@tencent-ai/agent-sdk 0.3.158 → 0.3.160

package/cli/dist/web-ui/docs/cn/cli/env-vars.md

@@ -63,6 +63,7 @@ CodeBuddy Code 支持通过环境变量来控制其行为。这些变量可以
 | `CODEBUDDY_IMAGE_GEN_ENABLED` | 设置为 `false` 或 `0` 禁用图片生成功能 |
 | `CODEBUDDY_IMAGE_EDIT_ENABLED` | 设置为 `false` 或 `0` 禁用图片编辑功能 |
 | `CODEBUDDY_COMPUTER_USE_ENABLED` | **实验功能**：设置为 `true` 或 `1` 启用 macOS 桌面控制工具（截图、鼠标、键盘）。仅 macOS 可用，默认关闭。首次调用键盘/鼠标动作需在系统设置 → 隐私与安全 → 辅助功能、屏幕录制中为终端授权 |
+| `CODEBUDDY_WAIT_FOR_MCP_SERVERS_ENABLED` | 设置为 `0` 或 `false` 禁用 WaitForMcpServers 工具。默认开启。交互模式下不阻塞等待 MCP 连接，当 LLM 需要尚未就绪的 MCP 工具时可主动调用此工具按需等待。WorkBuddy 场景设置为 `0` 禁用 |
 | `CODEBUDDY_DEFER_TOOL_LOADING` | 设置为 `false` 或 `0` 禁用 MCP 工具延迟加载 |
 | `CODEBUDDY_SHOW_ALL_DEFERRED_TOOLS` | 设置为 `true` 或 `1` 显示所有延迟工具的完整描述 |
 | `CODEBUDDY_DISABLE_CRON` | 设置为 `1` 禁用计划任务 |

package/cli/dist/web-ui/docs/cn/cli/monitoring.md

@@ -1,44 +1,117 @@
 # Monitoring CodeBuddy Code with OpenTelemetry
 
-CodeBuddy Code 支持把内部 traces 通过标准 OTLP 协议上报到用户自有的 OpenTelemetry Collector，便于企业自建可观测性平台对接。
+CodeBuddy Code 支持把 traces 通过标准 OTLP 协议上报到用户自有的 OpenTelemetry Collector，便于企业自建可观测性平台对接。
 
-> **MVP 范围**：当前仅支持 **traces**（链路追踪），暂不支持 metrics 与 logs 的自定义上报。后续会按需扩展。
+> **当前范围**：支持 **traces**（链路追踪）+ 4 个隐私 opt-in 开关。暂不支持 metrics 与 logs 的自定义上报。
 
-## 启用方式
-
-设置启用开关后，traces 会按 OTel 标准环境变量上报：
+## 快速开始
 
 ```bash
+# 1. 启用 telemetry
 export CODEBUDDY_CODE_ENABLE_TELEMETRY=1
-export OTEL_EXPORTER_OTLP_ENDPOINT=https://otel-collector.example.com
+
+# 2. 配置 OTLP endpoint
+export OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318
+
+# 3. (可选) 启用隐私 opt-in 内容记录
+export OTEL_LOG_USER_PROMPTS=1
+export OTEL_LOG_TOOL_DETAILS=1
+export OTEL_LOG_TOOL_CONTENT=1
+
+# 4. 运行
 codebuddy
 ```
 
-> 兼容 Claude Code 已有配置：`CLAUDE_CODE_ENABLE_TELEMETRY` 与 `CODEBUDDY_CODE_ENABLE_TELEMETRY` 等价。
+> 兼容 Claude Code 配置：`CLAUDE_CODE_ENABLE_TELEMETRY` 与 `CODEBUDDY_CODE_ENABLE_TELEMETRY` 等价。
 
-## 关键环境变量
+## 配置变量
 
-完整清单见 [env-vars.md](env-vars.md#opentelemetry-自定义上报traces)，常用项：
+### 基础配置
 
-| 变量 | 用途 |
-|------|------|
-| `CODEBUDDY_CODE_ENABLE_TELEMETRY=1` | 启用 OTel 上报开关 |
-| `OTEL_TRACES_EXPORTER` | `otlp`（默认）/ `console` / `none` |
-| `OTEL_EXPORTER_OTLP_ENDPOINT` | OTLP Collector 地址，会自动追加 `/v1/traces` |
-| `OTEL_EXPORTER_OTLP_TRACES_ENDPOINT` | traces 专用完整 URL，优先级更高 |
-| `OTEL_EXPORTER_OTLP_HEADERS` | 请求头 `k1=v1,k2=v2`，value 支持 URL 编码 |
-| `OTEL_SERVICE_NAME` | 覆盖默认 `service.name` |
-| `OTEL_RESOURCE_ATTRIBUTES` | 附加 resource 属性 |
+| 变量 | 用途 | 示例 |
+|------|------|------|
+| `CODEBUDDY_CODE_ENABLE_TELEMETRY` | 启用 OTel 上报（必需） | `1` |
+| `OTEL_TRACES_EXPORTER` | Exporter 类型 | `otlp`（默认）、`console`、`none` |
+| `OTEL_EXPORTER_OTLP_ENDPOINT` | OTLP Collector 地址，自动追加 `/v1/traces` | `http://localhost:4318` |
+| `OTEL_EXPORTER_OTLP_TRACES_ENDPOINT` | Traces 专用完整 URL，优先级更高 | `http://localhost:4318/v1/traces` |
+| `OTEL_EXPORTER_OTLP_HEADERS` | 请求头 `k1=v1,k2=v2`，value 支持 URL 编码 | `Authorization=Bearer%20token` |
+| `OTEL_EXPORTER_OTLP_TRACES_PROTOCOL` | 传输协议 | `http/protobuf`（仅支持） |
+| `OTEL_SERVICE_NAME` | 覆盖默认 `service.name` | `codebuddy-code` |
+| `OTEL_RESOURCE_ATTRIBUTES` | 附加 resource 属性 | `team=platform,env=prod` |
 
-## 协议支持
+### 隐私 opt-in 开关
 
-仅支持 **`http/protobuf`**（OTLP/HTTP + Protobuf 编码），与 Claude Code 默认一致。
+Span 默认不记录任何敏感信息（prompt 内容、工具参数、工具输出等），需要通过以下环境变量逐级 opt-in：
 
-设置 `OTEL_EXPORTER_OTLP_PROTOCOL=grpc` 或 `http/json` 会被忽略并写入告警日志，回退到默认 protobuf。
+| 变量 | 用途 | 记录的内容 |
+|------|------|-----------|
+| `OTEL_LOG_USER_PROMPTS=1` | 记录用户 prompt | `user_prompt` 属性（默认为不记录，仅记录 `user_prompt_length`） |
+| `OTEL_LOG_TOOL_DETAILS=1` | 记录工具参数 | `tool_input` 属性（~4KB 截断）+ 工具特定属性（`file.path`、`command` 等） |
+| `OTEL_LOG_TOOL_CONTENT=1` | 记录工具输入输出全文 | `tool_input`/`tool_result` span events（60KB 截断） |
+| `OTEL_LOG_RAW_API_BODIES=1` | 记录完整 API 请求/响应体 | 预留，暂未实现 |
+
+## Span 结构
+
+每个用户 prompt 产生一个 `codebuddy_code.interaction` 根 span。工具调用记录为其子 span：
+
+```
+codebuddy_code.interaction
+├── codebuddy_code.tool (Read)
+├── codebuddy_code.tool (Bash)
+└── codebuddy_code.tool (Agent -> 子 agent 的 tool spans)
+```
+
+### Span 属性
+
+所有 span 都包含 `span.type` 属性标识类型。
+
+**`codebuddy_code.interaction`**
+
+| 属性 | 描述 | 受控于 |
+|------|------|--------|
+| `span.type` | 固定值 `"interaction"` | |
+| `conversation.id` | 会话 ID | |
+| `conversation.agent` | Agent 名称 | |
+| `user_prompt` | 用户 prompt 内容（未启用时不记录） | `OTEL_LOG_USER_PROMPTS` |
+| `user_prompt_length` | Prompt 长度（始终记录） | |
+| `conversation.cancelled` | 会话被取消时为 `true` | |
+
+**`codebuddy_code.tool`**
+
+| 属性 | 描述 | 受控于 |
+|------|------|--------|
+| `span.type` | 固定值 `"tool"` | |
+| `tool_name` | 工具名称 | |
+| `tool.call_id` | 工具调用 ID（始终记录） | |
+| `file.path` | 文件路径（Read/Write/Edit） | `OTEL_LOG_TOOL_DETAILS` |
+| `command` | Bash 命令 | `OTEL_LOG_TOOL_DETAILS` |
+| `command.timeout` | 命令超时（毫秒） | `OTEL_LOG_TOOL_DETAILS` |
+| `glob.pattern` | Glob 搜索模式 | `OTEL_LOG_TOOL_DETAILS` |
+| `grep.pattern` | Grep 正则模式 | `OTEL_LOG_TOOL_DETAILS` |
+| `http.url` | WebFetch URL | `OTEL_LOG_TOOL_DETAILS` |
+| `search.query` | WebSearch 查询 | `OTEL_LOG_TOOL_DETAILS` |
+| `agent.prompt` | 子 Agent prompt | `OTEL_LOG_TOOL_DETAILS` |
+| `agent.type` | 子 Agent 类型 | `OTEL_LOG_TOOL_DETAILS` |
+| `mcp.server` | MCP 服务器名 | `OTEL_LOG_TOOL_DETAILS` |
+| `mcp.tool` | MCP 工具名 | `OTEL_LOG_TOOL_DETAILS` |
+| `tool_input` | 工具输入 JSON（~4KB 截断） | `OTEL_LOG_TOOL_DETAILS` |
+| `tool_input_truncated` | 输入是否被截断 | `OTEL_LOG_TOOL_DETAILS` |
+| `tool_input_original_length` | 截断前原始长度 | `OTEL_LOG_TOOL_DETAILS` |
+
+**`codebuddy_code.tool` span events**（需要 `OTEL_LOG_TOOL_CONTENT=1`）
+
+| 事件名 | 属性 | 描述 |
+|--------|------|------|
+| `tool_input` | `content` | 完整工具输入（60KB 截断） |
+| `tool_input` | `content_truncated` | 是否被截断 |
+| `tool_input` | `content_original_length` | 截断前长度 |
+| `tool_result` | `content` | 完整工具输出（60KB 截断） |
+| `tool_result` | `content_truncated` | 是否被截断 |
+| `tool_result` | `content_original_length` | 截断前长度 |
 
 ## 典型场景
 
-### 1. 上报到企业自建 Collector
+### 上报到企业自建 Collector
 
 ```bash
 export CODEBUDDY_CODE_ENABLE_TELEMETRY=1
@@ -48,16 +121,17 @@ export OTEL_SERVICE_NAME=codebuddy-code
 export OTEL_RESOURCE_ATTRIBUTES=deployment.environment=prod,team=copilot
 ```
 
-### 2. 本地调试 trace 输出
-
-调试时让 traces 直接打到 stdout：
+### 本地调试（console 输出）
 
 ```bash
 export CODEBUDDY_CODE_ENABLE_TELEMETRY=1
 export OTEL_TRACES_EXPORTER=console
+export OTEL_LOG_USER_PROMPTS=1
+export OTEL_LOG_TOOL_DETAILS=1
+export OTEL_LOG_TOOL_CONTENT=1
 ```
 
-### 3. 临时关闭
+### 关闭 telemetry
 
 ```bash
 export OTEL_TRACES_EXPORTER=none
@@ -72,11 +146,21 @@ export DISABLE_TELEMETRY=1
 3. Endpoint 优先级：`OTEL_EXPORTER_OTLP_TRACES_ENDPOINT` > `OTEL_EXPORTER_OTLP_ENDPOINT` > 内置 product 配置中的 `telemetry.tracing.url`。
 4. Headers：env 与 product 配置合并，env 同名 key 覆盖 product。
 
-## FAQ
+## 协议支持
+
+仅支持 **`http/protobuf`**（OTLP/HTTP + Protobuf 编码），与 Claude Code 默认一致。
 
-### 是否会把 prompt / 代码内容写到 trace？
+设置 `OTEL_EXPORTER_OTLP_PROTOCOL=grpc` 或 `http/json` 会被忽略并写入告警日志，回退到默认 protobuf。
+
+## 安全与隐私
+
+- Span 默认只记录工具名称和调用 ID，**不包含**用户 prompt、工具参数、文件内容或源代码
+- `user_prompt_length` 始终记录（仅长度），prompt 文本需要 `OTEL_LOG_USER_PROMPTS=1` 才会写入
+- 工具参数（文件路径、命令等）需要 `OTEL_LOG_TOOL_DETAILS=1`，个别值超过 512 字符会被截断，总量限制 ~4KB
+- 工具输入输出全文需要 `OTEL_LOG_TOOL_CONTENT=1`，通过 span events 记录，截断于 60KB
+- 所有 opt-in 开关默认关闭，企业管理员可通过 managed settings 统一配置
 
-不会。CodeBuddy Code 的 trace 仅记录工具调用、模型调用、耗时等结构化指标，不包含用户对话内容或源代码。如果需要记录代码片段需另行启用 standard 报告通道（不在本特性范围）。
+## FAQ
 
 ### 与企业内部上报通道是否冲突？
 
@@ -85,3 +169,7 @@ export DISABLE_TELEMETRY=1
 ### 是否支持 metrics / logs？
 
 暂不支持，规划中。如有强诉求请反馈到对应 Issue。
+
+### 与 Claude Code 的 OTEL 格式兼容吗？
+
+是的。Span 命名、属性命名、截断策略均对齐 Claude Code 的约定（`{product}.interaction` / `{product}.tool`），确保上游分析平台可统一处理。

package/cli/dist/web-ui/docs/cn/cli/release-notes/README.md

@@ -17,6 +17,8 @@ Release Notes 记录了每个版本的用户可见变更，包括：
 
 <!-- 新版本自动添加到此处 -->
 
+- [v2.99.1](./v2.99.1.md) - 2026-05-28
+- [v2.99.0](./v2.99.0.md) - 2026-05-27
 - [v2.98.1](./v2.98.1.md) - 2026-05-25
 - [v2.98.0](./v2.98.0.md) - 2026-05-24
 - [v2.97.5](./v2.97.5.md) - 2026-05-22

package/cli/dist/web-ui/docs/cn/cli/release-notes/v2.99.0.md

@@ -0,0 +1,39 @@
+# 🚀 CodeBuddy Code v2.99.0 发布
+
+## 📦 版本信息
+
+| 组件 | 版本 |
+|------|------|
+| CodeBuddy Code CLI | v2.99.0 |
+| Agent SDK JS | v0.3.158 |
+| Agent SDK Python | v0.3.157 |
+
+## ✨ 新功能
+
+### `/goal` 命令：让 CodeBuddy 持续工作直到达成目标
+
+新增 `/goal` 斜杠命令，设置一个完成条件后，CodeBuddy 会跨多轮持续工作直到条件满足：
+
+- `/goal all tests pass` — 每轮结束时由小模型评估器判断条件是否成立，未成立则自动继续
+- `/goal` — 查看当前目标状态（已运行时长、turn 数、token 消耗）
+- `/goal clear` — 提前结束目标
+
+支持三态评估：达成（停止）、未达成（继续工作）、不可达成（避免无效循环）。通过 `/resume` 恢复会话时目标自动重新装载。Web UI 同步支持进度条和终态浮层。
+
+### Credit 实际消耗推送
+
+在标准 ACP `usage_update` 上附加含 `credit` 字段的 `usage` 明细，支持上层按轮次累计与展示已消耗 Credit。
+
+### Gemini-3.5-Flash 模型
+
+新增 Gemini-3.5-Flash 模型支持，百万 token 上下文，推理能力均衡，适合日常使用。
+
+## 🐛 问题修复
+
+- **安全修复（RCE）**：修复 `apiKeyHelper` 配置在目录信任对话框弹出之前被执行的远程代码执行漏洞，项目作用域配置现在必须等待目录信任完成后才执行
+- **Hook Input 修复**：`agent_type` 现在正确反映配置的 agent 名称；SubagentStop 的 `agent_transcript_path` 指向正确路径
+- **Plan Mode 权限恢复**：修复 ExitPlanMode 在 session 已退出 Plan Mode 时仍错误降级权限的问题
+- **团队任务停止可靠性**：修复成员刚启动时点击停止偶发无法中止、以及成员被强制结束后仍显示运行中的问题
+- **插件热监控无限循环**：修复 PluginsProductProvider 中变更事件无限循环问题
+- **多行输入方向键**：修复后台任务运行时多行输入后方向下键被快捷键拦截的问题
+- **自定义模型 tool call**：新增 `SkipToolCallSupportCheck` 开关，专享版不再移除 tools/tool_choice 字段

package/cli/dist/web-ui/docs/cn/cli/release-notes/v2.99.1.md

@@ -0,0 +1,46 @@
+# 🚀 CodeBuddy Code v2.99.1 发布
+
+## 📦 版本信息
+
+| 组件 | 版本 |
+|------|------|
+| CodeBuddy Code CLI | v2.99.1 |
+| Agent SDK JS | v0.3.159 |
+| Agent SDK Python | v0.3.158 |
+
+## 🔧 改进优化
+
+### OTel 可观测性增强
+
+- **Span Schema 单一真相源**：新增 `otel-span-schema.ts` 统一管理 span 名称、属性键和事件名，确保实现与文档一致
+- **细粒度隐私开关**：支持 `OTEL_LOG_USER_PROMPTS`、`OTEL_LOG_TOOL_DETAILS`、`OTEL_LOG_TOOL_CONTENT` 等环境变量，逐级 opt-in 控制敏感数据记录
+- **Tool Span 增强**：按开关记录工具输入参数和输出内容，带 60KB 截断保护
+- **Trace 可视化**：Web UI TracesView 新增 LLM 调用统计、Cache 命中率、多模型展示等指标
+
+### Galileo 监控体系升级
+
+- 将 tool 打点逻辑拆分为独立的 GalileoToolPreHook / GalileoToolPostHook，职责更单一
+- Agent SLA 全指标补齐 model 维度（ttfb / streaming / task_total / prompt_build / tool / request / cache）
+- 新增 agent_name、agent_purpose、conversation_request_id 维度，支持多角度聚合分析
+- patchName 全局注入，三端统一受 galileo.enable 开关控制
+
+### ACP 会话稳定性
+
+- 完善 ACP 团队桥接、会话回放与消息 ID 工具的边界处理，避免渲染抖动
+- 会话运行状态机移除冗余状态切换，状态推进更稳定
+
+### Skill 与工具优化
+
+- Skill 列表从 XML 格式改为 Markdown 列表，减少 token 占用
+- 单条 skill 描述截断阈值从 250 降至 150 字符
+- 移除工具返回内容中无意义的标签注入
+- 优化延迟工具列表体积，减少大型 MCP 工具集合对上下文的占用
+- 帮助面板移除推广链接
+
+## 🐛 问题修复
+
+- **延迟工具加载**：修复裸名 MCP 工具通过工具搜索加载后无法正确调用的问题
+- **自定义模型透传**：避免把内部上报字段透传给客户网关，仅在非自定义模型时合并 providerData
+- **权限错误提示**：修改无权限文件失败时保留更具体的错误详情，减少排查成本
+- **会话压缩**：修复 `/clear` 后压缩仍可能带入旧会话内容的问题
+- **Galileo 字段大小写**：product.json 中统一为小写 `galileo`

package/cli/dist/web-ui/docs/en/cli/env-vars.md

@@ -63,6 +63,7 @@ CodeBuddy Code supports environment variables to control its behavior. These var
 | `CODEBUDDY_IMAGE_GEN_ENABLED` | Set to `false` or `0` to disable image generation |
 | `CODEBUDDY_IMAGE_EDIT_ENABLED` | Set to `false` or `0` to disable image editing |
 | `CODEBUDDY_COMPUTER_USE_ENABLED` | **Experimental**: Set to `true` or `1` to enable the macOS desktop control tool (screenshot, mouse, keyboard). Available only on macOS, disabled by default. The first invocation of keyboard/mouse actions requires authorizing the terminal in System Settings → Privacy & Security → Accessibility and Screen Recording |
+| `CODEBUDDY_WAIT_FOR_MCP_SERVERS_ENABLED` | Set to `0` or `false` to disable the WaitForMcpServers tool. Enabled by default. In interactive mode, MCP connections are not awaited blockingly; when the LLM needs an MCP tool that is not yet ready, it can proactively call this tool to wait on demand. Set to `0` to disable in WorkBuddy scenarios |
 | `CODEBUDDY_DEFER_TOOL_LOADING` | Set to `false` or `0` to disable MCP tool deferred loading |
 | `CODEBUDDY_SHOW_ALL_DEFERRED_TOOLS` | Set to `true` or `1` to show full descriptions for all deferred tools |
 | `CODEBUDDY_DISABLE_CRON` | Set to `1` to disable scheduled tasks |

package/cli/dist/web-ui/docs/en/cli/monitoring.md

@@ -1,44 +1,117 @@
 # Monitoring CodeBuddy Code with OpenTelemetry
 
-CodeBuddy Code supports exporting internal traces to your own OpenTelemetry Collector via the standard OTLP protocol, making it easy to integrate with self-hosted observability platforms.
+CodeBuddy Code supports exporting traces to your own OpenTelemetry Collector via the standard OTLP protocol, making it easy to integrate with self-hosted observability platforms.
 
-> **MVP Scope**: Currently only **traces** (distributed tracing) are supported; custom export of metrics and logs is not yet available. Support will be expanded as needed.
+> **Current Scope**: Supports **traces** (distributed tracing) + 4 privacy opt-in switches. Custom export of metrics and logs is not yet supported.
 
-## How to Enable
-
-Once the enable switch is set, traces will be exported using OTel standard environment variables:
+## Quick Start
 
 ```bash
+# 1. Enable telemetry
 export CODEBUDDY_CODE_ENABLE_TELEMETRY=1
-export OTEL_EXPORTER_OTLP_ENDPOINT=https://otel-collector.example.com
+
+# 2. Configure OTLP endpoint
+export OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4318
+
+# 3. (Optional) Enable privacy opt-in content recording
+export OTEL_LOG_USER_PROMPTS=1
+export OTEL_LOG_TOOL_DETAILS=1
+export OTEL_LOG_TOOL_CONTENT=1
+
+# 4. Run
 codebuddy
 ```
 
-> A legacy alias `CLAUDE_CODE_ENABLE_TELEMETRY` is also accepted for backward compatibility and is equivalent to `CODEBUDDY_CODE_ENABLE_TELEMETRY`.
+> Claude Code compatibility: `CLAUDE_CODE_ENABLE_TELEMETRY` is equivalent to `CODEBUDDY_CODE_ENABLE_TELEMETRY`.
 
-## Key Environment Variables
+## Configuration Variables
 
-For the full list, see [env-vars.md](env-vars.md#opentelemetry-custom-export-traces). Common ones:
+### Basic Configuration
 
-| Variable | Purpose |
-|----------|---------|
-| `CODEBUDDY_CODE_ENABLE_TELEMETRY=1` | Enable the OTel export switch |
-| `OTEL_TRACES_EXPORTER` | `otlp` (default) / `console` / `none` |
-| `OTEL_EXPORTER_OTLP_ENDPOINT` | OTLP Collector address; `/v1/traces` is appended automatically |
-| `OTEL_EXPORTER_OTLP_TRACES_ENDPOINT` | Full URL specific to traces; takes higher priority |
-| `OTEL_EXPORTER_OTLP_HEADERS` | Request headers `k1=v1,k2=v2`; values support URL encoding |
-| `OTEL_SERVICE_NAME` | Override the default `service.name` |
-| `OTEL_RESOURCE_ATTRIBUTES` | Additional resource attributes |
+| Variable | Purpose | Example |
+|----------|---------|---------|
+| `CODEBUDDY_CODE_ENABLE_TELEMETRY` | Enable OTel export (required) | `1` |
+| `OTEL_TRACES_EXPORTER` | Exporter type | `otlp` (default), `console`, `none` |
+| `OTEL_EXPORTER_OTLP_ENDPOINT` | OTLP Collector address; `/v1/traces` is appended automatically | `http://localhost:4318` |
+| `OTEL_EXPORTER_OTLP_TRACES_ENDPOINT` | Full URL specific to traces; takes higher priority | `http://localhost:4318/v1/traces` |
+| `OTEL_EXPORTER_OTLP_HEADERS` | Request headers `k1=v1,k2=v2`; values support URL encoding | `Authorization=Bearer%20token` |
+| `OTEL_EXPORTER_OTLP_TRACES_PROTOCOL` | Transport protocol | `http/protobuf` (only supported) |
+| `OTEL_SERVICE_NAME` | Override the default `service.name` | `codebuddy-code` |
+| `OTEL_RESOURCE_ATTRIBUTES` | Additional resource attributes | `team=platform,env=prod` |
 
-## Protocol Support
+### Privacy Opt-in Switches
 
-Only **`http/protobuf`** (OTLP/HTTP + Protobuf encoding) is supported, consistent with the CodeBuddy Code default.
+Spans do not record any sensitive information by default (prompt content, tool parameters, tool output, etc.). You need to opt in progressively via the following environment variables:
+
+| Variable | Purpose | Recorded Content |
+|----------|---------|-----------------|
+| `OTEL_LOG_USER_PROMPTS=1` | Record user prompts | `user_prompt` attribute (not recorded by default; only `user_prompt_length` is recorded) |
+| `OTEL_LOG_TOOL_DETAILS=1` | Record tool parameters | `tool_input` attribute (~4KB truncation) + tool-specific attributes (`file.path`, `command`, etc.) |
+| `OTEL_LOG_TOOL_CONTENT=1` | Record full tool input/output | `tool_input`/`tool_result` span events (60KB truncation) |
+| `OTEL_LOG_RAW_API_BODIES=1` | Record full API request/response bodies | Reserved, not yet implemented |
+
+## Span Structure
+
+Each user prompt produces a `codebuddy_code.interaction` root span. Tool calls are recorded as child spans:
+
+```
+codebuddy_code.interaction
+├── codebuddy_code.tool (Read)
+├── codebuddy_code.tool (Bash)
+└── codebuddy_code.tool (Agent -> child agent tool spans)
+```
 
-Setting `OTEL_EXPORTER_OTLP_PROTOCOL=grpc` or `http/json` will be ignored with a warning logged, and will fall back to the default protobuf.
+### Span Attributes
+
+All spans include a `span.type` attribute to identify the type.
+
+**`codebuddy_code.interaction`**
+
+| Attribute | Description | Controlled By |
+|-----------|-------------|---------------|
+| `span.type` | Fixed value `"interaction"` | |
+| `conversation.id` | Conversation ID | |
+| `conversation.agent` | Agent name | |
+| `user_prompt` | User prompt content (not recorded when disabled) | `OTEL_LOG_USER_PROMPTS` |
+| `user_prompt_length` | Prompt length (always recorded) | |
+| `conversation.cancelled` | `true` when conversation is cancelled | |
+
+**`codebuddy_code.tool`**
+
+| Attribute | Description | Controlled By |
+|-----------|-------------|---------------|
+| `span.type` | Fixed value `"tool"` | |
+| `tool_name` | Tool name | |
+| `tool.call_id` | Tool call ID (always recorded) | |
+| `file.path` | File path (Read/Write/Edit) | `OTEL_LOG_TOOL_DETAILS` |
+| `command` | Bash command | `OTEL_LOG_TOOL_DETAILS` |
+| `command.timeout` | Command timeout (milliseconds) | `OTEL_LOG_TOOL_DETAILS` |
+| `glob.pattern` | Glob search pattern | `OTEL_LOG_TOOL_DETAILS` |
+| `grep.pattern` | Grep regex pattern | `OTEL_LOG_TOOL_DETAILS` |
+| `http.url` | WebFetch URL | `OTEL_LOG_TOOL_DETAILS` |
+| `search.query` | WebSearch query | `OTEL_LOG_TOOL_DETAILS` |
+| `agent.prompt` | Sub-agent prompt | `OTEL_LOG_TOOL_DETAILS` |
+| `agent.type` | Sub-agent type | `OTEL_LOG_TOOL_DETAILS` |
+| `mcp.server` | MCP server name | `OTEL_LOG_TOOL_DETAILS` |
+| `mcp.tool` | MCP tool name | `OTEL_LOG_TOOL_DETAILS` |
+| `tool_input` | Tool input JSON (~4KB truncation) | `OTEL_LOG_TOOL_DETAILS` |
+| `tool_input_truncated` | Whether input was truncated | `OTEL_LOG_TOOL_DETAILS` |
+| `tool_input_original_length` | Original length before truncation | `OTEL_LOG_TOOL_DETAILS` |
+
+**`codebuddy_code.tool` span events** (requires `OTEL_LOG_TOOL_CONTENT=1`)
+
+| Event Name | Attribute | Description |
+|------------|-----------|-------------|
+| `tool_input` | `content` | Full tool input (60KB truncation) |
+| `tool_input` | `content_truncated` | Whether truncated |
+| `tool_input` | `content_original_length` | Length before truncation |
+| `tool_result` | `content` | Full tool output (60KB truncation) |
+| `tool_result` | `content_truncated` | Whether truncated |
+| `tool_result` | `content_original_length` | Length before truncation |
 
 ## Typical Scenarios
 
-### 1. Export to a Self-Hosted Enterprise Collector
+### Export to a Self-Hosted Enterprise Collector
 
 ```bash
 export CODEBUDDY_CODE_ENABLE_TELEMETRY=1
@@ -48,16 +121,17 @@ export OTEL_SERVICE_NAME=codebuddy-code
 export OTEL_RESOURCE_ATTRIBUTES=deployment.environment=prod,team=copilot
 ```
 
-### 2. Local Debug Trace Output
-
-For debugging, send traces directly to stdout:
+### Local Debugging (Console Output)
 
 ```bash
 export CODEBUDDY_CODE_ENABLE_TELEMETRY=1
 export OTEL_TRACES_EXPORTER=console
+export OTEL_LOG_USER_PROMPTS=1
+export OTEL_LOG_TOOL_DETAILS=1
+export OTEL_LOG_TOOL_CONTENT=1
 ```
 
-### 3. Temporarily Disable
+### Disable Telemetry
 
 ```bash
 export OTEL_TRACES_EXPORTER=none
@@ -68,15 +142,25 @@ export DISABLE_TELEMETRY=1
 ## Priority and Fallback
 
 1. `DISABLE_TELEMETRY=1` has the highest priority and disables all telemetry.
-2. Enable evaluation: enabled in the built-in product configuration **or** `CODEBUDDY_CODE_ENABLE_TELEMETRY` (or its legacy alias `CLAUDE_CODE_ENABLE_TELEMETRY`) is set to a truthy value (`1` / `true` / `yes` / `on`).
+2. Enable evaluation: enabled in the built-in product configuration **or** `CODEBUDDY_CODE_ENABLE_TELEMETRY` / `CLAUDE_CODE_ENABLE_TELEMETRY` is set to a truthy value (`1` / `true` / `yes` / `on`).
 3. Endpoint priority: `OTEL_EXPORTER_OTLP_TRACES_ENDPOINT` > `OTEL_EXPORTER_OTLP_ENDPOINT` > `telemetry.tracing.url` in the built-in product configuration.
 4. Headers: env and product configuration are merged; env keys with the same name override product configuration.
 
-## FAQ
+## Protocol Support
+
+Only **`http/protobuf`** (OTLP/HTTP + Protobuf encoding) is supported, consistent with the Claude Code default.
 
-### Will prompts or code content be written into traces?
+Setting `OTEL_EXPORTER_OTLP_PROTOCOL=grpc` or `http/json` will be ignored with a warning logged, falling back to the default protobuf.
 
-No. CodeBuddy Code traces only record structured metrics such as tool calls, model calls, and durations. They do not contain user conversation content or source code. If you need to record code snippets, you must separately enable the standard reporting channel (which is outside the scope of this feature).
+## Security and Privacy
+
+- Spans only record tool names and call IDs by default, **excluding** user prompts, tool parameters, file content, or source code
+- `user_prompt_length` is always recorded (length only); prompt text requires `OTEL_LOG_USER_PROMPTS=1` to be written
+- Tool parameters (file paths, commands, etc.) require `OTEL_LOG_TOOL_DETAILS=1`; individual values exceeding 512 characters are truncated, with a total limit of ~4KB
+- Full tool input/output requires `OTEL_LOG_TOOL_CONTENT=1`, recorded via span events, truncated at 60KB
+- All opt-in switches are disabled by default; enterprise administrators can configure them uniformly via managed settings
+
+## FAQ
 
 ### Does it conflict with the internal enterprise reporting channel?
 
@@ -85,3 +169,7 @@ No conflict. OTel custom export and the built-in standard reporting (`telemetry.
 ### Is metrics / logs supported?
 
 Not yet supported, but planned. If you have a strong need, please provide feedback on the corresponding Issue.
+
+### Is it compatible with Claude Code's OTEL format?
+
+Yes. Span naming, attribute naming, and truncation strategies are aligned with Claude Code's conventions (`{product}.interaction` / `{product}.tool`), ensuring upstream analysis platforms can process them uniformly.

package/cli/dist/web-ui/docs/en/cli/release-notes/README.md

@@ -17,6 +17,8 @@ Difference from CHANGELOG.md:
 
 <!-- New versions are automatically added here -->
 
+- [v2.99.1](./v2.99.1.md) - 2026-05-28
+- [v2.99.0](./v2.99.0.md) - 2026-05-27
 - [v2.98.1](./v2.98.1.md) - 2026-05-25
 - [v2.98.0](./v2.98.0.md) - 2026-05-24
 - [v2.97.5](./v2.97.5.md) - 2026-05-22

package/cli/dist/web-ui/docs/en/cli/release-notes/v2.99.0.md

@@ -0,0 +1,39 @@
+# 🚀 CodeBuddy Code v2.99.0 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.99.0 |
+| Agent SDK JS | v0.3.158 |
+| Agent SDK Python | v0.3.157 |
+
+## ✨ New Features
+
+### `/goal` Command: Keep CodeBuddy Working Until Goal is Achieved
+
+New `/goal` slash command that lets you set a completion condition, after which CodeBuddy will continue working across multiple turns until the condition is met:
+
+- `/goal all tests pass` — At the end of each turn, a lightweight model evaluator checks whether the condition is met; if not, it automatically continues
+- `/goal` — View current goal status (elapsed time, turn count, token consumption)
+- `/goal clear` — End the goal early
+
+Supports tri-state evaluation: achieved (stop), not achieved (continue working), unachievable (avoid infinite loops). Goals are automatically reloaded when resuming a session via `/resume`. Web UI supports progress bars and terminal state overlays.
+
+### Credit Consumption Push
+
+Attaches `usage` details with a `credit` field to the standard ACP `usage_update`, enabling upstream systems to accumulate and display consumed Credits per turn.
+
+### Gemini-3.5-Flash Model
+
+Added Gemini-3.5-Flash model support with million-token context window, balanced reasoning capabilities, suitable for everyday use.
+
+## 🐛 Bug Fixes
+
+- **Security Fix (RCE)**: Fixed a remote code execution vulnerability where `apiKeyHelper` configuration was executed before the directory trust dialog appeared; project-scoped configurations now must wait for directory trust completion before execution
+- **Hook Input Fix**: `agent_type` now correctly reflects the configured agent name; SubagentStop's `agent_transcript_path` now points to the correct path
+- **Plan Mode Permission Restore**: Fixed an issue where ExitPlanMode incorrectly downgraded permissions when the session had already exited Plan Mode
+- **Team Task Stop Reliability**: Fixed occasional inability to stop members immediately after startup, and members still showing as running after being force-terminated
+- **Plugin Hot-Watch Infinite Loop**: Fixed an infinite loop issue with change events in PluginsProductProvider
+- **Multi-line Input Arrow Keys**: Fixed down arrow key being intercepted by shortcuts after multi-line input while background tasks are running
+- **Custom Model Tool Call**: Added `SkipToolCallSupportCheck` switch; dedicated editions no longer remove tools/tool_choice fields

package/cli/dist/web-ui/docs/en/cli/release-notes/v2.99.1.md

@@ -0,0 +1,46 @@
+# 🚀 CodeBuddy Code v2.99.1 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.99.1 |
+| Agent SDK JS | v0.3.159 |
+| Agent SDK Python | v0.3.158 |
+
+## 🔧 Improvements
+
+### Enhanced OTel Observability
+
+- **Single Source of Truth for Span Schema**: Added `otel-span-schema.ts` to centrally manage span names, attribute keys, and event names, ensuring implementation stays consistent with documentation
+- **Fine-grained Privacy Switches**: Support for environment variables such as `OTEL_LOG_USER_PROMPTS`, `OTEL_LOG_TOOL_DETAILS`, and `OTEL_LOG_TOOL_CONTENT`, providing tiered opt-in control over sensitive data logging
+- **Tool Span Enhancements**: Records tool input parameters and output content based on switches, with 60KB truncation protection
+- **Trace Visualization**: Web UI TracesView adds new metrics including LLM call statistics, cache hit rate, and multi-model display
+
+### Galileo Monitoring System Upgrade
+
+- Split tool tracking logic into independent GalileoToolPreHook / GalileoToolPostHook with more focused responsibilities
+- Completed model dimension coverage for all Agent SLA metrics (ttfb / streaming / task_total / prompt_build / tool / request / cache)
+- Added agent_name, agent_purpose, and conversation_request_id dimensions to support multi-angle aggregation analysis
+- patchName is globally injected, with all three platforms uniformly controlled by the galileo.enable switch
+
+### ACP Session Stability
+
+- Refined boundary handling for ACP team bridging, session replay, and message ID utilities to avoid rendering jitter
+- Removed redundant state transitions in the session run state machine for more stable state progression
+
+### Skill and Tool Optimizations
+
+- Skill list changed from XML format to Markdown list, reducing token usage
+- Single skill description truncation threshold lowered from 250 to 150 characters
+- Removed meaningless tag injection from tool return content
+- Optimized deferred tool list size, reducing context occupation by large MCP tool collections
+- Removed promotional links from the help panel
+
+## 🐛 Bug Fixes
+
+- **Deferred Tool Loading**: Fixed the issue where bare-name MCP tools loaded via tool search could not be invoked correctly
+- **Custom Model Pass-through**: Avoid passing internal reporting fields to customer gateways; merge providerData only for non-custom models
+- **Permission Error Messages**: Preserve more specific error details when modifying permission-restricted files fails, reducing troubleshooting cost
+- **Session Compaction**: Fixed the issue where compaction after `/clear` could still carry over old session content
+- **Galileo Field Casing**: Unified to lowercase `galileo` in product.json