Qwen Code

<!-- Release notes generated using configuration in .github/release.yml at release/v0.24.3-nightly.20260922.c5920f479b -->

What's Changed

• feat(core): add monitor tool to system prompt guidance by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12408
• feat(daemon): Add batched workspace session catalogs by @samuelhsin in https://github.com/QwenLM/qwen-code/pull/12254
• refactor(build,release): Use pnpm workspace builds and publishing by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12400
• fix(review): keep unplanned chunks out of coverage, and read the denominator from the plan by @wenshao in https://github.com/QwenLM/qwen-code/pull/12370
• feat(review): record what a plan was computed from, and report drift by @wenshao in https://github.com/QwenLM/qwen-code/pull/12369
• fix(core): accept nullable pagination when reading notebooks by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/12421
• fix(cli): clean up stale session debug logs by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12374
• feat(java): Add managed tool execution state by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/12391

<!-- Release notes generated using configuration in .github/release.yml at release/v0.24.3-nightly.20260921.2800e9bb4f -->

What's Changed

• feat(core): add monitor tool to system prompt guidance by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12408
• feat(daemon): Add batched workspace session catalogs by @samuelhsin in https://github.com/QwenLM/qwen-code/pull/12254
• refactor(build,release): Use pnpm workspace builds and publishing by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12400

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.24.3...v0.24.3-nightly.20260921.2800e9bb4f

<!-- Release notes generated using configuration in .github/release.yml at 2800e9bb4f4536f421116a8e1e12740113e1063f -->

What's Changed

• fix(cli): scope the ACP permission queue to the session by @chiga0 in https://github.com/QwenLM/qwen-code/pull/11802
• feat(channels): add shared output modes with DingTalk support by @qqqys in https://github.com/QwenLM/qwen-code/pull/11822
• feat(web-shell): slide the active pill between tabs by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11844
• refactor(goal): delete the first-generation Stop-hook Goal implementation by @qqqys in https://github.com/QwenLM/qwen-code/pull/11900
• fix(ci): separate autofix runner labels from queued reviews by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11912
• feat(daemon): enumerate installed extension skills locally by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11281
• feat(web-shell): follow the reading position in the global turn navigation by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11801
• feat(workflows): share a per-turn token budget from a +Nk directive by @qqqys in https://github.com/QwenLM/qwen-code/pull/11917

Bundled CLI Version

This SDK release bundles CLI version: 0.24.3

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.24.1

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.23.3

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.23.2

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.23.1

Source: CLI built from source (same branch/ref as SDK)

---

Highlights

The bundled CLI 0.23.0 includes two fixes requested in #11022:

• Managed memory availability now respects the memory.enableManagedAutoMemory setting (#6941). Hosts that disable managed auto memory no longer see remember/dream requests admitted or managed-memory instructions in the system prompt; local patches can be removed.

• Size-triggered microcompaction now clears old tool results toward a low watermark (#8464), so it no longer rewrites another part of the conversation prefix on every subsequent turn. Provider

<!-- qwen-release-notes:v2 -->

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Web Shell

Web Shell gains structured shell results, optional trajectory metrics, host settings allowlists, and mobile navigation fixes.

• Web Shell now presents structured shell execution results with command, output, execution details, elapsed time, and scrollable content. (#12311)

• Adds an opt-in trajectory table tab in Web Shell showing per-turn durations, time to first token, token counts, and tool timing. (#12388)

<!-- Release notes generated using configuration in .github/release.yml at release/v0.24.2-nightly.20260920.eceaede18e -->

What's Changed

• feat(web-shell): capture the Live Voice microphone with an AudioWorklet by @qqqys in https://github.com/QwenLM/qwen-code/pull/12338

Full Changelog: https://github.com/QwenLM/qwen-code/compare/v0.24.2...v0.24.2-nightly.20260920.eceaede18e

<!-- qwen-release-notes:v1 -->

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

• feat(web-shell): restore remote workspace add flow (#12085) by @yiliang114

• feat(web-shell): expose assistant turn settlement lifecycle (#11251) by @yiliang114

• Adds an internal bwrap-based Linux sandbox execution foundation with structured process launching, supervision, and confined worker support. (#12067) by @doudouOUC

• feat(web-shell): choose the Live Voice model and voice from the setup card (#12199) by @qqqys

• feat(web-shell): expose slash-command exports as artifacts (#12050) by @ytahdn

• feat(browser-use): support concurrent sessions sharing a Chrome profile (#12229) by @tanzhenxin

Bundled CLI Version

This SDK release bundles CLI version: 0.24.1

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.23.3

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.23.2

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.23.1

Source: CLI built from source (same branch/ref as SDK)

---

Highlights

The bundled CLI 0.23.0 includes two fixes requested in #11022:

• Managed memory availability now respects the memory.enableManagedAutoMemory setting (#6941). Hosts that disable managed auto memory no longer see remember/dream requests admitted or managed-memory instructions in the system prompt; local patches can be removed.

• Size-triggered microcompaction now clears old tool results toward a low watermark (#8464), so it no longer rewrites another part of the conversation prefix on every subsequent turn. Provider prompt-cache reuse is preserved across long tool-heavy sessions, reducing cached-input cost.

Bundled CLI Version

<!-- Release notes generated using configuration in .github/release.yml at e443e2d2384e3ba61d783bd96a265082298f4fe8 -->

What's Changed

• fix(cli): scope the ACP permission queue to the session by @chiga0 in https://github.com/QwenLM/qwen-code/pull/11802
• feat(channels): add shared output modes with DingTalk support by @qqqys in https://github.com/QwenLM/qwen-code/pull/11822
• feat(web-shell): slide the active pill between tabs by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11844
• refactor(goal): delete the first-generation Stop-hook Goal implementation by @qqqys in https://github.com/QwenLM/qwen-code/pull/11900
• fix(ci): separate autofix runner labels from queued reviews by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11912
• feat(daemon): enumerate installed extension skills locally by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11281
• feat(web-shell): follow the reading position in the global turn navigation by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11801
• feat(workflows): share a per-turn token budget from a +Nk directive by @qqqys in https://github.com/QwenLM/qwen-code/pull/11917

<!-- Release notes generated using configuration in .github/release.yml at 56b003be0785412ed06673948f781dc70a686b5a -->

What's Changed

• fix(cli): scope the ACP permission queue to the session by @chiga0 in https://github.com/QwenLM/qwen-code/pull/11802
• feat(channels): add shared output modes with DingTalk support by @qqqys in https://github.com/QwenLM/qwen-code/pull/11822
• feat(web-shell): slide the active pill between tabs by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11844
• refactor(goal): delete the first-generation Stop-hook Goal implementation by @qqqys in https://github.com/QwenLM/qwen-code/pull/11900
• fix(ci): separate autofix runner labels from queued reviews by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/11912
• feat(daemon): enumerate installed extension skills locally by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11281
• feat(web-shell): follow the reading position in the global turn navigation by @callmeYe in https://github.com/QwenLM/qwen-code/pull/11801
• feat(workflows): share a per-turn token budget from a +Nk directive by @qqqys in https://github.com/QwenLM/qwen-code/pull/11917

Qwen CUA Driver prebuilt binaries (vendored under packages/cua-driver).

• macOS: codesigned + notarized universal binary + QwenCuaDriver.app
• Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
• Windows: unsigned UIAccess worker + native SDK payload (x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation
• Node.js: the same workflow publishes @qwen-code/cua-sdk after a clean install against these release assets and publishes the independently versioned @qwen-code/node-repl-mcp package after its MCP protocol smoke tests

Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1 (default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).

Enable textual MCP payload filtering for affected model API routes: MCP_MODEL_PAYLOAD_FILTER=1 (default off).

<!-- Release notes generated using configuration in .github/release.yml at d47a8fdbae49d6acd4b7b4fb2eb650200e2ae9c8 -->

What's Changed

• fix(core): keep escaped whitespace at pipe-list entry edges by @qqqys in https://github.com/QwenLM/qwen-code/pull/11860

Qwen CUA Driver prebuilt binaries (vendored under packages/cua-driver).

• macOS: codesigned + notarized universal binary + QwenCuaDriver.app
• Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
• Windows: unsigned UIAccess worker + native SDK payload (x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation
• Node.js: the same workflow publishes @qwen-code/cua-sdk after a clean install against these release assets and publishes the independently versioned @qwen-code/node-repl-mcp package after its MCP protocol smoke tests

Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1 (default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).

Enable textual MCP payload filtering for affected model API routes: MCP_MODEL_PAYLOAD_FILTER=1 (default off).

<!-- Release notes generated using configuration in .github/release.yml at b8fea284fd3f8999e58d5fac122a0f50af457557 -->

What's Changed

• fix(dws): align group and direct chat access controls by @qqqys in https://github.com/QwenLM/qwen-code/pull/11836

Qwen CUA Driver prebuilt binaries (vendored under packages/cua-driver).

• macOS: codesigned + notarized universal binary + QwenCuaDriver.app
• Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
• Windows: unsigned UIAccess worker + native SDK payload (x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation
• Node.js: the same workflow publishes @qwen-code/cua-sdk after a clean install against these release assets and publishes the independently versioned @qwen-code/node-repl-mcp package after its MCP protocol smoke tests

Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1 (default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).

Enable textual MCP payload filtering for affected model API routes: MCP_MODEL_PAYLOAD_FILTER=1 (default off).

<!-- Release notes generated using configuration in .github/release.yml at 5b7b50380abe1c2b9abe6bf3ecbcadfa5a9334a1 -->

What's Changed

• feat(web-shell): make Session Workflow dependencies navigable and quiet its chrome by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/10938

Qwen CUA Driver prebuilt binaries (vendored under packages/cua-driver).

• macOS: codesigned + notarized universal binary + QwenCuaDriver.app
• Linux: unsigned (x86_64 + arm64, glibc 2.31 floor)
• Windows: unsigned UIAccess worker + native SDK payload (x86_64 + arm64); deployments must sign and trust the worker on the target machine before UIAccess activation
• Node.js: the same workflow publishes @qwen-code/cua-sdk after a clean install against these release assets and publishes the independently versioned @qwen-code/node-repl-mcp package after its MCP protocol smoke tests

Enable relative coordinates: CUA_DRIVER_RS_COORDINATE_SPACE=1 (default 0 = off; optional CUA_DRIVER_RS_COORDINATE_SCALE=1000).

Enable textual MCP payload filtering for affected model API routes: MCP_MODEL_PAYLOAD_FILTER=1 (default off).

<!-- Release notes generated using configuration in .github/release.yml at 6a211b465227dd35ad3c35a2dcb86a809590bcd0 -->

What's Changed

• fix(web-shell): realign two suites with shipped behavior to unbreak main CI (#11525) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/11530

Bundled CLI Version

This SDK release bundles CLI version: 0.23.3

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.23.2

Source: CLI built from source (same branch/ref as SDK)

---

Bundled CLI Version

This SDK release bundles CLI version: 0.23.1

Source: CLI built from source (same branch/ref as SDK)

---

Highlights

The bundled CLI 0.23.0 includes two fixes requested in #11022:

• Managed memory availability now respects the memory.enableManagedAutoMemory setting (#6941). Hosts that disable managed auto memory no longer see remember/dream requests admitted or managed-memory instructions in the system prompt; local patches can be removed.

• Size-triggered microcompaction now clears old tool results toward a low watermark (#8464), so it no longer rewrites another part of the conversation prefix on every subsequent turn. Provider prompt-cache reuse is preserved across long tool-heavy sessions, reducing cached-input cost.

Bundled CLI Version

This SDK release bundles CLI version: 0.23.0

Source: latest stable CLI from npm

---

Bundled CLI Version