Qwen Code v0.25.3-nightly.20261019.5dcf7c7cb1

<!-- Release notes generated using configuration in .github/release.yml at release/v0.25.3-nightly.20261019.5dcf7c7cb1 -->

What's Changed

• feat(daemon): support session-targeted Skill and Extension refresh by @callmeYe in https://github.com/QwenLM/qwen-code/pull/14050

• fix(managed-agent): bound initial publication guard waits by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14563

• feat(runtime-broker): Session-create warm for Workspace-isolated bound Sessions by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14599

• test(cli): give turn-settling waits the slow-host budget by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14598

• feat(managed-agent): ship a configuration template in the reference distribution by @wenshao in https://github.com/QwenLM/qwen-code/pull/14631

• feat(serve): run private CSI file turns through Hosted Harness by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14487

• test(cli): retry ENOTEMPTY in hosted harness teardowns by @ZedingZhang in https://github.com/QwenLM/qwen-code/pull/14636

• feat(managed-agent): support local and SSH workspace file references by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14639

• test(cli): give the hosted probe-start guards a scheduling budget by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14662

• fix(managed-agent): recover committed wakes after writer loss by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14603

• feat(managed-agent): add a read-only --check preflight by @wenshao in https://github.com/QwenLM/qwen-code/pull/14632

• fix(sdk): size session create from the daemon session budget by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14588

• fix(serve): contain Hosted stdio MCP servers in a process group (#14503) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14640

• test(managed-agent): drain a held async Hook before the lifecycle Hooks on DELETE by @wenshao in https://github.com/QwenLM/qwen-code/pull/14638

• feat(serve): recover receipt-complete private CSI file turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14523

• docs(managed-agent): propose bounded retention for session state by @wenshao in https://github.com/QwenLM/qwen-code/pull/14659

• feat(managed-agent): raise attachment input budget to 8 MiB by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14628

• fix(managed-agent): recover the journal after a lapsed writer lease by @wenshao in https://github.com/QwenLM/qwen-code/pull/14570

• perf(managed-agent): index tool receipts by execution call by @wenshao in https://github.com/QwenLM/qwen-code/pull/14660

• fix(managed-agent): keep refused PreToolUse replacements out of Hosted after Hooks by @qqqys in https://github.com/QwenLM/qwen-code/pull/14650

• test(managed-agent): gate Spring crashes and the scanner lease for automation (FG11c slice 2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14649

• feat(serve): read Turn recovery evidence from the Broker (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14669

• fix(ci): repair Java gates and report failures on PRs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14522

• fix(hosted): continue recovered background wake turns by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14679

• test(web-shell): widen Playwright wait budgets for shared CI hosts by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14643

• perf(web-shell): incrementally project managed session messages by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14562

• feat(managed-agent): ship systemd units for the single-host topology by @wenshao in https://github.com/QwenLM/qwen-code/pull/14633

• refactor(managed-agent): share CSI runtime marker reads by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14571

• fix(managed-agent): load saved tool details on expansion by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14604

• feat(managed-agent): park a Turn whose Runtime evidence stays unknown (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14681

• test(managed-agent): drop the FG13a hook-catalog reply before registration by @wenshao in https://github.com/QwenLM/qwen-code/pull/14668

• fix(web-shell): preserve focus when trajectory execution views disappear by @qqqys in https://github.com/QwenLM/qwen-code/pull/14641

• feat(artifacts): record files the agent creates or edits by @zjgzx1988 in https://github.com/QwenLM/qwen-code/pull/14292

• fix(cli): reconcile managed recovery failure reasons by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/14567

• test(managed-agent): assert G3 approval identities and pin drift by @wenshao in https://github.com/QwenLM/qwen-code/pull/14673

• fix(hooks): reap a Hook command unit when its worker dies (#14502) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14675

• test(managed-agent): drop the FG13a HTTP Hook reply after the request by @wenshao in https://github.com/QwenLM/qwen-code/pull/14692

• test(managed-agent): scope the FG11c crash assertions and fix the race fixture by @wenshao in https://github.com/QwenLM/qwen-code/pull/14682

• perf(managed-agent): bound the held-Runtime inventory read cost (#13930) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14691

• fix(config): let a Managed host restore its own session by @wenshao in https://github.com/QwenLM/qwen-code/pull/14688

• test(integration): widen workflow completion reply budgets past loaded-shard stalls (#14191) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/14202

• feat(managed-agent): bootstrap the shared deployment credentials by @wenshao in https://github.com/QwenLM/qwen-code/pull/14634

• feat(runtime): complete private CSI cold recovery by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/14695

• fix(managed-agent): never fail a pending cancel over recovery (D7-2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/14694