) (#6481)
cli: fixed-width elapsed time below one minute to stop status-line jitter (#6533)
memory: give each linked git worktree its own auto-memory root (#6462)
cli: unblock /clear after task cancellation and surface the blocked reason (#6499)
web-shell: stabilize slash command i18n in split-view panes (#6546)

Documentation

channels: add WeCom to channels overview (#6490)

0.19.7 - 2026-07-07

Added

review: route suggestion-level findings to an updatable PR comment (#5786)
serve: Add runtime.activity fields to daemon status API (#6270)
web-shell: add a daemon status page backed by GET /daemon/status (#6272)
web-shell: add MCP mentions and iconized @ references (#6279)
web-shell: manage sessions from the sidebar (archive, unarchive, delete) (#6293)
daemon: Add session export endpoint (#6297)
acp: advertise vision-bridge image capability in initialize response (#6269)
web-shell: support compact echarts full data blocks (#6232)
acp: Batch session load replay (#6309)
web-shell: add custom at mention panel (#6242)
acp-bridge: Add EventBus subscriber byte cap (#6314)
web-shell: time-series metrics charts on Daemon Status (#6307)
daemon: Add session organization (#6305)
cli: Surface daemon prompt queue status (#6325)
scheduler: opt-in per-tool-call execution timeout (#6124)
web-shell: add onSessionChange and onSubmitBefore callbacks (#6333)
core: stabilize tool schema declaration order (#6339)
core: model fallback chain — auto-switch to backup models on overload (#6273)
cli: support multi-folder workspaces in file system boundary checks (#6278)
web-shell: support icon chips for mention tags (#6337)
LSP Server support hot reload (#5953)
cli: Add large pipe frame measurement (#6335)
web-shell: named session groups and color tags in the sidebar (#6350)
web-shell: add a Scheduled Tasks management page (#6348)
web-shell: show Settings and Daemon Status as an in-place panel (#6341)
web-shell: add token-usage analytics dashboard to Daemon Status (#6388)
cli: Add Phase 1 workspace runtime registry (#6394)
core: surface PreToolUse hook 'ask' as a TUI confirmation (#5629)
review: add issue-fidelity and root-cause ownership gate to /review (#6395)
cli: Add Phase 2a workspace foundation (#6410)
web-shell: add Session Overview panel and in-window split view (#6400)
cli: add --project and --global flags to /model for per-project model persistence (#6060)
core: add maxSubAgents setting to limit parallel sub-agent count (#6354)
scheduled-tasks: run each task in its own dedicated, named session (#6389)
cli: support stacked slash-skill invocations (#6361)
core: add Tool(param:value) permission syntax for parameter-level access control (#6106)
core: add tools.visible config for selective deferred-tool visibility at startup (#6372)
web-shell: add Qwen logo beside the sidebar new-chat button (#6437)
web-shell: add column reorder, resize, and freeze controls to markdown table (#6444)
channels: add WeCom intelligent robot channel (#6436)
web-shell: unify scheduled task sessions — bind chat-created tasks + clock icon (#6453)

Changed

core: centralize extension runtime refresh (#6152)

Fixed

triage: strengthen PR gate with batch detection, problem existence check, and red flag patterns (#5723)
autofix: unconditionally restore tracked files before branch checkout (#6281) (#6286)
vscode: keep auth quick inputs open on focus loss (#6274)
cache: preserve tools prefix in side-query for Anthropic prompt-cache hits (#6225)
core: give Stop-hook continuations a fresh per-turn tool-call budget; make the cap configurable (#6238)
web-shell: use theme color for @ group titles (#6294)
acp: pass per-session settings explicitly instead of racing on this.settings (#6292)
core: improve debug txt diagnostics (#6277)
ci: require maintainer-applied autofix/approved label for tier-1 fast-path (#6276)
auth: prevent persistent 401 after API key change (#6284)
cli: stream long responses into scrollback to stop scroll-to-top lock (#6170)
qqbot: streaming idle-flush with tool-call and stale-callback protection (#6204)
openai: preserve descriptionless tools (#6243)
core: enforce agent concurrency cap on foreground sub-agents (#6300)
ci: Stop review bots for closed PRs (#6304)
core: skip abbreviations in multiple_sentences filter (#6077) (#6193)
ci: skip stale PR review runs (#6313)
core: treat request timeout of 0 as disabled instead of aborting immediately (#6288)
serve: resolve false auth warning in preflight when API key is set via settings (#6296)
core: treat @-attached files as read for prior-read enforcement (#6295)
cli: preserve partial remote input JSONL records (#6317)
core: disable qwen thinking via chat_template_kwargs on non-DashScope servers (#6271)
web-shell: keep skill slash commands after starting a new session (#6319)
web-shell: localize built-in command and skill descriptions in the slash menu (#6326)
desktop: enforce transform_data isolation (#6285)
core: skip no-op max_tokens escalation (#6234)
core: avoid null OpenAPI schema types (#6323)
core: preserve OpenAI reasoning as raw thoughts (#6192)
core: add UTF-8 prefix for cmd.exe on Windows (#6216)
cli: allow queued input during compression (#6336)
web-shell: finalize deferred gated submissions (#6342)
cli: smoother live streaming preview — drop "generating more" cue, hold back partial table rows (#6340)
desktop: preserve glued automation history records (#6344)
web-shell: suppress stale pending prompt refresh errors (#6352)
web-shell: constrain virtual scroll rows (#6362)
cli: Allow ACP local fallback reads from /tmp (#6370)
core: default context windows to 200k (#6387)
triage: exclude test files from core module size gate and distinguish feat from refactor (#6369)
cli: Keep model picker entries contiguous in short terminals (#6359)
core: Include request IDs in OpenAI error logs (#6379)
cli: ignore current review run in presubmit CI (#6397)
autofix: improve review addressing and verification (#6382)
core: require integer ReadFile pagination params (#6381)
core: resolve symlinks when matching conditional rules and skills (#6371)
web-shell: refine tool detail presentation (#6399)
core: preserve no-argument tool calls that stream an empty arguments string (#6250)
cli: use EnvHttpProxyAgent in channel proxy to respect NO_PROXY (#6401) (#6405)
daemon: Handle settings reload events outside transcript (#6407)
memory: don't advance AutoMemory extract cursor when the agent makes zero tool calls (#6398)
core: gate image payload replacement behind threshold (#6380)
review: remove qwen-code-specific core-infra gate from bundled /review (#6412)
web-shell: polish scheduled task timeline UI (#6386)
cli: smoother streaming table rendering (#6345)
core: Gate large PDF text extraction (#6409)
core: allow rewind after compressed history (#6358)
core: align monitor limit parameter schemas (#6413)
core: prevent KV-cache invalidation on tool_search by reordering reminderParts (#6420)
shell: avoid Unix pager default on Windows (#6390)
daemon: preserve user message source metadata (#6385)
core: prevent re-invoking loaded skill from appending duplicate content (#6430)
web-shell: keep split-view session list fresh and preserve panes across view switches (#6418)
web-shell: Improve user tags and mobile menu layout (#6441)
web-shell: keep errored turns expanded (#6424)
web-shell: clear stale floating todos (#6425)
web-shell: hide rotating loading phrase in split-view pane status (#6447)
core: Support large text range reads (#6404)
core: strip system-reminder blocks from session title and recap side-query prompts (#6435)
autofix: report review handoff failures (#6415)
monitor: preserve inherited git pager (#6429)
serve: classify interrupted model stream errors (#6422)
web-shell: refine tool call summaries (#6450)
web-shell: split-view pane fixes (remove "current" badge, clear composer on send) (#6454)

Performance

glob: prune ignored directories during traversal, not just post-filter (#6123)
cli: cache LoadedSettings per workspace with stat-based invalidation (#6310)
ci: optimize autofix pipeline — fast-track, skip duplicate build, scoped tests (#6315)
memoize skill scans, debounce sleep-inhibitor log, guard IDE readdir (#6155)
core: Add session start profiler (#6349)
cli: defer startup prefetch tasks (#6303)

Documentation

design: daemon side-channel coordination (A1/A2/A4/A5) (#4511)
fix skill invocation syntax and include Feishu in channel lists (#6320)
fix settings.json reference drift against schema (#6351)
web-shell: document chart renderer integration (#6353)
document PreToolUse hook permissionDecision "ask" behavior (#6411)
consolidate design docs and plans under docs/ (#6417)

Other

ci(audio): clarify macOS prebuild artifact suffix (#6275)
test(e2e): make fake OpenAI reachable from Docker sandbox (#6302)
test(core): cover full:false branch of recordAttachedFileRead for truncated @-attachments (#6324)
Notify model when extension capabilities change (#6245)
Restart stalled ACP bridge for channels (#6330)
Fix incorrect context window calculation for custom models (#6266)
[codex] add proactive channel loop tools (#6287)
ci(autofix): move agent prompts into a project skill (#6306)
test(core): keep context warning test aligned with default token limit (#6391)
Handle missing web-shell sessions without redirecting (#6357)
Avoid refreshing session activity on load (#6439)
Upgrade GitHub Actions for Node 24 compatibility (#5157)
[codex] add natural channel memory intents (#6376)

0.19.6 - 2026-07-03

Added

core: add dataviz bundled skill (#6198)
core: allow sub-agents to spawn nested sub-agents up to a configurable depth (#6189)
web-shell: add daemon UI support for vision model selection (#6209)
cua-driver: sync vendored cua-driver 0.6.8 → 0.7.0 (#6212)
scheduler: make recurring cron/loop job expiration configurable (#6173)
mobile-mcp: vendor mobile-mcp with opt-in 0-1000 relative coordinates (#6235)
web-shell: show the qwen-code version in the sidebar footer (#6222)
daemon: add session artifact APIs (#5895)
web-shell: display nested sub-agents as a tree in the tasks panel (#6239)
web-shell: improve slash command discovery (taller menu, group counts, fuzzy search) (#6267)
daemon: expose visionModelId in workspace provider status and web-shell model dialog (#6262)

Fixed

web-shell: cut mobile session-switch jank (memoized timeline signature, replay-first dispatch) (#6183)
resolve macOS seatbelt profile path from bundle dir, not chunks/ (#6172)
cli: add bootstrap fast paths (#6188)
core: Reduce multimodal history payload size (#6045)
core: prevent subagent crash when ${hook_context} placeholder has no hook configured (#6180)
scheduler: add opt-in per-tool-call execution timeout (#6136)
web-shell: keep the user-selectable wrapper out of flex layout (#6229)
core: raise stream idle timeout default and hint the env knob (#6107)
serve: respect disabled skill settings (#6223)
align vscode-ide-companion curly rule with root config (#6221)
qqbot: security hardening — gateway validation, atomic state, sanitized logging (#6200)
cua-driver: bump BAKED_VERSION to 0.7.0 (#6241)
web-shell: improve session restore and loading feedback (#6220)
avoid vsce secret scanner false positive on regex patterns (#6247)
web-shell: encode vision model picker selection & polish dispatch (#6236)
serve: Optimize daemon NDJSON stream handling (#6263)
qqbot: markdown-first send, replyMsgId TTL, and dead code removal (#6201)

Documentation

correct stale CLI flags/keybinding and document model.reasoningEffort (#6219)

Other

[codex] Revert GLM tagged thinking parsing for DashScope (#6248)
Add sessionless workspace memory forget and dream (#6227)
ci(autofix): restore sandbox image flow (#6261)

0.19.5 - 2026-07-02

Added

cli: Harden daemon-managed channel worker (#6098)
serve: support HTTPS/TLS via --tls-cert and --tls-key flags (#6032)
cli: show description and level in /skills ACP output (#6117)
core,cli: unified reasoning effort with /effort command (#6072)
core: Add leader approval for plan-required teammates (#6138)
channels: add DingTalk proactive send for channel loops (#6174)
channels: add identity and task lifecycle metadata (#6105)
core: add retry with backoff for MCP capability discovery (#6158)
channels: add listSessions to ChannelAgentBridge (#6182)
channels: show lifecycle status in adapters (#6114)
web-shell: overhaul list-dialog interaction, keyboard nav & a11y (#6128)
cli: add credential redaction for worker stderr forwarding (#6146)

Fixed

web-shell: defer session creation until first prompt (#6066)
cli: clip live markdown to the viewport to stop non-VP scrollback replay (#6081)
cli: yield to React after addItem to reduce input lag (#6059)
diff: show whitespace-only edits instead of 'No changes detected' (#6141)
ci: grant PR review precheck permissions (#6147)
ci: list workflow comments with GET (#6148)
ci: use CI_BOT_PAT for precheck comment on fork PRs (#6151)
cli: Avoid blocking WebUI sessions on MCP readiness (#6161)
ci: allow prechecked fork PR automation (#6160)
ci: fall back to latest autofix sandbox image (#6159)
ci: create precheck comments via REST (#6156)
web-shell: show skill slash commands (e.g. /review) before first prompt (#6153)
web-shell: only show scroll-to-bottom button when content overflows (#6150)
web-shell: improve disconnected composer handling (#6166)
ci: diagnose autofix publish credentials (#6162)
release: reduce npm package scan triggers (#6164)
channels: replace setTimeout(0) drain with turn_complete SSE barrier (#6165)
lazy-load memory prompt when indexes are empty (#6097) (#6104)
cli: skip MCP approval dialogs in YOLO mode (#6177)
serve: keep skill slash commands available when the ACP child is unavailable (#6169)
web-shell: polish session timeline rail (#6171)
web-shell: mobile UX — safe areas, overscroll, native-app feel (#6142)
cli: drop /effort tier autocompletion for an argument-hint placeholder (#6179)
ci: limit fork PR precheck to safety signals (#6178)

Documentation

document model/auth settings, /model --vision, and --safe-mode (#6028)
document the /config slash command (#6145)

Other

ci: add fork PR safety precheck (#5926)
ci: persist npm cache on self-hosted runners (#6130)
Add compact session timeline rail (#6078)
ci: Add prepare-pr skill for autofix PR bodies (#6184)
test: stabilize plan mode tool-control E2E (#6176)

0.19.4 - 2026-07-01

Added

core: add configurable auto-compact threshold and Stop hook context usage (#4025) (#5868)
core,cli,sdk: resume an interrupted turn without a synthetic "continue" message (#5030)
desktop: voice dictation in the desktop app (#5856)
browser-ext: revive Chrome extension via daemon-direct architecture (#5777)
loop: inject a .qwen/loop.md task file at fire time via sentinels (#5890)
channels: qwen tag — RFC + Phase 0 (multiplayer channel-resident agent) (#5888)
channels: Add channel agent bridge abstraction (#5978)
core: add --insecure flag to skip TLS verification for self-signed endpoints (#3535) (#5962)
cli: add --safe-mode flag to disable all customizations for troubleshooting (#4943)
daemon: support @extension mentions (#6008)
web-shell: friendlier Esc interruption + queued-prompt UX (#6025)
daemon,sdk: resumable /acp session stream (Last-Event-ID) + opt-in SDK transports export (#5852)
ui: add ui.history.collapsePreviewCount to show last N turns when resuming collapsed sessions (#5848)
core: support glob patterns in mcp.allowed and mcp.excluded (#6012)
loop: add autonomous mode for a bare /loop (#5991)
web-shell: queue prompts while turns are running (#6005)
web-shell: add mobile sidebar drawer with session list (#6003)
cli: support inline one-shot model override in /model (#5967) (#6022)
cli: Add daemon-managed channel worker for serve --channel (#6031)
serve: add sessionless workspace remember (#5884)
ui: add mouse click & hover in alternate-screen mode (#6011)
web-shell: add browser tab favicon (#6091)
cli: add /config key=value slash command to set any setting from the prompt (#5773)
core: Disallow plan lifecycle tools in subagents (#6087)
channel: add channel loop support (#6073)
web-shell: polish chat UI and table rendering (#6099)
auto-mode: add classifyAllShell setting to route all shell commands through classifier (#6040)
channels: add group history backfill (#6074)
daemon: Add session archive support (#6058)
cli: add tabbed Settings dialog with Status and Stats tabs (#6044)
core: add configurable idle timeout for MCP tool calls (#6061)

Changed

cli: Remove serve bridge re-export shims (#5955)
review: drop deterministic-analysis and autofix steps (#6092)

Fixed

core: halt repeated shell inspection variants (#5944)
cli: auto-select custom input on Enter in multi-select questions (#5791)
core: only spawn memory recall when auto-memory is enabled (#5963)
release: use relative postinstall patch dir (#5973)
standalone: Route serve shim through cli-entry (#5977)
ui: display output tokens instead of cumulative API throughput for subagents (#5972)
cli: Avoid ACP runtime preload on serve fast path (#5989)
web-shell: prefer raw file diffs in tool output (#5992)
web-shell: improve follow-up suggestion handling (#5996)
ci: cover release integration regressions (#5994)
core: filter thought parts from Stop hook last_assistant_message (#6009)
cli: fix thought viewer truncation, layout gaps, and choppy scrolling in VP mode (#6002)
cli: Guard serve fast-path bundle closure (#5995)
cli: make the non-VP transcript scrollable during multi-agent runs (#6015)
core: Allow subagents to exit plan mode (#6026)
ci: stabilize merge queue checks (#6056)
cli: Keep serve health responsive before runtime load (#6013)
cli: Handle ACP read_file for managed local paths (#6021)
ci: create isolated home before tests (#6071)
channels: structure DingTalk stream logs (#5998)
cli: Support Windows-style tilde paths (#6029)
cli: replace all emoji with Unicode text symbols in TUI rendering (#5999)
daemon: resolve ACP permission votes across connections (#5912)
cli: switch TUI prefix ✦→◆ to fix glyph overflow on some terminals (#5974)
core: Parse tagged thinking for GLM responses (#6033)
core: subtract reserved output tokens from context window for compression thresholds (#5957)
cli: validate ask_user_question TUI option input (#6042)
core: keep plan mode and require approval when plan gate is unavailable (#6046)
deps: clear critical runtime audit findings (#6065)
remove accidentally committed OpenClaw-Query-Submit submodule (#6109)
scripts: avoid shell injection in sandbox command detection (#6108)
web-shell: fix InsightProgress layout and clean up UI elements (#6115)
daemon: Route ACP images through the vision bridge (#6111)
ci: stabilize Windows loop tests (#6082)
cli: load browser MCP tools by default (#6006)
model: disambiguate vision model endpoints (#6070)

Documentation

daemon: refresh daemon docs for recent PRs (wave 2) (#5954)
telemetry: comprehensive documentation update to match current implementation (#5960)
qc-helper: add daemon mode docs and fix system settings path (#5981)
refresh settings, MCP glob, auth alias, and autonomous loop docs (#6090)

Other

ci(review): increase PR review timeout from 90 to 120 minutes (#5959)
ci: allow longer PR review timeout retries (#5961)
ci(autofix): loosen issue candidate filters so the agent finds work (#5860)
[codex] fix daemon specialized model filtering (#5993)
test(ci): stabilize cron interactive release check (#6016)
Sanitize subagent result tags (#6027)
Avoid full-history clones in OOM-prone paths (#6018)
Stop repeated invalid tool parameter loops in ACP (#6076)
ci(workflows): remind authors not to force-push active PRs (#6035)
Fix ACP daemon loop review follow-ups (#6085)
ci(autofix): fix scheduled and labeled issue triggers (#6080)
ci: stabilize actionlint on self-hosted runners (#6113)
[codex] Add explicit channel memory for messaging channels (#6051)
test(core): fix MCP idle timeout config stubs (#6120)

0.19.3 - 2026-06-28

Added

serve: Add daemon workspace voice and control APIs (#5765)
cli: Add skill usage stats (#5826)
memory: confirm auto-generated skills before persisting (#5616)
cli: Show model thinking intent in loading indicator (#5668)
core: decouple /remember from auto-extract, stop writing to QWEN.md (#5814)
web-shell: enhance assistant markdown tables with Excel-style interactions (#5650)
cli: enable built-in status line preset by default for new users (#5792)
config: map provider id to SDK protocol via providerProtocol (#5758) (#5793)
telemetry: Make sensitive span attribute limit configurable (#5804)
core: QWEN_STREAM_IDLE_TIMEOUT_MS env knob for the stream idle timeout (#5845)
cli: support a user-configurable keyterms file for voice dictation (#5817)
cli: simplify auto mode startup text and remove emoji (#4584) (#5824)
web-shell: show duration on finished thinking summary (#5864)
tui: partition tool display by type — collapse read/search, show mutation tools individually (#5661)
mcp: reconcile MCP servers live on settings change (#5561)
serve: query a single session's status by id (#5857)
core: make self-paced /loop lean on monitor/background-task notifications (#5844)
cli: tighten response timestamp consistency and tests (#5850)
core: add bundled extension creator skill (#5828)
cli: support @extension mention in input autocomplete (#5849)
cua-driver: vendor qwen-cua-driver with opt-in 0–1000 relative coordinates (#5896)
web-shell: polish chat UI (#5893)
telemetry: wire recordApiRequestBreakdown into endLLMRequestSpan (Phase 4c) (#5904)
web-shell: browse MCP server resources in the /mcp dialog (#5879)
web-shell: allow host to override streaming loading phrases (#5900)
web-shell: stream-highlight code blocks and fix fence-language aliases (#5869)
core: warn before foreground shell timeout (#5918)
web-shell: add manual toggle for enhanced markdown tables (#5917)
memory: add a git-shared team memory tier (#5886)
web-shell: add workspace session sidebar (#5931)
cli: add /model --vision for a fallback vision model (#5778)
cli: show scheduled task count in footer (#5921)
acp: support /cd command in ACP sessions (#5903)
channels: register Telegram bot command menu (#5919)
web-shell: add error boundaries so a render crash can't white-screen the embed (#5943)
web-shell: add mobile responsive view for TodoPanel (#5948)
web-shell: add 'voice' to ComposerToolbarAction for external visibility control (#5947)

Changed

cli: Split serve server routes (#5809)
cli: Split serve server assembly (#5937)

Fixed

core: allow web_fetch JSON fallback (#5660)
ide: validate QWEN_CODE_IDE_SERVER_PORT before reading lock file (#5805)
core: add streaming inactivity timeout to the OpenAI pipeline (#5827)
cli: prevent scroll snap-back and flicker in non-VP mode during multi-agent runs (#5799)
cli: cancel pending self-paced loop wakeups on user abort (#5808)
core: preserve reasoning_content when merging assistant turns (#5815)
web-shell: stabilize active prompt loading state (#5818)
cli: stop repeated duplicate provider responses (#5657)
web-shell: defer transcript-appending local commands while a turn streams (#5822)
packaging: bundle audio capture for mirror installs (#5747)
core: reject userinfo URLs in WebFetch validation (#5783)
cli: make alt+t expand thinking on macOS Option-compose terminals (#5872)
cli: show ⌥T instead of alt+T on macOS for thinking expansion (#5802)
cli: improve token speed accounting (#5811)
core: stream chat-compression side-query to survive gateway timeout (#5865)
web-shell: reword the Chinese tool-group summary (执行了 → 调用了) (#5876)
release: skip dist/node_modules when building standalone archives (#5878)
test: raise timeout for cold-import suites to stop CI flake (#5880)
core: tree-kill PTY shell tree on Windows to stop pwsh leak (#5873) (#5892)
core: ignore IDE configs from other workspaces (#5807)
cli: wrap tool call descriptions instead of truncating (#5891)
serve: reject negative cleanupPeriodDays values (#5906)
desktop: reject unsafe source slugs before deletion (#5829)
core: clear tool display after completion errors (#5916)
desktop: harden remaining source path validation (#5914)
core: preserve rewind parents after resume (#5923)
core: parse workflow stall env as decimal seconds (#5930)
cli: align MCP dialog border (#5935)
core: improve cron tool search intents (#5927)
core: silence unknown schema format warnings (#5915)
core: stop computer use driver when idle (#5925)
core: stop repeated truncated write_file/edit retries from looping (#5934)
core: preserve the selected model when re-applying a provider install plan (#5835)
serve: reject non-positive sessionRecapAwayThresholdMinutes values (#5945)
core: isolate Anthropic SDK abort listener leak with per-request child controllers (#5946)
desktop: normalize source slug validation errors (#5911)

Performance

cli: skip spawnSync wrapper for qwen serve (#5874)
cli: enable compile cache and defer getCliVersion for serve (#5938)

Documentation

add vertex-ai auth, missing commands, and qc-helper index entries (#5727)
add provider preset governance policy to CONTRIBUTING.md (#5631)

Other

ci: split platform test matrix into named jobs so PRs can enter the merge queue (#5833)
ci: give each CI job one home in the merge-queue flow (#5842)
Revert "feat(cli): Show model thinking intent in loading indicator" (#5846)
ci(release): make release flow merge-queue-safe and keep release PRs out of notes (#5832)
ci: add @qwen-code /resolve (#5779)
test(cli): add daemon startup benchmark (#5825)
ci(triage): run triage on the self-hosted ECS pool instead of GitHub-hosted (#5851)
ci: route the merge queue's Linux jobs onto ECS (#5854)
test(cli): raise i18n ToolMessage test timeout to 15s to stop merge-queue flake (#5858)
ci: take CodeQL and E2E off the per-merge push path (#5859)
ci(qwen-resolve): run the /resolve job on a hosted runner (#5862)
ci(qwen-resolve): support fork PRs and slim /resolve to conflict-only (#5870)
chore(cli): drop redundant home-directory startup warning (#5839)
ci: isolate per-run agent state for triage and PR review (#5885)
[codex] test(ci): cover post-merge review follow-ups (#5899)
Fix mid-input skill command completion (#5898)
Upgrade GitHub Actions to latest versions (#3683)

0.19.2 - 2026-06-24

Added

serve: Add remote LSP status route (#5741)
vision-bridge: transcribe images to text for text-only models (#5126)
core: add deterministic guards for destructive commands in auto mode (#5754)
cli: add extension operation polling (#5753)
cli: match MCP resources globally on bare @ and show full references (#5774)
cli: Add workspace permissions rules API (#5743)
serve: voice dictation over the daemon for the Web Shell (#5755)
voice: refine ASR transcripts with the fast model before insert (#5794)

Changed

web-shell: restructure chat UI (#5775)

Fixed

agent: cap fork turns and bubble fork permission prompts (#5737)
vscode: always show chat view in the Activity Bar sidebar (#5757)
cli: source /context token total from the per-session chat (#5764)
core: Disambiguate duplicate model display names (#5769)
cli: remove theme background fills from input box and user messages (#5772)
cli: stabilize VP mouse interactions (#5751)
vscode: clamp open file positions (#5711)
config: fall back to user env files (#5731)
core: require integer stop hook cap (#5667)
core: require integer microcompaction keep count (#5652)
core: Align MCP OAuth guidance and docs (#5589)
cli: replace emoji thinking/summary icons with Unicode text symbols (#5788)
cli: restore saved custom model IDs when re-entering the auth wizard (#5654)
daemon: Reject stale prompt client admission (#5784)
core: parse QWEN_SERVE_MCP_CLIENT_BUDGET strictly as a decimal integer (#5752)
sdk: self-heal stale clientId on invalid_client_id prompts (#5797)
cli: promote pasted image paths to attachments (#5803)
sdk: raise browser daemon bundle budget to 126 KiB (#5801)
cli: correctly map Claude MCP server transport types on import and in .mcp.json (#5812)

Performance

cli: Optimize serve daemon startup (#5785)

Documentation

fix config/command/auth drift and surface the model-providers page (#5735)

Other

ci: collapse PR checks into Ubuntu gate (#5767)
ci: harden Linux CI reliability (shallow ECS checkout + CodeQL timeout) (#5810)
Expose MCP resource read tool (#5781)
ci: move macOS/Windows tests and CodeQL off the per-PR path (#5813)

0.19.1 - 2026-06-23

Added

cli: match MCP resource completions by name and discover servers (#5733)

Changed

core: revert Protocol enum & model-identity decoupling (#5089) (#5745)

Fixed

cli: skip unusable A2UI configs (#5685)
cli: avoid duplicate ACP write BOM (#5688)
cli: enable /lsp in ACP mode (#5689)
core: require integer inline media byte limit (#5671)
cli: reject invalid session list cursors (#5709)
cli: reject unsupported extension scopes (#5714)
core: reject blank cron prompts (#5716)
cli: validate channel credential types (#5718)
cli: use high-contrast software cursor (#5720)
core: require integer compaction counts (#5646)
core: parse agent & workflow integer env vars strictly (#5679)
serve: validate list maxEntries as a positive integer (#5719)
workflows: validate runId before recursive prune delete (path-traversal dir wipe) (#5740)
triage: never auto-approve cross-repo refactor PRs (#5744)
cli: only paint theme background when it matches the terminal (#5746)

Other

ci: retry merge-ref checkout to fix transient "not our ref" failures (#5732)

0.19.0 - 2026-06-23

Added

lint: enforce kebab-case filenames with ESLint (#4797)
extensions: support archive install sources (#4909)
voice: voice dictation with native capture, streaming, and biasing (#5502)
revivable background sub-agents and subagent transcript TTL (#5556)
core: add Artifact tool to publish interactive HTML pages (#5557)
cli: add optional [HH:MM:SS] timestamp before each assistant turn (#5001)
tui: remove tool group borders and collapse completed tool results (#5003)
workflows: finish Dynamic Workflows port — resume, saved workflows, keyword trigger, notifications (#4721) (#5600)
web-shell: support daemon session branching (#5613)
cli: browse MCP server resources in the /mcp dialog (#5635)
core: default-on preserve_thinking for DashScope provider (#5637)
tui: add thinking block viewer with Alt+T expand/collapse (#5627)
desktop: show file preview in a resizable side panel instead of fullscreen (#5730)
core: respect configurable agent ignore files (#4653)
core: add fastOnly/voiceOnly flags to hide models from main model list (#5632)

Changed

cli: Rename serve files to kebab-case (#5592)
core: replace OpenRouter/Requesty provider classes with customHeaders in preset (#5539)
cli: Finish serve kebab-case filenames (#5604)
core: extract Protocol enum and decouple model identity from auth type (#5089)

Fixed

cli: render full resume preview history (#5565)
cli: fill content area background on wrapped input lines (#5568)
cli: fail non-interactive runs on loop detection (#5564)
core: respect zero OpenAI log file limit (#5569)
core: keep bare fast model on current auth (#5553)
cli: prefer command name over alias in slash completion ranking (#5577)
core: require confirmation when user manually enters plan mode (#5595)
core: always-on guard for consecutive identical tool calls (#5019) (#5573)
ci: harden tmux triage reporting (#5548)
voice: surface native recorder fallback so missing prebuilds aren't silent (#5605)
core: prevent GLM on DashScope from dropping web_fetch content (#5599)
core: backend-aware artifact publish confirmation + cancel handling (#5615)
cli: Fail dangling replayed tool calls (#5624)
voice: bundle native audio addon into standalone archives (#5628)
cli: harden ACP session list pagination params (#5618)
cli: parse serve rate limit env strictly (#5612)
core: parse API timeout env strictly (#5602)
serve: validate readText line limits (#5639)
core: escape backslashes and quotes in emacs ediff paths (#5630)
cli: detect USE_OPENAI auth when the model is set via QWEN_MODEL (#5647)
webui: stop auto-recreating session on user-initiated delete (#5633)
cli: keep settings v5 migration idempotent (#5676)
test: restore openai model selection in ACP set_config_option test (#5721)
test: isolate ACP integration agents via QWEN_HOME to end parallel-settings race (#5724)
test: make ACP set_config_option test use a deterministic openai provider model (#5728)
core: keep active runtime model in default getAllConfiguredModels listing (#5729)
core: remove redundant reportSuggestionUsage causing double-counted stats (#5684)
core: validate ask_user_question answer indexes (#5622)
daemon: Refresh workspace provider defaults (#5638)

Documentation

mcp: correct mcp add scope default (#5593)

Other

ci(release): Auto-publish VSCode companion after stable releases (#5572)
[codex] Fix legacy filename allowlist for kebab-case lint (#5578)
test(integration): add fake OpenAI server for no-AK daemon tests (#5560)
Fix native voice recorder retry after stop errors (#5609)
[codex] ci(triage): acknowledge slash triage requests (#5594)
[codex] Support artifact auto-open setting (#5617)
test(integration): run no-AK smoke tests on PRs (#5607)
ci: route in-repo PRs' Linux test to self-hosted runner (#5620)
ci(release): queue release failures for autofix (#5551)
ci(audio-capture): cross-compile darwin-x64 prebuild on arm64, drop macos-13 runner (#5643)
ci: harden self-hosted runner routing (follow-up to #5620 review) (#5644)
test(integration): skip qwen serve streaming suite under container sandbox (#5655)

0.18.5 - 2026-06-21

Added

core: add Requesty provider (#5478)
ci: on-demand tmux real-user testing for PRs (#5203)
mcp: support MCP resources and reliably surface prompts (#5544)

Fixed

core: require opt-in for plan mode prompt (#5433)
core: evaluate ignore files named with dot prefixes (#5458)
core: enforce shell directory workspace boundary (#5454)
core: validate lsp socket ports (#5493)
core: parse max output token env strictly (#5491)
core: detect providers by hostname (#5450)
cli: validate ACP glob max results (#5480)
core: allow dot-prefixed plans directories (#5460)
extensions: fetch http marketplaces with http client (#5452)
cli: parse FORCE_HYPERLINK strictly (#5489)
core: parse tool concurrency env strictly (#5496)
cli: enforce custom theme home boundary (#5456)
dingtalk: skip uppercase webhook reaction targets (#5466)
desktop: accept uppercase icon URL schemes (#5470)
cli: reject partial session size values (#5475)
telegram: clear typing intervals on disconnect (#5477)
cli: respect installation path boundaries (#5441)
accept uppercase endpoint URL schemes (#5443)
core: reject fractional computer-use integer strings (#5500)
core: match provider base URL slash variants (#5448)
cli: enforce temp path boundaries for at-file (#5446)
desktop: preserve uppercase favicon URLs (#5463)
desktop: parse NO_PROXY ports strictly (#5498)
serve: validate session reaper timeouts (#5484)
extensions: handle uppercase npm registry schemes (#5437)
core: add missing Token Plan models (qwen3.7-plus, glm-5.2, kimi-k2.7-code) (#5505)
cli: wire ACP model-invocable commands (#5504)
cli: reject partial cpu profile durations (#5486)
desktop: restore locale parity (#5537)
extension: accept uppercase URL schemes in Claude plugin sources (#5461)
desktop: parse server ports strictly (#5509)
desktop: validate generic oauth token responses (#5511)
core: don't treat an empty-parts message as a function call/response (#5494)
desktop: allow double dots in bundle filenames (#5515)
cli: handle truncated remote input files (#5473)
vscode: keep UNC paths absolute (#5542)
desktop: keep sibling paths absolute (#5517)
cli: allow dotfile paths in Web Shell sendFile (#5541)
cli: allow double dots in update archives (#5521)
desktop: separate transform data output lines (#5525)
desktop: handle Windows file mentions (#5523)
desktop: consolidate path boundary checks (#5545)
desktop: reject fractional transfer sizes (#5527)
cli: validate ACP file read windows (#5482)
extensions: accept uppercase marketplace source schemes (#5435)

Performance

core: read current git branch directly from .git instead of spawning git (#5432)

Documentation

triage: Add reuse-before-new-code review check (#5547)

Other

test(core): drop duplicate gitdiff untracked count case (#5468)
test(desktop): update blocked scheme open-url assertion (#5529)
test(core): wait for cron lock probe takeover (#5535)
test(desktop): align interceptor packaging contract (#5531)
test(desktop): enable feedback flag in permission tests (#5533)
ci(release): trigger CI from release branch pushes (#5543)
Use VS Code theme tokens for companion scrollbar (#5488)

0.18.4 - 2026-06-20

Added

serve: make ACP permission timeout configurable (#5260)
i18n: localize tool display names in TUI and web-shell badges (#5220)
serve: add daemon idle detection to GET /health?deep=true (#4934)
hooks: pass original API call ID (toolCallId) to hook system (#4918)
core,cli: Workflow tool token budget + per-run UI surfacing (P5) (#5231)
extensions: add i18n support for extension displayName and description (#5289)
loop: wire prompt-only /loop to self-paced wakeups (#5197)
loop: add second-resolution session wakeup engine (#5182)
desktop: compile macOS 26+ Liquid Glass Assets.car in brand-create (#5284)
channel: add QQ Bot (QQ机器人) channel adapter (#5202)
core: auto-reveal exit_plan_mode tool when entering plan mode (#5311)
skills: add desktop-pet skill for creating pixel-art companions (#4808)
stats: expose token usage for cost visibility (#4564)
cli: show follow-up suggestion in input placeholder (#5145)
config: add settings file change detection via chokidar watcher… (#4933)
cli: show optional response token rate (#5401)
cli: serve the Web Shell UI from qwen serve (#5392)
cli: add persistent history collapse on resume with refined commands (#4085)
web-shell: add extension management (#5398)
extensions: interactive multi-tab /extensions manager (Installed / Discover / Sources) (#4850)

Changed

tools: rename TodoWrite tool display name to TodoList (#5319)
serve: unify session title/displayName into single displayName field (#5002)

Fixed

core: Track supported sed edits in file history (#5141)
vscode-ide-companion: create independent McpServer per IDE session (#5264)
core: read BMP height as signed int32 for top-down bitmaps (#5227)
cli: Preserve mid-turn image messages (#5183)
core: detect dat files by content (#5256)
model: remember selected provider when multiple share a model id (#5173) (#5179)
daemon: centralize mid-turn event constant + recover timed-out drains (#5266)
core: keep DeepSeek presets text-only (#5268)
cli: drop AgentView cleanup setState that can trip React #185 (#5199) (#5286)
core: read WebP VP8X canvas height from the correct byte offset (#5194)
cli: support Ctrl+P/N in completions (#5259)
core: never let telemetry file exporters crash the process (#5246)
cli: correct context filename settings schema (#5269)
core: per-turn tool-call circuit breaker — always-on cap + opt-in loop heuristics (#5234) (#5279)
desktop: handle git branch badge edge cases (#5247)
cli: correct sandbox settings schema (#5272)
weixin: show allowed image directories (#5296)
cli: reject malformed OSC rgb colors (#5307)
web-shell: summarize grep_search results (#5294)
core: read short VP8L WebP dimensions (#5292)
core: track attached stdout fd redirects (#5317)
dingtalk: split oversized markdown lines (#5299)
cli: preserve multiline shell history (#5335)
cli: validate GitHub remote hosts (#5327)
core: preserve migrated command description strings (#5321)
cli: enforce stdin byte limit (#5331)
core: respect home path boundary when tildeifying (#5333)
cli: truncate session picker text by display width (#5338)
core: support GIF image token metadata (#5340)
cli: handle session search graphemes (#5342)
cli: normalize english output language (#5346)
core: parse OAuth resource metadata params (#5344)
core: handle stale worktree session markers (#5229)
core: ignore duplicate provider tool-call ids (#5038)
cli: show thinking in full transcript mode (#5354)
cli: return fresh empty mcp json results (#5349)
weixin: normalize markdown image syntax (#5297)
core: skip sleep inhibitor in headless ssh (#5295)
cli: reject malformed terminal sequences (#5305)
cli: expand windows-style tilde paths (#5298)
core: validate oauth expires_in values (#5356)
core: reject malformed cron numeric fields (#5352)
cli: parse sandbox image registry ports (#5325)
cli: preserve empty MCP prompt args (#5323)
core: reject invalid cron task entries (#5309)
cli: avoid agent composer unmount reset (#5302)
cli: validate channel service pidfile (#5300)
core: preserve invalid schema length strings (#5312)
weixin: confirm the WEBP signature, not just the RIFF prefix (#5285)
cli: reject malformed ACP timeout strings (#5315)
cli: import extension channels via file urls (#5301)
cli: bound streaming thought render buffers (#5314)
cli: window title shows session name instead of model activity status (#5288)
core: keep qwen3.6-flash and kimi-k2.6 presets text-only (#5328)
cli: render a sub-minute duration that rounds to 60s as "1m" (#5287)
Expand Windows ~\ home paths and hide phantom (session) entries in the desktop session list (#5253)
plan-gate: isolate gate agent AbortSignal from parent signal chain (#5185)
core: honor output language in side queries (#4519)
cli: avoid stale git branch watcher setup (#5271)
desktop: detect WebP and AVI in RIFF magic-byte sniffing (#5336)
input: restore IME cursor positioning reverted in #4779 (#4993)
cli: close @path completion dropdown on Enter accept (#4841)
core: fall back to encrypted-file storage for extension secrets when keychain is unavailable (#5221)
core: support whitespace in session metadata fields (#5353)
core: prevent OOM in auto-memory extraction during /quit (#5147) (#5181)
core: expire tokens at buffer boundary (#5360)
cli: validate restore checkpoints before mutation (#5358)
core: honor ripgrep builtin setting at runtime (#5362)
core: create token file on first save (#5367)
cli: preserve workspace trust state for extensions (#5369)
cli: Stop after cancelled permissions (#5258)
core: resolve tilde paths before search permission checks (#5378)
cli: respect sandbox path boundaries (#5375)
cli: update acp cancel test flag (#5384)
core: avoid reconnecting on MCP tool errors (#5382)
core: accept uppercase web fetch schemes (#5391)
cli: preserve equals in mcp env values (#5377)
core: avoid glob prefix cache reuse (#5364)
core: validate grep result limits (#5389)
core: parse grep results with colon paths (#5372)
acp: scrub simple env for spawned children (#5395)
core: pass --no-ask-password to systemd-inhibit to prevent TUI corruption (#5318)
cli: parse sandbox mounts with windows drives (#5388)
core: add GLM-5.2 to Z.AI preset (#5397)
openai: add string tool result compatibility mode (#5399)
cli: clarify cumulative statusline token labels (#5400)
cli: reduce retained interactive tool output memory (#4971)
cli: calculate response rate from phase token delta (#5402)
cli: clarify unavailable model configuration hint (#5403)
cli: gate cron scheduler startup on config initialization (#5022) (#5230)
core: keep estimated token split summing to total (#5420)
core: share memory filename config state (#5419)
channel: scope qqbot session backup path (#5417)
channel: track qqbot close reconnect timer (#5416)
auth: preserve custom provider models on install (#5404)
core: target microcompaction cache disarms (#5407)
channel: keep qqbot token refresh retrying (#5414)
cli: keep keypress handlers current (#5421)
cli: narrow settings enum schemas (#5418)
channel: bound qqbot gateway reconnect retries (#5415)
core: block broad shell self-kill commands (#5409)
cli: preserve trustedFolders comments on save (#4746)
hooks: remove the dead updatedMCPToolOutput field (#5422) (#5423)
cli: accept uppercase URL schemes in mcp add transport detection (#5426)
extensions: accept uppercase URL schemes when parsing install sources (#5429)
core: provide escape path when plan gate is unavailable (#5430)
cli: stabilize extension list spacing (#5445)
weixin: handle uppercase CDN upload schemes (#5439)

Documentation

add CLI subcommands section with qwen sessions list (#5254)
fix SSE ring size errors and add /workflows command (#5205)
Revamp README for clarity and focus (#5257)
cli: document tmux scroll workaround (#5248)

Other

test(cli): enable load config model selection coverage (#5274)
test(cli): cover selection list scroll up (#5276)
test(cli): enable table foreground reset coverage (#5278)
test(core): enable agent headless termination coverage (#5282)
test(cli): enable command search long suggestion coverage (#5283)

0.18.3 - 2026-06-17

Fixed

cli: Stop after cancelled ask_user_question (#5218)
cli: render slash suggestion descriptions on a single truncated line (#5236)
core: always declare exit_plan_mode so plan mode can call it (#5210) (#5251)

Other

ci(release): report required Test checks on release PRs and auto-approve (#5250)

0.18.2 - 2026-06-17

Added

web-shell: support custom footer renderer (#5166)
web-shell: add imperative composer API for external text, tag, and submit control (#5161)
web-shell: per-turn time & tokens on the collapse seam, below the prompt (#5163)
cli: Add daemon status API (#5174)
core+cli: Workflow P4 — meta + /workflows + phase-tree (#4721) (#5094)
daemon: deliver web-shell mid-turn messages into the running turn (#5175)
tui: collapsible thinking blocks with duration timer (#4598)
web-shell: expose transcript event changes (#5193)
cli: add sessions list command with --json and --limit flags (#5187)

Fixed

warn on oversized context instructions (#5073)
core: simplify edit tool description to path only (#5140)
monitor: batch-drain notifications to reduce token waste (#5165)
core: coerce numeric string params in SchemaValidator for MCP tools (#4967)
channels: match sender id as a full segment in SessionRouter (#5116)
agent: make forking explicit; keep omitted subagent_type awaitable (#5155)
core: auto-retry transport stream errors before the first chunk (#5171)
Qwen PR review proxy bypass, stale-worktree cleanup, and footer line break (#5168)
dingtalk: reopen code fences without inserting a blank line (#5204)
cli: hide unconfigured discontinued OAuth model (#5167)
permissions: do not model /dev/tcp and /dev/udp redirects as file I/O (#5196)
core: strengthen exit_plan_mode descriptions to prevent empty plan parameter (#5188)
desktop: keep latest feed stable-only (#5149)
core: read SHORT-typed TIFF dimensions correctly on big-endian files (#5209)
cli: skip highlightAuto for unlabeled code blocks with box-drawing/CJK content (#5198)
coerce non-string tool params to strings for self-hosted LLMs (#4793)
cli: keep sudo-required npm installs on npm instead of migrating to standalone (#5207)
e2e: add daemon_status to serve capabilities baseline; run E2E on PRs (#5211)
web-shell: localize remaining hardcoded UI strings (#5189)
acp: load extension commands in daemon sessions (#5216)
web-shell: simplify collapse metadata display (#5223)
ci: gate PR review and triage on write permission (#5191)

Documentation

fix stale defaults, CLI syntax, and tool naming drift (#5158)
daemon: Refresh daemon docs in English (#5144)
design: DaemonTransport abstraction — pluggable transport for SDK (#5026)
add Qwen Code Desktop release link (#5152)
fix MCP token path, daemon UI event count, add Feishu channel (#5172)
channels: add screenshots to Feishu setup guide (#4983)
fix missing spaces before parentheses in README (#4796)

Other

ci: publish autofix PRs as qwen-code-ci-bot (#5137)
Polish web-shell execution display (#5190)
Fix completed prompt lifecycle race (#5192)
ci(autofix): prioritize recent unattended bugs over stale ones (#5178)
Revert "fix(core): skip auto-title generation when history has no user message" (#5200)
ci: run CLI integration tests in the merge queue (#5224)
ci(autofix): unify issue-fix and review-response into one lifecycle workflow (#5233)
ci(e2e): stop running the E2E matrix on every PR push (#5238)

0.18.1 - 2026-06-15

Added

daemon: gate direct session shell behind explicit opt-in (#5031)
core: persist oversized tool results to disk (#4095 Phase 4) (#5042)
core,cli: bubble background subagent permission prompts to the parent session (#4955)
core: let grep results satisfy prior-read checks (#5043)
skills: support user-invocable frontmatter (#5037)
serve: deliver A2UI surfaces over MCP — bridge extraction and action endpoint (#4961)
mcp: project .mcp.json + workspace approval gating with aligned scope precedence (#4615) (#4713)
web-shell: daemon web-shell improvements — token usage, settings, retry, streaming metrics, hidden commands (#5066)
web-shell: revamp floating todo panel interactions (#5069)
web-shell: show message time on hover (#5079)
core: durable cron jobs — /loop tasks that survive restarts (#5004)
web-shell: show time on parallel-agents box and sub-agent tools (#5084)
sdk,serve: DaemonTransport abstraction + ACP standard compliance (#5040)
core: Workflow P3 — agent({schema, agentType, model, isolation:'worktree'}) (#4721) (#5034)
core: migrate Computer Use to cua-driver (cross-platform) (#5051)
web-shell: reveal full tool detail and auto-collapse finished tools (#5088)
web-shell: make input shortcuts discoverable and clickable (#5096)
cli,web-shell: persist goal status in daemon transcript events (#5098)
acp: dedicated agent permission dialog via _meta.toolName (follow-up to #5085) (#5105)
cli: import Claude MCP servers (#5095)
cli: improve /copy command argumentHint and description (#5110)
web-shell: collapsible TodoWrite history with status diff (#5109)
computer-use: configurable screenshot max dimension (setting + env) (#5122)
web-shell: per-task token & time detail on completed todos (#5118)
web-shell: collapse completed turns to prompt + final answer (#5125)
desktop: show git branch in working directory badge (#5082)
triage: make minimal-change an explicit PR review check (#5146)

Changed

web-shell: remove duplicate agents panel, contain SubAgent views (#5059)
core: unify retry delay policy (#3827)

Fixed

telemetry: Propagate daemon ACP trace context (#5047)
docs: update Coding Plan model list and fix stale references in developer docs (#5054)
daemon: Sanitize logs and type MCP restarts (#5006)
memory: avoid stale tool schema recall (#5058)
core: eliminate OOM from debugResponses accumulation (#4982)
enable fork subagents by default (#4963)
core: preserve background agent launch flags (#5061)
web-shell: improve slash command panel layering (#5078)
serve: Add prompt queue backpressure (#5033)
cli: show full plan for gate failures (#5077)
cli: submit fast tool results after stream end (#5071)
cli: ignore expired live agents in focus navigation (#5070)
cli: drop tool calls after cancellation (#5020)
core: Persist file history snapshot updates (#5057)
cli: add OSC 52 clipboard fallback for SSH environments (#4929)
webui: defer DaemonClient disposal to survive React StrictMode (#5091)
cli,core: harden OOM prevention — idempotent compaction tests, explicit GC, debug log defaults (#4914)
cli: wrap long status lines (#5093)
acp: add internal Kind.Agent, keep ACP wire on 'other' (no-regression) (#5085)
ci: fail PR review job when the run aborts mid-review (#5053)
core: default GLM-5.2+ and GLM-6.x onward to 1M context (#5103)
daemon: Avoid replaying truncated session diffs (#5108)
core: Repair duplicate tool call IDs (#5107)
core: hard-stop repeated identical tool calls (#5036)
core: keep token escalation warm across agent rounds (#5062)
core: bound hard rescue compression retries (#4526)
core: bound foreground shell output capture (#4524)
core: compress when usage metadata is missing (#4528)
core: ignore agent names without active teams (#5115)
core: include response tokens in prompt estimate (#4525)
dual-output: prevent FIFO blocking on startup when no reader connected (#4894)
core: honor skipLoopDetection for the deterministic tool-call loop (#5128)
core: Bound active tool result history (#5111)
desktop: isolate update feed from CLI releases (#5139)
web-shell: remove redundant sanitizeSvg, fix mermaid render failure (#5123)
core: skip auto-title generation when history has no user message (#5120)
release: allow cli-entry.js in standalone dist allowlist (#5153)

Documentation

Refresh daemon developer docs (#4412)
rewrite CLAUDE.md to point to AGENTS.md as authoritative source (#5138)

Other

chore: sync package-lock.json with packages/cli ws dependencies (#5023)
test(cli): Cover rewind selection and confirm flow (#5044)
test: stabilize simple MCP integration check (#5072)
ci: add scheduled autofix workflow for stale bug issues (#4989)
fix release integration env controls (#5121)

0.18.0 - 2026-06-12

Added

installer: verify release assets + switch public docs to standalone entrypoint (#3855)
ci: add @qwen /triage workflow for automated issue and PR triage (#4768)
cli: add standalone auto-update support (#4629)
telemetry: Phase 4b — retry visibility for qwen-code.llm_request (#3731) (#4432)
core: add user prompt expansion hooks (#4377)
telemetry: Phase 3 — qwen-code.subagent span with concurrent isolation (#3731) (#4410)
skills: /skills picker dialog — browse, search, toggle, pick (#4532) (#4533)
cli: enable /remember, /forget, /dream in ACP mode (#4811)
vscode: surface ACP background notifications (#4358)
cli: support /copy N to copy Nth-last AI message (#4761)
cli: prevent system sleep while running (#4434)
ci: add PR review workflow using bundled /review skill (#4549)
cli: add /fork background-agent command (#4780)
core: honor skill allowedTools by auto-approving declared tools (#4704)
skills: enforce auto-skill- directory prefix for auto-generated skills (#4839)
memory: add user-level auto-memory at ~/.qwen/memories/ (#4747) (#4764)
acp: support desktop qwen integration (#4728)
extension: add description field to ExtensionConfig (#4857)
telemetry: inject TRACEPARENT env var into shell child processes (#4906)
hooks: support terminal sequence notifications (#4895)
core: Workflow tool P1 — minimal node:vm sandbox + sequential agent() (#4721) (#4732)
ci: add auto-generated CHANGELOG.md synced from releases (#4872) (#4881)
stats: add interactive /stats dashboard with cross-session tracking (#4779)
core: enable loop/cron tools by default (#4950)
core: declarative agent frontmatter v1 — permissionMode bridge + maxTurns wiring + color allowlist (CC 2.1.168 parity) (#4842)
add Agent Team experimental feature for parallel sub-agent coordination (#4844)
desktop: Add desktop app package with Qwen ACP SDK integration (#3778)
daemon: merge daemon-mode feature batch into main (#4490)
core: layered tool-output truncation, per-message budget, per-tool limits (#4880)
telemetry: add runtime memory/CPU sampling with OTel metric reporting (#4868)
cli: add /compress-fast command for no-LLM rule-based context compression (#4893)
web-shell: add Option+Enter and Cmd+Enter newline shortcuts (#5005)
core: persist file history snapshots for cross-session /rewind (T2.1) (#4897)
core: port declarative-agent mcpServers + hooks (CC 2.1.168 parity follow-up) (#4996)
core: Workflow P2 — parallel() + pipeline() concurrent fan-out (#4721) (#4947)
core: add enter_plan_mode tool and Plan Approval Gate (#4853)
acp: broadcast session title updates to daemon clients (#5035)

Changed

core: remove GitService, migrate /restore to FileHistoryService (#4871)
skills: remove redundant commands and sync e2e-testing skill (#4992)

Fixed

cli: skip thought parts in copy output (#4738)
cli: Improve approval mode display text (#4753)
ui: display model name instead of id in statusline and startup banner (#4741)
ci: fix triage prompt variable expansion, bot identity, and model secret (#4778)
computer-use: auto-approve install in auto-approve modes (YOLO/AUTO_EDIT/AUTO) (#4756)
cli: implement --list-extensions flag handler (#4450) (#4456)
core: handle error variant in disabled skill command delegation (#4804)
cli: remove dead --list-extensions handler from #4456 (#4800)
core: recurse into submodule files when crawling git repos (#4596)
clipboard: use platform-native tools for image paste on Linux (#4647)
core: add multimodal support for qwen3.7-plus (#4803)
core: scope boolean coercion to boolean-typed schema fields (#4618)
cli: bundle extension examples (#4719)
cli: fix vim mode Esc leak, Enter submit, render lag and implement missing VIM commands (#4677)
core: allow intentional foreground sleep for backoff (#4708)
core: honor runtime output dir for auto memory (#4715)
tui: skip cross-group tool merge in mode to eliminate screen flash (#4795)
cli: prevent selection dialog flicker (#4755)
core: inject current date on every user query to prevent stale date (#4798)
ci: coordinate qwen triage and review automation (#4570)
core: add missing closing braces in formatDateForContext test block (#4863)
core: prevent OOM by compacting API history, UI history, and triggering under memory pressure (#4824)
core: don't kill a failed-spawn sleep inhibitor child (sandbox abort on tool use) (#4865)
skills: add bundled skill doc-index validation to docs skills (#4851)
sdk: correct npm package name in SDK install instructions (#4860)
strip runtime snapshot prefix before persisting model.name (#4734)
cli: handle background auto-update breaking cross-authType model switching (#4760)
core: preserve shared baseUrl on auth refresh (#4828)
ci: acknowledge queued qwen review requests (#4847)
core: fix qc-helper skill docs index and config categories (#4848)
ci: normalize dev launcher path assertions on Windows (#4915)
installer: correct broken (404) 'for more info' URL in post-install message (#4916)
core: isolate OpenAI SDK abort listener leak with per-request child controllers (#4810)
acp: prevent session/prompt hang when client ignores mid-turn drain requests (#4925)
core: remove greeting-responder example from agent tool prompt (#4923)
core: remove env from read-only shell command allowlist (#4932)
core: prevent cron scheduler from firing on creation minute (#4946)
core: ensure hard threshold always exceeds auto threshold (#4949)
installer: auto-detect SYSTEM account and default PATH scope to machine (#4903)
skills: use full YAML parser for frontmatter to support block scalars (#4870)
core: give complete intentional-sleep guidance on first rejection for sleep chains (#4948)
core: add qwen3.7-plus to Coding Plan model list (#4953)
openai: default splitToolMedia so tool-returned images reach strict OpenAI-compatible backends (#4917)
cli: fix cursor left-move stalling at hard-wrapped line boundary (#4852)
core: microcompact hook continuations (#4840)
core: preserve teammate identity when resuming a tool call after approval (#4979)
installer: print shell reload hint when new qwen is not picked up (#4960)
auth: time out Qwen OAuth refresh (#4829)
cli: route down-arrow straight to the live agent panel (#4907) (#4911)
core: harden experimental agent-team messaging (#4988)
cli: enable VP scroll at idle prompt and fix viewport height (#4959)
core: parse comma-separated tools/disallowedTools in agent frontmatter (#4935)
cli: make extensions new work when bundled examples are missing (#5009)
goal: persist iteration count across resume so MAX_GOAL_ITERATIONS bounds the whole session (#5000)
desktop: keep composer sendable after idle escape (#4788)
cli: avoid headless browser open crashes (#4716)
cli: debounce resize repaint and clear stale scrollback on settle (#4919)
core: add Tool Fallback rule to system prompt (#4931)
docs: correct stale settings keys, wrong defaults, and missing commands (#4969)
core: stabilize truncated tool retry keys (#4970)
core: stabilize prompt-cache prefix against MCP/skills churn (#4896)
core: fix Windows startup error caused by missing printf command (#5012)
desktop: allow unsigned Windows auto-updates (#5028)
cli: join previous line when Ctrl+U pressed at column 0 (#5011)
tui: Tighten message and tool spacing (#4595)
core: serialize team task claims per agent and add mailbox lock parity (#4981)
core: support .toml command files in extension command discovery (#5017)
stats: dedup usage records by sessionId and skip in-progress writes (#4995)
test: unbreak qwen serve integration suites after the daemon batch merge (#5041)
release: allow fzfWorker.js in standalone dist allowlist (#5049)

Performance

filesearch: move AsyncFzf index construction to a worker thread (#4621)
desktop: add --cli-only flag to skip non-CLI packages during vendor build (#5025)

Documentation

desktop: use main for brand builder skill (#5021)

Other

ci(triage): Fix Qwen triage workflow prompt (#4787)
Revert "feat(cli): enable /remember, /forget, /dream in ACP mode" (#4818)
Harden auto mode self-modification checks (#4572)
Move startup context into system reminders (#4053)
Add InstructionsLoaded hook for instruction file loading (#4665)
Align automated PR review with bundled skill (#4843)
test(integration): drop tight 30s timeout in sleep-interception e2e tests (#4878)
test: cover rewind selector restore options (#4784)
ci: extend qwen PR review timeout to 90min and queue delay to 30min (#4962)
test: cover rewind selector fallback states (#4905)
test(integration): harden flaky sleep-interception e2e against skipped tool calls (#4936)
Fix release workspace test failures (#4980)
chore(daemon): remove dead code and simplify control flow (#4789)
Add /cd command (#4890)
ci(desktop): mac code-signing + App Store Connect API-key notarization (#5013)
test(i18n): raise timeout for slow must-translate locale suites on Windows CI (#5024)

0.17.1 - 2026-06-03

Added

core: add memory pressure monitor (#4403)
cli: Add settings JSON corrupted warning dialog (#4560)
cli: add respectUserColors and hideContextIndicator options for statusline (#4670)
cli: notify when background shells finish (#4355)
core: add simplify bundled skill (#3570)
skills: add agent reproduction workflows (#4118)
cli: virtual viewport for long conversations on ink 7 (#4146)
cli: background housekeeping for stale file-history dirs (#4414)
core: inject context env vars (session/agent/prompt ID) into shell subprocesses (#4649)
core: auto-dump memory diagnostics to disk on pressure detection (#4654)
core: atomic write rollout for credentials, memory, config, JSONL (closes #3681, #4095 Phase 2) (#4333)
cli: Add searchable MiniMax-M3 model setup (#4668)
core,cli: auto-compact follow-up — /compress instructions, PreCompact hook plumb, plan/subagent attachments (#4688)
input: move physical cursor to visual cursor for IME input (#4652)
core: add post tool batch hooks (#4454)
prompt: deduplicate tool guidance between system prompt and tool descriptions (#4569)
cli: add CPU profiling support for Chrome DevTools analysis (#4620)
prompt: enhance system prompts with global reasoning discipline and iterative planning (#4436)
subagent: add fork subagent feature gate and "Don't peek / Don't race" prompt discipline (#4574)
core: strengthen system prompts for reading code before editing, dedicated tool priority, and step-by-step communication (#4375)
skills: add triage skill for issue/PR gatekeeping (#4577)
computer-use: use @qwen-code/open-computer-use fork (signed + notarized) (#4726)

Changed

cli: rename "Default" approval mode to "Ask permissions" (#4625) (#4674)

Fixed

rewind: false "compressed turn" error when mid-turn messages exist (#4580)
core: emit enable_thinking on DashScope when reasoning is disabled (#4505)
core: surface Anthropic empty stream provider errors (#4540)
core: guard oversized resumed history sends (#4531)
cli: stabilize statusline preset ordering (#4634)
config: load home .env vars before settings ${VAR} resolution (#4466) (#4474)
acp: drop discontinued Qwen OAuth method (#4639)
core: enforce adjacent tool results (#4622)
cli: hide completed sticky todos (#4635)
core: harden context error text collection (#4632)
core: apply output language to side queries (#4636)
cli: persist /memory toggle state across dialog reopen (#4650)
docs: Hide internal docs from docs site (#4357)
core: preserve uid in atomicWriteFile to avoid breaking shared-write files (#4431)
cli: use session channel when closing ACP sessions (#4522)
core,cli: replace full-history structuredClone with shallow/tail variants to prevent OOM on resume (#4644)
core: tolerate unsupported Streamable HTTP GET SSE (#4521)
insight: Harden insight facet normalization and empty qualitative handling (#3557)
core: loosen auto-mode classifier timeouts, disable stage-2 thinking (#4680)
core: coerce hostile-provider usage token counts (#4350 part 1) (#4439)
cli: honor list extensions flag (#4673)
ui: distinguish auto approval mode indicators (#4600)
core: disable undici 300s bodyTimeout for no-proxy Node.js path (#4605)
cli: suppress completion menu for history-restored text until edited (#4558)
cli: statusline not re-rendering when switching from preset to command type (#4706)
cli: avoid exit-time history deep clones (#4717)
telemetry: clear span dedup state after chat compression (#3731) (#4660)
core: remove proactive subagent system-reminder injection (#4587)
cli: fix Space key not working in Arena model selection dialog (#4701)

Documentation

add /diff command and auto theme detection documentation (#4699)

Other

Improve hooks matcher display (#4545)
Add AUTO mode denial observability and caps (#4476)
chore(deps): update @google/genai from 1.30.0 to 2.6.0 (#4485)

0.17.0 - 2026-05-29

Added

channels: add Feishu (Lark) channel adapter (#4379)
telemetry: foundation for skill-based RT optimization (P0+P1) (#4565)
computer-use: zero-config built-in via open-computer-use MCP (#4590)

Changed

BREAKING core: replace tail-preservation compaction with summary + restoration attachments (#4599)

Fixed

cli: surface startup warnings on stderr before TUI render (#4448) (#4461)
telemetry: improve LogToSpan bridge error info and TUI handling (#4482)
cli: track model-sent slash command history (#3826)
core: use undici fetch for IDE proxy requests (#4607)
core,cli: label screenshot-triggered compaction accurately in the auto-compact notice (#4623)

Other

Emit PermissionDenied hooks for AUTO classifier blocks (#4376)

0.16.2 - 2026-05-27

Added

cli: do not append trailing space for directory completions (#4092) (#4288)
skills: add memory-leak-debug skill for heap snapshot diagnosis (#4468)
memory: load .qwen/QWEN.local.md as project-local context (#4091) (#4394)
core: limit background agent concurrency (#4324)
core: enable Token Plan cache control (#4495)
BREAKING core: redesign auto-compaction thresholds with three-tier ladder (#4345)
telemetry: client-side HTTP span + opt-in W3C traceparent propagation (#4384) (#4390)
cli: headless / non-interactive runaway-protection guardrails (#4103) (#4502)
cli: dense inline panel + keyboard navigation for parallel agent fan-out (#4477)
prompt: move new app prompt from system prompt to skills (#4567)
worktree: Phase D — startup --worktree flag + symlinkDirectories + PR refs (#4381)
cli: default auto-dream/auto-skill to on and add /memory toggle (#4547)

Fixed

build: clean stale outputs before tsc --build to prevent TS5055 (#4453)
cli: resolve stale closure race in text buffer submit handler (#4470)
weixin: allow Windows image paths inside workspace (#4465)
weixin: send decryptable image payloads (#4464)
core: preserve duplicate object references in safeJsonStringify (#4407)
extension: redact credentialed source diagnostics (#4426)
core: strip additional dangerous interpreter rules (#4371)
cli: require whitespace before @ to trigger file completion (#4487)
auth: align Token Plan model defaults with ModelStudio (#4478)
extension: populate resources when Claude marketplace points at whole folder (#4497)
cli: align /context token breakdown with actual API request (#4512)
sdk: honor canUseTool timeout in CLI control requests (#4491)
core: stop AbortSignal listener leak in long sessions (MaxListenersExceededWarning) (#4366)
core: prevent auto-skill creation from overwriting existing skills (#4437) (#4489)
sdk: Include CLI chunks in SDK package (#4541)
cli: persist MCP server removals (#4535)
models: refresh raw model-derived defaults (#4517)
vscode-ide-companion: exclude workspace packages from NOTICES.txt generation (#4455)
telemetry: attach interaction span to session root context (#4499)
cli: auto-prepend @ when pasting or dropping multiple file paths (#4544)
permissions: make command substitution ask, not deny (#4093) (#4386)

Documentation

tools: document monitor tool (#4356)
agents,pr-template: add Working Principles and restructure PR template (#4496)

Other

ci: split Aliyun OSS sync into a separate post-release workflow (#4492)

0.16.1 - 2026-05-23

Added

telemetry: Phase 4a — TTFT capture + GenAI semconv dual-emit (#3731) (#4417)

Fixed

core,cli: close tool_use↔tool_result invariant across all failure paths (#4176)
vscode: skip redundant tsc build in prepackage to prevent TS5055 (#4401)
core: preserve tab-indented notebook formatting (#4373)
scripts: renormalize CRLF storage for install-qwen-standalone.bat (#4427)
build: tree-shake React reconciler dev build to prevent PerformanceMeasure leak (#4462)
cli: stabilize flaky sticky-todo remeasure test (#4416)
cli: gate mintty OSC 8 detection on TERM_PROGRAM_VERSION ≥ 3.3 (#4420) (#4451)
release: move constants above entry point to avoid TDZ error (#4398)

Other

chore(deps): update express from 4.21.2 to 5.2.1 (#4458)

0.16.0 - 2026-05-21

Added

cli: wrap markdown links in OSC 8 so wrapped URLs stay clickable (#4037)
cli: support batch deletion of sessions in /delete (#3733)
subagents: use fastModel for Explore subagent (#4086)
perf: progressive MCP availability — MCP no longer blocks first input (#3994)
core: strip inline media before chat compaction summary (#4101)
tools: add generic worktree support — EnterWorktree/ExitWorktree + Agent isolation (#4073)
cli: add ModelScope as a built-in third-party API provider (#4150)
core: add image+video support for Qwen3.6-35B-A3B quant variants (#4106)
hooks: Add TodoCreated and TodoCompleted hooks for todo lifecycle events (#3378)
hooks: add prompt hook type with LLM evaluation support (#3388)
core,cli: add generic atomicWriteFile, wire into Write/Edit tools, upgrade @types/node (#4096)
cli: warn users that rewind is disabled in IDE mode (#4122)
cli: argument hint + --auto completion for /rename (#4048)
cli: add baseline /doctor memory diagnostics (#4180)
cli: add session-scoped /goal command with judge-driven turn continuation (#4123)
rewind: add file restoration support to /rewind command (#4064)
skills: add /stuck diagnostic skill for frozen sessions (#4133)
telemetry: unify span creation paths for hierarchical trace tree (#4126)
cli: readline Ctrl+P/N for history and selection navigation (#4082)
cli: add built-in status line presets with interactive dialog (#4120)
cli: add fork-session resume flag (#4159)
telemetry: add interaction span and detailed sensitive attributes (#4097)
core: PR-2.5 — post-promote stream redirect + natural-exit registry settle (#3831 follow-up) (#4102)
cli: add configurable plansDirectory for Plan Mode (#4062)
cli: add structured memory diagnostics JSON (#3785)
core: fail impossible goals (#4230)
serve: add /demo debug page for qwen serve daemon (#4132)
worktree: Phase C — session persistence, hooksPath, Footer + WorktreeExitDialog, three-mode --resume restore (#4174)
core: extend cross-auth fast models to agents (#4153)
cli,core: add Auto approval mode with LLM classifier (#4151)
cli: per-turn /diff with interactive dialog (#4277)
cli: add session path status command (#4124)
core: inject git status into system prompt and refine Explore/git-log guidance (#4110)
core: add NotebookEdit tool for Jupyter notebooks (#3900)
cli: respect /editor preference in Ctrl+X external editor (#4310)
telemetry: Phase 2 — tool.blocked_on_user + hook spans (#3731) (#4321)
installer: add standalone hosted install and uninstall flow (#3828)
telemetry: support custom resource attributes and add metric cardinality controls (#4367)
skills: support priority field in SKILL.md for sorting skill display order (#4155)

Changed

cli: revert dynamic slash command LLM translation (#4145)
core: TaskBase envelope + foreground subagent persistence (#3970)
auth: unify provider config in core, simplify /auth as "Connect a Provider" (#4287)
core: undo x-api-key + Authorization double-emit (#4342) — regresses IdeaLab-style proxies (#4385)

Fixed

core: normalize cumulative OpenAI stream deltas to suffixes (#3896)
cli: auto-restore prompt and preserve queue on cancel (#4023)
core: tag subagent OpenAI JSON logs (#4099)
dashscope: use URL hostname check instead of regex to avoid ReDoS (CodeQL) (#4112)
core: improve runtime fetch options error handling and documentation (#3997)
telemetry: address PR #3847 review follow-ups for trace correlation (#4058)
search: make empty-query exit synchronous and normalize Windows Backspace (#3981)
anthropic: allow cache_control on tool_result blocks (#4121)
core: merge IDE context into user prompt (#3980)
cli: apply /language output to running session without restart (#4143)
core: correct context-usage Footer for prompt size and Anthropic caches (#4109)
core: support cross-auth fast side queries (#4117)
vscode: preserve thinking state and recover missing edit snapshots (#4147)
cli: handle MinTTY Ctrl+Backspace as delete-previous-word (#4059)
cli: preserve debug session across sandbox relaunch (#4060)
hooks: inject SessionStart additionalContext into chat context (#4115)
i18n: Correct zh-TW translations to match Traditional Chinese conventions (#4129)
core: refresh systemInstruction in setTools() so progressive MCP tools reach the model (#4166)
vscode-ide-companion: use existing editor group for diff instead of forcing a new one (#4130)
core: add heap-pressure auto-compaction safety net (#4186)
cli: pass rewind selector test props (#4211)
lsp: expose status and startup diagnostics (#3649)
rewind: restore upstream TOCTOU ordering + heal sticky failed marker (#4216)
test: clear boundedPromise timers to prevent unhandled rejections in abort-and-lifecycle test (#4220)
ui: trim background task results and show newest first (#4094) (#4125)
core: align shell tool description with configured shell (#4170)
cli: include skill base dir in slash commands (#4224)
cli: restore ACP prompt counter on resume (#4233)
core: extend DashScope provider detection with additional hostname rules (#4157)
core: apply tool name migrations at dispatch (#4213)
cli: record mid-turn queued user prompts (#4215)
add cache limits to prevent OOM during build/test (#4188)
core: preserve read-before-write state across idle microcompaction (#4243)
telemetry: Phase 1.5 polish — fallback order, abort-as-result, log/span consistency (#4302)
cli: /status preserves prior error history items (#4169) (#4265)
core: decouple auto-memory recall from main-agent request path (#4172)
core: apply defaultModalities() on env-var-only model config (#4219) (#4262)
cli: block Windows Tab approval-mode toggle when input has a Tab consumer (#4308)
core: mirror Qwen3 reasoning on outbound history (#4294)
test: count result messages instead of assistant messages in multi-model E2E test (#4341)
test: raise timeout for Windows installer end-to-end tests (#4352)
review: harden SKILL.md against weak-model rule skipping (#4340)
cli: remove QWEN_OAUTH gate from feedback dialog (#4316)
core: replace structuredClone with shallow copy to prevent OOM in long sessions (#4286)
core: align session hook matcher targets (#4354)
core: handle MiMo tool-result media (#4281)
core: deduplicate geminiChat recovery continuation text (#3966)
ci: resolve TS5055 release build failure since May 19 (#4383)

Performance

cli: code-split lowlight to cut startup V8 parse cost (#4070)

Documentation

auth: add custom API key wizard PRD (#3583)
user + design docs for --json-schema structured output (#4051)

Other

ci(deps): bump docker/* actions to Node 24 majors (silences GitHub Node 20 deprecation warning) (#4131)
test(integration): pin simple-mcp-server to legacy MCP path until #4163 is fixed (#4164)
chore(deps): re-upgrade ink 6 → 7.0.3 (upstream Static remount fix landed) (#4119)
Add stop hook blocking cap (#4208)
[codex] Allow custom output directory for /export (#4193)
test(perf): skip daemon baseline harness under sandbox (#4234)
test: reduce wait-dependent UI test delays (#3987)
chore(vscode): run development ACP CLI from source (#4283)
Support active goal stream events and non-interactive goals (#4273)
Pin fetch to bundled undici for undici higher versions compatibility (#4238)
chore: add .github/release.yml to support skip-changelog label (#4327)
Expose active goal in stream JSON (#4314)

0.15.11 - 2026-05-13

Added

cli: core built-in i18n coverage (#3871)
core: write runtime.json sidecar for active sessions (#3714)
telemetry: inject traceId/spanId into debug log files for OTel correlation (#3847)
tools: defer low-frequency built-in tools to reduce initial prompt size (#4022)
installer: add standalone archive installation (#3776)
cli: Ctrl+B promote keybind (#3831 PR-3 of 3) (#3969)
cli: add --json-schema for structured output in headless mode (#3598)
skills: Add codegraph skill for PR review risk analysis and conflict detection (#3910)
tools: keep ask_user_question always-visible to surface clarification UX (#4041)
core: improve Anthropic proxy compatibility and enable global prompt cache scope (#4020)
cli: add tools.toolSearch.enabled setting for prefix-caching models (#4069)
core: replace fdir crawler with git ls-files + ripgrep fallback (#3214)
dashscope: support DASHSCOPE_PROXY_BASE_URL for prompt cache via API gateway (#3991)
telemetry: add hierarchical session tracing spans (#4071)

Changed

cli: remove legacy qwen auth CLI subcommand, redirect to /auth TUI dialog (#3959)
core: route side-query LLM calls through runSideQuery chokepoint (#3775)
telemetry: remove dead useCollector setting and unreachable TelemetryTarget.QWEN (#4061)
deps: downgrade ink 7 → 6 to fix Static-remount TUI regression from #3860 (#4083)

Fixed

cli: keep long model stats header on one line (#4032)
test: repair stale --json-schema integration assertion (#4075)
cli: improve rendering on narrow terminals (#3968)
channels: expand tilde in channel cwd config (#4045)
cli: preserve table ANSI color across wrapped lines (#4050)
core: log internal OpenAI JSON requests (#4081)

Performance

core: bound session-list metadata reads to head/tail 64KB; pool buffer; lazy message count (#3897)

Documentation

telemetry: align config and docs semantics for target, outfile, and CLI flags (#4066)

Other

test: stabilize main e2e flakes (#3992)
ci: skip unnecessary release and SDK checks (#3984)
chore(deps): upgrade ink 6.2.3 → 7.0.2 + bump Node engine to 22 (#3860)
chore(core): runtime.json sidecar follow-ups from #3714 review (#4030)
Upgrade GitHub Actions for Node 24 compatibility (#1876)
doc[sdk-python] Expand Python SDK usage documentation (#3995)
ci(e2e): stabilize MCP/CLI flows and cancel stale main runs (#4039)

0.15.10 - 2026-05-10

Added

core: add reactive compression on context overflow (#3879)
memory: add autoSkill background project skill extraction (#3673)
cli: improve slash command discovery (#3736)
core: support QWEN_HOME env var to customize config directory (#2953)
vscode: add message edit/rewind and message metadata UI (#3762)
add /diff command and git diff statistics utility (#3491)
tools: add ToolSearch for on-demand loading of deferred tool schemas (#3589)

Fixed

cli: validate /model command arguments (#3963)
core: log the OpenAI request actually sent on the wire (#3767)
core: drop disabled MCP server from health status registry (#3916)
core: filter Mistral reasoning content at request boundary (#3882)
cli: preserve comments and formatting in settings.json during migration write-back (#3861)
cli: unfreeze Ctrl+O compact-mode toggle on long conversations (#3905)
cli: replace clearTerminal with targeted repaint on resize (#3967)
core: harden reactive compression follow-ups (#3985)
core: throttle shell tool live text updates (#3902)
core: unify Edit/WriteFile prior-read with Claude Code; close #3964 + #3945 (#4002)

Other

test(cli): drop wait-dependent SessionPicker search tests (closes #3977) (#3978)
[codex] fix monitor notifications for subagents (#3933)
feat(telemetry) suppress OpenTelemetry diagnostics from UI (#3986)

0.15.9 - 2026-05-08

Added

telemetry: add sensitive span attribute opt-in (#3893)
add commit attribution with per-file AI contribution tracking (#3115)
sdk-python: replace verbatim release notes inheritance with --generate-notes (#3835)
cli: add Idealab as third-party provider (#3955)
session: add /branch to fork the current conversation (#3539)
core: foreground → background promote integration (#3831 PR-2 of 3) (#3894)
cli: searchable /resume picker with focus-aware modes (#3880)
skills: reload slash commands when SkillManager fires change event (#3923)

Changed

cli: provider-first auth registry with unified install pipeline (#3864)

Fixed

core: per-agent ContentGenerator view via AsyncLocalStorage (#3707)
core: accept partial reads in prior-read enforcement (#3932)
cli,core: live-phase panel-ownership filter + post-delete statusChange emit (#3919)
core: close bound-tool gap on runForkedAgent's YOLO wrapper (#3892)
vscode: mark Qwen OAuth coder-model as Discontinued in model picker (#3948)
cli: show tool details in subagent approval banner (#3956)
cli: trim blank streaming tails from live preview (#3965)
core: route countSessionMessages through parseLineTolerant (#3692)

Other

ci(release): keep skip-ci out of release PR titles (#3950)
chore: Add bilingual requirement to create-issue command (#3952)
[codex] Persist ACP model selection (#3947)
ci: reduce PR test matrix runtime (#3962)

0.15.8 - 2026-05-07

Added

web-templates: add light theme and toggle to /export HTML (#3908)
cli: replace inline AgentExecutionDisplay with always-on LiveAgentPanel (#3909)

Fixed

skills: allow symlinks pointing outside the skills directory (#3915)
core: foreground agent entry lingering in status bar after completion (#3921)
cli: prevent ESC in background tasks dialog from cancelling running request (#3922)
memory: address code review feedback for auto-memory recall (#3866)
cli: use tmux-safe dots spinner to reduce redraw pressure (#3903)

Other

test(sdk): align tool-control E2E with prior-read enforcement (#3898)
ci(issue-followup-bot): render bot comment newlines correctly (#3918)
ci(release): skip CI on the version-bump squash commit on main (#3912)

0.15.7 - 2026-05-07

Added

core: add FileReadCache and short-circuit unchanged Reads (#3717)
core: add shared permission flow for tool execution unification (#3723)
review: expand review pipeline + qwen review CLI subcommands (#3754)
telemetry: define HTTP OTLP endpoint behavior and signal routing (#3779)
core: event monitor tool with throttled stdout streaming (Phase C) (#3684)
cli: add MCP health pill to footer (#3741)
cli: wire Monitor entries into combined Background tasks dialog (#3791)
cli: include monitors in /tasks + add interactive-mode hint (#3801)
sdk-python: add PyPI release workflow (#3685)
core: support reasoning effort 'max' tier (DeepSeek extension) (#3800)
core: hint to background long-running foreground bash commands (#3809)
skills: parallelize loading + add path-conditional activation (#3604)
sdk-python: add network timeouts to release version helper (#3833)
cli: improve export format completion navigation (#3701)
cli: Add ability to switch models non-interactively from the cli (#3783)
weixin: add image sending support via CDN upload (#3781)
core,cli: surface and cancel auto-memory dream tasks (#3836)
cli: route foreground subagents through pill+dialog while running (#3768)
core: enforce prior read before Edit / WriteFile mutates a file (#3774)
cli: customize banner area (logo, title, hide) (#3710)
core: add signal.reason convention for ShellExecutionService (#3831 PR-1 of 3) (#3842)
cli: expand TUI markdown rendering (#3680)

Changed

extract shared release helper utilities (#3834)

Fixed

cli: honor proxy setting (#3753)
cli: restore SubAgent shortcut focus (#3771)
vscode-companion: align package eslint config with root and style cleanup (#3782)
test: restore abort-and-lifecycle stdin-close test to pre-#3723 version (#3777)
core: inject thinking blocks for DeepSeek anthropic-compatible provider (#3788)
cli: stop double-wrapping and double-printing API errors in non-interactive mode (#3749)
telemetry: suppress async resource attribute warning on startup (#3807)
core: address post-merge monitor tool and UI routing issues (#3792)
core: clear FileReadCache on every history rewrite path (#3810)
core: unescape shell-escaped file paths in Edit, WriteFile, and ReadFile tools (#3820)
openai: parse MiniMax thinking tags (#3677)
telemetry: add bounded shutdown timeout and fix service.version resource attribute (#3813)
acp: run auto compression before model sends (#3698)
core: coalesce MCP server rediscovery (#3818)
core: activate skills from discovered result paths (#3852)
core: use per-model settings for fast model side queries (#3815)
core: prevent auto-memory recall from blocking main request (#3814)
sdk-python: standardize TAG_PREFIX to include v suffix (#3832)
cli: prevent file paths from being treated as slash commands (#3743)
core: auto-compact subagent context to prevent overflow (#3735)
core: shrink file diff session records (#3872)
core: rebuild tool registry on subagent Config overrides so bound tools resolve to the subagent (#3873)
core: create temp dir before saving truncated shell output (#3875)
core: improve stream rate-limit retry handling (#3790)
core: address @tanzhenxin's PR-1 review notes (post-merge follow-up to #3842) (#3886)
core: stop per-subagent ToolRegistry on foreground-fork path (#3887)
cli: warn on ignored provider generation config (#3883)

Documentation

core: point background-shell + monitor guidance at both /tasks and the dialog (#3808)
cli: document new banner customization settings (#3885)

Other

chore: remove legacy Gemini workflows (#3725)
Add background agent resume and continuation (#3739)
Feat/stats model cost estimation rebase (#3780)
ci: add Qwen Code issue follow-up bot workflow (#3854)

0.15.6 - 2026-04-30

Fixed

memory: use project transcript path for dream (#3722)
cli: bound SubAgent display by visual height to prevent flicker (#3721)
cli: keep sticky todo panel compact (#3647)
core: replay DeepSeek reasoning_content on all assistant turns (#3747)
cli: correct model precedence — argv > settings > auth env vars (#3645)
core: preserve reasoning_content in rewind, compression, and merge paths (#3579) (#3737)
cli: persist directory add entries (#3752)
lsp: 修复 LSP 文档、isPathSafe 限制，并提升 LSP 工具调用率 (#3615)
vscode-companion: fill slash commands into input on Enter instead of auto-submitting (#3618)
ci: add merge-back PR for stable releases in release workflow (#3764)

Other

chore(core): drop tool token usage tracking (#3727)

0.15.5 - 2026-04-29

Added

core: wire background shells into the task_stop tool (#3687)
skills: add tmux-real-user-testing skill for readable TUI test logs (#3577)
cli: wire background shells into combined Background tasks dialog (#3720)

Fixed

cli: refresh static header on model switch (#3667)
core: inject reasoning_content on DeepSeek tool-call replays (#3729)

Other

mcp config as cli (#1279)

0.15.4 - 2026-04-28

Added

Adds Catalan language support (#3643)
cli: add API preconnect to reduce first-call latency (#3318)
cli: Add argument-hint support for slash commands (#3593)
cli,core: LLM-generated summary labels for tool-call batches (#3538)
cli: add OSC notification support for iTerm2, Kitty, and Ghostty (#3562)
vscode: add tab dot indicator and notification system (#3106) (#3661)
core: model-facing agent control (task_stop, send_message, per-agent transcript) (#3471)
cli: background-agent UI — pill, combined dialog, detail view (#3488)
core: managed background shell pool with /tasks command (#3642)

Changed

config: dedupe QWEN_CODE_API_TIMEOUT_MS env override logic (#3653)

Fixed

vscode-companion: slash command completion not triggering after message submit (#3609)
cli: guard gradient rendering without colors (#3640)
config: support QWEN_CODE_API_TIMEOUT_MS across OAuth and non-OAuth paths (#3629)
cli: add API Key option to qwen auth interactive menu (#3624)
core: recover from }{ glued records on session JSONL load (#3606) (#3656)
core: split tool-result media into follow-up user message for strict OpenAI compat (#3617)
core: handle shell line continuations in command splitting (#3600)
cli: recognize OpenAI-compatible providers in qwen auth status (#3623)
core,cli: stop stripping reasoning on model switch/history load (#3682)
ci: use squash merge for SDK release auto-merge (#3690)
cli: preserve description in subject-bearing thought chunks (#3691)
core: treat ask_user_question multiSelect as optional (#3699)
core: set DeepSeek V4 context to 1M and output to 384K (#3693)
ci: preserve preview version overrides (#3705)

Other

chore(gitignore): add .codex directory (#3665)
Feat/openrouter auth (#3576)
test(cli): remove 8 flaky TUI input tests surfaced by CI history mining (#3694)

0.15.3 - 2026-04-26

Added

vscode: add native context menu copy actions for webview chat (#3477)
cli: add Traditional Chinese (zh-TW) as a UI language option (#3569)
vscode: expose /skills as slash command with secondary picker (#2548)
cli: add conversation rewind feature with double-ESC and /rewind command (#3441)
adds a Space-to-preview affordance to the /resume session picker (#3605)
cli: add sticky todo panel to app layouts (#3507)

Changed

cli: undo OPENAI_MODEL precedence change in modelProviders lookup (#3567) (#3633)

Fixed

cli: memoize useHistory() return to avoid unnecessary re-renders (#3547)
cli: respect OPENAI_MODEL precedence in CLI model resolution (#3567)
cli: add TUI flicker foundation fixes (#3591)
cli: drain runExitCleanup before process.exit in error handlers (#3602)
review: respect /language output setting for local reviews (#3611)
test: update rewind E2E Test 1 assertion after isRealUserTurn fix (#3622)
core: preserve settings-sourced apiKey when registry model envKey is absent (#3495)
telemetry: use safeJsonStringify in FileExporter to avoid circular reference crash (#3630)
core: match DeepSeek provider by model name for sglang/vllm (#3613) (#3620)

Performance

core: cut runtime sync I/O on tool hot path by 91% (#3581)

Documentation

github: tighten PR template validation guidance (#3522)
telemetry: clarify Alibaba Cloud console entry (#3498)

Other

feat(SDK) Add Python SDK implementation for #3010 (#3494)
test(arena): cover select dialog key actions (#3614)

0.15.2 - 2026-04-24

Added

session: auto-title sessions via fast model, add /rename --auto (#3540)
web-search: remove built-in web_search tool, replace with MCP-based approach (#3502)
docs: add qwen-code skills, agents, and updated AGENTS.md (#3575)
vscode-companion: support /export session command (#2592)

Changed

core: make OpenAI converter stateless (follow-up to #3525) (#3550)
vscode-ide-companion: undo #3450 split-stream timestamp sharing (#3573)

Fixed

core: treat empty 'pages' parameter as unset in ReadFile (#3559)
i18n: sync mismatched keys between en.js and zh.js (#3534)
cli: remove residual blank lines after MCP init completes (#3509)
sdk-java: pass custom env to CLI process (#3543)
cli: promote resubmitted history prompt to most recent (#3531)
Strengthen error handling in qwenOAuth2.ts to prevent unhandled 'error' event (#3481)
acp: support SSE and HTTP MCP servers in ACP mode (#3574)
cli: run ACP Agent tool calls concurrently (#2516) (#3463)
cli: disable Kitty keyboard protocol on SIGINT to prevent garbled 9;5u output (#3544)
cli: dispatch queued slash commands through the slash path (#3523)
core: preserve reasoning_content during session resume and active sessions (GH#3579) (#3590)

0.15.1 - 2026-04-23

Added

cli: combine elapsed + timeout in shell time indicator (#3512)

Fixed

core: scope StreamingToolCallParser per stream, not per Converter (#3516) (#3525)
cli: stop slash completion render loop (#3533)

Other

chore: bump version to 0.15.1 (#3541)

0.15.0 - 2026-04-22

Added

acp: add complete hooks support for ACP integration (#3248)
optimize compact mode UX — shortcuts, settings sync, and safety (#3100)
hooks: Add HTTP Hook, Function Hook and Async Hook support (#2827)
memory: managed auto-memory and auto-dream system (#3087)
cli: support multi-line status line output (#3311)
skills: add /batch skill for parallel batch operations (#3079)
background subagents with headless and SDK support (#3076)
core: add path-based context rule injection from .qwen/rules/ (#3339)
cli: add dual-output sidecar mode for TUI (#3352)
bind M-d to a reasonable (Emacs-like) default (#3358)
core: detect tool validation retry loops and inject stop directive (#3178)
mcp: add OSC 52 copy hotkey for OAuth authorization URL (#3393)
vscode-ide-companion: add dedicated agent execution display (#2590)
cli: add early input capture to prevent keystroke loss during startup (#3319)
cli: support refreshInterval in statusLine for periodic refresh (#3383)
core: add dynamic swarm worker tool (#3433)
tools: add Markdown for Agents support to WebFetch tool (#2734)
core: enhanced loop detection with stagnation + validation-retry checks (#3236)
cli: add /doctor diagnostic command (#3404)
vscode-companion: enable Plan Mode toggle and approval UI (#2551)
cli: add session recap with /recap and auto-show on return (#3434)
cli: add bare startup mode (#3448)
vscode-ide-companion: support /insight command (#2593)
cli: add slashCommands.disabled setting to gate slash commands (#3445)
core: PDF text extraction fallback and Jupyter notebook parsing (#3160)
cli: add OAuth configuration flags to mcp add (#3442)
cli: add tool execution progress messages (#3155)
cli: make ACP message rewrite timeout configurable (#3475)
cli: attribute /stats rows to the originating subagent (#3229)
webui: render markdown in generic and web-fetch tool outputs (#3469)
cli: display real-time token consumption during streaming (#2742) (#3329)
retry: add persistent retry mode for unattended CI/CD environments (#3080)
vscode: replace OAuth with Coding Plan / API Key provider setup (#3398)
arena: add comparison summary for agent results (#3394)
session: add rename, delete, and auto-title generation for session (#3093)
cli: cap inline shell output with configurable line limit (#3508)
cli: auto-detect terminal theme ('auto' or unset) (#3460)
cli: Phase 2 — slash command multi-mode expansion, ACP fixes, and UX improvements (#3377)

Changed

core: move fork subagent params from execute() to construction time (#3255)
cli: replace slash command whitelist with capability-based filtering (Phase 1) (#3283)

Fixed

sdk: avoid leaking process exit listeners in ProcessTransport (#3295)
cli: prevent statusline spawn EBADF from crashing CLI (#3264) (#3310)
cli: remember "Start new chat session" until summary changes (#3308)
cli: defer update notifications until model response completes (#3321)
core: limit skill watcher depth to prevent FD exhaustion (#3320)
core: strip thinking blocks from history on model switch (#3315)
core: add shell argument quoting guidance to prevent special char errors (#3327)
cli: reduce terminal redraw cursor movement (#3381)
dingtalk: only suffix '(cont.)' on continuation chunks, not the first (#2977)
dingtalk: preserve empty text after @mention strip instead of falling back (#2978)
dingtalk: remove reactionContext map to stop leak on blocked messages (#2979)
sandbox: fall back to 'latest' tag when image name has no colon (#2962)
scripts: remove duplicate bundle rmSync in clean script (#2964)
integration-tests: honor stdinDoesNotEnd option (#2966)
scripts: Fix "undefined Options: ..." in generated JSON schema for enum settings without descriptions. (#2963)
text-buffer: unify offset-to-position logic (#2969)
weixin: check full 4-byte PNG magic signature (#2970)
cli: re-arm disconnected listener on rebuilt AcpBridge after crash (#2975)
sdk: settle pending next() promise in Stream.return() to prevent hangs (#2981)
cli: auto-submit on number key press in AskUserQuestionDialog (#3407)
tool-registry: add lazy factory registration with inflight concurrency dedup (#3297)
cli: wait for dual output stream shutdown (#3416)
build: invoke tsx directly via node --import instead of npx (#3237)
core: support older Git during repository initialization (#3436)
cli: /clear dismisses active /btw side-question dialog (#3431)
cli: let /btw use live conversation context (#3429)
display ">100%" when context usage exceeds limit (#2766)
ui: constrain shell output width to prevent box overflow (#2857)
core: remove abort listener during cleanup (#3438)
vscode-ide-companion: preserve split stream message ordering (#3450)
core: normalize Windows PATH for MCP stdio servers (#3451)
core: prevent malformed permission rules from becoming tool-wide catch-alls (#3467)
cli: pin /recap above input and align defaults with fastModel (#3478)
cli: rework session recap rendering and add blur threshold setting (#3482)
mcp: make the OAuth authorization URL clickable when wrapped (#3489)
core: recover from truncated tool calls via multi-turn continuation (#3313)
editor: detect Zed.app on macOS when CLI is not in PATH (#3303)
openai: when samplingParams is set, pass it through verbatim (#3458)
Handle missing xdg-open (ENOENT) gracefully to prevent crash (#1675)
core: use empty string instead of null for reasoning-only assistant content (#3499)
cli: inject plan/subagent/arena system reminders in ACP (#1151) (#3479)
core: reject truncated subagent write_file calls (#3505)

Performance

vscode: fix input lag in long conversations (#2550)

Documentation

fix Windows install command to work in both CMD and PowerShell (#3252)
update authentication methods to reflect OAuth discontinuation (#3325)

Other

test(core): stabilize glob truncation tests (#3322)
test(integration): match new cron notification format in interactive tests (#3402)
Fix typo in class name (#2189)
test(core): update scheduler registry mock (#3415)
ci(stale): enable 60+30 stale/close policy for pull requests (#3375)
Revert "feat(core): add dynamic swarm worker tool" (#3468)
test(integration): switch settings-migration probe from --help to mcp list (#3486)

0.14.5 - 2026-04-15

Added

cli/sdk: expose /context usage data in non-interactive mode and SDK API (#2916)
cli: add startup performance profiler (#3232)
core: implement fork subagent for context sharing (#2936)
vscode-ide-companion: add /account for account display (#2984)
acp: LLM-based message rewrite middleware with custom prompts (#3191)
auth: discontinue Qwen OAuth free tier (2026-04-15 cutoff) (#3291)

Fixed

core: detect rate-limit errors from streamed SSE frames (#3246)
vscode: limit session tab title length to prevent tab bar overflow (#3249)
core: respect custom Gemini baseUrl from modelProviders (#3212)
core: allow thought-only responses in GeminiChat stream validation (#3251)
cli: make /bug easier to open in terminals without hyperlink support (#3257)
cli: ignore literal Tab input in BaseTextInput (#3270)
channels/dingtalk: prioritize senderStaffId over senderId for allowedUsers matching (#3294)
cli: block discontinued qwen-oauth model selection in ModelDialog (#3299)

0.14.4 - 2026-04-13

Added

cli: CJK word segmentation and Ctrl+arrow navigation optimization (#2942)
replace text input with model picker for Fast Model in /settings (#3120)
show description for active setting in /settings dialog (#3116)
i18n: add French (fr-FR) locale support (#3126)
cli: queue input editing — pop queued messages for editing via ↑/ESC (#2871)
channels: add voice message support in TelegramAdapter (#3150)
cli: support tools.sandboxImage in settings (#3146)
cli: warn when workspace overrides global modelProviders (#3148)
hooks: Add StopFailure and PostCompact hook events (#2825)
core: intelligent tool parallelism with Kind-based batching and shell read-only detection (#2864)
add contextual tips system with post-response context awareness (#2904)
subagents: propagate approval mode to sub-agents (#3066)
skills: add model override support via skill frontmatter (#2949)
cli: support bare exit/quit commands to exit the CLI (#3201)
subagents: add disallowedTools field to agent definitions (#3064)
core: add microcompaction for idle context cleanup (#3006)

Changed

merge test-utils package into core (#3200)

Fixed

vscode: force fresh ACP session on new-session action (#2874)
cli: prioritize slash command completions (#3104)
cli: improve markdown table rendering in terminal (#2914)
prevent statusline script from corrupting settings.json (#3091)
cli: check NEWLINE before SUBMIT in TextInput multiline mode (#3094)
input: preserve tab characters in pasted content (#3045)
use latest assistant token count on resume instead of stale compression checkpoint (#3109)
upgrade normalize-package-data to 7.0.1 (fixes DEP0169 warning) (#2865)
core: cap recursive file crawler at 100k entries to prevent OOM (#3138)
channels: apply proxy settings to channel start command (#3136)
lazy-load channel plugins to eliminate DEP0040 startup warning (#3134)
core: fall back to CLI confirmation when IDE diff open fails (#3031)
core: handle empty OAuth refresh response body (#3123)
followup: fix follow-up suggestions not working on OpenAI-compatible providers (#3151)
cli: recover from stuck bracketed-paste mode and keep Ctrl+C reachable (#3181)
cli: set qwen3.5-plus as default model for Coding Plan (#3193)
core: respect respectGitIgnore setting in @file injection path (#3197)
core: show clear error when MCP server cwd does not exist (#3192)
cli: honor --openai-api-key in non-interactive auth validation (#3187)
cli: stop refilling input with prior prompt on cancel (#3208)
core: allow Unicode characters in agent names (#3194)

Documentation

readme: Add announcement for Qwen OAuth free tier policy adjustment (#3207)
update quota exceeded alternatives to OpenRouter and Fireworks (#3217)

Other

chore: remove legacy directories (.gcp, .aoneci, hello, .allstar) (#3199)
ci(release): parallelize release validation (#3132)
chore: bump version to 0.14.4 (#3209)

0.14.3 - 2026-04-10

Added

plan: add "Yes, restore previous mode" option when exiting plan mode (#3008)
review: enhance /review with deterministic analysis, autofix, and security hardening (#2932)
ui: add customizable status line with /statusline command (#2923)

Changed

centralize IDE diff interaction in CoreToolScheduler (#2728)
rename verboseMode to compactMode for better UX clarity (#3075)

Fixed

ui: Remove dead dirs state and unused hook parameter from InputPrompt (#2891)
followup: prevent tool call UI leak and Enter accept buffer race (#2872)
core: add getDefaultPermission and allowExternalPaths to ripGrep tool (#2948)
webui: fix chat input scrollbar not draggable in VS Code plugin (#3038)
bundle: inline tree-sitter WASM for bundled installs (#2985)
cli: serialize subagent confirmation focus to prevent concurrent input conflicts (#2930)
permissions: match env-prefixed shell commands against saved permission rules (#2850)
prevent Shift+Tab from accepting prompt placeholder suggestion (#3060)
weixin: add missing iLink headers to QR code login flow (#3044)
improve /model --fast description clarity (#3077)
cli: add 'detail' subcommand to /context command (#3042)
persist ProceedAlways permission outcome in compact mode (#3069)
add --fast hint to /model description for discoverability (#3086)

Other

chore: remove outdated pr-review skill (#3028)
test: add tests for confirmation-bus, prompt-registry, and cli/core modules (#2272)
[codex] fix checkpointing init in non-repo directories (#3041)
chore: bump version to 0.14.3 (#3112)

0.14.2 - 2026-04-08

Added

cli: implement /plan command for plan mode (#2921)
core: thinking block cross-turn retention with idle cleanup (#2897)
core: adaptive output token escalation (8K default + 64K retry) (#2898)
add bugfix workflow, test-engineer agent, and debugging skills (#2881)
add qwen3.6-plus model to ModelStudio Coding Plan (#3015)

Fixed

vscode-ide-companion: fix blank screen in VS Code 0.14.1 webview (#2959)
hooks: preserve null exit code from signal kills instead of collapsing to 0 (#2976)
cli: disable follow-up suggestions by default (#2954)
cli: fix csiUPrefix error in Linux/Wayland (#2995)
cli: sync packages/cli version and sandboxImageUri to 0.14.2 (#3026)

Other

bump version to 0.14.2 (#3020)

0.14.1 - 2026-04-07

Added

cli: enhance /btw side question with improved prompt and Ctrl+C/D cancel (#2776)
cli, webui: add follow-up suggestions feature (#2525)
webui: unify remaining tool display labels (#2595)
allow Ctrl+Y to skip rate-limit retry delay immediately (#2420)
prompt: add dangerous actions behavior guidance in system prompt (#2889)
core: implement mid-turn queue drain for agent execution (#2854)
to #2767, support verbose and compact mode swither with ctrl-o (#2770)

Changed

tools: remove duplicate proxy setup in WebFetchTool (#2888)

Fixed

hooks: clean up abort listener in error handler (#2841)
cli: commit pending AI response before adding hook system message (#2848)
subagents: preserve session subagents during cache refresh (#2895)
telegram: send only failed chunk as plaintext fallback (#2894)
auth: only release token refresh lock if it was acquired (#2893)
extensions: handle individual extension update check failures (#2892)
mcp: clear OAuth callback timeout on all completion paths (#2890)
mcp: clean up directory listener on connect failure (#2896)
permissions: allow non-core tools to bypass coreTools allowlist (#2843)
prevent output-language.md from being overwritten on startup (#2842)
cli: restore ? shortcuts in vim normal mode (#2884)
cli: prevent ideCommand failure from breaking all slash commands… (#2822)
improve ACP connection reliability with spawn retry and auto-reconnect (#2804)
vscode: inherit model selection for new chat tabs (#2802)
hooks: parse JSON output on exit code 2 to preserve hook additionalContext (#2815)
cli: remove quote-based drag detection to prevent input lag (#2837)
cli: restore previous theme on /theme cancel (refs #2833) (#2834)
extensions: await async calls in extension refresh chain (#2835)
cli: preserve runtime-added models when saving settings (#2455)
tools: exit_plan_mode now exits correctly in YOLO mode (#2586)
vscode: remove @vscode/vsce from devDependencies to fix local build (#2824)
webui: remove @qwen-code/qwen-code-core dependency (#2902)
core: coerce stringified JSON values for anyOf/oneOf MCP tool schemas (#2858)
weixin: add missing iLink-App-Id and iLink-App-ClientVersion headers (#2943)

Other

chore: bump version to 0.14.1 (#2849)
Fix Markdown table cell separator escaping in MarkdownDisplay.tsx (#2463)
Remove CODEOWNERS file (#2937)

0.14.0 - 2026-04-03

Added

hooks: remove experimental flag and add disabled state UI (#2781)
vscode: add retry logic and auto-reconnect for ACP connection (#2666)
add cross-provider model selection for subagents (#2698)
extension: Add npm registry support for extension installation (#2719)
cron: add in-session loop scheduling with cron tools (#2731)
channels: add extensible Channels platform with plugin system and Telegram/WeChat/DingTalk channels (#2628)
mcp: add reconnect command and implement auto-reconnect logic (#2428)

Changed

ui: improve hook event handling with dedicated history items (#2696)
PR #2666 ACP retry/reconnect logic (#2792)

Fixed

add .qwen path replacement in markdown files during extension install (#2769)
normalize proxy URLs to support addresses without protocol prefix (#2745)
make /compress handle tool-heavy conversations correctly (#2659)
core: robustly resolve tree-sitter WASM path for symlinked CLI installations (#2764)
prevent subagent telemetry from overwriting main agent footer context (#2765)
upgrade @lydell/node-pty to 1.2.0-beta.10 to fix PTY FD leak on macOS (#2777)
allow web fetch approvals in plan mode (#2763)
prevent orphan ACP processes on tab close and clean up MCP subprocesses on shutdown (#2662)
cli: enhance KeypressProvider with kitty sequence timeout manage… (#2612)
delete design doc (#2789)
resolve punycode to userland package and skip env var test in sandbox (#2796)
hide skills with cron allowedTools when cron is disabled (#2811)

Other

Enhance /review: add verification, false positive control, and PR comments (#2687)
chore(channels): make plugin-example private and remove from release workflow (#2801)
🎉 feat: add Qwen3.6-Plus model support (#2820)

0.13.2 - 2026-03-30

Added

add bundled qc-helper skill, qwen-code-claw reference, and README claw guide (#2623)

Fixed

docs: update references from Bailian to ModelStudio in README an… (#2714)
shell: resolve Git Bash path for node-pty on Windows (#2733)
resolve /clear command and ESC key lag caused by hooks system (#2656)
preserve original line endings (CRLF/LF) when editing files (#2707)
core: resolve tree-sitter wasm path for symlinked CLI (#2744)
cli: prevent terminal response leakage on high-latency SSH (#2718)
shell: remove command substitution deny check from getDefaultPermission (#2747)
make list_directory integration test more deterministic (#2752)

Documentation

clarify envKey usage and add env field examples (#2715)

Other

chore: bump version to 0.13.1 (#2716)
chore: release v0.13.2 (#2750)

0.13.1 - 2026-03-27

Added

hooks: Add comprehensive hook execution telemetry (#2421)
hooks ui: refactor ui for Qwen Code hooks (#2602)
human-readable permission labels, deny rule feedback, and multi-dir search improvements (#2637)
auth: implement Alibaba Cloud Standard API Key support (#2668)

Fixed

extensions: support non-GitHub git URLs for extension installation (#2539)
cli: /memory show --project and --global now display all configured context files (#2368)
mcp: restore trust+isTrustedFolder permission check in getDefaultPermission (#2642)
cli: preserve selected auth type on startup auth failure (#2080)
vscode-ide-companion: improve ACP error handling to prevent silent loading hangs (#2546)
vscode-ide-companion: silence secondary sidebar warning on older VS Code versions (#2545)
lsp: improve C++/Java/Python language server support (#2547)
vscode-ide-companion: preserve model metadata on switch (#2591)
windows: support git bash/MSYS2 shell detection on Windows (#2645)
shell: handle PTY race condition errors gracefully (#2611)
acp-integration/agent: clear stale subagent diff confirmation after IDE accept (#2631)
use config working directory for OpenAI logger path resolution in ACP mode (#2675)
@ file search stops working after selecting a slash command (#2694)
acp: align permission flow across clients (#2690)

Documentation

add hooks documentation and fix JSON schema (#2679)

Other

test(sdk): improve tool control docs and add pattern matching tests (#2644)
test(sdk): improve permission message pattern matching (#2712)

0.13.0 - 2026-03-23

Added

add system prompt customization options in SDK and CLI (#2400)
hooks: implement hooks extension mechanism (#2352)
core: execute task tools concurrently for improved performance (#2434)
arena: Add agent collaboration arena with multi-model competitive execution (#1912)
ui: Display token usage in the loading/progress indicator (#2445)
vscode-ide-companion: add Tab key fill-only behavior for completions (#2431)
add /context command to display context window token usage breakdown (#1835)
support skills in .agents directory and other provider directories (#2202)
add auth CLI command and Qwen Code Claw skill (#2440)
export: add metadata and statistics tracking (#2328)
hooks: Implement 10 core event hooks for session lifecycle and tool execution (#2203)
support permission (#2283)
add .agents/skills as a skill provider directory (#2476)
vscode-ide-companion: add image paste support (#1978)
storage: support configurable runtime output directory (#2127)
core: add Explore agent and rename TaskTool to AgentTool (#2489)
hooks: use extension dir files instead of tmp dir files (#2478)
cli: add /btw slash command for ephemeral side questions (#2371)

Changed

core: improve error handling and quota detection (#2458)
Refactors the VS Code file completion system to use fuzzy search (#2437)

Fixed

pipeline: handle duplicate finish_reason chunks from OpenRouter (#2403)
cli: show newest-first history for Ctrl+R command search (#2425)
Ensure message_start and message_stop events are paired in SDK streaming (#2448)
core: add truncation support for MCP tool output (#2446)
vscode-ide-companion: update URI handling for Windows paths (#2457)
test: update LoadingIndicator snapshot for correct output alignment (#2469)
correct token limits for MiniMax-M2.5 and GLM models (#2470)
update TOS link in VS Code extension README (#2495)
preserve modalities during OpenAI logging request conversion (#2473)
clean up ACP connection state when child process exits (#2472)
vscode-ide-companion: pass proxy configuration to CLI (#2501)
include bundled skills directory in published package (#2521)
update Discord invite link to permanent URL (#2535)
web-fetch: add simplified system instruction to prevent AI greeting responses (#2610)
hooks: terminate hook child processes when user exits CLI (#2607)

Documentation

rename QWEN.md to AGENTS.md to follow community best practices (#2527)
add Screenshots/Video Demo section to PR template (#2533)

Other

chore: bump version to 0.13.0 (#2451)
Fix shell permission parsing and test-created debug artifacts (#2536)

0.12.6 - 2026-03-17

Fixed

improve max_tokens handling with conservative defaults (#2438)

Other

chore: bump version to 0.12.6 (#2442)

0.12.5 - 2026-03-16

Fixed

shell: resolve Windows encoding issues for non-ASCII output (#2423)

Other

test(sdk): simplify integration tests for reliability (#2410)
chore: bump version to 0.12.5 (#2422)

0.12.4 - 2026-03-16

Added

skills: add bundled /review skill for out-of-the-box code review (#2348)
skills: add docs audit and update helpers (#2397)

Fixed

insight: handle individual LLM failures in qualitative insights (#2341) (#2361)
core: add deepseek-r1 to output token limit patterns (#2362)
i18n: localize slash command descriptions (#2333)
core: guard against empty choices in convertOpenAIResponseToGemini (#2364)
extension: disable symlinks on Windows during git clone to fix install failure (#2286)
core: reject PDF files to prevent session corruption (fixes #2020) (#2024)
cli: allow /dev/ptmx and /dev/ttys* in macOS permissive sandbox (#2391)
correct hooks JSON schema type definition (#2280)
core: strip orphaned user entries before retry to prevent API errors (#2367)
core: correctly capture rapid pty outputs in interactive shell mode (#2389)
vscode: prevent race conditions in prompt cancellation and streaming (#2374)
core: improve shell tool truncation, simplify tool output handling, and remove summarization (#2388)
remove redundant plan files (#2407)
core: normalize Windows PATH-like env keys for shell execution (#1904)
auto-detect max_tokens from model when not set by provider (#2356)

Documentation

explain Docker sandbox runtime and Java usage (#1642)
integration: add ACP Registry for Zed and JetBrains integration docs (#2372)

Other

Docs/subagent system prompt limits (#2001)
Keep rejected plan content visible in plan mode (#2157)
chore(CODEOWNERS): remove required reviewers for vscode-ide-companion and webui packages (#2408)
Increase DEFAULT_OUTPUT_TOKEN_LIMIT from 8K to 16K (#2411)

0.12.3 - 2026-03-13

Added

mcp: improve OAuth auth UX - post-auth feedback, i18n, clear auth, and bug fixes (#2327)

Fixed

ide: resolve IDE connection issues in some VSCode clients and optimize connection config lookup (#2322)
core: correct GPT-5.x input token limit to 272K (#2345)
shell: pass args as string on Windows to prevent quoting issues (#2347)
core: disable node-pty on older Windows builds with broken ConPTY (#2349)
improve qwen mcp add option handling for arrays (#2245)
cli: prevent Ctrl+F from leaking to PTY as ^F artifact (#2350)
core: remove duplicate exports in packages/core/src/index.ts (#2265)
cli: remove unused debug log session setup in loadSettings (#2355)

Other

Refactors FileSystemService interface to use ACP-aligned request/response objects (#2344)

0.12.2 - 2026-03-12

Added

core: add truncation support to LS tool (#2324)

Fixed

export command should use current session ID instead of loadLastSession (#2268)
webui: add Tab key support to CompletionMenu (#2308)
core: convert array content to string for DeepSeek API (#2320)
improve ACP file operation error handling (#2298)
remove QR code from OAuth authentication UI to prevent screen flickering (#2315)
clear retry error messages promptly after auto-retry succeeds (#2326)

Other

chore: add yiliang114 as code owner for vscode-ide-companion and webui (#2312)
chore: Release v0.12.2 (#2307)

0.12.1 - 2026-03-11

Added

cli: change temporary filename prefix to qwen-edit- (#2045)
vscode-ide-companion: add sidebar view and multi-position chat layout (#2188)

Fixed

mcp: use scopes from protected resource metadata (RFC 9728) (#2212)
cli: clear static error message when starting new query (#2110)
clean up MCP server display and add CONCAT merge strategy for mcp allowed/excluded lists (#2219)
hooks: Fix failing hook integration tests by updating hook scripts to create hook_invoke_count.txt (#2230)
hooks: Remove useless expect (#2238)
core: skip openDiff in YOLO mode to prevent VS Code editor from opening (#2221)
cli: suppress Windows pty resize race condition (#2289)
vscode-ide-companion: map ENOENT errors to ACP RESOURCE_NOT_FOUND in readTextFile (#2291)

Other

improve readability of context compression description (#2224)
refactore: Start qwen after installation (#2290)

0.12.0 - 2026-03-09

Added

add tabWidth support for code highlighting and replace tabs with spaces in CodeColorizer (#2077)
export-html: viewer for tool call results (#2085)
terminal-capture: add streaming capture with GIF generation (#2116)
commands: add custom QC commands for GitHub workflows (#2117)
add support for printable CSI-u keys in KeypressContext (#1827)
add JSON Schema validation for VS Code settings (#1830)
hooks: Implement hooks system infrastructure with CLI and UI management (#1988)
shell: enable PTY by default and various enhancements (#2108)
Enhance MCP Management TUI with dynamic enable/disable and runtime updates (#1831)
Add interactive TUI for extension management (#2008)
Implement AskUserQuestionTool for interactive user queries (#1828)

Changed

cli: consolidate message components and fix leading icon display issues (#2120)
unify sandbox configuration naming and improve telemetry config (#1793)
acp: migrate ACP integration to @agentclientprotocol/sdk (#2063)

Fixed

cli: parse markdown command frontmatter on Windows CRLF/BOM (#2078)
cli: ignore stream-json input format in TTY mode to prevent hanging (#2047)
core: prevent duplicate function-call yields from trailing stream chunks (#2125)
ide: add async DNS check for host.docker.internal in container environments (#1817)
handle symlinks during extension installation (#2056)
preserve original encoding when reading/writing non-UTF-8 files (#2073)
install: Add tips and fix installation issues for installation scripts (#2118)
core: add independent retry budget for transient stream anomalies (#2126)
windows: resolve silent failures caused by CRLF line endings (#1868) (#1890)
cli: keep AGENTS.md enabled by default context reset (#2082)
core: remove LLM-based loop detection and enable skipLoopDetection by default (#2092)
keyboard: handle Kitty keypad private-use keycodes (#2137)
hooks: fix result aggregator for userPromptSubmit and fix enable for integration test (#2139)
hooks: Move enable from hooks to hookConfig and add max turns (#2156)
Hooks online integration test failed (#2183)
improve MCP Management & Extension Management TUI based on 0.12.0 feedback (#2208)
test: use toContain instead of toBe for file content assertion (#2218)

Other

chore: bump version to 0.12.0 (#2090)
Refactor settings migration to sequential framework with atomic file writes (#2037)
chore: add @DragonnZhang to CODEOWNERS (#2138)

0.11.1 - 2026-03-03

Added

support AGENTS.md as default context file (#2018)
cli: add Ctrl+Y shortcut to retry failed requests (#2011)
cli: improve auth dialog UX with clearer three-option layout (#2030)
i18n: strengthen output-language.md template to enforce language compliance (#2005)

Changed

core: extract single tool-call execution path (#1999)

Fixed

subagent: append output-language.md to subagent system prompt and prioritize project-level settings (#1993)
core/rateLimit: add support for rate limit error code 1305 and custom retry error codes (#1995)
logging: reduce excessive streaming output in session history logs (#2041)
add modality defaults to prevent API errors when reading PDFs and other media (#1982)
detect and protect against truncated tool call output (#2021)
acp: add session/set_config_option method to enable config option updates from Zed UI (#2059)
dashscope: support subdomain URL patterns for DashScope provider detection (#2060)

Documentation

update installation instructions (#1994)

Other

chore: bump version to 0.11.1 (#2026)
Fix ACP protocol compatibility issues with Zed editor (#2017)

0.11.0 - 2026-02-28

Added

Add clipboard image support and attachment UI to CLI (#1612)
support MCP readOnlyHint annotation in plan mode (#1826) (#1837)
Add insight command for personalized programming insights (#1593)
auth: add automatic backup of settings.json before auth modification (#1952)
cli: Increase /insight feature exposure via weighted tips (#2019)

Fixed

Installation script permission check for arch os and add sudo check (#1877)
normalize Windows paths to lowercase for case-insensitive session matching (#1768)
enforce plan mode restrictions in ACP sessions (#1812)
test: keep plan mode active during ACP integration test (#1956)
change workspaceFolders capability to boolean for LSP servers (#1929)
unblock input after ESC cancel (#1796)

Documentation

enhance modelProviders documentation with comprehensive examples and behavior clarifications (#1927)
fix documentation errors in commands and model-providers (#1962)

Other

📸 terminal-capture: CLI Terminal Screenshot Automation (#1840)
chore: bump version to 0.11.0 (#1953)
Merge coder-model and qwen3.5-plus, remove vision auto-switching (#1852)
Rename GEMINI_CLI_INTEGRATION_TEST to QWEN_CODE_INTEGRATION_TEST and refactor sandbox user handling (#1966)

0.10.6 - 2026-02-24

Added

add third-party models (glm-4.7, kimi-k2.5, qwen3-coder-next) to Coding Plan (#1907)
runner: support auth_type for model configuration (#1874)
update bailian coding plan models (#1931)

Fixed

fs: Improve BOM detection with length check and codePointAt (#1857)
update security vulnerability reporting channel (#1921)

Other

chore: bump version to 0.10.5 (#1886)
Fix release workflows: standardize notes generation and add prerelease labels (#1885)
chore: exclude .qwen/commands/ and .qwen/skills/ from gitignore (#1847)

0.10.5 - 2026-02-18

Added

add qwen3.5-plus model support for Coding Plan (#1867)

Other

chore: bump version to 0.10.4 (#1864)

0.10.4 - 2026-02-18

Documentation

add news banner about Qwen3.5-Plus launch (#1854)

Other

Fix sandbox user permission in integration tests (#1843)
Add Coding Plan Global/Intl region support (#1860)
chore: bump version to 0.10.3 (#1863)

0.10.3 - 2026-02-16

Added

update readme (#1853)

Documentation

improve settings.json configuration guide with quick setup examples (#1850)

Other

chore: bump version to 0.10.2 (#1844)

0.10.2 - 2026-02-14

Added

add TPM throttling error handling with 1-minute retry delay (#1791)

Changed

cli: unify Escape key handling in AppContainer (#1824)

Fixed

Fix node installation permission issue in shell script (#1819)
prevent AbortSignal listener memory leak (#1811)
correct showLineNumbers default value to true (#1813)
support JSON Schema draft-2020-12 for MCP tools (fixes #1818) (#1821)

Documentation

update authentication documentation with Coding Plan setup guide (#1800)

Other

chore: bump version to 0.10.1 (#1808)
Add dev launch config and preserve existing NODE_OPTIONS (#1784)
Fix abort listener accumulation in subagent while loop (#1825)
Fix auth UI to use semantic theme colors and correct selection sync (#1823)
Add --session-id support for CLI and SDK (#1822)

0.10.1 - 2026-02-11

Added

add MCP tool progress update support in TUI and SDK mode (#1756)
add Coding Plan authentication mode with unified AuthDialog (#1788)
coding-plan: implement Coding Plan configuration management and update prompts (#1805)

Fixed

Warning in installation shell script (#1771)
ui: resolve model not updating in top-right corner (#1662)
cli: use PowerShell Get-Command for Windows sandbox detection (#1604)
prioritize local path detection in extension installation (#1770)
auth-model-login-ui: prevent Enter key from triggering empty message submission (#1773)

Other

Fix SDK MCP integration tests by updating hardcoded tool names to use constants (#1769)

0.10.0 - 2026-02-09

Added

query: add support for resuming sessions with session ID (#1714)
Remove Smart Edit tool and ClearcutLogger (#1684)
sdk: add resume, continue options and extend authType support (#1726)
debug mode output refactor — route console calls to logfile-first debugLogger (#1610)
paste: add large paste placeholder and fix enter-submit on macOS (#1713)
promote Agent Skills from experimental to stable (#1738)
add source information tracking in telemetry logs (#1653)
settings: add settings.env field for environment variable configuration (#1751)

Changed

i18n: translate Agent as 智能体 (#1718)
remove read_many_files tool, add readManyFiles utility for user @-commands (#1673)

Fixed

docker: fix build error and enable manual version builds (#1722)
settings: rename negative settings to positive naming (disable* -> enable*) (#1330)
clarify is_background parameter is required in docs and examples (#1716)
vscode-ide-companion: Fix UI display issues with server-side timestamp and file path extraction (#1682)
ui: resolve auth not updating in top-right corner (#1670)
use openai model instead of index=0 in acp integration test (#1733)
cli: route sandbox diagnostic messages to stderr (#1735)
cli: prevent Tab key from cycling approval mode when autocomplete is active on Windows (#1736)
mcp: improve MCP server management and authentication (#1752)
core: properly handle MCP multi-part tool results in OpenAI converter (#1755)
integration-tests: correct MCP tool name in simple-mcp-server test (#1763)

Documentation

Update Linux/Mac installation commands in README (#1739)

Other

ci(sdk-release): use stable CLI tags for SDK releases (#1710)
add hint for installing external source extensions (#1694)
Feat/javasdk alpha 202501 (#1717)
Add export command for session history with markdown and HTML formats (#1515)
Add FORK_MODE support to ProcessTransport for Electron IPC integration (#1719)
Fix ACP model selection to handle all configured authentication types (#1555)
chore: Reduce Qwen OAuth free quota from 2000 to 1000 requests per day (#1730)
Add CLI source selection for SDK releases and fix subagent output handler (#1732)
Fix CLI argument parsing for /dist/cli/cli.js entry point (#1758)

0.9.1 - 2026-02-05

Added

core: add symlink support for skill manager (#1690)
Preserve UTF-8 BOM when editing files (#1680)

Fixed

core: properly cleanup MCP server subprocesses on exit (#1285)
cli: expand MCP @server: resource references (#1531)
core: auto-enable WebFetch and WebSearch tools in Plan mode (#1686)
normalize skill file content in extensions to handle BOM and CRLF (#1667)
ci: honor manual preview version input (#1665)
core: handle heredoc in command substitution guard (#1701)
core: Preserve trailing whitespace in newString during edits (#1688)
enable Shift+Tab shortcut in Windows PowerShell (#1607)
core: enforce tool restrictions in subagents (#1691)

Other

test(cli): stabilize AuthDialog ESC assertion (#1535)
build: Improve build efficiency and add dev mode (#1681)
[AnthropicContentGenerator] optimize: ADD cache_control for system and last user text message (#1613)

0.9.0 - 2026-02-03

Added

core: improve error message when skill is invoked as tool (#1623)
core: improve retry logic for better 429/5xx error handling (#1628)
add extra_body support for OpenAI-compatible providers (#1654)
add multi-modal input support (image, PDF, audio) across all content generators (#1564)
clarify output formats for non-interactive mode (#1579)
add concurrent runner for batch CLI execution (#1640)
webui: implement unified UI architecture with shared component library (#1543)

Fixed

Use resolved authType to initialize ACP agent (#1622)
acp: stream subagent text + reasoning chunks (#1626)
ensure output-language.md is created before config initialization (#1637)
security: prevent command injection via newline bypass in shell command validation (#1638)
React/React-DOM version inconsistency in package.json and lockfile (#1659)
core: avoid passing undici agent to Anthropic SDK (#1663)
vscode-ide-companion: fix race conditions and improve @ file completion search (#1676)

Other

chore: bump version to 0.8.2 (#1632)
Add parentToolCallId and subagentType for ACP subagent tracking (#1620)
Fix Claude plugin resource collection to respect marketplace config (#1639)
Support model selection through ACP in vscode ide companion (#1582)
Add Zed extension for Qwen Code agent server (#1630)
Add experimental LSP support for code intelligence (#1401)
chore: bump version to 0.9.0 (#1661)
Add contextWindowSize Configuration Support (#1539)

0.8.2 - 2026-01-30

See GitHub release for details.

0.8.1 - 2026-01-27

Added

i18n: Add Japanese language support and fix menu labels in other languages (#1392)
Add Portuguese (pt-BR) language support with complete translations and refactor i18n architecture for better language management. (#1616)
add skills and agents display to extension list with i18n support (#1629)

Fixed

replace EnvHttpProxyAgent with ProxyAgent to suppress experimental warning (#1624)

Other

test: improve SDK integration test reliability with createResultWaiter and ProcessTransport error handling (#1627)
chore: bump version to 0.8.1 (#1631)

0.8.0 - 2026-01-27

Added

cli: use dim colors for YOLO/auto-accept mode borders (#1476)
Redesign CLI welcome screen and settings dialog (#1513)
extensions: add detail command and improve extension validation (#1580)
add runtime-aware fetch options for Anthropic and OpenAI providers (#1516)
extensions: add plugin selection UI for Claude marketplace (#1592)
make DiffRenderer respect ui.showLineNumbers setting (#1561)
Implement temporary dismissal for feedback dialogs with persistent prompting (#1590)

Fixed

replace spawn shell option with explicit shell args to avoid Node.js DEP0190 warning (#1234)
skip non-existent file imports instead of warning (ENOENT) (#1563)
correct schema field name for context.loadFromIncludeDirectories (#1609)
vscode-ide-companion: platform-specific builds with optimized VSIX packaging (#1586)
cli: pass paths to read_many_files in ACP (#1614)
Add toolName metadata for ACP tool call messages (#1615)
cli input stream handling and error management (#1588)

Documentation

add Trendshift badge to README (#1553)

Other

chore: remove tiktoken dependency and use API-reported token counts (#1526)
Add /bug command to non-interactive mode (#1552)
Feat/extension (#1534)
fix dependences of core pkg (#1574)
fix github pkg dependence (#1576)
fix prompts denpendence (#1578)
Add VSCode IDE Companion Release Workflow (#1542)
Update command usage in add.ts to reflect new name (#1572)
Security: Fix awk/sed Command Injection in READ_ONLY_ROOT_COMMANDS (#1601)
Simplify permission response handling and fix edit failure and VSCode diff issues (#1581)

0.7.2 - 2026-01-20

Added

cli: add settings support for experimental skills (#1497)
Improve QWEN. md file loading by filtering system files and limiting scope (#1486)
add user feedback dialog (#1465)

Fixed

include --acp flag in tool exclusion check (#1499)
vscode-ide-companion: simplify ELECTRON_RUN_AS_NODE detection and improve README (#1496)
mistranslation of token (#1508)
unable to remove MCP server when only one element exists (#1490)
core: parse skills frontmatter with CRLF/BOM (#1528)
cli: relocate skills setting to experimental namespace (#1538)
acp: implement session/set_model method for JetBrains compatibility (#1521)
resolve arrow key navigation conflict between history and completion (#1519)
cli: isolate modelConfigUtils tests from system env vars (#1545)
acp: propagate ENOENT errors correctly and centralize error codes (#1550)
Update Qwen OAuth model information (#1548)

Documentation

auth: add Coding Plan documentation (#1509)

Other

Fix credential management and authentication flows with improved generation config preservation (#1510)

0.7.1 - 2026-01-14

Fixed

docs (#1485)

Other

Reduce slow quit by trimming skills watchers (#1489)
Fix timing issue in LoggingContentGenerator initialization (#1492)
chore: bump version to 0.7.1 (#1494)

0.7.0 - 2026-01-14

Added

Modify the selection order of user Settings and workspace Settings (#1433)
multi-provider models config support (#1291)
skills: add experimental /skills command + hot reload (#1436)
shell: add optional timeout for foreground commands (#1469)
Customizing the sandbox environment (#1473)

Changed

convert IDE context from JSON to plain text format (#1424)

Fixed

core: ensure OAuth URL always displayed in headless mode (#1426)
multi provider cold start issue (#1439)
cli: /memory show respects context.fileName (#1428)
resolve external editor launch failure on macOS and Windows (#1351)
core: handle missing delta in OpenAI stream chunks (#1448)
cli: default sandbox UID/GID mapping on Linux (#1453)
shell: prevent console window flash on Windows for foreground tasks (#1464)
cli: warn on deprecated/unknown settings keys (#1427)
core: improve OAuth fetch-failed diagnostics (#1457)
SDK release workflow and stability improvements (#1462)
vscode-ide-companion: Fix cross-platform CLI terminal execution (#1474)
cli: improve error message display for object errors (#1386)
Improve qwen-oauth fallback message display (#1480)
docs errors and add community contacts (#1484)

Documentation

vscode-ide-companion: update vscode extension readme (#1472)
add integration guide for JetBrains IDEs (#1411)

Other

chore: bump version to 0.7.0 (#1434)
Support Jupyter Notebook (.ipynb) File Code Selection (#1460)
Feature/add custom headers support (#1447)
Fix auth type switching and model persistence issues (#1478)
Skip flaky permission control test (#1482)

0.6.2 - 2026-01-12

See GitHub release for details.

0.6.1 - 2026-01-07

Added

i18n: auto-detect LLM output language from system locale (#1247)
i18n: update Russian translation with new strings (#1293)
i18n: add German language support (#1378)
graduate --experimental-acp to stable --acp flag (#1355)
cli: add direct argument support for /approval-mode command (#1391)
Optimize the issue where an error message indicating unfriendli… (#1282)

Fixed

core: coerce string boolean values in schema validation (#1284)
cli: skip update check when disableUpdateNag is true (#1397)
improve tool execution feedback in non-interactive mode (#1383)
exit with non-zero code on API errors in text mode (#1376)
preserve whitespace in thinking content for stream-json output format (#1365)
improve windows background process handling and cleanup (#1146)
cli,core: honor tools.core / tools.allowed in non-interactive runs (#1406)
core: don’t force reasoning/topP defaults for OpenAI-compatible APIs (#1415)

Documentation

add AionUi to ecosystem section (#1360)

Other

Fix multi-language and documentation related issues. (#1332)
support merge ChatCompletionContentPart && add filterEmptyMessages (#1288)
Feat/javasdk (#1412)
Doc/qwencode java (#1414)
Fix resume command broken after new chat (#1374)
chore: bump version to 0.6.1 (#1423)
[OpenaiContentGenerate] convertOpenAIResponseToGemini record thoughtsTokenCount (#1393)

0.6.0 - 2025-12-26

Added

add a link to Gemini CLI Desktop for Qwen Code users who prefer desktop UIs (#286)
add Anthropic provider, normalize auth/env config, and centralize logging (#1331)
vscode-ide-companion: in/output part in the bash toolcall can be clicked to open a temporary file (#1345)
support /compress and /summary commands for non-interactive & ACP (#1322)

Fixed

cli path parsing issue in Windows (#1321)
mcp: update OAuth client name for Figma MCP server compatibility (#1302)

Documentation

readme: clarify value props, usage modes (#1312)

Other

Add Gemini provider, remove legacy Google OAuth, and tune generation … (#1297)
Add experimental Skills feature (#1314)
chore: revert sdk-typescript version to 0.1.0 and update release workflow (#1325)
Follow up on pr #1331 (#1340)
fix one flaky integration test (#1343)
Enhance VS Code extension description with download link (#1341)
fix one flaky integration test (#1349)
chore: improve release-sdk workflow (#1334)
context left on vscode ide companion (#1327)

0.5.2 - 2025-12-22

Other

pump version to 0.6.0 (#1309)
Improve robustness of getProcessInfo with try-catch and empty output fallback (#1310)
fix e2e workflow (#1311)

0.5.1 - 2025-12-19

Added

expose gitCoAuthor setting in settings.json and document it (#1228)
ui: add /resume slash command to switch between sessions (#1239)

Fixed

handle case-insensitive path comparison in glob tool on Windows (#1174)
ide: rename Gemini references to Qwen and fix IDE connection path (#1205)
add configurable OpenAPI 3.0 schema compliance for Gemini compatibility (#1186) (#1214)
cli: handle PAT tokens and credentials in git remote URL parsing (#1225)
cli: add -r and -C aliases for --resume and --continue options (#1286)
default values of sampling params (#1269)
vscode-ide-companion: Optimize stream termination handling and fix style layering issues (#1261)
optimize windows process tree retrieval to prevent hang (#1231)

Documentation

add comprehensive MCP Quick Start guides and examples (#796)
restructure docs to follow the Claude Code organization (#1260)

Other

Add chat recording toggle (CLI + settings) and disable recording in tests (#1254)
pump version to 0.5.1 (#1259)
remove one flaky integration test (#1275)
docs：Fix the errors in the document (#1266)
Bundle CLI into SDK package and separate CLI & SDK E2E tests (#1265)
chore(vscode-ide-companion): update vscode engine version from ^1.99.0 to ^1.85.0 (#1262)
IDE companion discovery: switch to ~/.qwen/ide lock files (#1257)

0.5.0 - 2025-12-13

Added

i18n: add Russian language support (#1238)
show session resume command on exit (#1219)
add terminal bell setting to enable/disable audio notifications (#1194)

Changed

vscode-ide-companion: optimize CLI detection and version management (#1248)

Fixed

remove redundant if-check and add tests for OpenAI converter (#1235)
vscode-ide-companion: improve cross-platform compatibility in prepackage script (#1249)

Other

test(cli): add tests for /language command and fix LLM output language parsing (#1236)
Add ACP authenticate update message (#1240)
Remove obsolete “corgi mode” (#1245)
Fix/vscode ide companion completion menu content (#1243)
Bundle CLI into VSCode release package (#1246)

0.4.1 - 2025-12-12

Added

ui: remove vertical borders from input prompt for easier copy/paste (#1191)
VSCode Extension Implementation (#1059)
update references from Gemini to Qwen in setup commands and gitignore handling (#1156)
Add channel field support for client identification (#1226)

Fixed

prefer UTF-8 encoding for shell output on Windows when detected (#1157)
update vulnerable dependencies (glob, jws, tar, js-yaml) (#1189)
修复在docker环境中无法连接ide的问题 (#1230)
vscode-ide-companion/auth: deduplicate concurrent authentication calls (#1223)

Other

pump versionm to 0.4.1 (#1177)
Feat/acp usage metadata (#1176)
pump version to 0.5.0 (#1233)

0.4.0 - 2025-12-06

Added

basic TypeScript SDK (#1103)

Fixed

shell-utils: resolve command detection on Ubuntu by using shell for builtins (#1123)
update timeout settings and default logging level in SDK (#1165)

Other

Session-Level Conversation History Management (#1113)
pump version to 0.4.0 (#1132)
skip one flaky integration test (#1137)
Skip acp integration test in sandbox environment (#1141)
test: skip qwen-oauth test in containerized environments (#1150)
Remove /quit-confirm flow (#1148)
DeepSeek V3.2 Thinking Mode Integration (#1134)
Custom tools support via SDK controlled MCP servers (#1147)
test: separating integration tests for the CLI and SDK (#1161)
test: skip unstable e2e test (#1166)

0.3.0 - 2025-11-28

Added

i18n: Add Internationalization Support for UI and LLM Output (#1058)

Fixed

ci: remove non-existent label from release failure issue creation (#1097)
reset authType settings (#1091)

Other

Headless enhancement: add stream-json as input-format/output-format to support programmatically use (#926)
chore: pump version to 0.3.0 (#1085)
Improve Usage Statistics by Moving Key Snapshot Fields into Properties (#1090)

0.2.3 - 2025-11-20

Changed

auth: enhance useAuthCommand to include history management … (#1077)

Fixed

character encoding corruption when executing the /copy command on Windows. (#1069)
remove broken link (#1074)

Other

chore: pump version to 0.2.3 (#1073)
Disable Prompt Completion Feature (#1076)
Replace spawn with execFile for memory-safe command execution (#1068)

0.2.2 - 2025-11-19

Added

openApi configurable window (#1019)
add support for alternative cached_tokens format in OpenAI conv… (#1035)
add support for Trae editor (#1037)

Changed

auth: save authType after successfully authenticated (#1036)

Fixed

core: add modelscope provider to handle stream_options (#848)
Improve ripgrep binary detection and cross-platform compatibility (#1060)
skip problematic integration test (#1065)

Other

chore: pump version to 0.2.2 (#1027)
🎯 Enhance QwenLogger with OS Platform and Version Metadata (#1053)
Add Terminal Attention Notifications for User Alerts (#1052)
Add (limited) slash command support for ACP integration. (#1020)
Fix integration tests (#1062)

0.2.1 - 2025-11-13

Added

enhance zed integration with TodoWriteTool and TaskTool support (#992)

Fixed

Stream parsing for Windows Zed integration (#996)
print request errors for logging only in debug mode (#1006)

Other

chore: pump version to 0.2.1 (#1005)
🔧 Refactor: Standardize Tool Naming and Configuration System (#1004)
Fix incorrect tools list format in subagent template documentation (#1026)
🎯 PR: Improve Edit Tool Reliability with Fuzzy Matching Pipeline (#1025)
Add Interactive Approval Mode Dialog (#1012)
Change deepseek token limits regex patterns for deepseek-chat (#817)

0.2.0 - 2025-11-07

Added

Simplify and Improve Search Tools (glob, grep, ripgrep) (#969)

Changed

Unifying the system information display between /about and /bug commands (#977)

Fixed

VSCode detection null check and debug message optimization (#983)

Other

chore: pump version to 0.1.5 (#974)
🎯 Feature: Customizable Model Training and Tool Output Management (#981)
chore: pump version to 0.2.0 (#991)

0.1.5 - 2025-11-07

Added

Simplify and Improve Search Tools (glob, grep, ripgrep) (#969)

Changed

Unifying the system information display between /about and /bug commands (#977)

Fixed

VSCode detection null check and debug message optimization (#983)

Other

chore: pump version to 0.1.5 (#974)
🎯 Feature: Customizable Model Training and Tool Output Management (#981)
chore: pump version to 0.2.0 (#991)

0.1.4 - 2025-11-05

Added

support for custom OpenAI logging directory configuration (#972)

Fixed

handle AbortError gracefully when loading commands (#936)

Other

chore: pump version to 0.1.4 (#962)
chore: Web Search Tool Refactoring with Multi-Provider Support (#885)
Fix kimi2 token limits (#970)

0.1.3 - 2025-11-04

Fixed

Include macOS Seatbelt Sandbox Files in NPM Package (#949)

Other

chore: pump version to 0.1.3 (#939)
🐛 Fix: /ide install command fails on Windows (#957)
Fix unhandled promise rejection on connecting to VSCode companion (#958)

0.1.2 - 2025-10-31

Fixed

Use runtime session ID in /bug command (#927)
update tool name from Gemini to Qwen Code in ToolsList component… (#933)
settings: add version field to prevent partial migration corruption (#937)

Other

chore: pump version to v0.1.2 (#907)
fixbug: fix qwen help des (#915)
🔍 Refactor and Enhance Ripgrep Tool (#930)
change Launch Gemini CLI to Qwen Code CLI in help information (#929)
Fix Chat Compression System Instruction and Empty Summary Edge Case (#935)

0.1.1 - 2025-10-29

Fixed

e2e test (#905)

Other

chore: pump version to 0.1.1 (#883)
fix input filter (#892)
🐛 Bug Fixes Release v0.1.1 (#898)
[to #12345678] docs: update excludeTools documentation in extensions … (#904)

0.1.0 - 2025-10-27

Fixed

Invalid Tool Calls Due to Improper Request Cancellation (#790)
remove unavailable options (#685)
token limits for qwen3-max (#724)
add missing trace info and cancellation events (#791)
unable to quit when auth dialog is opened (#804)

Documentation

add /model command documentation (#872)

Other

chore: remove default topp & temperature value (#785)
Fix and update the token limits handling (#754)
chore: re-organize labels for better triage results (#819)
Sync upstream Gemini-CLI v0.8.2 (#838)
chore: Adjusted docs directory structure (#864)
📦 Release qwen-code CLI as a Standalone Bundled Package (#866)
Standardize Tool Output Format for Better LLM Communication (#881)

0.0.14 - 2025-09-29

Added

Implement Plan Mode for Safe Code Planning (#658)
Add Qwen3-VL-Plus token limits (256K input, 32K output) (#720)

Fixed

TaskTool Dynamic Updates (#697)

Other

chore: bump version to 0.0.13 (#695)
🐛 Remove unreliable editCorrector that injects extra escape characters (#713)
Fix/qwen3 vl plus highres (#721)
🚀 feat: DashScope cache control enhancement (#735)

0.0.13 - 2025-09-24

Added

add OpenAI and Qwen OAuth auth support to Zed ACP integration (#678)
add yolo mode support to auto vision model switch (#652)

Fixed

output token limit for qwen (#664)
auth hang when select qwen-oauth in Zed (#684)
ripgrep load issue (#676)

Other

chore: bump version to 0.0.12 (#662)
🐛 Fix: Resolve Markdown list display issues on Windows (#693)

0.0.12 - 2025-09-19

Added

Enhance /init command with confirmation prompt (#624)

Fixed

Windows Multi-line Paste Handling with Debounced Data Processing (#627)
subagent system improvements and UI fixes (#638)
reset is_background (#644)
switch system prompt to avoid malformed tool_calls (#650)
missing tool call chunks for openai logging (#657)
arrow keys on windows (#661)

Other

chore: bump version to 0.0.11 (#622)
Add skipLoopDetection Configuration Option (#610)
Chore/sync gemini cli v0.3.4 (#605)
Enable tool call type coersion (#477)
Vision model support for Qwen-OAuth (#525)

0.0.11 - 2025-09-12

Added

Update the multilingual documentation links in the README (#536)
Add Welcome Back Dialog, Project Summary, and Enhanced Quit Options (#553)
Replace all Gemini CLI brand references with Qwen Code. (#588)

Changed

cli: update OpenAI API key prompt with Bailian URL (#50)
openaiContentGenerator (#501)

Fixed

update OpenAIKeyPrompt test to expect Alibaba Cloud API URL (#560)
resolve EditTool naming inconsistency causing agent confusion loops (#513)
unexpected re-auth when auth-token is expired (#549)
relax chunk validation to avoid unnecessary retry (#584)
clear saved creds when switching authType (#587)
tool calls ui issues (#590)

Other

chore: add configurable cache control (#498)
chore: pump version to 0.0.10 (#502)
Terminal Bench Integration Test (#521)
Fix E2E caused by Terminal Bench test (#529)
Re-implement tokenLimits class to make it work correctly for Qwen and… (#542)
Fix packages/cli/src/config/config.test.ts (#562)
🎯 Subagents Feature (#573)
Make the ReadManyFiles tool share the "DEFAULT_MAX_LINES_TEXT_FILE" limit across files. (#563)
Fix performance issues with SharedTokenManager causing 20-minute delays (#586)

0.0.10 - 2025-09-02

Documentation

Add homebrew install (#474)

Other

chore: bump version to 0.0.9 (#468)
🚀 Add Todo Write Tool for Task Management and Progress Tracking (#478)
🚀 Sync Gemini CLI v0.2.1 - Major Feature Update (#483)

0.0.9 - 2025-08-27

Added

update /docs link (#438)

Fixed

add explicit is_background param for shell tool (#445)
sync token among multiple qwen sessions (#443)
ambiguous literals (#461)

Other

chore: pump version to 0.0.8 (#421)
Sync upstream gemini-cli v0.1.21 (#398)
Fix GitHub Workflows Configuration Issues (#451)
Fix parallel tool use (#400)
Fix race condition in submitQuery preventing tool response continuations (#458)
use sub-command to switch between project and global memory ops (#450)
🔧 Miscellaneous Improvements and Refactoring (#466)

0.0.8 - 2025-08-22

Added

use .geminiignore in grep tool (#349)
Add deterministic cache control (#411)

Fixed

revert trimEnd on LLM response content (#397)
Critical Issues in v0.0.8-nightly.7 (#419)

Documentation

Update security policy with Alibaba contact information (#390)

Other

Chore/release 0.0.7 (#343)
support: project/global save location option. (#368)
doc: Add links to translated README versions (#171)
Sync upstream gemini-cli v0.1.19 (#364)
🚀 Enhance Release Notes Generation with Previous Tag Detection (#394)
Update Documentation Branding from Gemini CLI to Qwen Code (#391)
Fix prompt re-submission (#392)
Fix GitHub Workflows for Issue Triage (#396)
Limit grep result (#407)

0.0.7 - 2025-08-15

Added

sandbox: add GHA to build sandbox image (#262)
prevent concurrent query submissions in useGeminiStream hook (#322)
refactor web-fetch tool to remove google genai dependency (#340)

Fixed

qwen logger exit handler setup (#325)
seperate static QR code and dynamic spin components (#327)
OpenAI tools (#328)
custom API's trailing space and empty tool id issues (#326)

Other

chore: add api request logger (#313)
Sync with upstream gemini-cli v0.1.18 (#309)
chore: bump version to 0.0.6 (#323)
Migrate web search from Google/Gemini to Tavily API (#329)
Update qwen-code-pr-review.yml (#342)

0.0.6 - 2025-08-12

Added

add usage statistics logging for Qwen integration (#284)

Fixed

rename make run-npx from gemini to qwen (#242)
terminal flicker when waiting for login (#248)
openaiContentGenerator (#283)
🐛 fix EPERM error when run qwen --sandbox in macOS (#293)

Other

rename GEMINI.md to QWEN.md across the codebase (#235)
Fix README.md: Replace /status command with /stats command in documen… (#266)
Make /init respect configured context filename and align docs with QWEN.md (#274)
chore: adjust workflow to run PR review (#297)
Chore/pkg version (#298)

0.0.5 - 2025-08-08

Added

Add systemPromptMappings Configuration Feature (#108)
update /bug command to point to Qwen-Code repo (#154)
add qwencoder as co-author (#207)
oauth: add Qwen OAuth integration (#225)

Fixed

resolve RadioButtonSelect array bounds crash and auth dialog navigation (#46)
streaming token usage (#102)
Enhanced OpenAI Usage Logging and Response Metadata Handling (#141)

Other

pre-release: fix ci (#1)
fix login preflight & sync with npm version (#55)
add star history (#109)
update: add info about modelscope-api (#116)
Fix Default Model Configuration and Fallback Behavior (#142)
Update: shrink/hard constrained token usage (#136)
Fix E2E (#156)
Fix Sandbox docker mode (#160)
Support openrouter (#162)
Update: add telemetry service (#161)
Update README.md to clarify the requirement for using Modelscope inference API (#131)
fix config (#163)
fix release workflow (#172)
sync gemini cli 0.1.15 (#175)
fix e2e (#185)
fix system md (#189)
sync gemini cli 0.1.17 (#206)
chore: remove google registry (#227)

0.0.4 - 2025-08-03

Other

sync gemini cli 0.1.15 (#175)
fix e2e (#185)
fix system md (#189)

0.0.2 - 2025-08-01

See GitHub release for details.

892 KiB Raw Blame History Unescape Escape

Changelog

0.24.6 - 2026-09-26

Highlights

Breaking Changes

Complete Change List

Features

Bug Fixes

Performance

Internal Changes

0.24.5 - 2026-09-24

Highlights

Breaking Changes

Complete Change List

Features

Bug Fixes

Performance

Documentation

Internal Changes

New Contributors

0.24.4 - 2026-09-22

Highlights

Breaking Changes

Complete Change List

Features

Bug Fixes

Documentation

Internal Changes

New Contributors

0.24.3 - 2026-09-21

Highlights

Breaking Changes

Web Shell

Live Voice

Runtime and sessions

Review workflow

Chrome extension

Desktop and CLI

Performance and execution

Other Changes

中文摘要

Web Shell

Live Voice

运行时与会话

审查工作流

Chrome 扩展

桌面端与 CLI

性能与执行

其他变更

Complete Change List (31 pull requests)

Features

Bug Fixes

Performance

Documentation

Internal Changes

0.24.2 - 2026-09-20

Highlights

Breaking Changes

Complete Change List

Features

Bug Fixes

Documentation

Internal Changes

0.24.1 - 2026-09-19

Highlights

Breaking Changes

Complete Change List

Features

Bug Fixes

Performance

Documentation

Internal Changes

New Contributors

0.24.0 - 2026-09-16

Highlights

Breaking Changes

Complete Change List

Features

Bug Fixes

Documentation

892 KiB

Raw Blame History