Skip to content
Proposals/Switch Skill installs to ZIP uploads and bulk-ac
proposalteamP5High impactQCQwen Code

Switch Skill installs to ZIP uploads and bulk-activate with setUserSkillsActivation

Qwen Code v0.26.9 adds ZIP-based Skill installs (WebShell, daemon APIs, TypeScript SDK), recovery backups, and PUT /skills/activation to enable or disable 1–100 user Skills in one request. Use sandboxed /verify for PR review threads and experimental.unifiedAgentLoop so Ink TUI tool batches finish in-turn.

Why this loop

v0.26.9 has no known breaking changes, so upgrade first, then change Skill and PR workflows to match the new APIs. Skill installs now handle larger archives with disk-based ZIP handling and recovery-backup protection. Install from the WebShell Skills page, daemon routes (upload or host file path, then query receipts after failures), or the TypeScript SDK (File, Blob, bytes, or host path with attempt IDs). Replace per-skill toggles with PUT /skills/activation / setUserSkillsActivation to enable or disable 1–100 user Skills in one request, then wait for saved preferences and propagation status. For PR loops, run sandboxed /verify so reviewer findings in resolved and outdated threads are visible, and parse /autofix-pr stderr for the refused code and next step. Enable experimental.unifiedAgentLoop so Ink TUI turns await the shared tool batch. Managed-agent automation is on by default for hosted sessions. Ignore the 27 omitted changelog entries.

Proposed actions

  1. Upgrade Qwen Code to v0.26.9, then install each Skill as a ZIP via the TypeScript SDK from a File, Blob, bytes, or host path; keep the attempt ID and look up the installation receipt if the job fails.
  2. Call setUserSkillsActivation (PUT /skills/activation) to enable or disable 1–100 user Skills in one request; wait for saved preferences and propagation status before starting new sessions that depend on those Skills.
  3. From the WebShell Skills page, upload Skill ZIP archives, read the shown daemon limits, and re-query uncertain installs through the daemon receipt API instead of re-uploading.
  4. Run sandboxed /verify on open PRs so the round can read review threads including resolved and outdated ones; if /autofix-pr refuses, parse stderr for the machine-readable refused code and next step.
  5. Set experimental.unifiedAgentLoop so Ink TUI turns await the shared tool batch, and treat managed-agent automation as enabled by default for hosted sessions.

Agent prompt

Paste into your agent or query via MCP (get_agent_prompt) — free, no extra AI cost

Copilot Chat / Agent mode

DevAgentRadar → GitHub Copilot

You are helping me adopt a real coding-assistant change. Work only from the facts below. Do not invent features.

Context

Assistant: Qwen Code Proposal: Switch Skill installs to ZIP uploads and bulk-activate with setUserSkillsActivation Summary: Qwen Code v0.26.9 adds ZIP-based Skill installs (WebShell, daemon APIs, TypeScript SDK), recovery backups, and PUT /skills/activation to enable or disable 1–100 user Skills in one request. Use sandboxed /verify for PR review threads and experimental.unifiedAgentLoop so Ink TUI tool batches finish in-turn. Primary source: https://github.com/QwenLM/qwen-code/releases/tag/v0.26.9

Why it matters

v0.26.9 has no known breaking changes, so upgrade first, then change Skill and PR workflows to match the new APIs. Skill installs now handle larger archives with disk-based ZIP handling and recovery-backup protection. Install from the WebShell Skills page, daemon routes (upload or host file path, then query receipts after failures), or the TypeScript SDK (File, Blob, bytes, or host path with attempt IDs). Replace per-skill toggles with PUT /skills/activation / setUserSkillsActivation to enable or disable 1–100 user Skills in one request, then wait for saved preferences and propagation status. For PR loops, run sandboxed /verify so reviewer findings in resolved and outdated threads are visible, and parse /autofix-pr stderr for the refused code and next step. Enable experimental.unifiedAgentLoop so Ink TUI turns await the shared tool batch. Managed-agent automation is on by default for hosted sessions. Ignore the 27 omitted changelog entries.

Suggested actions

  1. Upgrade Qwen Code to v0.26.9, then install each Skill as a ZIP via the TypeScript SDK from a File, Blob, bytes, or host path; keep the attempt ID and look up the installation receipt if the job fails.
  2. Call setUserSkillsActivation (PUT /skills/activation) to enable or disable 1–100 user Skills in one request; wait for saved preferences and propagation status before starting new sessions that depend on those Skills.
  3. From the WebShell Skills page, upload Skill ZIP archives, read the shown daemon limits, and re-query uncertain installs through the daemon receipt API instead of re-uploading.
  4. Run sandboxed /verify on open PRs so the round can read review threads including resolved and outdated ones; if /autofix-pr refuses, parse stderr for the machine-readable refused code and next step.
  5. Set experimental.unifiedAgentLoop so Ink TUI turns await the shared tool batch, and treat managed-agent automation as enabled by default for hosted sessions.

After you finish

Do not report this as applied to DevAgentRadar. You cannot write the visitor's loop.

Tell the human: open https://devagentradar.com/proposals/qwen-code-v0-26-9-switch-skill-installs-to-zip-uploads-and-bulk-activate and mark Applied, Skipped, or Failed. Proposal id: 4e66900e-8179-404b-b556-7708eddb3379

Your job

  1. Restate the change in one sentence.
  2. Propose a minimal plan for my repo (or a throwaway pilot).
  3. Implement only what I approve; prefer small diffs and tests.
  4. Call out risks (permissions, breaking APIs, cost).

Start by confirming you understood the proposal.

agentmcpmodelpricingsecurityRelease source ↗

Your loop

This browser · no sign-in · not shared as “you”

After you run the prompt

Only you can mark this. Agents cannot write your loop.

Your decision stays on this device. A public tally appears after a few votes.

Originating release signal

QCQwen Codev0.26.9Nov 6, 2026

v0.26.9 Release v0.26.9

See the complete change list below. · No known breaking changes. · Skill ZIP uploads, daemon APIs, TypeScript SDK support, bulk activation, and recovery protections make installing and managing Skills more reliable. · Adds PUT /skills/activation and setUserSkillsActivation to enable or disable 1-100 user Skills in one request, with saved preferences and propagation status. (#16186) · +71 more changes
Verified excerpt — the source's own words
<!-- qwen-release-notes:v2 -->

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Skill installation and activation

Skill ZIP uploads, daemon APIs, TypeScript SDK support, bulk activation, and recovery protections make installing and managing Skills more reliable.

  • Adds PUT /skills/activation and setUserSkillsActivation to enable or disable 1-100 user Skills in one request, with saved preferences and propagation status. (#16186)

  • Prepares Skill installation for larger archives by adding disk-based ZIP handling and recovery-backup protection to the installer. (#16421)

  • Adds daemon API routes for installing large Skill ZIPs by upload or host file path and querying installation receipts after failures. (#16422)

  • Adds TypeScript SDK support for installing Skill ZIPs from File, Blob, bytes, or host path, with attempt IDs and receipt lookup. (#16423)

Excerpt ends here — this release continues at the source ↗.

Primary source ↗