Original release notes
What's Changed
feat(daemon): support session-targeted Skill and Extension refresh by @callmeYe in #14050 fix(managed-agent): bound initial publication guard waits by @yiliang114 in #14563 feat(runtime-broker): Session-create warm for Workspace-isolated bound Sessions by @doudouOUC in #14599 test(cli): give turn-settling waits the slow-host budget by @yiliang114 in #14598 feat(managed-agent): ship a configuration template in the reference distribution by @wenshao in #14631 feat(serve): run private CSI file turns through Hosted Harness by @doudouOUC in #14487 test(cli): retry ENOTEMPTY in hosted harness teardowns by @ZedingZhang in #14636 feat(managed-agent): support local and SSH workspace file references by @doudouOUC in #14639 test(cli): give the hosted probe-start guards a scheduling budget by @yiliang114 in #14662 fix(managed-agent): recover committed wakes after writer loss by @doudouOUC in #14603 feat(managed-agent): add a read-only --check preflight by @wenshao in #14632 fix(sdk): size session create from the daemon session budget by @yiliang114 in #14588 fix(serve): contain Hosted stdio MCP servers in a process group (#14503) by @wenshao in #14640 test(managed-agent): drain a held async Hook before the lifecycle Hooks on DELETE by @wenshao in #14638 feat(serve): recover receipt-complete private CSI file turns by @doudouOUC in #14523 docs(managed-agent): propose bounded retention for session state by @wenshao in #14659 feat(managed-agent): raise attachment input budget to 8 MiB by @doudouOUC in #14628 fix(managed-agent): recover the journal after a lapsed writer lease by @wenshao in #14570 perf(managed-agent): index tool receipts by execution call by @wenshao in #14660 fix(managed-agent): keep refused PreToolUse replacements out of Hosted after Hooks by @qqqys in #14650 test(managed-agent): gate Spring crashes and the scanner lease for automation (FG11c slice 2) by @wenshao in #14649 feat(serve): read Turn recovery evidence from the Broker (D7-2) by @wenshao in #14669 fix(ci): repair Java gates and report failures on PRs by @yiliang114 in #14522 fix(hosted): continue recovered background wake turns by @doudouOUC in #14679 test(web-shell): widen Playwright wait budgets for shared CI hosts by @yiliang114 in #14643 perf(web-shell): incrementally project managed session messages by @yiliang114 in #14562 feat(managed-agent): ship systemd units for the single-host topology by @wenshao in #14633 refactor(managed-agent): share CSI runtime marker reads by @yiliang114 in #14571 fix(managed-agent): load saved tool details on expansion by @doudouOUC in #14604 feat(managed-agent): park a Turn whose Runtime evidence stays unknown (D

