Original release notes
What's Changed
fix(core): align Code Mode text with lazy tool discovery by @tanzhenxin in #12990 fix(permissions): honor approved cross-directory tool calls by @tanzhenxin in #12987 fix(cli): stop swallowing Enter while completion suggestions load (#13015) by @qwen-code-dev-bot in #13021 fix(cli): isolate daemon extension settings loads from shared process state by @yiliang114 in #13022 test(managed-agent): record Hosted latency baseline by @wenshao in #12945 feat(agents): add local workspace-agent collaboration by @yiliang114 in #11206 feat(serve): implement generic Broker provider controls by @wenshao in #12868 feat(managed-agent): enable G0 public Workspace file turns by @wenshao in #12955 fix(serve): upload session attachments in 512 KiB chunks by @doudouOUC in #12923 test(managed-agent): Pin M4 close anchors and the published definition (M4 follow-up) by @wenshao in #12995 fix(cli): Bound how long a relaunched child outlives its supervisor by @wenshao in #13036 test(managed-agent): gate provider retries and release ordering by @wenshao in #13061 test(managed-agent): stop racing the recovery scanner in turn-claim tests by @wenshao in #13032 fix(core): honor NO_PROXY for usage-statistics RUM uploads by @yiliang114 in #13023 fix(runtime-broker): answer a refused provider start as unknown instead of prepared by @wenshao in #13064 fix(runtime-broker): keep the UNKNOWN answer when the original Runtime cannot answer by @wenshao in #13069 feat(sdk-java): Add audited Hosted Workspace operator recovery by @doudouOUC in #12977 fix(workflow): reject unsupported scripts and oversized batches early by @qqqys in #13012 fix(hooks): deliver pre-tool and ACP failure context to the model by @qqqys in #13006 fix(core): keep delivered notification turns out of ACP rewind ordinals by @yiliang114 in #13029 fix(core): honor usage-statistics opt-out for extension lifecycle events by @yiliang114 in #12789 feat(memory): bundle Mem0 with the main CLI by @yiliang114 in #12891 feat(agents): add A2A access and sharing for workspace agents by @yiliang114 in #12851 feat(managed-agent): ask for Hosted tool approvals (D6a) by @wenshao in #13071 fix(web-shell): prevent stats header overlap and raw JSON output by @qqqys in #13091 fix(managed-agent): Settle task event and cancel semantics by @wenshao in #12998 fix(managed-agent): guard queued Hosted approval expiry by @wenshao in #13098 feat(managed-agent): Add durable remote Shell result delivery by @doudouOUC in #12894 feat(managed-agent): Implement private Hosted MCP runtime (H1) by @wenshao in #12946 perf(sdk-java): Serialize runtime broker JSON directly to bytes by <a class="user-mention notranslate" data-hovercar
