Original release notes
What's Changed
fix(serve): preserve session creation failure diagnostics by @callmeYe in #12331 feat(sdk-java): Add managed runtime attestation client by @doudouOUC in #12522 feat(web-shell): select a time range on the trajectory overview to narrow the table by @qqqys in #12543 feat(serve,web-shell): set the Qwen Live endpoint and model from settings by @qqqys in #12529 feat(channels): separate private and group access policies by @qqqys in #12547 fix(core): bound oversized images returned by MCP tools by @yiliang114 in #10835 feat(serve): run Qwen Live through the Web Shell, native macOS Host opt-in by @qqqys in #12534 feat(web-shell): search within the current conversation by @samuelhsin in #12234 perf(serve): use catalog for workspace extension activation projection by @callmeYe in #12541 fix(core): decide MCP media handling from the bytes, not the label by @yiliang114 in #12567 fix(core): read a backslash inside single quotes as literal when splitting by @TianYuan1024 in #11765 perf(web-shell): derive the session workflow projection once and share it across surfaces (#10865) by @now-ing in #11237 fix(skills): reload changed content after refresh by @jkxiao in #12182 feat(web-shell): add host controls for model management by @Lilian0122 in #12345 fix(cli): keep CoreToolScheduler stable across callback identity changes by @kabishou11 in #12069 fix(web-shell): make mobile access opt-in and simplify split composer by @ytahdn in #12537 test(cli): yield the event loop between base-tree tests by @wenshao in #12573 feat(browser-use): make the bundled runtime self-contained by @tanzhenxin in #12548 fix(cli): keep 64-bit file ids exact in the two identity comparators by @yiliang114 in #12568 fix(cli): keep plan-identity guards exact for 64-bit file ids by @yiliang114 in #12577 fix(java): Deliver broker cancellation after a dispatch lease lapses by @wenshao in #12583 feat(web-shell): zoom and pan the trajectory overview by @qqqys in #12557 fix(core): label each reattached image so older ones are not read as current by @yiliang114 in #12549 feat(review): audit the applied --fix for unpinned new assumptions by @wenshao in #10169 feat(channels): route messages to prefix-specific sessions by @qqqys in #12595 fix(java): Fence lapsed tool executions by the repository clock by @wenshao in #12608 feat(web-shell): show the trajectory over real time, idle included by @qqqys in #12607 fix(review): correct what the fix audit tells its reader by @wenshao in #12610 fix(serve): report serve.channels restore failures in channel status by @qqqys in #12542 test(review): drive the fix-audit build through the yargs command by <a class="user-mention notranslate" data-hovercard-type="user" data-hoverca
