Release v0.25.2-preview.1

What's Changed

• fix(managed-agent): connector and broker robustness from the #12692 R2 review by @wenshao in #13330
• feat(managed-agent): H4e-b2 the lead's mailbox over Session messages by @wenshao in #13892
• fix(managed-agent): settle worktree child runs after their merge (#13753 I2 follow-up) by @wenshao in #13872
• feat(extensions): add test failure report explorer by @qqqys in #13854
• feat(mods): add TypeScript authoring and configuration (PR2a) by @qqqys in #13890
• test(managed-agent): Add FG7 channel fault gates for the channel domains (#13802) by @wenshao in #13839
• fix(core): report monitor startup failures as tool errors by @GoldArowana in #13460
• fix(cli): strip UTF-8 BOM when reading MCP config files by @Bug-killer-prog in #13596
• fix(core): size reactive compaction against the server-reported context ceiling by @yiliang114 in #13788
• fix(managed-agent): unwedge Hosted stream close and bound task cancel attempts by @wenshao in #13877
• docs(managed-agent): H4e-b3 member commands, plan approval and shutdown design by @wenshao in #13912
• test(managed-agent): plant the objects link at a name Git never creates (#13842) by @qwen-code-dev-bot in #13844
• fix(ci): route the sdk-java MariaDB lane to the ECS pool (#13623) by @qwen-code-dev-bot in #13627
• fix(managed-agent): recover original Hook sessions during Workspace retirement by @doudouOUC in #13673
• fix(cli): strip UTF-8 BOM when importing Claude MCP configs by @Bug-killer-prog in #13711
• feat(managed-agent): admit public foreground Shell with mandatory approval by @doudouOUC in #13674
• fix(managed-agent): e2e runner and image robustness from the #12692 R2 review by @wenshao in #13344
• feat(managed-agent): Introduce the EventTransport seam behind the after-commit publisher by @wenshao in #13909
• fix(managed-agent): return 404 for unknown tool publications by @ZedingZhang in #13602
• test(integration): sync the updatedInput ask approval on the dialog, not the tool row (#13849) by @qwen-code-dev-bot in #13855
• fix(serve): name Hosted recovery-refusal branches in cold-load 409s by @wenshao in #13276
• fix(cli): bound managed function-hook module evaluation and keep hold-fenced owners recoverable by @wenshao in #13243
• docs(managed-agent): Resolve the EventTransport §5.1 LiteTopic verification ledger by @wenshao in #13927
• docs(managed-agent): Resolve the EventTransport §11 routing and wake-carrier questions by @wenshao in #13933
• feat(managed-agent): Stop Hosted team members with request_shutdown (H4e-b3a) by @wenshao in #13923
• feat(mods): Add middleware dispatch and recovery (PR2b) by @qqqys in #13915
• fix(managed-agent): order publication placement before retention by @doudouOUC in #13894
• docs(managed-agent): Plan the EventTransport MQ2 producer/consumer wiring in four sub-slices by @wenshao in #13939
• feat(extensions): add interactive test failure explorer (PR2) by @qqqys in #13916
• feat(managed-agent): enable the H3 Monitor and background Shell gates (#13856) by @wenshao in #13889
• fix(managed-agent): settle provably never-started dispatches at session open (#13801) by @wenshao in #13917
• fix(cli): read comma-grouped test counts in review test-plan by @wenshao in #13881
• fix(managed-agent): config and API-surface hygiene from the #12692 R2 review by @wenshao in #13335
• fix(web-shell): localize and dismiss voice feedback by @ytahdn in #13938
• feat(managed-agent): Add the Java mirror of the managed-event-envelope contract (MQ2a) by @wenshao in #13940
• feat(web-shell): support copying selected reply content by @ytahdn in #13833
• fix(cli): drain the wake park before teardown and restore the shell gate guard (#13953) by @qwen-code-dev-bot in #13959
• feat(web-shell): add action reminders and in-panel notification access by @ytahdn in #13832
• feat(mods): Add tool interception and permission checks (PR3a) by @qqqys in #13950
• test(web-shell): re-measure the transcript entry ceiling (#13963) by @qwen-code-dev-bot in #13964
• feat(managed-agent): verify tool publications asynchronously by @doudouOUC in #13654
• feat(web-shell): add Managed child Agent task panel by @doudouOUC in #13936
• feat(managed-agent): recover Hosted G3 parked turns by @doudouOUC in #13777
• feat(runtime): add private CSI file worker with local-process isolation by @doudouOUC in #13899
• docs(sdk): clarify empty core-tool allowlists across SDKs by @Zhangchenhao-111 in #13949
• fix(lsp): load .lsp.json files saved with a UTF-8 BOM by @Shizoqua in #13946
• fix(desktop): preserve bundled runtime integrity in AppImage by @hahahahahayesyeseys in #13695
• fix(release): anchor desktop release notes at the previous desktop release by @Jay0130-a in #13960
• test(web-shell): re-measure the transcript entry ceiling (#13982) by @qwen-code-dev-bot in #13985
• fix(cli): report a spawn failure of the CLI child instead of exiting silently by @drakeo338 in #13077
• test(runtime-broker): budget the 1 MiB tool round trips past the request deadline by @yiliang114 in #13990
• fix(ci): double the sdk-java MariaDB lane's per-host lock budget (#13989) by @qwen-code-dev-bot in #13991
• fix(cli): drop the stale gate-close from the restored-shell-gate test by @yiliang114 in #13983
• feat(managed-agent): member board tools ride the session_command channel end to end (H4e-b3b) by @wenshao in #13928
• feat(web-shell): add read-only Excel artifact previews by @ytahdn in #13664
• fix(core): clean the folded cause before getErrorMessage caps the retained subagent error text by @yiliang114 in #14008
• feat(managed-agent): H4 workflow child runtime by @wenshao in #13858
• fix(cli): load TOML custom commands saved with a UTF-8 BOM by @Shizoqua in #13945
• fix(ci): recover reused runner checkouts and Java lock waits by @yiliang114 in #14017
• test(managed-agent): clean up recovery fixtures after probe failures by @yiliang114 in #14018
• fix(core): strip a leading BOM before converting a TOML command by @Bug-killer-prog in #13975
• fix(cli): give bare ↑/↓ back to input history in Virtualized History by @chiga0 in #14016
• feat(managed-agent): member-to-member messages ride the session_command channel (H4e-b3c) by @wenshao in #13955
• fix(web-shell): hide the discontinued built-in OAuth model in Settings by @Bug-killer-prog in #13971
• test(managed-agent): stabilize publication and API contract fixtures by @yiliang114 in #14012
• feat(managed-agent): give a Monitor auto-stop its remote exit evidence (#13896) by @wenshao in #13929
• feat(web-shell): Reuse standard UI for Managed Agents by @doudouOUC in #13973
• fix(cli): window the OpenTUI transcript to fix the blank-screen resume by @chiga0 in #13669
• fix(cli): keep the OpenTUI composer caret steady by @chiga0 in #13693
• test(managed-agent): land the deferred findings from the definition-execution review by @yiliang114 in #13980
• feat(managed-agent): add L4 Shell and MCP session lifecycle by @doudouOUC in #13931
• fix(managed-agent): share title blankness and pin the lease-renewal clamp by @yiliang114 in #13979
• fix(managed-agent): count http/function result Hooks at child admission by @yiliang114 in #13978
• feat(core): add a convergence reminder for read-only exploration by @yiliang114 in #13601
• fix(cli): stop OpenTUI slash commands reading their own dispatch as busy by @MohammedAlkindi in #12960
• test(core): cover unfinished invocation guard before turn reclamation by @jayfeng7 in #13257
• fix(cli): recognize markdown fences only on matching lines by @GoldArowana in #13331
• feat(cli): add repeatable --disable-mcp-server to exclude servers per invocation by @yiliang114 in #14003
• feat(web-shell): Add workspace file browser and previews by @ytahdn in #13878
• fix(sdk): strip terminal escapes from plaintext tool previews by @sxh313 in #12751
• fix(cli): split comma-separated --include-tools/--exclude-tools in mcp add by @yanyukang2003-ux in #12985
• docs: record local tool visibility comparison and verification steps by @yiliang114 in #13767
• feat(managed-agent): add durable team plan approval (H4e-b3d) by @wenshao in #13974
• refactor(core): one record/array gate for file-history snapshot payloads by @yiliang114 in #13981
• fix(web-shell): Ignore standalone whitespace assistant chunks by @ytahdn in #14031
• feat(managed-agent): Add the LiteTopic journal-event transport (MQ2b) by @wenshao in #14029
• feat(web-shell): bridge trajectory history and live lifecycle state by @qqqys in #13952
• fix(managed-agent): order a sender's commands by commit sequence, and make the member restart IT interrupt a live wait by @wenshao in #14014
• fix(desktop): let Web Shell receive OS file drops by @pomelo-nwu in #14053
• fix(managed-agent): numeric parity and family-list hoisting for publication families, with end-to-end admission and wedge witnesses by @wenshao in #13815
• fix(cli): reject batch plan targets that alias the same path by @yiliang114 in #14055
• fix(managed-agent): close shell profiles after native file calls by @doudouOUC in #14045
• fix(managed-agent): recover lost lifecycle detach replies by @doudouOUC in #14039
• fix(serve): resume committed file results after runtime retirement by @doudouOUC in #14059
• test(managed-agent): deflake the transient verification retry rescan (#14037) by @qwen-code-dev-bot in #14042
• fix(release): raise the npm package unpacked-size budget to 160 MiB by @qwen-code-dev-bot in #14066
• feat(web-shell): pulse the header environment entry while tasks run by @ytahdn in #14048
• feat(web-shell,desktop): update Qwen Code logo to the current brand mark by @pomelo-nwu in #14052
• test(managed-agent): widen process-death observation windows in the operator recovery probe (#14072) by @qwen-code-dev-bot in #14079
• fix(managed-agent): passively reattach child relay sessions after control-plane restart by @yiliang114 in #14020
• fix(desktop): keep desktop-latest release notes pointing at the current release by @shpaker in #13900
• Add SerpApi to web search MCP services list by @pulkitchowdry in #13104
• test(managed-agent): handle the procfs exit race in the operator recovery probe by @wenshao in #14090
• test(serve): widen hosted approval inline-limit windows for CI contention (#14084) by @qwen-code-dev-bot in #14091
• feat(managed-agent): Add the public-event transport and the wake/materialization consumers (MQ2c) by @wenshao in #14080
• test(managed-agent): fix the shell lifecycle recovery journal-head assertions (#14103) by @qwen-code-dev-bot in #14108
• feat(managed-agent): consolidate persistence into a 32-table baseline by @doudouOUC in #14069
• fix(ci): raise the Hosted MySQL fork and step budgets past the L4 class (#14125) by @qwen-code-dev-bot in #14128
• feat(web-shell): open context details in the side panel from the ring by @pomelo-nwu in #14086
• docs(readme): simplify evaluation overview and refine trend chart by @pomelo-nwu in #14093
• test(serve): widen hosted recovery waitFor windows for CI contention (#14101) by @qwen-code-dev-bot in #14107
• test(managed-agent): Pin the history response size boundary by @loglapa in #14111
• feat(runtime-broker): add bounded retention for terminal JDBC history by @doudouOUC in #13642
• docs(cli): stop naming Terminal.app in the arrowKeysScrollTranscript description by @yiliang114 in #14092
• fix(cli): bound short OpenTUI scroll dialogs (MYWO-3, MYWO-7) by @chiga0 in #14034
• fix(managed-agent): Repair the Hosted storage-guard fixtures red since #14069 by @yiliang114 in #14131
• feat(web-shell): review MCP App messages before submission (PR3a) by @qqqys in #13958
• feat(managed-agent): H4f public task cancel for workflow tasks by @wenshao in #14076
• test(managed-agent): Run the EventTransport fault rows against a real RocketMQ broker (MQ2d) by @wenshao in #14109
• feat(mods): support selected Claude tool input contracts (PR3b) by @qqqys in #14027
• fix(acp): preserve cancellation intent across session recovery by @yiliang114 in #13436
• test(integration): Cover a completing write_file tool call over ACP by @yiliang114 in #14144
• test(managed-agent): register storage for Hosted admission gates by @yiliang114 in #14154
• test(managed-agent): stabilize retraction snapshot verification by @yiliang114 in #14151
• fix(managed-agent): settle journal-only parked Harness turns on takeover (#13847) by @wenshao in #14078
• test(managed-agent): wait for the published Snapshot before naming its Items by @yiliang114 in #14156
• fix(managed-agent): Wire OSS capture budgets into Hosted sessions by @doudouOUC in #14124
• feat(sdk-java): add private CSI Session and native SQL authority by @doudouOUC in #13996
• test(managed-agent): retry the team-lead hosted boot past the free-port race by @yiliang114 in #14153
• test(managed-agent): cover coordinator-only Hosted restart by @yiliang114 in #14155
• fix(build): re-apply the ink patch when install skipped lifecycle scripts by @yiliang114 in #14170
• fix(cli): preserve Unicode queries in at completion by @dakjdakd in #13866
• fix(sdk-python): resolve Windows command shims on the effective PATH by @dakjdakd in #13862
• fix(cli): gate non-interactive /update installs on enableAutoUpdate by @fengyue-xve in #13665
• refactor(core): give the Code Mode tool-result stamp a single owner by @fengyue-xve in #13666
• fix(core): preserve fuzzy edit line boundaries by @GoldArowana in #13484
• fix(sdk): release reconnect transports created after disposal by @dakjdakd in #13864
• fix(sdk-java): get the MariaDB lane past #13996's schema, recovery IT and baseline witness by @wenshao in #14177
• fix(core): resolve ${CLAUDE_PLUGIN_ROOT} in plugin markdown without hooks by @yiliang114 in #14194
• fix(ci): repair Java backlog and schema/Hosted test failures by @yiliang114 in #14178
• fix(ci): re-pin Java gate CI tests to the daily-trigger shape (#14223) by @qwen-code-dev-bot in #14227
• test(ci): pin the main-failure watcher's whole job condition by @wenshao in #14233
• fix(sdk-java): restore session-root materialization in acquireWriter (#14224) by @qwen-code-dev-bot in #14228
• fix(core): keep Artifact guidance out of record_artifact description by @zjgzx1988 in #14206
• docs(runtime-broker): design Workspace-resident Managed Tool Runtime by @doudouOUC in #14214
• chore: adopt qwen-code-checks.xml and fix all checkstyle violations by @doudouOUC in #14186
• test(managed-agent): Run the EventTransport fault matrix against two nodes (MQ3) by @wenshao in #14242
• fix(managed-agent): settle the monitor loop when its resume finds a settled record by @wenshao in #14074
• test(cli): skip the chmod-based tests where permission bits do not bind by @wenshao in #14162
• feat(managed-agent): publish an experimental reference distribution by @yiliang114 in #14176
• fix(ci): repair daily failure reporting and contract guards by @yiliang114 in #14238
• docs: remind to update workflow meta-tests when changing CI workflows by @yiliang114 in #14239
• fix(ci): repin the sdk-java test job's MAVEN_ARGS count for the checkstyle gate (#14247) by @qwen-code-dev-bot in #14258
• fix(sdk-java): Order the MQ3 gate's imports for the new checkstyle rules by @wenshao in #14253
• feat(web-shell): show a reduced header on the new-task page by @ytahdn in #14159
• feat(web-shell): upload files by dropping into the file tree by @ytahdn in #14145
• fix(core): select the DashScope provider for Model Studio workspace domains by @qqqys in #14245
• fix(managed-agent): close the critical R2 review findings on #12692 by @wenshao in #13325
• fix(core): surface the provider request id on bodyless API errors by @yiliang114 in #14133
• feat(web-shell): open workflow agents in the detail panel by @qqqys in #14175
• fix(managed-agent): hand one run's session messages over in send order by @wenshao in #14235
• refactor(runtime-broker): name the local-process kind and Workspace isolation policy by @doudouOUC in #14254
• docs(design): drop stray conflict markers from the actor-roles design by @doudouOUC in #14270
• test(managed-agent): gate G3 Step 3 recovery, model-round takeover and control-plane fencing by @wenshao in #14181
• fix(Managed agent): settle never-started background dispatches in the live turn by @yiliang114 in #14021
• diagnostics(ci): capture RocketMQ latency stages separately by @yiliang114 in #14241
• fix(core): keep the git snapshot out of the system prompt by @qqqys in #14255
• fix(ci): gate Desktop and Java SDK releases on checks of the release commit by @yiliang114 in #14259
• fix(serve): align Hosted team delivery answers by @yiliang114 in #14267
• fix(ci): drain Hosted test turns and repair nightly browser checks by @yiliang114 in #14275
• fix(cli): close post-merge takeover findings from the #13083 review by @wenshao in #13188
• refactor(managed-agent): Reuse Apache Commons utilities by @doudouOUC in #14280

New Contributors

• @ZedingZhang made their first contribution in #13602
• @Zhangchenhao-111 made their first contribution in #13949
• @hahahahahayesyeseys made their first contribution in #13695
• @Jay0130-a made their first contribution in #13960
• @drakeo338 made their first contribution in #13077
• @MohammedAlkindi made their first contribution in #12960
• @jayfeng7 made their first contribution in #13257
• @yanyukang2003-ux made their first contribution in #12985
• @shpaker made their first contribution in #13900
• @pulkitchowdry made their first contribution in #13104
• @loglapa made their first contribution in #14111
• @dakjdakd made their first contribution in #13866
• @fengyue-xve made their first contribution in #13665

Full Changelog: v0.25.1...v0.25.2-preview.1