Qwen Code 0.21.13

Highlights

• Web Shell composer now supports dragging, dropping, and pasting text files as named attachments alongside images. (#9180)
• Users can now fork conversations from any specific Assistant response using durable checkpoints to ensure branch accuracy. (#8817)
• Split-view panes now inherit the host's @ mention configuration, ensuring custom categories and exclusions apply consistently. (#9052)
• The /review skill now uses dedicated platform subcommands like meta and fetch-diff instead of executing raw gh commands. (#9096)
• Stopped takeover PRs now receive an autofix/needs-human label and appear in a new Takeover pool table on the dashboard. (#8960)
• Review sessions now record session IDs and diff hashes to enable crediting agent work across interrupted runs. (#9091)

Breaking Changes

No known breaking changes.

Review Workflow & /review Skill

Enhanced the /review skill with dedicated subcommands, dynamic finding limits, and improved concurrency handling to prevent loops and ensure accurate reporting.

• Split-view panes now inherit the host's @ mention configuration, ensuring custom categories appear and builtinAtProviders exclusions apply consistently. (#9052)
• The /review skill now uses dedicated platform subcommands like meta and fetch-diff instead of executing raw gh commands via prompt prose. (#9096)
• The /review command now limits posted suggestions to Critical findings after round 5 to prevent review loops, while deferring other findings to the final report. (#9118)
• Review workflow concurrency now isolates no-op human review requests to prevent them from blocking active PR review jobs. (#9210)
• Duplicate suggestions in /review are now listed in a dedicated paragraph with links to existing comments instead of being counted as anchor failures. (#9215)
• The /review presubmit gate now correctly handles carried-id re-posts to prevent dropping valid findings that match existing comment IDs. (#9212)
• Fixed the /review pipeline to accept bracketed source tags and added a --to-anchors option to normalize inputs for final gates. (#9222)
• The PR review workflow now posts a fallback comment with retry guidance if the main review job dies abnormally. (#9255)
• Review sessions now record session IDs and diff hashes to enable crediting agent work across interrupted runs. (#9091)
• Review runners now automatically wipe and retry failed checkouts to self-heal from persistent workspace corruption. (#9220)
• PR review worktree leases now act as locks to prevent concurrent sessions from destroying active review states during setup or cleanup. (#9211)

Autofix & Takeover Management

Improved Autofix visibility with new dashboard pools and labels, while refining footprint gates and growth tracking for better takeover handling.

• autofix: deny-by-default footprint gate and positional window censuses (#9156)
• Stopped takeover PRs now receive an autofix/needs-human label and appear in a new Takeover pool table on the dashboard for better visibility. (#8960)
• The autofix-growth-now marker now uses the prepare-time measurement instant to ensure growth divergence reports accurately reflect the correct base version. (#9192)
• Prevented the triage agent from processing tracking issues created by the autofix bot by adding a user login guard to the workflow trigger. (#9271)

Reverse-Audit & Findings Tracking

Optimized reverse-audit rounds based on diff size and ensured verified findings outside PR footprints are tracked in dedicated issues.

• The reverse-audit round cap now scales dynamically based on diff topology, allowing more rounds for small diffs and fewer for huge ones. (#9183)
• The reverse-audit round cap for huge diffs is now reduced to three only when the run has a clock; otherwise, it remains at five. (#9203)
• Verified findings outside the PR footprint are now deferred to a follow-up queue and tracked in a dedicated issue instead of being lost. (#9189)
• Reverse-audit now reports retirement failures with specific diagnostics and accepts additional punctuation separators in dry-receipt parsing. (#9213)
• Presubmit overlap lists are now written to a separate file to prevent overwriting the canonical findings artifact. (#9268)

Web Shell & User Interface

Added support for dragging and pasting text files in Web Shell and improved release note presentation with bilingual digests.

• The Web Shell composer now supports dragging, dropping, and pasting text files as named attachments alongside images. (#9180)
• Release notes are now presented as a user-friendly digest grouped by capability themes with bilingual English and Chinese summaries and attached screenshots. (#9216)
• Skill bodies are now redacted from Web Shell event surfaces to reduce payload size while remaining available for native ACP clients. (#9235)

Conversation & Session Control

Enabled forking conversations from specific responses and improved session resilience to preserve active work during shutdowns.

• Users can now fork conversations from any specific Assistant response using durable checkpoints to ensure branch accuracy. (#8817)
• Established a hidden runtime boundary for Conversations to isolate ownership and lifecycle while preserving existing owner-routed compatibility paths. (#9181)
• Sessions now preserve active work when close is refused by draining queued tasks within an 8-second budget before tearing down the session. (#9134)

CLI Tools & Extensions

Introduced External Context Provider profiles and added flags to qwen review commands for incremental validation and scoping.

• Introduced the External Context Provider Extension Profile v1 to enable provider-owned retrieval integrations via Qwen Extension and MCP boundaries. (#9068)
• Added --since flag to qwen review fetch-pr for validating incremental review anchors and scoping diffs based on local cache or ledger markers. (#9100)
• The runAllChunks command now outputs a diagnostic message on stderr when --all-chunks fans out a plan identified as Step 3A. (#9249)
• Fixed a bug where the findings command could silently overwrite input files when using --to-anchors and added validation to prevent flag wiring mismatches. (#9270)

Infrastructure & Reliability

Strengthened CI pipelines, resource limits, and automation workflows to prevent build failures and ensure consistent agent settings.

• ci: skip non-bot review_requested siblings before jobs spend compute (#9204)
• The hourly spam-minimization sweep now includes inline pull request review comments to block unwanted content effectively. (#9229)
• Increased the browser daemon SDK bundle size budget to 191 KiB to accommodate new attachment metadata and fix build failures. (#9238)
• ACP HTTP pre-attach buffers are now strictly bounded by byte count and frame limits to prevent resource exhaustion. (#9007)
• Release jobs now force-push release branches to prevent non-fast-forward errors during retries after previous failed publication attempts. (#9082)
• Fixed automation workflows to correctly pass agent settings like turn caps and tool allowlists that were previously silently dropped. (#9252)

Other Fixes & Improvements

Addressed various edge cases in tracing, mocking, and goal summarization to ensure system stability.

• goal: summarise the last Goal when a turn holds no permit (#9164)
• Fixed main-agent tracing edge cases regarding budget-triggered aborts, non-streaming calls, and deferred TUI tool batch ownership. (#9121)
• Fixed mock ACP child fixtures in integration tests to correctly handle the tool-guard handshake required by qwen serve. (#9161)

Other Changes

• Added an internal limitKind field to GoalRecord to improve how stopped Goals are typed, with no change to user-facing resume behavior. (#9165)
• Added test-only pins to verify ordering invariants and write-target paths without changing production behavior. (#9225)
• Tests now verify that background artifact refresh failures silently preserve the last successful state without showing errors or clearing the panel. (#9227)
• Fixed skill-parity tests on macOS by resolving the fixture root with realpath to ensure path consistency when tmpdir is a symlink. (#9269)

• Web Shell , (#9180)
• Assistant , (#8817)
• @ , builtinAtProviders (#9052)
• /review meta fetch-diff , gh (#9096)
• PR autofix/needs-human , Takeover pool (#8960)
• ID , (#9091)

/review

/review ,,

@ , builtinAtProviders (#9052) /review meta fetch-diff , gh (#9096) /review 5 Critical , (#9118) , PR (#9210) /review , (#9215) /review ID , ID (#9212) /review , --to-anchors (#9222) ,PR (#9255) ID , (#9091) , (#9220) <li