@tencent-ai/codebuddy-code 2.119.4 → 2.120.0

package/dist/web-ui/docs/en/cli/env-vars.md

@@ -27,11 +27,16 @@ CodeBuddy Code supports environment variables to control its behavior. These var
 | Environment Variable | Description |
 |---------|------|
 | `CODEBUDDY_MODEL` | Override the default agent model |
-| `CODEBUDDY_SMALL_FAST_MODEL` | Small, fast model used for background tasks |
-| `CODEBUDDY_BIG_SLOW_MODEL` | Large model used for complex reasoning tasks |
-| `CODEBUDDY_CODE_SUBAGENT_MODEL` | Model used by sub-agents |
+| `CODEBUDDY_SMALL_FAST_MODEL` | Override the model for the `lite` (lightweight, fast) scenario variant; takes priority over the `variantModels.lite` setting |
+| `CODEBUDDY_BIG_SLOW_MODEL` | Override the model for the `reasoning` (enhanced reasoning) scenario variant; takes priority over the `variantModels.reasoning` setting |
+| `CODEBUDDY_CODE_SUBAGENT_MODEL` | **Blanket override** of the model for all built-in sub-agents (highest priority, overrides the `subagents` setting). To configure per sub-agent, use the `/agents` panel or `settings.json`'s `subagents.agents.<subagent-name>.model` |
 | `MAX_THINKING_TOKENS` | Enable extended thinking and set the token budget for the thinking process. Disabled by default |
 
+> **Relationship between env and settings**: Model-related environment variables are **ops/CI-level highest-priority overrides**.
+> - `CODEBUDDY_CODE_SUBAGENT_MODEL` applies a blanket override to **all** sub-agents; to specify **per sub-agent**, use `settings.json`'s `subagents.agents.<subagent-name>.model` (supports both global + project scope, editable in the `/agents` panel). See [Sub-Agents](sub-agents.md) for details.
+> - `CODEBUDDY_SMALL_FAST_MODEL` / `CODEBUDDY_BIG_SLOW_MODEL` are set **per variant** independently (the former only affects `lite`, the latter only affects `reasoning`); the corresponding persistable setting is `variantModels` (editable in the `/model` panel's "Scenario Variants" section). See [Settings](settings.md) for details.
+> - Priority: env (highest) > `settings` (project > global) > built-in default. Removing the env var restores the settings' effect.
+
 ## Bash Tool Configuration
 
 | Environment Variable | Description |
@@ -99,8 +104,8 @@ CodeBuddy Code supports environment variables to control its behavior. These var
 |---------|------|
 | `CODEBUDDY_CODE_MAX_OUTPUT_TOKENS` | Set the maximum output tokens for most requests |
 | `CODEBUDDY_CODE_FILE_READ_MAX_OUTPUT_TOKENS` | Override the default token limit for file reads (default: 20000) |
-| `CODEBUDDY_STREAM_TIMEOUT_MS` | Maximum silent time between two data chunks in streaming responses (milliseconds) (default: 1200000) |
-| `CODEBUDDY_FIRST_TOKEN_TIMEOUT_MS` | Maximum time to wait for the first model output (milliseconds) (default: 1200000) |
+| `CODEBUDDY_STREAM_TIMEOUT_MS` | Maximum silent time between two data chunks in streaming responses (milliseconds) (default: 300000, i.e., 5 minutes). Silence mid-stream after tokens have started usually means the connection is broken, so this is decoupled from the first-token timeout and uses a shorter threshold |
+| `CODEBUDDY_FIRST_TOKEN_TIMEOUT_MS` | Maximum time to wait for the first model output (milliseconds) (default: 1200000, i.e., 20 minutes). Slow first-token emission due to long-context prefill is a legitimate scenario |
 | `CODEBUDDY_SESSION_MAX_ITEMS` | Maximum number of history messages to replay during `session/load` (default: 1000). Stops reading the JSONL in reverse when the threshold is reached and a user message is encountered. Increase (e.g., 2000 or more) when very long sessions need to be supported (such as sandbox scenarios); zero/negative/non-numeric values fall back to the default |
 
 ## Filesystem and Configuration

package/dist/web-ui/docs/en/cli/plugins-reference.md

@@ -267,7 +267,16 @@ The manifest is optional. If omitted, CodeBuddy auto-discovers components in the
   "hooks": "./config/hooks.json",
   "mcpServers": "./mcp-config.json",
   "outputStyles": "./styles/",
-  "lspServers": "./.lsp.json"
+  "lspServers": "./.lsp.json",
+  "defaultEnabled": false,
+  "dependencies": [
+    "audit-logger",
+    { "name": "secrets-vault", "version": "~2.1.0" }
+  ],
+  "experimental": {
+    "themes": "./themes/",
+    "monitors": "./monitors/monitors.json"
+  }
 }
 ```
 
@@ -292,6 +301,8 @@ This name is used for component namespacing. For example, in the UI, the agent `
 | `repository` | string | Source code URL | `"https://github.com/user/plugin"` |
 | `license` | string | License identifier | `"MIT"`, `"Apache-2.0"` |
 | `keywords` | array | Discovery tags | `["deployment", "ci-cd"]` |
+| `defaultEnabled` | boolean | Whether the plugin is enabled when no explicit setting exists, default `true` | `false` |
+| `dependencies` | array | Other plugins that this plugin depends on; can declare semver ranges and marketplace | `[{"name":"helper","version":"^2.0.0"}]` |
 
 ### Component Path Fields
 
@@ -303,10 +314,44 @@ This name is used for component namespacing. For example, in the UI, the agent `
 | `hooks` | string \| array \| object | Hook configuration path or inline configuration | `"./my-extra-hooks.json"` |
 | `mcpServers` | string \| array \| object | MCP configuration path or inline configuration | `"./my-extra-mcp-config.json"` |
 | `outputStyles` | string \| array | Custom output style files/directories (replaces default `output-styles/`) | `"./styles/"` |
+| `experimental.themes` | string \| array | Claude experimental field; CodeBuddy currently recognizes but does not load into runtime | `"./themes/"` |
+| `experimental.monitors` | string \| array | Claude experimental field; CodeBuddy currently recognizes but does not start background monitors | `"./monitors/monitors.json"` |
 | `lspServers` | string \| array \| object | LSP configuration path or inline configuration | `"./.lsp.json"` |
 | `userConfig` | object | Values CodeBuddy prompts the user to provide when enabling the plugin. See [User Configuration](#user-configuration) | See below |
 | `channels` | array | Channel declarations for message injection. See [Channels](#channels) | See below |
 
+### Default Enabled
+
+`defaultEnabled: false` keeps a newly installed plugin disabled. Existing `enabledPlugins` settings take priority over this default, so upgrading or reinstalling does not change the state the user has already explicitly chosen. If a plugin is a dependency of an enabled plugin, the dependency takes precedence and CodeBuddy explicitly enables it.
+
+### Plugin Dependencies
+
+`dependencies` can be declared in both `plugin.json` and the marketplace plugin entry; the two declarations are merged. String dependencies resolve to the marketplace where the declarant resides; objects support the following fields:
+
+| Field | Required | Description |
+|------|------|------|
+| `name` | Yes | Plugin name |
+| `version` | No | Node semver range, e.g., `~2.1.0`, `^2.0`, `>=1.4` |
+| `marketplace` | No | The marketplace where the dependency resides; defaults to the declarant's marketplace when omitted |
+
+Cross-marketplace auto-installation is blocked by default. It requires explicit authorization in the root plugin's marketplace's `marketplace.json`:
+
+```json
+{
+  "name": "acme-tools",
+  "allowCrossMarketplaceDependenciesOn": ["acme-shared"],
+  "plugins": []
+}
+```
+
+Only the root marketplace's allowlist takes effect; trust is not transitive. Cross-marketplace dependencies that the user has already manually installed and whose versions satisfy the requirements can be reused directly.
+
+Version constraints are resolved via Git tags. Publishers use the `{plugin-name}--v{version}` tag naming convention, e.g., `secrets-vault--v2.1.3`. CodeBuddy merges the ranges from all enabled plugins for the same dependency and selects the highest version that satisfies the intersection. The tag semver is recorded in `resolvedVersion`; the cache directory uses the declared version plus a 12-character commit SHA suffix, preventing force-moved tags from reusing stale content.
+
+Installing a plugin automatically installs the full transitive dependency chain. Enabling a plugin only transitively enables already-installed dependencies; enabling fails when a dependency is missing. Disabling or uninstalling a plugin that is still depended on by enabled plugins is blocked.
+
+Auto-installed dependencies are marked with `auto: true` in `installed_plugins.json`. Normal uninstallation preserves these dependencies; use `plugin prune` or `plugin uninstall --prune` to clean up auto dependencies no longer needed by any manually installed plugin. Explicitly installing an auto dependency promotes it to a manual installation, after which it will not be pruned.
+
 ### User Configuration
 
 The `userConfig` field declares values that CodeBuddy prompts the user to provide when the plugin is enabled. Use this instead of asking users to edit `settings.json` manually.
@@ -326,7 +371,7 @@ The `userConfig` field declares values that CodeBuddy prompts the user to provid
 }
 ```
 
-Keys must be valid identifiers. Each value can be substituted as `${user_config.KEY}` in MCP and LSP server configs and hook commands, and (for non-sensitive values only) inside skill and agent content. Values are also exported as `CODEBUDDY_PLUGIN_OPTION_<KEY>` environment variables to plugin child processes.
+Keys must be valid identifiers. Each value can be substituted as `${user_config.KEY}` in MCP and LSP server configs and hook commands, and (for non-sensitive values only) inside skill, command, and agent content. Values are also exported as `CLAUDE_PLUGIN_OPTION_<KEY>` and `CODEBUDDY_PLUGIN_OPTION_<KEY>` environment variables to plugin child processes. Non-alphanumeric, non-underscore characters in environment variable names are replaced with `_` and then uppercased.
 
 Non-sensitive values are stored in `pluginConfigs[<plugin-id>].options` in `settings.json`. Sensitive values are stored in the system keychain (or in `~/.codebuddy/.credentials.json` if the keychain is unavailable). Keychain storage is shared with OAuth tokens and has a total limit of around 2 KB, so sensitive values should be kept small.
 
@@ -376,16 +421,26 @@ For `commands`, `agents`, `skills`, and `outputStyles`, a custom path **replaces
 
 ### Environment Variables
 
-CodeBuddy provides two variables for referencing plugin paths. Both are substituted inline anywhere in skill content, agent content, hook commands, and MCP or LSP server configuration. Both are also exported as environment variables to hook processes and MCP/LSP server child processes.
+CodeBuddy provides three Claude Code-compatible path variables. They are substituted inline in skill, command, and agent content, hook configurations, and MCP or LSP server configurations, and are also exported as environment variables to hook, MCP, and LSP child processes. Each `CLAUDE_*` name has a corresponding `CODEBUDDY_*` alias.
 
 **`${CODEBUDDY_PLUGIN_ROOT}`**: Absolute path to the plugin installation directory. Use it to reference scripts, binaries, and configuration files bundled with the plugin. This path changes when the plugin is updated, so files written here do not persist across updates.
 
 **Compatibility**: The `${CLAUDE_PLUGIN_ROOT}` variable name is also supported for compatibility with Claude Code plugins.
 
-**`${CODEBUDDY_PLUGIN_DATA}`**: A persistent directory for plugin state that survives updates. Use it for installed dependencies (such as `node_modules` or Python virtual environments), generated code, caches, and any files that need to persist across plugin versions. The directory is created automatically on first reference.
+**`${CODEBUDDY_PLUGIN_DATA}`**: A persistent directory for plugin state that survives updates. Use it for installed dependencies (such as `node_modules` or Python virtual environments), generated code, caches, and any files that need to persist across plugin versions. The directory is created automatically when first referenced by a placeholder or exported to a plugin child process.
 
 **Compatibility**: The `${CLAUDE_PLUGIN_DATA}` variable name is also supported.
 
+**`${CODEBUDDY_PROJECT_DIR}`**: The current workspace root directory. Used by plugin scripts to locate the user's project; should not be used to write the plugin's own persistent state.
+
+**Compatibility**: The `${CLAUDE_PROJECT_DIR}` variable name is also supported.
+
+Plugin child processes also receive the following option environment variables:
+
+- `CLAUDE_PLUGIN_OPTION_<KEY>`: Claude Code standard name
+- `CODEBUDDY_PLUGIN_OPTION_<KEY>`: CodeBuddy alias
+- `PLUGIN_OPT_<KEY>`: Reserved compatibility name for existing CodeBuddy plugins
+
 ```json
 {
   "hooks": {
@@ -446,7 +501,7 @@ Scripts bundled under `${CODEBUDDY_PLUGIN_ROOT}` can run against the persisted `
 }
 ```
 
-When a plugin is uninstalled (from its last installation scope), the data directory is deleted automatically. The `/plugin` UI shows the directory size and prompts before deletion. The CLI deletes it by default; pass `--keep-data` to retain it.
+When a plugin is uninstalled from its last remaining installation scope, the data directory is automatically deleted; if the same plugin is still installed in other scopes, it is preserved. The CLI deletes it by default; pass `--keep-data` to retain it. `plugin prune` deletes the data directories of orphaned auto dependencies.
 
 ---
 
@@ -457,7 +512,7 @@ Plugins can be specified in two ways:
 - Via `codebuddy --plugin-dir`, valid for the current session only.
 - Via marketplace installation, valid for future sessions.
 
-For security and validation, CodeBuddy copies **marketplace** plugins to the user's local **plugin cache** (`~/.codebuddy/plugins/cache`) rather than using them in place. Understanding this behavior is important when developing plugins that reference external files.
+For security and validation, CodeBuddy copies **marketplace** plugins to the user's local **versioned plugin cache** (`~/.codebuddy/plugins/cache/<marketplace>/<plugin>/<version>`) rather than using them in place. The marketplace source code is still stored in `~/.codebuddy/plugins/marketplaces/<marketplace>`. Understanding this behavior is important when developing plugins that reference external files.
 
 ### Path Traversal Restrictions
 
@@ -465,14 +520,18 @@ Installed plugins cannot reference files outside their own directory. Paths that
 
 ### Using External Dependencies
 
-If a plugin needs access to files outside its directory, you can create symlinks inside the plugin directory that point to external files. Symlinks are preserved during the copy:
+If a plugin needs access to shared files within the same marketplace, you can create symlinks inside the plugin directory. Symlinks are processed by target location during cache copying:
+
+- Pointing inside the plugin's own directory: preserved as relative symlinks.
+- Pointing to other locations within the same marketplace: dereferenced and the target content is copied.
+- Pointing outside the marketplace: the symlink is skipped.
 
 ```bash
 # Inside the plugin directory
-ln -s /path/to/shared-utils ./shared-utils
+ln -s ../../shared-plugin/skills/foo ./skills/foo
 ```
 
-The contents of the symlink are copied into the plugin cache. This provides flexibility while preserving the security benefits of the cache system.
+This allows sharing files within a marketplace while preventing plugins from bringing arbitrary host files into the cache.
 
 ---
 
@@ -501,6 +560,10 @@ enterprise-plugin/
 │       └── scripts/
 ├── output-styles/            # Output style definitions
 │   └── terse.md
+├── themes/                   # Claude standard theme definitions; currently recognized but not loaded
+│   └── dracula.json
+├── monitors/                 # Claude standard background monitor; currently recognized but not started
+│   └── monitors.json
 ├── hooks/                    # Hook configuration
 │   ├── hooks.json            # Primary hook configuration
 │   └── security-hooks.json   # Additional hooks
@@ -517,7 +580,7 @@ enterprise-plugin/
 └── CHANGELOG.md              # Version history
 ```
 
-> **Important**: The `.codebuddy-plugin/` directory contains the `plugin.json` file. All other directories (`commands/`, `agents/`, `skills/`, `output-styles/`, `hooks/`) must live at the plugin root, not inside `.codebuddy-plugin/`. The `.workbuddy-plugin/` and `.claude-plugin/` directories are also supported for compatibility.
+> **Important**: The `.codebuddy-plugin/` directory contains the `plugin.json` file. All other directories (`commands/`, `agents/`, `skills/`, `output-styles/`, `themes/`, `monitors/`, `hooks/`) must live at the plugin root, not inside `.codebuddy-plugin/`. The `.workbuddy-plugin/` and `.claude-plugin/` directories are also supported for compatibility.
 
 ### File Location Reference
 
@@ -528,11 +591,13 @@ enterprise-plugin/
 | **Agents** | `agents/` | Sub-agent Markdown files |
 | **Skills** | `skills/` | Skills following the `<name>/SKILL.md` structure |
 | **Output styles** | `output-styles/` | Output style definitions |
+| **Themes** | `themes/` | Claude standard field; CodeBuddy currently recognizes but does not load into runtime |
+| **Monitors** | `monitors/monitors.json` | Claude standard field; CodeBuddy currently recognizes but does not start background monitors |
 | **Hooks** | `hooks/hooks.json` | Hook configuration |
 | **MCP servers** | `.mcp.json` | MCP server definitions |
 | **LSP servers** | `.lsp.json` | Language server configuration |
 | **Executables** | `bin/` | Executables added to the Bash tool PATH. When the plugin is enabled, files in this directory can be invoked as bare commands in any Bash tool call |
-| **Settings** | `settings.json` | Default configuration applied when the plugin is enabled. Currently only [agent](sub-agents.md) settings are supported |
+| **Settings** | `settings.json` | Plugin default configuration. Currently the runtime applies `agent`; `subagentStatusLine` is recognized and preserved |
 
 ---
 
@@ -592,12 +657,29 @@ codebuddy plugin uninstall <plugin> [options]
 |------|------|------|
 | `-s, --scope <scope>` | Uninstall from scope: `user`, `project`, or `local` | `user` |
 | `--keep-data` | Preserve the plugin's [persistent data directory](#persistent-data-directory) | |
+| `--prune` | Also clean up auto dependencies no longer needed in this scope | |
+| `-y, --yes` | Skip `--prune` confirmation; required when stdin or stdout is not a TTY | |
 | `-h, --help` | Show command help | |
 
 **Aliases**: `remove`, `rm`
 
 By default, uninstalling from the last remaining scope also deletes the plugin's `${CODEBUDDY_PLUGIN_DATA}` directory. Use `--keep-data` to preserve it — for example, when reinstalling after testing a new version.
 
+### plugin prune
+
+Clean up auto dependencies in the specified scope that are no longer depended on by any manually installed plugin.
+
+```bash
+codebuddy plugin prune [options]
+```
+
+| Option | Description | Default |
+|------|------|------|
+| `-s, --scope <scope>` | Prune scope: `user`, `project`, or `local` | `user` |
+| `--dry-run` | Only list plugins that would be pruned, without modifying settings and registry | |
+| `-y, --yes` | Skip confirmation; only lists candidates when stdin or stdout is not a TTY and this is not specified | |
+| `-h, --help` | Show command help | |
+
 ### plugin enable
 
 Enable a disabled plugin.
@@ -614,7 +696,7 @@ codebuddy plugin enable <plugin> [options]
 
 | Option | Description | Default |
 |------|------|------|
-| `-s, --scope <scope>` | Enable scope: `user`, `project`, or `local` | `user` |
+| `-s, --scope <scope>` | Enable scope: `user`, `project`, or `local` | Auto-detect current installation scope |
 | `-h, --help` | Show command help | |
 
 ### plugin disable
@@ -633,7 +715,7 @@ codebuddy plugin disable <plugin> [options]
 
 | Option | Description | Default |
 |------|------|------|
-| `-s, --scope <scope>` | Disable scope: `user`, `project`, or `local` | `user` |
+| `-s, --scope <scope>` | Disable scope: `user`, `project`, or `local` | Auto-detect current installation scope |
 | `-h, --help` | Show command help | |
 
 ### plugin update
@@ -812,6 +894,17 @@ Follow semantic versioning for plugin releases:
 >
 > If the plugin is in a [marketplace](plugin-marketplaces.md) directory, you can manage versions via `marketplace.json` and omit the `version` field from `plugin.json`.
 
+### Versioned Cache
+
+CodeBuddy calculates the cache key by the following priority:
+
+1. `version` from `plugin.json`
+2. `version` from the marketplace plugin entry
+3. Commit SHA for Git sources; `git-subdir` also includes a subdirectory path hash
+4. `unknown` when the version cannot be determined
+
+Git plugins without an explicit version use the 12-character commit SHA as the cache directory name. When resolving tags via version constraints, the cache directory additionally includes a 12-character commit SHA suffix; constraint validation uses the separately recorded `resolvedVersion` and does not rely on the potentially stale manifest version.
+
 ---
 
 ## IX. Compatibility with Claude Code

package/dist/web-ui/docs/en/cli/prewarm.md

@@ -17,7 +17,7 @@ cbc --prewarm --prewarm-id pool1
 ```
 
 The process will complete cold startup, then suspend at a local IPC endpoint in standby (without binding a working directory):
-- macOS / Linux: unix socket `/tmp/codebuddy-prewarm-pool1.sock` (permission `0600`, current user only)
+- macOS / Linux: unix socket `/tmp/codebuddy-prewarm-pool1.sock` (permission `0600`, current user only; socket directory can be overridden via env `CODEBUDDY_CODE_PREWARM_SOCKET_PATH`)
 - Windows: named pipe `\\.\pipe\codebuddy-prewarm-pool1`
 
 `--prewarm-id` can be omitted; defaults to using the process PID as the identifier.
@@ -54,10 +54,15 @@ To activate a prewarmed process from your own program, connect to the local sock
 ### Address Convention
 
 ```
-macOS/Linux : /tmp/codebuddy-prewarm-<id>.sock
+macOS/Linux : <dir>/codebuddy-prewarm-<id>.sock   (<dir> defaults to /tmp)
 Windows     : \\.\pipe\codebuddy-prewarm-<id>
 ```
 
+> The unix socket directory defaults to `/tmp` and can be overridden via the env `CODEBUDDY_CODE_PREWARM_SOCKET_PATH`
+> (e.g., when `/tmp` is noexec / read-only mounted, or when you need to place it in a controlled directory). Both the
+> process side and the client side read the same env to stay aligned. Windows named pipe has no directory concept and
+> is unaffected by this env.
+
 ### Messages
 
 ```jsonc
@@ -82,9 +87,11 @@ Windows     : \\.\pipe\codebuddy-prewarm-<id>
 const net = require('net');
 
 function prewarmAddr(id) {
-  return process.platform === 'win32'
-    ? `\\\\.\\pipe\\codebuddy-prewarm-${id}`
-    : `/tmp/codebuddy-prewarm-${id}.sock`;
+  if (process.platform === 'win32') {
+    return `\\\\.\\pipe\\codebuddy-prewarm-${id}`;
+  }
+  const dir = (process.env.CODEBUDDY_CODE_PREWARM_SOCKET_PATH || '').trim() || '/tmp';
+  return require('path').join(dir, `codebuddy-prewarm-${id}.sock`);
 }
 
 function activate(id, { cwd, args = [] }) {
@@ -119,6 +126,12 @@ console.log(res); // { ok: true, cmd: 'activate', status: 'activating', cwd: '..
 
 Prewarm-related parameters can only be configured via CLI flags: `--prewarm` / `--prewarm-id <id>` / `--prewarm-force`.
 
+You can also override the unix socket directory via env:
+
+| env | Purpose | Default |
+|-----|---------|---------|
+| `CODEBUDDY_CODE_PREWARM_SOCKET_PATH` | Custom unix socket directory (e.g., `/dev/abc/`, trailing slash optional). The process side creates and the client side reads the same env. Unix only; Windows named pipe is unaffected | `/tmp` |
+
 ## Related
 
 - CLI parameter reference: [cli-reference.md](cli-reference.md)

package/dist/web-ui/docs/en/cli/release-notes/README.md

@@ -17,6 +17,17 @@ Difference from CHANGELOG.md:
 
 <!-- New versions are automatically added here -->
 
+- [v2.119.4](./v2.119.4.md) - 2026-07-12
+- [v2.119.3](./v2.119.3.md) - 2026-07-12
+- [v2.119.2](./v2.119.2.md) - 2026-07-12
+- [v2.119.1](./v2.119.1.md) - 2026-07-11
+- [v2.119.0](./v2.119.0.md) - 2026-07-10
+- [v2.118.2](./v2.118.2.md) - 2026-07-09
+- [v2.118.1](./v2.118.1.md) - 2026-07-09
+- [v2.118.0](./v2.118.0.md) - 2026-07-08
+- [v2.117.2](./v2.117.2.md) - 2026-07-07
+- [v2.117.1](./v2.117.1.md) - 2026-07-06
+- [v2.117.0](./v2.117.0.md) - 2026-07-04
 - [v2.116.0](./v2.116.0.md) - 2026-07-03
 - [v2.115.0](./v2.115.0.md) - 2026-07-02
 - [v2.114.3](./v2.114.3.md) - 2026-07-02

package/dist/web-ui/docs/en/cli/release-notes/v2.117.0.md

@@ -0,0 +1,35 @@
+# 🚀 CodeBuddy Code v2.117.0 Released
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.117.0 |
+| Agent SDK JS | v0.3.201 |
+| Agent SDK Python | v0.3.200 |
+
+## ✨ New Features
+
+### Daemon System Service Registration
+
+Added `codebuddy daemon install` / `uninstall` commands to register the daemon as an OS-level service:
+
+- **macOS**: LaunchAgent, auto-starts on login
+- **Linux**: systemd user service, auto-starts on login
+- **Windows**: Task Scheduler, auto-starts on login
+
+Once registered, the daemon gains automatic crash recovery, eliminating the need to manually maintain background processes.
+
+## 🔧 Improvements
+
+- **Web UI real-time file watching**: Upgraded git status monitoring from polling to SSE real-time push for faster response and lower resource usage
+- **Proactive git status refresh**: File operation tools (Write/Edit/Bash, etc.) now automatically trigger git status refresh upon completion, without waiting for the next polling cycle
+- **File watching noise filtering**: Filters out high-frequency irrelevant paths such as node_modules and .git/objects to reduce unnecessary refreshes
+- **Session title optimization**: Correctly handles channel XML-wrapped titles to display readable content
+- **Removed external font dependency**: Removed Google Fonts Poppins loading in favor of a system font stack, speeding up first-screen rendering
+- **Terminal panel double-click interaction**: Double-click the blank area of the tab list to create a new terminal; double-click a tab label to toggle panel maximization
+- **Command paste stream expansion**: Slash commands now automatically expand paste stream references before execution
+
+## 🐛 Bug Fixes
+
+- **WorkBuddy expert panel replies**: Fixed an issue where some models only returned deep thinking without a body, causing the streaming response to miss the assistant message and resulting in no reply when continuing the conversation

package/dist/web-ui/docs/en/cli/release-notes/v2.117.1.md

@@ -0,0 +1,18 @@
+# 🚀 CodeBuddy Code v2.117.1 Released
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.117.1 |
+| Agent SDK JS | v0.3.202 |
+| Agent SDK Python | v0.3.201 |
+
+## 🔧 Improvements
+
+- **SCM Diff view optimization**: Clicking a file in the SCM file list now opens the Diff view in a separate tab, supporting viewing diffs of multiple files simultaneously instead of replacing the entire editor area
+- **Web UI working directory management**: Added a workspace-store to centrally manage working directory sources, eliminating the coupling of scattered cwd fetching across stores
+- **View switching optimization**: Editor and Changes views are now always mounted (visibility controlled by display), avoiding Monaco Editor and Diff view rebuild flicker during switching
+- **Terminal switching optimization**: Terminals now immediately perform a fit when restored from hidden to visible, reducing blank flicker during switching
+- **Theme adaptation**: Button foreground color changed from hardcoded `text-white` to the semantic `accent-brand-foreground` token, correctly adapting to light and dark themes
+- **Editor empty state**: Extracted into a standalone component, using a Logo instead of an SVG icon, with shortcut hints automatically hidden when space is insufficient

package/dist/web-ui/docs/en/cli/release-notes/v2.117.2.md

@@ -0,0 +1,28 @@
+# 🚀 CodeBuddy Code v2.117.2 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.117.2 |
+| Agent SDK JS | v0.3.203 |
+| Agent SDK Python | v0.3.202 |
+
+## 🔧 Improvements
+
+- **Authentication Startup Optimization**: The custom-token authentication type now includes a synchronous fast path — when the token is already present in an environment variable or config file, it is used directly, avoiding startup delays caused by waiting for network synchronization
+
+## 🐛 Bug Fixes
+
+- **Input Box Enter Unresponsive**: Fixed an issue where the TUI input box would occasionally not respond to Enter, requiring a space press before Enter to send
+- **Input Box Anomaly After ESC Interrupt**: Fixed an issue where, after pressing ESC to interrupt AI output, the input box would occasionally turn yellow and become unable to accept further input
+- **Web UI History Session Crash**: Fixed a white-screen crash when loading historical sessions with incomplete schemas
+- **Model Max Output Token Fallback**: Fixed an issue where some model configurations missing the max output token would cause requests to lose their upper limit, ensuring fallback to the built-in capability table
+- **Git Status Panel**: Fixed an issue where the Web UI Git panel did not show untracked files in nested directories
+- **Settings Write Loss**: Fixed an issue where writing config could be based on a stale cache snapshot for a full rewrite, occasionally causing fields such as plugin enabled state to be lost
+- **Agent Team Member Permissions**: Fixed an issue where passing the model in default mode could override sub-task permissions
+- **Terminal WebSocket Keep-Alive**: The Web UI terminal panel now includes an application-layer heartbeat to prevent reverse proxies from disconnecting due to idle timeout
+- **Streaming Response Stall**: Decoupled the inter-chunk silence timeout from the first-token timeout (5 minutes vs. 20 minutes), avoiding waiting 20 minutes before erroring and retrying after a mid-stream stall
+- **CSV Chinese Garbled Text**: Writing `.csv` / `.tsv` files now prepends a UTF-8 BOM, fixing garbled Chinese characters when opening CSV files in Windows Excel
+- **MCP Resource Discovery Timeout**: MCP resource discovery now uses parallel queries — a single server timeout no longer accumulates serially and blocks startup
+- **Upstream Abnormal Stream Close Crash**: Fixed a crash caused by the upstream model abnormally closing the stream after only emitting reasoning content

package/dist/web-ui/docs/en/cli/release-notes/v2.118.0.md

@@ -0,0 +1,29 @@
+# 🚀 CodeBuddy Code v2.118.0 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.118.0 |
+| Agent SDK JS | v0.3.204 |
+| Agent SDK Python | v0.3.203 |
+
+## ✨ New Features
+
+### Sub-Agent Reasoning Control
+
+Sub-agents now have two new configuration options to independently control their reasoning behavior, decoupled from the main agent:
+
+- `effort`: Sets the reasoning intensity of the sub-agent (`minimal` / `low` / `medium` / `high` / `xhigh` / `max`), effective for all sub-agents (including custom / plugin);
+- `thinkingEnabled: false`: Forcefully disables thinking for this sub-agent at runtime, effective only for built-in sub-agents, preventing external sources from bypassing the model's reasoning product semantics.
+
+The two are mutually exclusive — disabling takes priority; when the config is omitted, no intervention occurs and the session / model default is used. This capability only applies to sub-agent sessions and does not affect the main agent.
+
+## 🐛 Bug Fixes
+
+- **Context Ring Popover Data Missing**: After switching historical conversations, the context consumption breakdown data was not displayed. The replay path now supplements usage update events to restore the display
+- **Credits Attribution Anomaly**: The main session now refreshes the attribution ID each turn, ensuring consumed credits are correctly associated with the current turn, fixing the issue of credits not being displayed
+- **WSL1 Installation Unable to Run**: Fixed an issue where executing the binary after installation on WSL1 reported `Exec format error`. The build toolchain has been upgraded to fix this regression — the new binary runs normally on WSL1; meanwhile, install.sh retains WSL1 detection but changes it to a non-blocking warning, no longer directly blocking WSL1 users who can run normally
+- **macOS "Install Developer Tools" Dialog**: When checking git availability before built-in marketplace installation, it now first determines whether the `git` on PATH is the `/usr/bin/git` stub present when Command Line Tools are not installed; if so, it no longer runs `git --version`, avoiding triggering the system dialog, and gracefully falls back to Zip marketplace installation
+- **MCP Loading Stuck in stream-json Mode**: Fixed an issue with the order of argv/opts resolution when the pre-warmed process activates — causing incorrect headless detection and MCP initialization being skipped; in stream-json mode, USER-level MCP servers would be permanently stuck on connecting, and tools could not enter the first-round request. The complete state is now resolved before uniformly broadcasting the cwd change
+- **WeChat Pay False Trigger**: Avoided false triggers of WeChat Pay detection caused by web page summaries or document content in WebFetch tool results

package/dist/web-ui/docs/en/cli/release-notes/v2.118.1.md

@@ -0,0 +1,18 @@
+# 🚀 CodeBuddy Code v2.118.1 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.118.1 |
+| Agent SDK JS | v0.3.205 |
+| Agent SDK Python | v0.3.204 |
+
+## 🔧 Improvements
+
+- **Dependency Upgrade**: Upgraded the Galileo Node SDK to 0.3.17-beta.1, removing patch files for older versions that are no longer needed
+
+## 🐛 Bug Fixes
+
+- **Local ACP Authentication**: Fixed an issue where local loopback connections on some platforms (Windows x64) had the ACP `initialize` handshake misjudged as non-local, returning 401 `Authentication required` and preventing session establishment, blocking all tasks. All equivalent loopback address forms are now correctly recognized (127.0.0.0/8, `::1` and its expansions / IPv4-mapped / forms with brackets or zone IDs)
+- **`/effort` and `/config` Consistency (Issue #58743)**: Fixed an inconsistency between `/config get reasoningEffort` and the `/effort` panel display after starting with `cbc --effort <level>`. `/config` now shows the merged effective settings (CLI has the highest priority); the `/effort` panel initial highlight = session override → CLI/global `reasoningEffort` → `high` fallback; `/effort <level>` (non-ultracode) now synchronously writes the session-level model effort override (via `setOverrideThinking`, the same channel as ACP `thought_level`), and invalid levels are directly rejected

package/dist/web-ui/docs/en/cli/release-notes/v2.118.2.md

@@ -0,0 +1,13 @@
+# 🚀 CodeBuddy Code v2.118.2 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.118.2 |
+| Agent SDK JS | v0.3.206 |
+| Agent SDK Python | v0.3.205 |
+
+## 🐛 Bug Fixes
+
+- **reasoning-only response crash**: Fixed an issue where reasoning models returning only thinking content (without regular text, tool calls, or other normal responses) caused the SDK to generate an empty assistant message, leading the session to crash with `Cannot read properties of undefined (reading 'type')`. Such responses are now handled correctly, and sessions no longer crash.

package/dist/web-ui/docs/en/cli/release-notes/v2.119.0.md

@@ -0,0 +1,38 @@
+# 🚀 CodeBuddy Code v2.119.0 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.119.0 |
+| Agent SDK JS | v0.3.207 |
+| Agent SDK Python | v0.3.206 |
+
+## ✨ New Features
+
+### Plugin Dependencies and Cache Management
+
+The plugin system has been comprehensively enhanced to support full dependency management and local caching:
+
+- **Plugin dependencies**: Supports `dependencies` declaration, transitive installation and enabling, semver tag resolution, cross-marketplace allowlist, dependency conflict diagnostics, and orphaned dependency cleanup;
+- **Plugin cache**: Newly installed marketplaces are uniformly placed in `plugins/marketplaces/<marketplace>`, and materialized to `plugins/cache/<marketplace>/<plugin>/<version>` with a manifest file written when enabling / installing plugins;
+- **Plugin capabilities**: Supports plugin `bin/` PATH injection, root/data/project and `user_config` environments, persistent data lifecycle, `settings.json` allowlist, `defaultEnabled`, and other full capabilities.
+
+## 🔧 Improvements
+
+- **Deep Research output formatting**: Workflow results changed from JSON structure to readable Markdown reports, including summary, findings, disclaimers, and statistics
+- **Sub-agent message isolation**: Usage messages forwarded by sub-agents are no longer rendered in the main conversation, used only for token consumption tracking, keeping the main conversation cleaner
+- **Sub-agent tool title prefix**: Tool calls executed internally by sub-agents in the Web UI now display a type prefix, making it easier to distinguish their source
+- **File revert anti-revival**: The Web UI file changes panel adds an anti-revival mechanism to prevent asynchronous broadcasts from re-adding reverted files to the list
+- **Windows plugin performance**: Plugin data, MCPB, integrity checks, and Git detection now use asynchronous file I/O; Git/npm installation no longer synchronously blocks the main thread; MCPB reuses streaming decompression to improve installation speed
+- **macOS sandbox runtime enhancement**: Controlled file access is now integrated for Python and Node file APIs within the macOS sandbox, making file read/write safer and more controllable
+- **macOS sandbox file backup**: A backup pipeline is integrated before redirection, writing, and modification in the macOS sandbox shell (including `truncate` operations), allowing rollback from misoperations
+
+## 🐛 Bug Fixes
+
+- **Improved multi-turn conversation cache hit rate**: Fixed cache prefix jitter caused by inconsistent tool result serialization in parallel tool call scenarios, significantly improving cache hit rate and cost in multi-tool / sub-agent scenarios
+- **Session wake-up lag**: Fixed a sorting race in stream-json + `--resume` scenarios where the `initialize` response was preempted by historical events writing to stdout, avoiding session wake-up being slowed down to 120s+ (#63837)
+- **Tool approval delivery**: Fixed an issue where auto-continuation outside of conversations (background task completion, error recovery, scheduled / channel triggers) hitting high-risk command approvals caused the approval dialog to fail to reach the client, leaving the session stuck waiting for authorization
+- **Authentication initialization**: Optimized the slow authentication path to prevent network configuration sync jitter from blocking headless mode authentication initialization
+- **AskUserQuestion multiple-choice answers**: Fixed an issue where selecting both preset options and entering a custom option in multiple-choice questions caused the custom content to overwrite the selected options
+- **PostToolUse image results**: Fixed an issue where hooks returning additional context corrupted structured image tool results, preventing image results from degrading to text or being lost

package/dist/web-ui/docs/en/cli/release-notes/v2.119.1.md

@@ -0,0 +1,15 @@
+# 🚀 CodeBuddy Code v2.119.1 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.119.1 |
+| Agent SDK JS | v0.3.208 |
+| Agent SDK Python | v0.3.207 |
+
+## 🐛 Bug Fixes
+
+- **Custom model output quota**: When a custom model does not explicitly configure maximum output tokens, the model's capability limit is no longer automatically used as the per-request quota, preventing the quota from being unexpectedly exhausted
+- **Credit consumption display inaccuracy**: Fixed an issue where credit consumption was displayed inaccurately after multi-turn conversations, making credit statistics more aligned with actual usage
+- **Telemetry reporting stability**: Standardized integer field reporting values to prevent event reporting failures when fields such as Token contain decimal values

package/dist/web-ui/docs/en/cli/release-notes/v2.119.2.md

@@ -0,0 +1,23 @@
+# 🚀 CodeBuddy Code v2.119.2 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.119.2 |
+| Agent SDK JS | v0.3.209 |
+| Agent SDK Python | v0.3.208 |
+
+## 🔧 Improvements
+
+This update focuses on the Web UI terminal and file tree experience, making remote terminals more stable and file browsing more intuitive.
+
+- **Terminal Auto-reconnect**: After a WebSocket disconnection, automatically reconnects using a backoff sequence, falling back to manual reconnection only after exceeding the maximum retry count, so network jitter no longer causes frequent disconnects
+- **PTY Flow Control**: Added an ACK-based flow control mechanism to prevent WebSocket buffer overflow and stuttering in high-output scenarios
+- **File Tree Hidden File Toggle**: Supports one-click show/hide of common hidden files such as `.git` and `node_modules`, letting you focus on what matters
+- **File Tree Git Status Coloring**: File tree nodes display colors based on their Git status (modified/added/deleted, etc.), making change distribution visible at a glance
+- **File Tree Real-time Watching**: Monitors file system changes via an SSE watcher and automatically refreshes the file tree, eliminating the need for manual refresh
+- **Terminal Link Enhancement**: Clicking a directory path in the terminal automatically expands it in the file tree; clicking a file path simultaneously opens the editor and navigates to the file in the file tree
+- **Working Directory Isolated Storage**: Local storage persistence is isolated by working directory (similar to VSCode's workspaceStorage), so switching between multiple projects does not interfere with each other
+- **Heartbeat Tolerance Optimization**: PTY heartbeat now uses dual-layer tolerance, preventing false connection kills after system sleep/wake
+- **zsh Prompt Fix**: Eliminates the leading `%` marker via the `PROMPT_EOL_MARK` environment variable, replacing the previous exec-replace approach for cleaner output

package/dist/web-ui/docs/en/cli/release-notes/v2.119.3.md

@@ -0,0 +1,15 @@
+# 🚀 CodeBuddy Code v2.119.3 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.119.3 |
+| Agent SDK JS | v0.3.210 |
+| Agent SDK Python | v0.3.209 |
+
+## 🐛 Bug Fixes
+
+- **Faster stdio Mode Startup**: Fixed an issue where the initialization handshake in stdio / stream-json mode was blocked by slow MCP servers (approximately 10 seconds in practice). Initialization now only waits for configuration parsing to complete rather than waiting for MCP readiness, significantly speeding up handshake response, while the message sending path still correctly waits for MCP assembly
+- **Pre-warmed Process MCP Loading**: Fixed an issue where, after the pre-warmed process was activated, user-level MCP configuration (`~/.codebuddy/.mcp.json`) written just before activation could not be loaded, preventing related tools from appearing in the available tool list. User-level MCP configuration is now re-read upon activation, ensuring that MCP servers added while on standby take effect properly
+- **Network Error Retry**: Reverted a previous wrapping change to the network error identification logic (the change had side effects requiring re-evaluation), restoring behavior to before the change was merged, to avoid affecting network error retry decisions

package/dist/web-ui/docs/en/cli/release-notes/v2.119.4.md

@@ -0,0 +1,13 @@
+# 🚀 CodeBuddy Code v2.119.4 Release
+
+## 📦 Version Information
+
+| Component | Version |
+|-----------|---------|
+| CodeBuddy Code CLI | v2.119.4 |
+| Agent SDK JS | v0.3.211 |
+| Agent SDK Python | v0.3.210 |
+
+## 🔧 Improvements
+
+- **Customizable Pre-warm Socket Directory**: Added the `CODEBUDDY_CODE_PREWARM_SOCKET_PATH` environment variable to specify the directory where the pre-warmed process socket file is stored (defaults to `/tmp`). Suitable for scenarios that require centralized temporary file management or adjusted storage locations. Only affects Unix platforms; Windows is unaffected